From 2f9b1f6314a054ee2cb5984f66bb0e9d553efa0e Mon Sep 17 00:00:00 2001
From: jeremylong <jeremy.long@gmail.com>
Date: Tue, 23 Oct 2012 14:57:50 -0400
Subject: [PATCH] Lots of updates, incorporated nvd cve data.

Former-commit-id: d54b2964cf11776521ee7114f536c8c3d9e14028
---
 pom.xml                                       |     58 +-
 src/main/config/checkstyle-checks.xml         |      2 +-
 src/main/config/checkstyle-header.txt         |     24 +-
 src/main/config/checkstyle-suppressions.xml   |      1 +
 .../org/codesecure/dependencycheck/App.java   |     63 +-
 .../codesecure/dependencycheck/Engine.java    |     53 +-
 .../analyzer/AbstractAnalyzer.java            |     20 +-
 .../analyzer/AnalysisException.java           |     23 +-
 .../analyzer/AnalysisPhase.java               |     20 +-
 .../dependencycheck/analyzer/Analyzer.java    |     61 +-
 .../analyzer/AnalyzerService.java             |     22 +-
 .../analyzer/ArchiveAnalyzer.java             |     28 +-
 .../analyzer/FileNameAnalyzer.java            |     39 +-
 .../dependencycheck/analyzer/JarAnalyzer.java |     33 +-
 .../data/CachedWebDataSource.java             |     40 +-
 .../dependencycheck/data/UpdateException.java |     66 +
 .../dependencycheck/data/UpdateService.java   |     61 +
 .../dependencycheck/data/cpe/CPEAnalyzer.java |    109 +-
 .../dependencycheck/data/cpe/Entry.java       |     63 +-
 .../dependencycheck/data/cpe/Fields.java      |     24 +-
 .../dependencycheck/data/cpe/Index.java       |    106 +-
 .../data/cpe/xml/CPEHandler.java              |     29 +-
 .../data/cpe/xml/EntrySaveDelegate.java       |     20 +-
 .../data/cpe/xml/Importer.java                |     45 +-
 .../dependencycheck/data/cpe/xml/Indexer.java |     24 +-
 .../dependencycheck/data/cve/Entry.java       |    380 -
 .../dependencycheck/data/cve/Fields.java      |     53 -
 .../dependencycheck/data/cve/Index.java       |    254 -
 .../data/cve/package-info.java                |     12 -
 .../data/cve/xml/CVEHandler.java              |    350 -
 .../data/cve/xml/Importer.java                |     75 -
 .../dependencycheck/data/cve/xml/Indexer.java |    102 -
 .../data/cve/xml/package-info.java            |     12 -
 .../data/lucene/AbstractIndex.java            |     33 +-
 .../data/lucene/DependencySimilarity.java     |     28 +-
 .../data/lucene/LuceneUtils.java              |     24 +-
 .../data/lucene/VersionAnalyzer.java          |     20 +-
 .../dependencycheck/data/nvdcve/Fields.java   |     45 +
 .../dependencycheck/data/nvdcve/Index.java    |    525 +
 .../data/nvdcve/InvalidDataException.java     |     47 +
 .../data/nvdcve/NvdCveAnalyzer.java           |    225 +
 .../generated/AccessComplexityEnumType.java   |     63 +
 .../generated/AccessComplexityType.java       |    117 +
 .../generated/AccessVectorEnumType.java       |     63 +
 .../nvdcve/generated/AccessVectorType.java    |    124 +
 .../AssociatedExploitLocationType.java        |    174 +
 .../generated/AuthenticationEnumType.java     |     63 +
 .../nvdcve/generated/AuthenticationType.java  |    117 +
 .../nvdcve/generated/BaseMetricsType.java     |    376 +
 .../nvdcve/generated/CceParameterType.java    |    156 +
 .../data/nvdcve/generated/CceType.java        |    215 +
 .../nvdcve/generated/CheckReferenceType.java  |    153 +
 .../nvdcve/generated/CheckSearchType.java     |    117 +
 .../data/nvdcve/generated/CiaEnumType.java    |     63 +
 .../generated/CiaRequirementEnumType.java     |     65 +
 .../nvdcve/generated/CiaRequirementType.java  |    117 +
 .../data/nvdcve/generated/CiaType.java        |    117 +
 .../CollateralDamagePotentialEnumType.java    |     69 +
 .../CollateralDamagePotentialType.java        |    117 +
 .../nvdcve/generated/ConfidenceEnumType.java  |     65 +
 .../data/nvdcve/generated/ConfidenceType.java |    117 +
 .../data/nvdcve/generated/CveStatus.java      |     63 +
 .../data/nvdcve/generated/CveType.java        |    178 +
 .../data/nvdcve/generated/CvssImpactType.java |     59 +
 .../data/nvdcve/generated/CvssType.java       |    170 +
 .../nvdcve/generated/CweReferenceType.java    |     86 +
 .../generated/EnvironmentalMetricsType.java   |    291 +
 .../generated/ExploitabilityEnumType.java     |     67 +
 .../nvdcve/generated/ExploitabilityType.java  |    117 +
 .../data/nvdcve/generated/FactRefType.java    |     86 +
 .../FixActionDescriptionEnumType.java         |     67 +
 .../data/nvdcve/generated/FixActionType.java  |    493 +
 .../generated/FixActionTypeEnumType.java      |     61 +
 .../generated/FixEffectivenessEnumType.java   |     61 +
 .../data/nvdcve/generated/LogicalTest.java    |    183 +
 .../data/nvdcve/generated/MetricsType.java    |     92 +
 .../data/nvdcve/generated/NotesType.java      |     96 +
 .../data/nvdcve/generated/Nvd.java            |    155 +
 .../data/nvdcve/generated/ObjectFactory.java  |    423 +
 .../nvdcve/generated/OperatorEnumeration.java |     61 +
 .../nvdcve/generated/OsvdbExtensionType.java  |     87 +
 .../data/nvdcve/generated/Patch.java          |    414 +
 .../generated/PlatformSpecification.java      |     94 +
 .../data/nvdcve/generated/PlatformType.java   |    190 +
 .../data/nvdcve/generated/ReferenceType.java  |     92 +
 .../generated/RemediationLevelEnumType.java   |     67 +
 .../generated/RemediationLevelType.java       |    117 +
 .../SearchableCpeReferencesType.java          |     98 +
 .../generated/SecurityProtectionType.java     |     71 +
 .../data/nvdcve/generated/TagType.java        |    118 +
 .../generated/TargetDistributionEnumType.java |     67 +
 .../generated/TargetDistributionType.java     |    117 +
 .../nvdcve/generated/TemporalMetricsType.java |    263 +
 .../data/nvdcve/generated/TextType1.java      |    116 +
 .../data/nvdcve/generated/TextType2.java      |    120 +
 .../generated/ToolConfigurationType.java      |    120 +
 ...ulnerabilityReferenceCategoryEnumType.java |     71 +
 .../generated/VulnerabilityReferenceType.java |    236 +
 .../nvdcve/generated/VulnerabilityType.java   |    703 +
 .../generated/VulnerableSoftwareType.java     |     92 +
 .../data/nvdcve/generated/package-info.java   |      9 +
 .../data/nvdcve/package-info.java             |     12 +
 .../xml/EntrySaveDelegate.java                |     32 +-
 .../data/nvdcve/xml/Importer.java             |    106 +
 .../data/nvdcve/xml/Indexer.java              |    148 +
 .../data/nvdcve/xml/NvdCveXmlFilter.java      |    246 +
 .../data/nvdcve/xml/package-info.java         |     12 +
 .../dependency/Dependency.java                |     79 +-
 .../dependencycheck/dependency/Evidence.java  |     26 +-
 .../dependency/EvidenceCollection.java        |     59 +-
 .../dependency/Identifier.java                |     24 +-
 .../dependencycheck/dependency/Reference.java |     95 +
 .../dependency/Vulnerability.java             |    106 +
 .../reporting/ReportGenerator.java            |     27 +-
 .../dependencycheck/utils/Checksum.java       |     11 +-
 .../dependencycheck/utils/CliParser.java      |     79 +-
 .../utils/DownloadFailedException.java        |     23 +-
 .../dependencycheck/utils/Downloader.java     |     42 +-
 .../dependencycheck/utils/FileUtils.java      |     21 +-
 .../dependencycheck/utils/Filter.java         |      8 +-
 .../utils/InvalidSettingException.java        |     66 +
 .../dependencycheck/utils/Settings.java       |    158 +-
 ...desecure.dependencycheck.analyzer.Analyzer |      3 +-
 ...e.dependencycheck.data.CachedWebDataSource |      2 +
 .../configuration/dependencycheck.properties  |     27 +
 .../schema/cpe/cpe-dictionary_2.2.xsd         |    156 +
 src/main/resources/schema/nvdcve/bindings.xml |     20 +
 src/main/resources/schema/nvdcve/cce_0.1.xsd  |     61 +
 .../schema/nvdcve/cpe-language_2.1.xsd        |    101 +
 src/main/resources/schema/nvdcve/cve_0.1.xsd  |     70 +
 .../resources/schema/nvdcve/cvss-v2_0.2.xsd   |    386 +
 .../schema/nvdcve/generateBindings.bat        |     18 +
 .../schema/nvdcve/generateBindings.sh         |     16 +
 .../schema/nvdcve/nvd-cve-feed_2.0.xsd        |     57 +
 .../resources/schema/nvdcve/patch_0.1.xsd     |     72 +
 .../resources/schema/nvdcve/scap-core_0.1.xsd |    139 +
 .../schema/nvdcve/vulnerability_0.4.xsd       |    260 +
 src/main/resources/templates/HtmlReport.vsl   |     20 +-
 .../dependencycheck/EngineTest.java           |      8 +-
 .../{lucene => cpe}/BaseIndexTestCase.java    |      8 +-
 .../data/cpe/CPEAnalyzerTest.java             |      1 -
 .../dependencycheck/data/cpe/EntryTest.java   |      1 -
 ...dexTest.java => IndexIntegrationTest.java} |     16 +-
 .../data/cpe/xml/CPEHandlerTest.java          |     45 -
 .../data/cpe/xml/ImporterTest.java            |      2 +-
 .../data/nvdcve/BaseIndexTestCase.java        |     98 +
 .../data/nvdcve/IndexIntegrationTest.java     |     85 +
 .../data/nvdcve/xml/NvdCveXmlFilterTest.java  |     77 +
 .../reporting/ReportGeneratorTest.java        |      2 +-
 .../dependencycheck/utils/ChecksumTest.java   |      2 +-
 .../dependencycheck/utils/SettingsTest.java   |      6 +-
 .../nvdcve-2.0-2012.xml.REMOVED.git-id        |      1 +
 .../resources/nvdcve-2010.xml.REMOVED.git-id  |      1 -
 .../resources/nvdcve-2011.xml.REMOVED.git-id  |      1 -
 src/test/resources/nvdcve-2012.xml            | 192322 ---------------
 src/test/resources/nvdcve.xsd                 |    498 -
 156 files changed, 12925 insertions(+), 194795 deletions(-)
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/UpdateException.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/UpdateService.java
 delete mode 100644 src/main/java/org/codesecure/dependencycheck/data/cve/Entry.java
 delete mode 100644 src/main/java/org/codesecure/dependencycheck/data/cve/Fields.java
 delete mode 100644 src/main/java/org/codesecure/dependencycheck/data/cve/Index.java
 delete mode 100644 src/main/java/org/codesecure/dependencycheck/data/cve/package-info.java
 delete mode 100644 src/main/java/org/codesecure/dependencycheck/data/cve/xml/CVEHandler.java
 delete mode 100644 src/main/java/org/codesecure/dependencycheck/data/cve/xml/Importer.java
 delete mode 100644 src/main/java/org/codesecure/dependencycheck/data/cve/xml/Indexer.java
 delete mode 100644 src/main/java/org/codesecure/dependencycheck/data/cve/xml/package-info.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/Fields.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/Index.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/InvalidDataException.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/NvdCveAnalyzer.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AccessComplexityEnumType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AccessComplexityType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AccessVectorEnumType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AccessVectorType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AssociatedExploitLocationType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AuthenticationEnumType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AuthenticationType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/BaseMetricsType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CceParameterType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CceType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CheckReferenceType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CheckSearchType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CiaEnumType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CiaRequirementEnumType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CiaRequirementType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CiaType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CollateralDamagePotentialEnumType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CollateralDamagePotentialType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ConfidenceEnumType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ConfidenceType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CveStatus.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CveType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CvssImpactType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CvssType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CweReferenceType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/EnvironmentalMetricsType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ExploitabilityEnumType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ExploitabilityType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FactRefType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FixActionDescriptionEnumType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FixActionType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FixActionTypeEnumType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FixEffectivenessEnumType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/LogicalTest.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/MetricsType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/NotesType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/Nvd.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ObjectFactory.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/OperatorEnumeration.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/OsvdbExtensionType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/Patch.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/PlatformSpecification.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/PlatformType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ReferenceType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/RemediationLevelEnumType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/RemediationLevelType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/SearchableCpeReferencesType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/SecurityProtectionType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TagType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TargetDistributionEnumType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TargetDistributionType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TemporalMetricsType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TextType1.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TextType2.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ToolConfigurationType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/VulnerabilityReferenceCategoryEnumType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/VulnerabilityReferenceType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/VulnerabilityType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/VulnerableSoftwareType.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/package-info.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/package-info.java
 rename src/main/java/org/codesecure/dependencycheck/data/{cve => nvdcve}/xml/EntrySaveDelegate.java (50%)
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/Importer.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/Indexer.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/NvdCveXmlFilter.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/package-info.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/dependency/Reference.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/dependency/Vulnerability.java
 create mode 100644 src/main/java/org/codesecure/dependencycheck/utils/InvalidSettingException.java
 create mode 100644 src/main/resources/META-INF/services/org.codesecure.dependencycheck.data.CachedWebDataSource
 create mode 100644 src/main/resources/schema/cpe/cpe-dictionary_2.2.xsd
 create mode 100644 src/main/resources/schema/nvdcve/bindings.xml
 create mode 100644 src/main/resources/schema/nvdcve/cce_0.1.xsd
 create mode 100644 src/main/resources/schema/nvdcve/cpe-language_2.1.xsd
 create mode 100644 src/main/resources/schema/nvdcve/cve_0.1.xsd
 create mode 100644 src/main/resources/schema/nvdcve/cvss-v2_0.2.xsd
 create mode 100644 src/main/resources/schema/nvdcve/generateBindings.bat
 create mode 100644 src/main/resources/schema/nvdcve/generateBindings.sh
 create mode 100644 src/main/resources/schema/nvdcve/nvd-cve-feed_2.0.xsd
 create mode 100644 src/main/resources/schema/nvdcve/patch_0.1.xsd
 create mode 100644 src/main/resources/schema/nvdcve/scap-core_0.1.xsd
 create mode 100644 src/main/resources/schema/nvdcve/vulnerability_0.4.xsd
 rename src/test/java/org/codesecure/dependencycheck/data/{lucene => cpe}/BaseIndexTestCase.java (91%)
 rename src/test/java/org/codesecure/dependencycheck/data/cpe/{IndexTest.java => IndexIntegrationTest.java} (81%)
 delete mode 100644 src/test/java/org/codesecure/dependencycheck/data/cpe/xml/CPEHandlerTest.java
 create mode 100644 src/test/java/org/codesecure/dependencycheck/data/nvdcve/BaseIndexTestCase.java
 create mode 100644 src/test/java/org/codesecure/dependencycheck/data/nvdcve/IndexIntegrationTest.java
 create mode 100644 src/test/java/org/codesecure/dependencycheck/data/nvdcve/xml/NvdCveXmlFilterTest.java
 create mode 100644 src/test/resources/nvdcve-2.0-2012.xml.REMOVED.git-id
 delete mode 100644 src/test/resources/nvdcve-2010.xml.REMOVED.git-id
 delete mode 100644 src/test/resources/nvdcve-2011.xml.REMOVED.git-id
 delete mode 100644 src/test/resources/nvdcve-2012.xml
 delete mode 100644 src/test/resources/nvdcve.xsd

diff --git a/pom.xml b/pom.xml
index 65b83d897..12dbb6c08 100644
--- a/pom.xml
+++ b/pom.xml
@@ -18,7 +18,7 @@ along with DependencyCheck.  If not, see <http://www.gnu.org/licenses/>.
 -->
 
 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
-  xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
     <modelVersion>4.0.0</modelVersion>
 
     <groupId>org.codesecure</groupId>
@@ -62,6 +62,7 @@ along with DependencyCheck.  If not, see <http://www.gnu.org/licenses/>.
     </licenses>
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+        <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>  
     </properties>
     <build>
         <resources>
@@ -78,6 +79,10 @@ along with DependencyCheck.  If not, see <http://www.gnu.org/licenses/>.
                     <exclude>**/*.properties</exclude>
                     <exclude>**/*.gif</exclude>
                     <exclude>**/*.js</exclude>
+                    <exclude>**/schema/**/*.xsd</exclude>
+                    <exclude>**/schema/**/*.xml</exclude>
+                    <exclude>**/schema/**/*.bat</exclude>
+                    <exclude>**/schema/**/*.sh</exclude>
                 </excludes>
                 <filtering>false</filtering>
             </resource>
@@ -209,8 +214,24 @@ along with DependencyCheck.  If not, see <http://www.gnu.org/licenses/>.
                             <value>${project.build.directory}/data/cpe</value>
                         </property>
                     </systemProperties>
+                    <excludes>
+                        <exclude>**/*IntegrationTest.java</exclude>
+                    </excludes>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-failsafe-plugin</artifactId>
+                <version>2.12.4</version>
+                <executions>
+                    <execution>
+                        <goals>
+                            <goal>integration-test</goal>
+                            <goal>verify</goal>
+                        </goals>
+                    </execution>
+                </executions>
+            </plugin>
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-site-plugin</artifactId>
@@ -239,17 +260,17 @@ along with DependencyCheck.  If not, see <http://www.gnu.org/licenses/>.
                             </reportSets>
                         </plugin>
                         <plugin>
-                          <groupId>org.codehaus.mojo</groupId>
-                          <artifactId>versions-maven-plugin</artifactId>
-                          <version>1.3.1</version>
-                          <reportSets>
-                            <reportSet>
-                              <reports>
-                                <report>dependency-updates-report</report>
-                                <report>plugin-updates-report</report>
-                              </reports>
-                            </reportSet>
-                          </reportSets>
+                            <groupId>org.codehaus.mojo</groupId>
+                            <artifactId>versions-maven-plugin</artifactId>
+                            <version>1.3.1</version>
+                            <reportSets>
+                                <reportSet>
+                                    <reports>
+                                        <report>dependency-updates-report</report>
+                                        <report>plugin-updates-report</report>
+                                    </reports>
+                                </reportSet>
+                            </reportSets>
                         </plugin>
                         <plugin>
                             <groupId>org.apache.maven.plugins</groupId>
@@ -305,6 +326,19 @@ along with DependencyCheck.  If not, see <http://www.gnu.org/licenses/>.
                                 <configLocation>src/main/config/checkstyle-checks.xml</configLocation>
                             </configuration>
                         </plugin>
+                        <plugin>
+                            <groupId>org.apache.maven.plugins</groupId>
+                            <artifactId>maven-surefire-report-plugin</artifactId>
+                            <version>2.12.4</version>
+                            <reportSets>
+                                <reportSet>
+                                    <id>integration-tests</id>
+                                    <reports>
+                                        <report>failsafe-report-only</report>
+                                    </reports>
+                                </reportSet>
+                            </reportSets>
+                        </plugin>
                     </reportPlugins>
                 </configuration>
             </plugin>
diff --git a/src/main/config/checkstyle-checks.xml b/src/main/config/checkstyle-checks.xml
index 2145400c8..e3c3f5924 100644
--- a/src/main/config/checkstyle-checks.xml
+++ b/src/main/config/checkstyle-checks.xml
@@ -116,7 +116,7 @@ under the License.
 
         <!-- Checks for imports                              -->
         <!-- See http://checkstyle.sf.net/config_import.html -->
-        <module name="AvoidStarImport"/>
+        <!--<module name="AvoidStarImport"/>-->
         <module name="IllegalImport"/>
         <module name="RedundantImport"/>
         <module name="UnusedImports"/>
diff --git a/src/main/config/checkstyle-header.txt b/src/main/config/checkstyle-header.txt
index 046e971a9..0d52ba3a4 100644
--- a/src/main/config/checkstyle-header.txt
+++ b/src/main/config/checkstyle-header.txt
@@ -2,18 +2,18 @@
 ^/\*\s*$
 ^ \* This file is part of DependencyCheck\.\s*$
 ^ \*\s*$
-^ \* DependencyCheck is free software\: you can redistribute it and/or modify\s*$
-^ \* it under the terms of the GNU General Public License as published by\s*$
-^ \* the Free Software Foundation, either version 3 of the License, or\s*$
-^ \* \(at your option\) any later version\.\s*$
+^ \* DependencyCheck is free software\: you can redistribute it and/or modify it\s*$
+^ \* under the terms of the GNU General Public License as published by the Free\s*$
+^ \* Software Foundation, either version 3 of the License, or \(at your option\) any\s*$
+^ \* later version\.
 ^ \*\s*$
-^ \* DependencyCheck is distributed in the hope that it will be useful,\s*$
-^ \* but WITHOUT ANY WARRANTY\; without even the implied warranty of\s*$
-^ \* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE\. See the\s*$
-^ \* GNU General Public License for more details\.\s*$
-^ \*\s*
-^ \* You should have received a copy of the GNU General Public License
-^ \* along with DependencyCheck\. If not, see http://www.gnu.org/licenses/\.\s*$
+^ \* DependencyCheck is distributed in the hope that it will be useful, but\s*$
+^ \* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or\s*$
+^ \* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more\s*$
+^ \* details\.\s*$
 ^ \*\s*$
-^ \* Copyright \(c\) 2012 Jeremy Long. All Rights Reserved\.\s*$
+^ \* You should have received a copy of the GNU General Public License along with\s*$
+^ \* DependencyCheck\. If not, see http://www.gnu.org/licenses/\.\s*$
+^ \*\s*$
+^ \* Copyright \(c\) 2012 Jeremy Long\. All Rights Reserved\.\s*$
 ^ \*/\s*$
\ No newline at end of file
diff --git a/src/main/config/checkstyle-suppressions.xml b/src/main/config/checkstyle-suppressions.xml
index d240c1a44..cfe9a3221 100644
--- a/src/main/config/checkstyle-suppressions.xml
+++ b/src/main/config/checkstyle-suppressions.xml
@@ -9,6 +9,7 @@
     <suppress checks=".*" files=".*org[\\/]codesecure[\\/]dependencycheck[\\/]utils[\\/]SSDeep.java" />
     <suppress checks=".*" files=".*org[\\/]codesecure[\\/]dependencycheck[\\/]utils[\\/]Filter.java" />
     <suppress checks=".*" files=".*org[\\/]codesecure[\\/]dependencycheck[\\/]utils[\\/]Checksum.java" />
+    <suppress checks=".*" files=".*[\\/]generated[\\/].*.java" />
     <suppress checks="MagicNumberCheck"
               files="org[\\/]codesecure[\\/]dependencycheck[\\/]data[\\/]cpe/Entry.java"
               lines="376"/>
diff --git a/src/main/java/org/codesecure/dependencycheck/App.java b/src/main/java/org/codesecure/dependencycheck/App.java
index cea9ad9e7..a0b7ee8dc 100644
--- a/src/main/java/org/codesecure/dependencycheck/App.java
+++ b/src/main/java/org/codesecure/dependencycheck/App.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -28,7 +28,6 @@ import java.util.logging.LogManager;
 import java.util.logging.Logger;
 import javax.xml.parsers.ParserConfigurationException;
 import org.apache.commons.cli.ParseException;
-import org.codesecure.dependencycheck.data.cpe.Index;
 import org.codesecure.dependencycheck.data.cpe.xml.Importer;
 import org.codesecure.dependencycheck.reporting.ReportGenerator;
 import org.codesecure.dependencycheck.dependency.Dependency;
@@ -38,18 +37,17 @@ import org.xml.sax.SAXException;
 /*
  * This file is part of App.
  *
- * App is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * App is free software: you can redistribute it and/or modify it under the
+ * terms of the GNU General Public License as published by the Free Software
+ * Foundation, either version 3 of the License, or (at your option) any later
+ * version.
  *
- * App is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * App is distributed in the hope that it will be useful, but WITHOUT ANY
+ * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
+ * A PARTICULAR PURPOSE. See the GNU General Public License for more details.
  *
- * You should have received a copy of the GNU General Public License
- * along with App. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * App. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -118,16 +116,7 @@ public class App {
         } else if (cli.isLoadCPE()) {
             loadCPE(cli.getCpeFile());
         } else if (cli.isRunScan()) {
-            if (cli.isAutoUpdate()) {
-                Index cpeI = new Index();
-                try {
-                    cpeI.update();
-                } catch (Exception ex) {
-                    Logger.getLogger(App.class.getName()).log(Level.SEVERE, null, ex);
-                }
-            }
-
-            runScan(cli.getReportDirectory(), cli.getApplicationName(), cli.getScanFiles());
+            runScan(cli.getReportDirectory(), cli.getApplicationName(), cli.getScanFiles(), cli.isAutoUpdate());
         } else {
             cli.printHelp();
         }
@@ -136,6 +125,7 @@ public class App {
 
     /**
      * Loads the specified CPE.XML file into Lucene Index.
+     *
      * @param cpePath
      */
     private void loadCPE(String cpePath) {
@@ -151,13 +141,16 @@ public class App {
     }
 
     /**
-     * Scans the specified directories and writes the dependency reports to the reportDirectory.
-     * @param reportDirectory the path to the directory where the reports will be written.
+     * Scans the specified directories and writes the dependency reports to the
+     * reportDirectory.
+     *
+     * @param reportDirectory the path to the directory where the reports will
+     * be written.
      * @param applicationName the application name for the report.
      * @param files the files/directories to scan.
      */
-    private void runScan(String reportDirectory, String applicationName, String[] files) {
-        Engine scanner = new Engine();
+    private void runScan(String reportDirectory, String applicationName, String[] files, boolean autoUpdate) {
+        Engine scanner = new Engine(autoUpdate);
         for (String file : files) {
             scanner.scan(file);
         }
diff --git a/src/main/java/org/codesecure/dependencycheck/Engine.java b/src/main/java/org/codesecure/dependencycheck/Engine.java
index 551634ace..9895a32e6 100644
--- a/src/main/java/org/codesecure/dependencycheck/Engine.java
+++ b/src/main/java/org/codesecure/dependencycheck/Engine.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -34,6 +34,9 @@ import org.codesecure.dependencycheck.analyzer.AnalysisPhase;
 import org.codesecure.dependencycheck.analyzer.Analyzer;
 import org.codesecure.dependencycheck.analyzer.AnalyzerService;
 import org.codesecure.dependencycheck.analyzer.ArchiveAnalyzer;
+import org.codesecure.dependencycheck.data.CachedWebDataSource;
+import org.codesecure.dependencycheck.data.UpdateException;
+import org.codesecure.dependencycheck.data.UpdateService;
 import org.codesecure.dependencycheck.utils.FileUtils;
 
 /**
@@ -64,6 +67,20 @@ public class Engine {
      * Creates a new Engine.
      */
     public Engine() {
+        doUpdates();
+        loadAnalyzers();
+    }
+
+    /**
+     * Creates a new Engine
+     *
+     * @param autoUpdate indicates whether or not data should be updated from
+     * the Internet.
+     */
+    public Engine(boolean autoUpdate) {
+        if (autoUpdate) {
+            doUpdates();
+        }
         loadAnalyzers();
     }
 
@@ -225,4 +242,20 @@ public class Engine {
             }
         }
     }
+
+    /**
+     *
+     */
+    private void doUpdates() {
+        UpdateService service = UpdateService.getInstance();
+        Iterator<CachedWebDataSource> iterator = service.getDataSources();
+        while (iterator.hasNext()) {
+            CachedWebDataSource source = iterator.next();
+            try {
+                source.update();
+            } catch (UpdateException ex) {
+                Logger.getLogger(Engine.class.getName()).log(Level.SEVERE, "Unable to update " + source.getClass().getName(), ex);
+            }
+        }
+    }
 }
diff --git a/src/main/java/org/codesecure/dependencycheck/analyzer/AbstractAnalyzer.java b/src/main/java/org/codesecure/dependencycheck/analyzer/AbstractAnalyzer.java
index 17dbc86aa..639bf9ae3 100644
--- a/src/main/java/org/codesecure/dependencycheck/analyzer/AbstractAnalyzer.java
+++ b/src/main/java/org/codesecure/dependencycheck/analyzer/AbstractAnalyzer.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.analyzer;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
diff --git a/src/main/java/org/codesecure/dependencycheck/analyzer/AnalysisException.java b/src/main/java/org/codesecure/dependencycheck/analyzer/AnalysisException.java
index 9beda68b3..129420b57 100644
--- a/src/main/java/org/codesecure/dependencycheck/analyzer/AnalysisException.java
+++ b/src/main/java/org/codesecure/dependencycheck/analyzer/AnalysisException.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.analyzer;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -36,6 +36,7 @@ public class AnalysisException extends Exception {
 
     /**
      * Creates a new AnalysisException.
+     *
      * @param msg a message for the exception.
      */
     public AnalysisException(String msg) {
@@ -44,6 +45,7 @@ public class AnalysisException extends Exception {
 
     /**
      * Creates a new AnalysisException.
+     *
      * @param ex the cause of the failure.
      */
     public AnalysisException(Throwable ex) {
@@ -52,6 +54,7 @@ public class AnalysisException extends Exception {
 
     /**
      * Creates a new DownloadFailedException.
+     *
      * @param msg a message for the exception.
      * @param ex the cause of the failure.
      */
diff --git a/src/main/java/org/codesecure/dependencycheck/analyzer/AnalysisPhase.java b/src/main/java/org/codesecure/dependencycheck/analyzer/AnalysisPhase.java
index e981f8b6f..45df973e9 100644
--- a/src/main/java/org/codesecure/dependencycheck/analyzer/AnalysisPhase.java
+++ b/src/main/java/org/codesecure/dependencycheck/analyzer/AnalysisPhase.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.analyzer;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
diff --git a/src/main/java/org/codesecure/dependencycheck/analyzer/Analyzer.java b/src/main/java/org/codesecure/dependencycheck/analyzer/Analyzer.java
index 6a2e41c8f..3b5b30750 100644
--- a/src/main/java/org/codesecure/dependencycheck/analyzer/Analyzer.java
+++ b/src/main/java/org/codesecure/dependencycheck/analyzer/Analyzer.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.analyzer;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -31,58 +31,67 @@ import org.codesecure.dependencycheck.dependency.Dependency;
 public interface Analyzer {
 
     /**
-     * Analyzes the given dependency. The analysis could be anything from identifying
-     * an Idenifier for the dependency, to finding vulnerabilities, etc. Additionally,
-     * if the analyzer collects enough information to add a description or license
-     * information for the dependency it should be added.
+     * Analyzes the given dependency. The analysis could be anything from
+     * identifying an Idenifier for the dependency, to finding vulnerabilities,
+     * etc. Additionally, if the analyzer collects enough information to add a
+     * description or license information for the dependency it should be added.
      *
      * @param dependency a dependency to analyze.
-     * @throws AnalysisException is thrown if there is an error analyzing the dependency file
+     * @throws AnalysisException is thrown if there is an error analyzing the
+     * dependency file
      */
     void analyze(Dependency dependency) throws AnalysisException;
 
     /**
-     * <p>Returns a list of supported file extensions. An example would be an analyzer
-     * that inspected java jar files. The getSupportedExtensions function would return
-     * a set with a single element "jar".</p>
+     * <p>Returns a list of supported file extensions. An example would be an
+     * analyzer that inspected java jar files. The getSupportedExtensions
+     * function would return a set with a single element "jar".</p>
+     *
+     * <p><b>Note:</b> when implementing this the extensions returned MUST be
+     * lowercase.</p>
      *
-     * <p><b>Note:</b> when implementing this the extensions returned MUST be lowercase.</p>
      * @return The file extensions supported by this analyzer.
      *
-     * <p>If the analyzer returns null it will not cause additional files to be analyzed
-     * but will be executed against every file loaded</p>
+     * <p>If the analyzer returns null it will not cause additional files to be
+     * analyzed but will be executed against every file loaded</p>
      */
     Set<String> getSupportedExtensions();
 
     /**
      * Returns the name of the analyzer.
+     *
      * @return the name of the analyzer.
      */
     String getName();
 
     /**
      * Returns whether or not this analyzer can process the given extension.
+     *
      * @param extension the file extension to test for support.
-     * @return whether or not the specified file extension is supported by tihs analyzer.
+     * @return whether or not the specified file extension is supported by tihs
+     * analyzer.
      */
     boolean supportsExtension(String extension);
 
     /**
      * Returns the phase that the analyzer is intended to run in.
+     *
      * @return the phase that the analyzer is intended to run in.
      */
     AnalysisPhase getAnalysisPhase();
 
     /**
-     * The initialize method is called (once) prior to the analyze method being called on
-     * all of the dependencies.
+     * The initialize method is called (once) prior to the analyze method being
+     * called on all of the dependencies.
      *
-     * @throws Exception is thrown if an exception occurs initializing the analyzer.
+     * @throws Exception is thrown if an exception occurs initializing the
+     * analyzer.
      */
     void initialize() throws Exception;
 
     /**
-     * The close method is called after all of the dependencies have been analyzed.
+     * The close method is called after all of the dependencies have been
+     * analyzed.
      *
      * @throws Exception is thrown if an exception occurs closing the analyzer.
      */
diff --git a/src/main/java/org/codesecure/dependencycheck/analyzer/AnalyzerService.java b/src/main/java/org/codesecure/dependencycheck/analyzer/AnalyzerService.java
index 2d2bfda4a..0ae3e3896 100644
--- a/src/main/java/org/codesecure/dependencycheck/analyzer/AnalyzerService.java
+++ b/src/main/java/org/codesecure/dependencycheck/analyzer/AnalyzerService.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.analyzer;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -39,6 +39,7 @@ public class AnalyzerService {
 
     /**
      * Retrieve the singleton instance of AnalyzerService.
+     *
      * @return a singleton AnalyzerService.
      */
     public static synchronized AnalyzerService getInstance() {
@@ -50,6 +51,7 @@ public class AnalyzerService {
 
     /**
      * Returns an Iterator for all instances of the Analyzer interface.
+     *
      * @return an iterator of Analyzers.
      */
     public Iterator<Analyzer> getAnalyzers() {
diff --git a/src/main/java/org/codesecure/dependencycheck/analyzer/ArchiveAnalyzer.java b/src/main/java/org/codesecure/dependencycheck/analyzer/ArchiveAnalyzer.java
index a64c8ea9e..fbee38b20 100644
--- a/src/main/java/org/codesecure/dependencycheck/analyzer/ArchiveAnalyzer.java
+++ b/src/main/java/org/codesecure/dependencycheck/analyzer/ArchiveAnalyzer.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.analyzer;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -31,14 +31,16 @@ import org.codesecure.dependencycheck.Engine;
 public interface ArchiveAnalyzer {
 
     /**
-     * An ArchiveAnalyzer expands an archive and calls the scan method of the engine on
-     * the exploded contents.
+     * An ArchiveAnalyzer expands an archive and calls the scan method of the
+     * engine on the exploded contents.
      *
      * @param dependency a dependency to analyze.
      * @param engine the engine that is scanning the dependencies.
-     * @throws IOException is thrown if there is an error reading the dependency file
+     * @throws IOException is thrown if there is an error reading the dependency
+     * file
      */
     void analyze(Dependency dependency, Engine engine) throws IOException;
+
     /**
      * Cleans any temporary files generated when analyzing the archive.
      */
diff --git a/src/main/java/org/codesecure/dependencycheck/analyzer/FileNameAnalyzer.java b/src/main/java/org/codesecure/dependencycheck/analyzer/FileNameAnalyzer.java
index 212d5de9b..6e95c10d2 100644
--- a/src/main/java/org/codesecure/dependencycheck/analyzer/FileNameAnalyzer.java
+++ b/src/main/java/org/codesecure/dependencycheck/analyzer/FileNameAnalyzer.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.analyzer;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -46,6 +46,7 @@ public class FileNameAnalyzer implements Analyzer {
 
     /**
      * Returns a list of file EXTENSIONS supported by this analyzer.
+     *
      * @return a list of file EXTENSIONS supported by this analyzer.
      */
     public Set<String> getSupportedExtensions() {
@@ -54,6 +55,7 @@ public class FileNameAnalyzer implements Analyzer {
 
     /**
      * Returns the name of the analyzer.
+     *
      * @return the name of the analyzer.
      */
     public String getName() {
@@ -62,8 +64,10 @@ public class FileNameAnalyzer implements Analyzer {
 
     /**
      * Returns whether or not this analyzer can process the given extension.
+     *
      * @param extension the file extension to test for support.
-     * @return whether or not the specified file extension is supported by tihs analyzer.
+     * @return whether or not the specified file extension is supported by tihs
+     * analyzer.
      */
     public boolean supportsExtension(String extension) {
         return true;
@@ -71,6 +75,7 @@ public class FileNameAnalyzer implements Analyzer {
 
     /**
      * Returns the phase that the analyzer is intended to run in.
+     *
      * @return the phase that the analyzer is intended to run in.
      */
     public AnalysisPhase getAnalysisPhase() {
@@ -91,8 +96,10 @@ public class FileNameAnalyzer implements Analyzer {
 
     /**
      * Determines type of the character passed in.
+     *
      * @param c a character
-     * @return a STRING_STATE representing whether the character is number, alpha, or other.
+     * @return a STRING_STATE representing whether the character is number,
+     * alpha, or other.
      */
     private STRING_STATE determineState(char c) {
         if (c >= '0' && c <= '9') {
@@ -110,7 +117,8 @@ public class FileNameAnalyzer implements Analyzer {
      * Collects information about the file such as hashsums.
      *
      * @param dependency the dependency to analyze.
-     * @throws AnalysisException is thrown if there is an error reading the JAR file.
+     * @throws AnalysisException is thrown if there is an error reading the JAR
+     * file.
      */
     public void analyze(Dependency dependency) throws AnalysisException {
 
@@ -119,7 +127,9 @@ public class FileNameAnalyzer implements Analyzer {
     }
 
     /**
-     * Analyzes the filename of the dependency and adds it to the evidence collections.
+     * Analyzes the filename of the dependency and adds it to the evidence
+     * collections.
+     *
      * @param dependency the dependency to analyze.
      */
     private void analyzeFileName(Dependency dependency) {
@@ -157,7 +167,6 @@ public class FileNameAnalyzer implements Analyzer {
         }
     }
 
-
     /**
      * The initialize method does nothing for this Analyzer
      */
diff --git a/src/main/java/org/codesecure/dependencycheck/analyzer/JarAnalyzer.java b/src/main/java/org/codesecure/dependencycheck/analyzer/JarAnalyzer.java
index f44d20907..7f33d7980 100644
--- a/src/main/java/org/codesecure/dependencycheck/analyzer/JarAnalyzer.java
+++ b/src/main/java/org/codesecure/dependencycheck/analyzer/JarAnalyzer.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.analyzer;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -57,17 +57,26 @@ public class JarAnalyzer extends AbstractAnalyzer {
     private static final Set<String> IGNORE_LIST = newHashSet(
             "built-by",
             "created-by",
-            //"license",
+            "builtby",
+            "createdby",
             "build-jdk",
+            "buildjdk",
             "ant-version",
+            "antversion",
             "import-package",
             "export-package",
+            "importpackage",
+            "exportpackage",
             "sealed",
             "manifest-version",
             "archiver-version",
+            "manifestversion",
+            "archiverversion",
             "classpath",
+            "class-path",
             "tool",
-            "bundle-manifestversion");
+            "bundle-manifestversion",
+            "bundlemanifestversion");
     /**
      * The set of file extensions supported by this analyzer.
      */
diff --git a/src/main/java/org/codesecure/dependencycheck/data/CachedWebDataSource.java b/src/main/java/org/codesecure/dependencycheck/data/CachedWebDataSource.java
index 9eb044b6a..c1c5bb8ae 100644
--- a/src/main/java/org/codesecure/dependencycheck/data/CachedWebDataSource.java
+++ b/src/main/java/org/codesecure/dependencycheck/data/CachedWebDataSource.java
@@ -2,30 +2,25 @@ package org.codesecure.dependencycheck.data;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
 
-import java.io.IOException;
-import java.net.MalformedURLException;
-import javax.xml.parsers.ParserConfigurationException;
-import org.xml.sax.SAXException;
-
 /**
- * Defines an Index who's data is retrieved from the Internet. This data can
- * be downloaded and the index updated.
+ * Defines an Index who's data is retrieved from the Internet. This data can be
+ * downloaded and the index updated.
  *
  * @author Jeremy Long (jeremy.long@gmail.com)
  */
@@ -33,12 +28,11 @@ public interface CachedWebDataSource {
 
     /**
      * Determines if an update to the current index is needed, if it is the new
-     * data is downloaded from the Internet and imported into the current Lucene Index.
+     * data is downloaded from the Internet and imported into the current Lucene
+     * Index.
      *
-     * @throws MalformedURLException is thrown if the URL for the CPE is malformed.
-     * @throws ParserConfigurationException is thrown if the parser is misconfigured.
-     * @throws SAXException is thrown if there is an error parsing the CPE XML.
-     * @throws IOException is thrown if a temporary file could not be created.
+     * @throws UpdateException is thrown if there is an exception updating the
+     * index.
      */
-    void update() throws MalformedURLException, ParserConfigurationException, SAXException, IOException;
+    void update() throws UpdateException;
 }
diff --git a/src/main/java/org/codesecure/dependencycheck/data/UpdateException.java b/src/main/java/org/codesecure/dependencycheck/data/UpdateException.java
new file mode 100644
index 000000000..f41d4a7f8
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/UpdateException.java
@@ -0,0 +1,66 @@
+package org.codesecure.dependencycheck.data;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+import java.io.IOException;
+
+/**
+ * An exception used when an error occurs reading a setting.
+ *
+ * @author Jeremy Long (jeremy.long@gmail.com)
+ */
+public class UpdateException extends IOException {
+
+    private static final long serialVersionUID = 1L;
+
+    /**
+     * Creates a new UpdateException.
+     */
+    public UpdateException() {
+        super();
+    }
+
+    /**
+     * Creates a new UpdateException.
+     *
+     * @param msg a message for the exception.
+     */
+    public UpdateException(String msg) {
+        super(msg);
+    }
+
+    /**
+     * Creates a new UpdateException.
+     *
+     * @param ex the cause of the update exception.
+     */
+    public UpdateException(Throwable ex) {
+        super(ex);
+    }
+
+    /**
+     * Creates a new UpdateException.
+     *
+     * @param msg a message for the exception.
+     * @param ex the cause of the update exception.
+     */
+    public UpdateException(String msg, Throwable ex) {
+        super(msg, ex);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/UpdateService.java b/src/main/java/org/codesecure/dependencycheck/data/UpdateService.java
new file mode 100644
index 000000000..c1d6c91ec
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/UpdateService.java
@@ -0,0 +1,61 @@
+package org.codesecure.dependencycheck.data;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+import java.util.Iterator;
+import java.util.ServiceLoader;
+
+/**
+ *
+ * @author Jeremy Long (jeremy.long@gmail.com)
+ */
+public class UpdateService {
+
+    private static UpdateService service;
+    private ServiceLoader<CachedWebDataSource> loader;
+
+    /**
+     * Creates a new instance of UpdateService
+     */
+    private UpdateService() {
+        loader = ServiceLoader.load(CachedWebDataSource.class);
+    }
+
+    /**
+     * Retrieve the singleton instance of UpdateService.
+     *
+     * @return a singleton UpdateService.
+     */
+    public static synchronized UpdateService getInstance() {
+        if (service == null) {
+            service = new UpdateService();
+        }
+        return service;
+    }
+
+    /**
+     * Returns an Iterator for all instances of the CachedWebDataSource
+     * interface.
+     *
+     * @return an iterator of CachedWebDataSource.
+     */
+    public Iterator<CachedWebDataSource> getDataSources() {
+        return loader.iterator();
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/cpe/CPEAnalyzer.java b/src/main/java/org/codesecure/dependencycheck/data/cpe/CPEAnalyzer.java
index 1724d42d5..8a8306c8f 100644
--- a/src/main/java/org/codesecure/dependencycheck/data/cpe/CPEAnalyzer.java
+++ b/src/main/java/org/codesecure/dependencycheck/data/cpe/CPEAnalyzer.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.data.cpe;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -64,7 +64,8 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
      * utilized within the CPE Names.
      */
     static final String CLEANSE_CHARACTER_RX = "[^A-Za-z0-9 ._-]";
-    /* A string representation of a regular expression used to remove all but
+    /*
+     * A string representation of a regular expression used to remove all but
      * alpha characters.
      */
     static final String CLEANSE_NONALPHA_RX = "[^A-Za-z]*";
@@ -89,7 +90,8 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
     /**
      * Opens the data source.
      *
-     * @throws IOException when the Lucene directory to be querried does not exist or is corrupt.
+     * @throws IOException when the Lucene directory to be querried does not
+     * exist or is corrupt.
      */
     public void open() throws IOException {
         cpe = new Index();
@@ -111,6 +113,7 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
 
     /**
      * Returns the status of the data source - is the index open.
+     *
      * @return true or false.
      */
     public boolean isOpen() {
@@ -119,6 +122,7 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
 
     /**
      * Ensures that the Lucene index is closed.
+     *
      * @throws Throwable when a throwable is thrown.
      */
     @Override
@@ -130,9 +134,9 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
     }
 
     /**
-     * Searches the data store of CPE entries, trying to identify the CPE for the given
-     * dependency based on the evidence contained within. The depencency passed in is
-     * updated with any identified CPE values.
+     * Searches the data store of CPE entries, trying to identify the CPE for
+     * the given dependency based on the evidence contained within. The
+     * depencency passed in is updated with any identified CPE values.
      *
      * @param dependency the dependency to search for CPE entries on.
      * @throws CorruptIndexException is thrown when the Lucene index is corrupt.
@@ -215,10 +219,10 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
     }
 
     /**
-     * Returns the text created by concatenating the text and the values from the
-     * EvidenceCollection (filtered for a specific confidence). This attempts to
-     * prevent duplicate terms from being added.<br/<br/>
-     * Note, if the evidence is longer then 200 characters it will be truncated.
+     * Returns the text created by concatenating the text and the values from
+     * the EvidenceCollection (filtered for a specific confidence). This
+     * attempts to prevent duplicate terms from being added.<br/<br/> Note, if
+     * the evidence is longer then 200 characters it will be truncated.
      *
      * @param text the base text.
      * @param ec an EvidenceCollection
@@ -244,7 +248,7 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
 //                if (value.length() > 200) {
 //                    sb.append(value.substring(0, 200)).append(' ');
 //                } else {
-                    sb.append(value).append(' ');
+                sb.append(value).append(' ');
 //                }
             }
         }
@@ -252,8 +256,8 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
     }
 
     /**
-     * Reduces the given confidence by one level. This returns LOW if the confidence
-     * passed in is not HIGH.
+     * Reduces the given confidence by one level. This returns LOW if the
+     * confidence passed in is not HIGH.
      *
      * @param c the confidence to reduce.
      * @return One less then the confidence passed in.
@@ -284,17 +288,19 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
     }
 
     /**
-     * <p>Searches the Lucene CPE index to identify possible CPE entries associated with
-     * the supplied vendor, product, and version.</p>
+     * <p>Searches the Lucene CPE index to identify possible CPE entries
+     * associated with the supplied vendor, product, and version.</p>
      *
-     * <p>If either the vendorWeightings or productWeightings lists have been populated
-     * this data is used to add weighting factors to the search.</p>
+     * <p>If either the vendorWeightings or productWeightings lists have been
+     * populated this data is used to add weighting factors to the search.</p>
      *
      * @param vendor the text used to search the vendor field.
      * @param product the text used to search the product field.
      * @param version the text used to search the version field.
-     * @param vendorWeightings a list of strings to use to add weighting factors to the vendor field.
-     * @param productWeightings Adds a list of strings that will be used to add weighting factors to the product search.
+     * @param vendorWeightings a list of strings to use to add weighting factors
+     * to the vendor field.
+     * @param productWeightings Adds a list of strings that will be used to add
+     * weighting factors to the product search.
      * @return a list of possible CPE values.
      * @throws CorruptIndexException when the Lucene index is corrupt.
      * @throws IOException when the Lucene index is not found.
@@ -323,18 +329,20 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
     }
 
     /**
-     * <p>Builds a Lucene search string by properly escaping data and constructing a valid search query.</p>
+     * <p>Builds a Lucene search string by properly escaping data and
+     * constructing a valid search query.</p>
      *
-     * <p>If either the possibleVendor or possibleProducts lists have been populated this
-     * data is used to add weighting factors to the search string generated.</p>
+     * <p>If either the possibleVendor or possibleProducts lists have been
+     * populated this data is used to add weighting factors to the search string
+     * generated.</p>
      *
      * @param vendor text to search the vendor field.
      * @param product text to search the product field.
      * @param version text to search the version field.
-     * @param vendorWeighting a list of strings to apply to the vendor
-     * to boost the terms weight.
-     * @param produdctWeightings a list of strings to apply to the product
-     * to boost the terms weight.
+     * @param vendorWeighting a list of strings to apply to the vendor to boost
+     * the terms weight.
+     * @param produdctWeightings a list of strings to apply to the product to
+     * boost the terms weight.
      * @return the Lucene query.
      */
     protected String buildSearch(String vendor, String product, String version,
@@ -379,12 +387,13 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
 
     /**
      * This method constructs a Lucene query for a given field. The searchText
-     * is split into seperate words and if the word is within the list of weighted
-     * words then an additional weighting is applied to the term as it is appended
-     * into the query.
+     * is split into seperate words and if the word is within the list of
+     * weighted words then an additional weighting is applied to the term as it
+     * is appended into the query.
      *
      * @param sb a StringBuilder that the query text will be appended to.
-     * @param field the field within the Lucene index that the query is searching.
+     * @param field the field within the Lucene index that the query is
+     * searching.
      * @param searchText text used to construct the query.
      * @param weightedText a list of terms that will be considered higher
      * importance when searching.
@@ -427,7 +436,8 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
     }
 
     /**
-     * Removes characters from the input text that are not used within the CPE index.
+     * Removes characters from the input text that are not used within the CPE
+     * index.
      *
      * @param text is the text to remove the characters from.
      * @return the text having removed some characters.
@@ -455,9 +465,9 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
     }
 
     /**
-     * Ensures that the CPE Identified matches the dependency. This validates that
-     * the product, vendor, and version information for the CPE are contained within
-     * the dependencies evidence.
+     * Ensures that the CPE Identified matches the dependency. This validates
+     * that the product, vendor, and version information for the CPE are
+     * contained within the dependencies evidence.
      *
      * @param entry a CPE entry.
      * @param dependency the dependency that the CPE entries could be for.
@@ -477,10 +487,12 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
     }
 
     /**
-     * Analyzes a dependency and attempts to determine if there are any CPE identifiers
-     * for this dependency.
+     * Analyzes a dependency and attempts to determine if there are any CPE
+     * identifiers for this dependency.
+     *
      * @param dependency The Dependency to analyze.
-     * @throws AnalysisException is thrown if there is an issue analyzing the dependency.
+     * @throws AnalysisException is thrown if there is an issue analyzing the
+     * dependency.
      */
     public void analyze(Dependency dependency) throws AnalysisException {
         try {
@@ -496,6 +508,7 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
 
     /**
      * Returns true because this analyzer supports all dependency types.
+     *
      * @return true.
      */
     public Set<String> getSupportedExtensions() {
@@ -504,6 +517,7 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
 
     /**
      * Returns the name of this analyzer.
+     *
      * @return the name of this analyzer.
      */
     public String getName() {
@@ -512,6 +526,7 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
 
     /**
      * Returns true because this analyzer supports all dependency types.
+     *
      * @param extension the file extension of the dependency being analyzed.
      * @return true.
      */
@@ -521,6 +536,7 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
 
     /**
      * Returns the analysis phase that this analyzer should run in.
+     *
      * @return the analysis phase that this analyzer should run in.
      */
     public AnalysisPhase getAnalysisPhase() {
@@ -529,6 +545,7 @@ public class CPEAnalyzer implements org.codesecure.dependencycheck.analyzer.Anal
 
     /**
      * Opens the CPE Lucene Index.
+     *
      * @throws Exception is thrown if there is an issue opening the index.
      */
     public void initialize() throws Exception {
diff --git a/src/main/java/org/codesecure/dependencycheck/data/cpe/Entry.java b/src/main/java/org/codesecure/dependencycheck/data/cpe/Entry.java
index e4632f563..ce015763f 100644
--- a/src/main/java/org/codesecure/dependencycheck/data/cpe/Entry.java
+++ b/src/main/java/org/codesecure/dependencycheck/data/cpe/Entry.java
@@ -2,21 +2,22 @@ package org.codesecure.dependencycheck.data.cpe;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
+
 import java.io.UnsupportedEncodingException;
 import java.net.URLDecoder;
 import java.text.ParseException;
@@ -27,16 +28,16 @@ import java.util.logging.Logger;
 import org.apache.lucene.document.Document;
 
 /**
- * A single CPE entry from the cpe.xml downloaded from
- * <a href="http://nvd.nist.gov/cpe.cfm">http://nvd.nist.gov/cpe.cfm</a>.
+ * A single CPE entry from the cpe.xml downloaded from <a
+ * href="http://nvd.nist.gov/cpe.cfm">http://nvd.nist.gov/cpe.cfm</a>.
  *
  * @author Jeremy Long (jeremy.long@gmail.com)
  */
 public class Entry {
 
     /**
-     * This parse method does not fully convert a Lucene Document into a CPE Entry;
-     * it only sets the Entry.Name.
+     * This parse method does not fully convert a Lucene Document into a CPE
+     * Entry; it only sets the Entry.Name.
      *
      * @param doc a Lucene Document.
      * @return a CPE Entry.
@@ -94,7 +95,8 @@ public class Entry {
     }
 
     /**
-     * Set the value of name and calls parseName to obtain the vendor:product:version:revision
+     * Set the value of name and calls parseName to obtain the
+     * vendor:product:version:revision
      *
      * @param name new value of name
      * @throws UnsupportedEncodingException should never be thrown...
@@ -276,28 +278,6 @@ public class Entry {
     public void setRevision(String revision) {
         this.revision = revision;
     }
-    /**
-     * If the CPE Entry is well known (i.e. based off a hash)
-     */
-    protected boolean wellKnown = false;
-
-    /**
-     * Get the value of wellKnown
-     *
-     * @return the value of wellKnown
-     */
-    public boolean isWellKnown() {
-        return wellKnown;
-    }
-
-    /**
-     * Set the value of wellKnown
-     *
-     * @param wellKnown new value of wellKnown
-     */
-    public void setWellKnown(boolean wellKnown) {
-        this.wellKnown = wellKnown;
-    }
     /**
      * The search score.
      */
@@ -327,13 +307,8 @@ public class Entry {
      * <p>Example:</p>
      * <code>&nbsp;&nbsp;&nbsp;cpe:/a:apache:struts:1.1:rc2</code>
      *
-     * <p>Results in:</p>
-     * <ul>
-     *    <li>Vendor: apache</li>
-     *    <li>Product: struts</li>
-     *    <li>Version: 1.1</li>
-     *    <li>Revision: rc2</li>
-     * </ul>
+     * <p>Results in:</p> <ul> <li>Vendor: apache</li> <li>Product: struts</li>
+     * <li>Version: 1.1</li> <li>Revision: rc2</li> </ul>
      *
      * @throws UnsupportedEncodingException should never be thrown...
      */
diff --git a/src/main/java/org/codesecure/dependencycheck/data/cpe/Fields.java b/src/main/java/org/codesecure/dependencycheck/data/cpe/Fields.java
index 6e7686587..8ce980dd2 100644
--- a/src/main/java/org/codesecure/dependencycheck/data/cpe/Fields.java
+++ b/src/main/java/org/codesecure/dependencycheck/data/cpe/Fields.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.data.cpe;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -25,6 +25,7 @@ package org.codesecure.dependencycheck.data.cpe;
  * @author Jeremy Long (jeremy.long@gmail.com)
  */
 public abstract class Fields {
+
     /**
      * The key for the name field.
      */
@@ -43,7 +44,8 @@ public abstract class Fields {
      */
     public static final String PRODUCT = "product";
     /**
-     * The key for the title field. This is a field combining vendor, product, and version.
+     * The key for the title field. This is a field combining vendor, product,
+     * and version.
      */
     public static final String TITLE = "title";
     /**
diff --git a/src/main/java/org/codesecure/dependencycheck/data/cpe/Index.java b/src/main/java/org/codesecure/dependencycheck/data/cpe/Index.java
index b59703749..0bca410b2 100644
--- a/src/main/java/org/codesecure/dependencycheck/data/cpe/Index.java
+++ b/src/main/java/org/codesecure/dependencycheck/data/cpe/Index.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.data.cpe;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -43,6 +43,7 @@ import org.apache.lucene.store.FSDirectory;
 import org.apache.lucene.util.Version;
 import org.codesecure.dependencycheck.data.lucene.AbstractIndex;
 import org.codesecure.dependencycheck.data.CachedWebDataSource;
+import org.codesecure.dependencycheck.data.UpdateException;
 import org.codesecure.dependencycheck.utils.Downloader;
 import org.codesecure.dependencycheck.utils.Settings;
 import org.codesecure.dependencycheck.data.cpe.xml.Importer;
@@ -57,7 +58,8 @@ import org.xml.sax.SAXException;
 public class Index extends AbstractIndex implements CachedWebDataSource {
 
     /**
-     * The name of the properties file containing the timestamp of the last update.
+     * The name of the properties file containing the timestamp of the last
+     * update.
      */
     private static final String UPDATE_PROPERTIES_FILE = "lastupdated.prop";
     /**
@@ -97,42 +99,58 @@ public class Index extends AbstractIndex implements CachedWebDataSource {
     }
 
     /**
-     * Downloads the latest CPE XML file from the web and imports it into
-     * the current CPE Index.
+     * Downloads the latest CPE XML file from the web and imports it into the
+     * current CPE Index.
      *
-     * @throws MalformedURLException is thrown if the URL for the CPE is malformed.
-     * @throws ParserConfigurationException is thrown if the parser is misconfigured.
-     * @throws SAXException is thrown if there is an error parsing the CPE XML.
-     * @throws IOException is thrown if a temporary file could not be created.
+     * @throws UpdateException is thrown if there is a problem updating the
+     * index.
      */
-    public void update() throws MalformedURLException, ParserConfigurationException, SAXException, IOException {
-        long timeStamp = updateNeeded();
-        if (timeStamp > 0) {
-            URL url = new URL(Settings.getString(Settings.KEYS.CPE_URL));
-            File outputPath = null;
-            try {
-                outputPath = File.createTempFile("cpe", ".xml");
-                Downloader.fetchFile(url, outputPath, true);
-                Importer.importXML(outputPath.toString());
-                writeLastUpdatedPropertyFile(timeStamp);
-            } catch (DownloadFailedException ex) {
-                Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
-            } finally {
+    public void update() throws UpdateException {
+        try {
+            long timeStamp = updateNeeded();
+            if (timeStamp > 0) {
+                URL url = new URL(Settings.getString(Settings.KEYS.CPE_URL));
+                Logger.getLogger(Index.class.getName()).log(Level.WARNING, "Updating CPE :" + url.toString());
+                File outputPath = null;
                 try {
-                    if (outputPath != null && outputPath.exists()) {
-                        outputPath.delete();
-                    }
+                    outputPath = File.createTempFile("cpe", ".xml");
+                    Downloader.fetchFile(url, outputPath, true);
+                    Importer.importXML(outputPath.toString());
+                    writeLastUpdatedPropertyFile(timeStamp);
+                } catch (ParserConfigurationException ex) {
+                    //Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
+                    throw new UpdateException(ex);
+                } catch (SAXException ex) {
+                    //Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
+                    throw new UpdateException(ex);
+                } catch (IOException ex) {
+                    //Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
+                    throw new UpdateException(ex);
                 } finally {
-                    if (outputPath != null && outputPath.exists()) {
-                        outputPath.deleteOnExit();
+                    try {
+                        if (outputPath != null && outputPath.exists()) {
+                            outputPath.delete();
+                        }
+                    } finally {
+                        if (outputPath != null && outputPath.exists()) {
+                            outputPath.deleteOnExit();
+                        }
                     }
                 }
             }
+        } catch (MalformedURLException ex) {
+            //Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
+            throw new UpdateException(ex);
+        } catch (DownloadFailedException ex) {
+            //Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
+            throw new UpdateException(ex);
         }
     }
 
     /**
-     * Writes a properties file containing the last updated date to the CPE directory.
+     * Writes a properties file containing the last updated date to the CPE
+     * directory.
+     *
      * @param timeStamp the timestamp to write.
      */
     private void writeLastUpdatedPropertyFile(long timeStamp) {
@@ -169,9 +187,12 @@ public class Index extends AbstractIndex implements CachedWebDataSource {
      * be refreshed this method will return the timestamp of the new CPE. If an
      * update is not required this function will return 0.
      *
-     * @return the timestamp of the currently published CPE.xml if the index needs to be updated, otherwise returns 0..
-     * @throws MalformedURLException is thrown if the URL for the CPE Meta data is incorrect.
-     * @throws DownloadFailedException is thrown if there is an error downloading the cpe.meta data file.
+     * @return the timestamp of the currently published CPE.xml if the index
+     * needs to be updated, otherwise returns 0..
+     * @throws MalformedURLException is thrown if the URL for the CPE Meta data
+     * is incorrect.
+     * @throws DownloadFailedException is thrown if there is an error
+     * downloading the cpe.meta data file.
      */
     public long updateNeeded() throws MalformedURLException, DownloadFailedException {
         long retVal = 0;
@@ -213,9 +234,12 @@ public class Index extends AbstractIndex implements CachedWebDataSource {
 
     /**
      * Retrieves the timestamp from the CPE meta data file.
+     *
      * @return the timestamp from the currently published cpe.meta.
-     * @throws MalformedURLException is thrown if the URL for the CPE Meta data is incorrect.
-     * @throws DownloadFailedException is thrown if there is an error downloading the cpe.meta data file.
+     * @throws MalformedURLException is thrown if the URL for the CPE Meta data
+     * is incorrect.
+     * @throws DownloadFailedException is thrown if there is an error
+     * downloading the cpe.meta data file.
      */
     private long retrieveCurrentCPETimestampFromWeb() throws MalformedURLException, DownloadFailedException {
         long timestamp = 0;
diff --git a/src/main/java/org/codesecure/dependencycheck/data/cpe/xml/CPEHandler.java b/src/main/java/org/codesecure/dependencycheck/data/cpe/xml/CPEHandler.java
index 31b8d5fbc..085b15b63 100644
--- a/src/main/java/org/codesecure/dependencycheck/data/cpe/xml/CPEHandler.java
+++ b/src/main/java/org/codesecure/dependencycheck/data/cpe/xml/CPEHandler.java
@@ -2,29 +2,29 @@ package org.codesecure.dependencycheck.data.cpe.xml;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
 
-import org.codesecure.dependencycheck.data.cpe.Entry;
 import java.io.IOException;
 import java.io.UnsupportedEncodingException;
 import java.text.ParseException;
 import java.util.logging.Level;
 import java.util.logging.Logger;
 import org.apache.lucene.index.CorruptIndexException;
+import org.codesecure.dependencycheck.data.cpe.Entry;
 import org.xml.sax.Attributes;
 import org.xml.sax.SAXException;
 import org.xml.sax.helpers.DefaultHandler;
@@ -46,7 +46,8 @@ public class CPEHandler extends DefaultHandler {
 
     /**
      * Register a EntrySaveDelegate object. When the last node of an entry is
-     * reached if a save delegate has been regsitered the save method will be invoked.
+     * reached if a save delegate has been registered the save method will be
+     * invoked.
      *
      * @param delegate the delegate used to save an entry
      */
@@ -165,8 +166,8 @@ public class CPEHandler extends DefaultHandler {
 
     // <editor-fold defaultstate="collapsed" desc="The Element Class that maintains state information about the current node">
     /**
-     * A simple class to maintain information about the current element while parsing
-     * the CPE XML.
+     * A simple class to maintain information about the current element while
+     * parsing the CPE XML.
      */
     protected class Element {
 
diff --git a/src/main/java/org/codesecure/dependencycheck/data/cpe/xml/EntrySaveDelegate.java b/src/main/java/org/codesecure/dependencycheck/data/cpe/xml/EntrySaveDelegate.java
index 3f89d1991..8acdf822e 100644
--- a/src/main/java/org/codesecure/dependencycheck/data/cpe/xml/EntrySaveDelegate.java
+++ b/src/main/java/org/codesecure/dependencycheck/data/cpe/xml/EntrySaveDelegate.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.data.cpe.xml;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
diff --git a/src/main/java/org/codesecure/dependencycheck/data/cpe/xml/Importer.java b/src/main/java/org/codesecure/dependencycheck/data/cpe/xml/Importer.java
index 444a51c96..0a9394793 100644
--- a/src/main/java/org/codesecure/dependencycheck/data/cpe/xml/Importer.java
+++ b/src/main/java/org/codesecure/dependencycheck/data/cpe/xml/Importer.java
@@ -2,27 +2,30 @@ package org.codesecure.dependencycheck.data.cpe.xml;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
 
 import java.io.File;
 import java.io.IOException;
+import java.util.logging.Level;
+import java.util.logging.Logger;
 import javax.xml.parsers.ParserConfigurationException;
 import javax.xml.parsers.SAXParser;
 import javax.xml.parsers.SAXParserFactory;
+import org.apache.lucene.index.CorruptIndexException;
 import org.xml.sax.SAXException;
 
 /**
@@ -36,32 +39,42 @@ public class Importer {
      * Private constructor for utility class.
      */
     private Importer() {
-
     }
 
     /**
      * Imports the CPE XML File into the Lucene Index.
      *
      * @param file containing the path to the CPE XML file.
-     * @throws ParserConfigurationException is thrown if the parser is misconfigured.
+     * @throws ParserConfigurationException is thrown if the parser is
+     * misconfigured.
      * @throws SAXException is thrown when there is a SAXException.
      * @throws IOException is thrown when there is an IOException.
+     * @throws CorruptIndexException is thrown when the Lucene index is corrupt.
      */
-    public static void importXML(File file) throws ParserConfigurationException, SAXException, IOException {
+    public static void importXML(File file) throws CorruptIndexException, ParserConfigurationException, IOException, SAXException {
         SAXParserFactory factory = SAXParserFactory.newInstance();
         SAXParser saxParser = factory.newSAXParser();
         CPEHandler handler = new CPEHandler();
         Indexer indexer = new Indexer();
         indexer.openIndexWriter();
         handler.registerSaveDelegate(indexer);
-        saxParser.parse(file, handler);
-        indexer.close();
+        try {
+            saxParser.parse(file, handler);
+        } catch (SAXException ex) {
+            Logger.getLogger(Importer.class.getName()).log(Level.SEVERE, null, ex);
+        } catch (IOException ex) {
+            Logger.getLogger(Importer.class.getName()).log(Level.SEVERE, null, ex);
+        } finally {
+            indexer.close();
+        }
     }
+
     /**
      * Imports the CPE XML File into the Lucene Index.
      *
      * @param path the path to the CPE XML file.
-     * @throws ParserConfigurationException is thrown if the parser is misconfigured.
+     * @throws ParserConfigurationException is thrown if the parser is
+     * misconfigured.
      * @throws SAXException is thrown when there is a SAXException.
      * @throws IOException is thrown when there is an IOException.
      */
diff --git a/src/main/java/org/codesecure/dependencycheck/data/cpe/xml/Indexer.java b/src/main/java/org/codesecure/dependencycheck/data/cpe/xml/Indexer.java
index 4e6464c63..4f350fa66 100644
--- a/src/main/java/org/codesecure/dependencycheck/data/cpe/xml/Indexer.java
+++ b/src/main/java/org/codesecure/dependencycheck/data/cpe/xml/Indexer.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.data.cpe.xml;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -24,10 +24,10 @@ import org.apache.lucene.document.Field;
 import org.apache.lucene.index.CorruptIndexException;
 import org.apache.lucene.index.FieldInfo.IndexOptions;
 import org.apache.lucene.index.Term;
-import org.codesecure.dependencycheck.data.lucene.LuceneUtils;
 import org.codesecure.dependencycheck.data.cpe.Entry;
 import org.codesecure.dependencycheck.data.cpe.Fields;
 import org.codesecure.dependencycheck.data.cpe.Index;
+import org.codesecure.dependencycheck.data.lucene.LuceneUtils;
 
 /**
  * The Indexer is used to convert a CPE Entry, retrieved from the CPE XML file,
@@ -51,7 +51,7 @@ public class Indexer extends Index implements EntrySaveDelegate {
     }
 
     /**
-     * Converst a CPE entry into a Lucene Document.
+     * Converts a CPE entry into a Lucene Document.
      *
      * @param entry a CPE Entry.
      * @return a Lucene Document containing a CPE Entry.
diff --git a/src/main/java/org/codesecure/dependencycheck/data/cve/Entry.java b/src/main/java/org/codesecure/dependencycheck/data/cve/Entry.java
deleted file mode 100644
index 2ec95c33b..000000000
--- a/src/main/java/org/codesecure/dependencycheck/data/cve/Entry.java
+++ /dev/null
@@ -1,380 +0,0 @@
-package org.codesecure.dependencycheck.data.cve;
-/*
- * This file is part of DependencyCheck.
- *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
- *
- * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
- */
-import java.io.UnsupportedEncodingException;
-import java.net.URLDecoder;
-import java.text.ParseException;
-import java.text.SimpleDateFormat;
-import java.util.Date;
-import java.util.logging.Level;
-import java.util.logging.Logger;
-import org.apache.lucene.document.Document;
-
-/**
- * A single CVE entry from the cve.xml files downloaded from
- * <a href="http://nvd.nist.gov/cpe.cfm">http://nvd.nist.gov/cpe.cfm</a>.
- *
- * @author Jeremy Long (jeremy.long@gmail.com)
- */
-public class Entry {
-
-    /**
-     * This parse method does not fully convert a Lucene Document into a CPE Entry;
-     * it only sets the Entry.Name.
-     *
-     * @param doc a Lucene Document.
-     * @return a CPE Entry.
-     */
-    public static Entry parse(Document doc) {
-        Entry entry = new Entry();
-        try {
-            entry.setName(doc.get(Fields.NAME));
-            entry.setTitle(doc.get(Fields.TITLE));
-        } catch (UnsupportedEncodingException ex) {
-            Logger.getLogger(Entry.class.getName()).log(Level.SEVERE, null, ex);
-            entry.name = doc.get(Fields.NAME);
-        }
-//        entry.vendor = doc.get(Fields.VENDOR);
-//        entry.version = doc.get(Fields.VERSION);
-//        //entry.revision = doc.get(Fields.REVISION);
-//        entry.product = doc.get(Fields.TITLE);
-//        entry.nvdId = doc.get(Fields.NVDID);
-        return entry;
-    }
-    /**
-     * The title of the CPE
-     */
-    protected String title;
-
-    /**
-     * Get the value of title
-     *
-     * @return the value of title
-     */
-    public String getTitle() {
-        return title;
-    }
-
-    /**
-     * Set the value of title
-     *
-     * @param title new value of title
-     */
-    public void setTitle(String title) {
-        this.title = title;
-    }
-    /**
-     * The name of the CPE entry.
-     */
-    protected String name;
-
-    /**
-     * Get the value of name
-     *
-     * @return the value of name
-     */
-    public String getName() {
-        return name;
-    }
-
-    /**
-     * Set the value of name and calls parseName to obtain the vendor:product:version:revision
-     *
-     * @param name new value of name
-     * @throws UnsupportedEncodingException should never be thrown...
-     */
-    public void setName(String name) throws UnsupportedEncodingException {
-        this.name = name;
-        parseName();
-    }
-    /**
-     * The status of the CPE Entry.
-     */
-    protected String status;
-
-    /**
-     * Get the value of status
-     *
-     * @return the value of status
-     */
-    public String getStatus() {
-        return status;
-    }
-
-    /**
-     * Set the value of status
-     *
-     * @param status new value of status
-     */
-    public void setStatus(String status) {
-        this.status = status;
-    }
-    /**
-     * The modification date of the CPE Entry.
-     */
-    protected Date modificationDate;
-
-    /**
-     * Get the value of modificationDate
-     *
-     * @return the value of modificationDate
-     */
-    public Date getModificationDate() {
-        return modificationDate;
-    }
-
-    /**
-     * Set the value of modificationDate
-     *
-     * @param modificationDate new value of modificationDate
-     */
-    public void setModificationDate(Date modificationDate) {
-        this.modificationDate = modificationDate;
-    }
-
-    /**
-     * Set the value of modificationDate
-     *
-     * Expected format: yyyy-MM-dd'T'HH:mm:ss.SSS'Z'
-     *
-     * @param modificationDate new value of modificationDate
-     * @throws ParseException is thrown when a parse exception occurs.
-     */
-    public void setModificationDate(String modificationDate) throws ParseException {
-
-        String formatStr = "yyyy-MM-dd'T'HH:mm:ss.SSS'Z'";
-        Date tempDate = null;
-        SimpleDateFormat sdf = new SimpleDateFormat(formatStr);
-        sdf.setLenient(true);
-        tempDate = sdf.parse(modificationDate);
-
-        this.modificationDate = tempDate;
-    }
-    /**
-     * The nvdId.
-     */
-    protected String nvdId;
-
-    /**
-     * Get the value of nvdId
-     *
-     * @return the value of nvdId
-     */
-    public String getNvdId() {
-        return nvdId;
-    }
-
-    /**
-     * Set the value of nvdId
-     *
-     * @param nvdId new value of nvdId
-     */
-    public void setNvdId(String nvdId) {
-        this.nvdId = nvdId;
-    }
-    /**
-     * The vendor name.
-     */
-    protected String vendor;
-
-    /**
-     * Get the value of vendor
-     *
-     * @return the value of vendor
-     */
-    public String getVendor() {
-        return vendor;
-    }
-
-    /**
-     * Set the value of vendor
-     *
-     * @param vendor new value of vendor
-     */
-    public void setVendor(String vendor) {
-        this.vendor = vendor;
-    }
-    /**
-     * The product name.
-     */
-    protected String product;
-
-    /**
-     * Get the value of product
-     *
-     * @return the value of product
-     */
-    public String getProduct() {
-        return product;
-    }
-
-    /**
-     * Set the value of product
-     *
-     * @param product new value of product
-     */
-    public void setProduct(String product) {
-        this.product = product;
-    }
-    /**
-     * The product version.
-     */
-    protected String version;
-
-    /**
-     * Get the value of version
-     *
-     * @return the value of version
-     */
-    public String getVersion() {
-        return version;
-    }
-
-    /**
-     * Set the value of version
-     *
-     * @param version new value of version
-     */
-    public void setVersion(String version) {
-        this.version = version;
-    }
-    /**
-     * The product revision.
-     */
-    protected String revision;
-
-    /**
-     * Get the value of revision
-     *
-     * @return the value of revision
-     */
-    public String getRevision() {
-        return revision;
-    }
-
-    /**
-     * Set the value of revision
-     *
-     * @param revision new value of revision
-     */
-    public void setRevision(String revision) {
-        this.revision = revision;
-    }
-    /**
-     * If the CPE Entry is well known (i.e. based off a hash)
-     */
-    protected boolean wellKnown = false;
-
-    /**
-     * Get the value of wellKnown
-     *
-     * @return the value of wellKnown
-     */
-    public boolean isWellKnown() {
-        return wellKnown;
-    }
-
-    /**
-     * Set the value of wellKnown
-     *
-     * @param wellKnown new value of wellKnown
-     */
-    public void setWellKnown(boolean wellKnown) {
-        this.wellKnown = wellKnown;
-    }
-    /**
-     * The search score.
-     */
-    protected float searchScore;
-
-    /**
-     * Get the value of searchScore
-     *
-     * @return the value of searchScore
-     */
-    public float getSearchScore() {
-        return searchScore;
-    }
-
-    /**
-     * Set the value of searchScore
-     *
-     * @param searchScore new value of searchScore
-     */
-    public void setSearchScore(float searchScore) {
-        this.searchScore = searchScore;
-    }
-
-    /**
-     * <p>Parses a name attribute value, from the cpe.xml, into its
-     * corresponding parts: vendor, product, version, revision.</p>
-     * <p>Example:</p>
-     * <code>&nbsp;&nbsp;&nbsp;cpe:/a:apache:struts:1.1:rc2</code>
-     *
-     * <p>Results in:</p>
-     * <ul>
-     *    <li>Vendor: apache</li>
-     *    <li>Product: struts</li>
-     *    <li>Version: 1.1</li>
-     *    <li>Revision: rc2</li>
-     * </ul>
-     *
-     * @throws UnsupportedEncodingException should never be thrown...
-     */
-    private void parseName() throws UnsupportedEncodingException {
-        if (name != null && name.length() > 7) {
-            String[] data = name.substring(7).split(":");
-            if (data.length >= 1) {
-                vendor = URLDecoder.decode(data[0], "UTF-8");
-                if (data.length >= 2) {
-                    product = URLDecoder.decode(data[1], "UTF-8");
-                    if (data.length >= 3) {
-                        version = URLDecoder.decode(data[2], "UTF-8");
-                        if (data.length >= 4) {
-                            revision = URLDecoder.decode(data[3], "UTF-8");
-                        }
-                        //ignore edition and language fields.. don't really see them used in the a:
-                    }
-                }
-            }
-        }
-    }
-
-    @Override
-    public boolean equals(Object obj) {
-        if (obj == null) {
-            return false;
-        }
-        if (getClass() != obj.getClass()) {
-            return false;
-        }
-        final Entry other = (Entry) obj;
-        if ((this.name == null) ? (other.name != null) : !this.name.equals(other.name)) {
-            return false;
-        }
-        return true;
-    }
-
-    @Override
-    public int hashCode() {
-        int hash = 5;
-        hash = 83 * hash + (this.name != null ? this.name.hashCode() : 0);
-        return hash;
-    }
-}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/cve/Fields.java b/src/main/java/org/codesecure/dependencycheck/data/cve/Fields.java
deleted file mode 100644
index eb0082395..000000000
--- a/src/main/java/org/codesecure/dependencycheck/data/cve/Fields.java
+++ /dev/null
@@ -1,53 +0,0 @@
-package org.codesecure.dependencycheck.data.cve;
-/*
- * This file is part of DependencyCheck.
- *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
- *
- * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
- */
-
-/**
- * Fields is a collection of field names used within the Lucene index for CPE
- * entries.
- *
- * @author Jeremy Long (jeremy.long@gmail.com)
- */
-public abstract class Fields {
-    /**
-     * The key for the name field.
-     */
-    public static final String NAME = "name";
-    /**
-     * The key for the vendor field.
-     */
-    public static final String VENDOR = "vendor";
-    /**
-     * The key for the version field.
-     */
-    public static final String VERSION = "version";
-    //public static final String REVISION = "revision";
-    /**
-     * The key for the product field.
-     */
-    public static final String PRODUCT = "product";
-    /**
-     * The key for the title field. This is a field combining vendor, product, and version.
-     */
-    public static final String TITLE = "title";
-    /**
-     * The key for the nvdId field.
-     */
-    public static final String NVDID = "nvdid";
-}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/cve/Index.java b/src/main/java/org/codesecure/dependencycheck/data/cve/Index.java
deleted file mode 100644
index 782300b9a..000000000
--- a/src/main/java/org/codesecure/dependencycheck/data/cve/Index.java
+++ /dev/null
@@ -1,254 +0,0 @@
-package org.codesecure.dependencycheck.data.cve;
-/*
- * This file is part of DependencyCheck.
- *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
- *
- * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
- */
-
-import java.io.File;
-import java.io.FileInputStream;
-import java.io.FileNotFoundException;
-import java.io.FileOutputStream;
-import java.io.IOException;
-import java.io.InputStream;
-import java.io.OutputStream;
-import java.io.OutputStreamWriter;
-import java.net.MalformedURLException;
-import java.net.URL;
-import java.util.HashMap;
-import java.util.Map;
-import java.util.Properties;
-import java.util.logging.Level;
-import java.util.logging.Logger;
-import javax.xml.parsers.ParserConfigurationException;
-import org.apache.lucene.analysis.Analyzer;
-import org.apache.lucene.analysis.KeywordAnalyzer;
-import org.apache.lucene.analysis.PerFieldAnalyzerWrapper;
-import org.apache.lucene.analysis.standard.StandardAnalyzer;
-import org.apache.lucene.store.Directory;
-import org.apache.lucene.store.FSDirectory;
-import org.apache.lucene.util.Version;
-import org.codesecure.dependencycheck.data.lucene.AbstractIndex;
-import org.codesecure.dependencycheck.data.CachedWebDataSource;
-import org.codesecure.dependencycheck.utils.Downloader;
-import org.codesecure.dependencycheck.utils.Settings;
-import org.codesecure.dependencycheck.data.cpe.xml.Importer;
-import org.codesecure.dependencycheck.utils.DownloadFailedException;
-import org.xml.sax.SAXException;
-
-/**
- * The Index class is used to utilize and maintain the CVE Index.
- *
- * @author Jeremy Long (jeremy.long@gmail.com)
- */
-public class Index extends AbstractIndex implements CachedWebDataSource {
-
-    /**
-     * The name of the properties file containing the timestamp of the last update.
-     */
-    private static final String UPDATE_PROPERTIES_FILE = "lastupdated.prop";
-    /**
-     * The properties file key for the last updated field.
-     */
-    private static final String LAST_UPDATED = "lastupdated";
-
-    /**
-     * Returns the directory that holds the CPE Index.
-     *
-     * @return the Directory containing the CPE Index.
-     * @throws IOException is thrown if an IOException occurs.
-     */
-    public Directory getDirectory() throws IOException {
-        String fileName = Settings.getString(Settings.KEYS.CVE_INDEX);
-        File path = new File(fileName);
-        Directory dir = FSDirectory.open(path);
-
-        return dir;
-    }
-
-    /**
-     * Creates an Analyzer for the CPE Index.
-     *
-     * @return the CPE Analyzer.
-     */
-    @SuppressWarnings("unchecked")
-    public Analyzer createAnalyzer() {
-        Map fieldAnalyzers = new HashMap();
-
-        fieldAnalyzers.put(Fields.VERSION, new KeywordAnalyzer());
-
-        PerFieldAnalyzerWrapper wrapper = new PerFieldAnalyzerWrapper(
-                new StandardAnalyzer(Version.LUCENE_35), fieldAnalyzers);
-
-        return wrapper;
-    }
-
-    /**
-     * Downloads the latest CPE XML file from the web and imports it into
-     * the current CPE Index.
-     *
-     * @throws MalformedURLException is thrown if the URL for the CPE is malformed.
-     * @throws ParserConfigurationException is thrown if the parser is misconfigured.
-     * @throws SAXException is thrown if there is an error parsing the CPE XML.
-     * @throws IOException is thrown if a temporary file could not be created.
-     */
-    public void update() throws MalformedURLException, ParserConfigurationException, SAXException, IOException {
-        long timeStamp = updateNeeded();
-        if (timeStamp > 0) {
-            URL url = new URL(Settings.getString(Settings.KEYS.CPE_URL));
-            File outputPath = null;
-            try {
-                outputPath = File.createTempFile("cve", ".xml");
-                Downloader.fetchFile(url, outputPath, true);
-                Importer.importXML(outputPath.toString());
-                writeLastUpdatedPropertyFile(timeStamp);
-            } catch (DownloadFailedException ex) {
-                Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
-            } finally {
-                try {
-                    if (outputPath != null && outputPath.exists()) {
-                        outputPath.delete();
-                    }
-                } finally {
-                    if (outputPath != null && outputPath.exists()) {
-                        outputPath.deleteOnExit();
-                    }
-                }
-            }
-        }
-    }
-
-    /**
-     * Writes a properties file containing the last updated date to the CPE directory.
-     * @param timeStamp the timestamp to write.
-     */
-    private void writeLastUpdatedPropertyFile(long timeStamp) {
-        String dir = Settings.getString(Settings.KEYS.CPE_INDEX);
-        File cpeProp = new File(dir + File.separatorChar + UPDATE_PROPERTIES_FILE);
-        Properties prop = new Properties();
-        prop.put(Index.LAST_UPDATED, String.valueOf(timeStamp));
-        OutputStream os = null;
-        try {
-            os = new FileOutputStream(cpeProp);
-            OutputStreamWriter out = new OutputStreamWriter(os);
-            prop.store(out, dir);
-        } catch (FileNotFoundException ex) {
-            Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
-        } catch (IOException ex) {
-            Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
-        } finally {
-            try {
-                os.flush();
-            } catch (IOException ex) {
-                Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
-            }
-            try {
-                os.close();
-            } catch (IOException ex) {
-                Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
-            }
-        }
-    }
-
-    /**
-     * Determines if the index needs to be updated. This is done by fetching the
-     * cpe.meta data and checking the lastModifiedDate. If the CPE data needs to
-     * be refreshed this method will return the timestamp of the new CPE. If an
-     * update is not required this function will return 0.
-     *
-     * @return the timestamp of the currently published CPE.xml if the index needs to be updated, otherwise returns 0..
-     * @throws MalformedURLException is thrown if the URL for the CPE Meta data is incorrect.
-     * @throws DownloadFailedException is thrown if there is an error downloading the cpe.meta data file.
-     */
-    public long updateNeeded() throws MalformedURLException, DownloadFailedException {
-        long retVal = 0;
-        long lastUpdated = 0;
-        long currentlyPublishedDate = retrieveCurrentCPETimestampFromWeb();
-        if (currentlyPublishedDate == 0) {
-            throw new DownloadFailedException("Unable to retrieve valid timestamp from cpe.meta file");
-        }
-
-        String dir = Settings.getString(Settings.KEYS.CPE_INDEX);
-        File f = new File(dir);
-        if (!f.exists()) {
-            retVal = currentlyPublishedDate;
-        } else {
-            File cpeProp = new File(dir + File.separatorChar + UPDATE_PROPERTIES_FILE);
-            if (!cpeProp.exists()) {
-                retVal = currentlyPublishedDate;
-            } else {
-                Properties prop = new Properties();
-                InputStream is = null;
-                try {
-                    is = new FileInputStream(cpeProp);
-                    prop.load(is);
-                    lastUpdated = Long.parseLong(prop.getProperty(Index.LAST_UPDATED));
-                } catch (FileNotFoundException ex) {
-                    Logger.getLogger(Index.class.getName()).log(Level.FINEST, null, ex);
-                } catch (IOException ex) {
-                    Logger.getLogger(Index.class.getName()).log(Level.FINEST, null, ex);
-                } catch (NumberFormatException ex) {
-                    Logger.getLogger(Index.class.getName()).log(Level.FINEST, null, ex);
-                }
-                if (currentlyPublishedDate > lastUpdated) {
-                    retVal = currentlyPublishedDate;
-                }
-            }
-        }
-        return retVal;
-    }
-
-    /**
-     * Retrieves the timestamp from the CPE meta data file.
-     * @return the timestamp from the currently published cpe.meta.
-     * @throws MalformedURLException is thrown if the URL for the CPE Meta data is incorrect.
-     * @throws DownloadFailedException is thrown if there is an error downloading the cpe.meta data file.
-     */
-    private long retrieveCurrentCPETimestampFromWeb() throws MalformedURLException, DownloadFailedException {
-        long timestamp = 0;
-        File tmp = null;
-        InputStream is = null;
-        try {
-            tmp = File.createTempFile("cpe", "meta");
-            URL url = new URL(Settings.getString(Settings.KEYS.CPE_META_URL));
-            Downloader.fetchFile(url, tmp);
-            Properties prop = new Properties();
-            is = new FileInputStream(tmp);
-            prop.load(is);
-            timestamp = Long.parseLong(prop.getProperty("lastModifiedDate"));
-        } catch (IOException ex) {
-            throw new DownloadFailedException("Unable to create temporary file for CPE Meta File download.", ex);
-        } finally {
-            try {
-                if (is != null) {
-                    try {
-                        is.close();
-                    } catch (IOException ex) {
-                        Logger.getLogger(Index.class.getName()).log(Level.FINEST, null, ex);
-                    }
-                }
-                if (tmp != null && tmp.exists()) {
-                    tmp.delete();
-                }
-            } finally {
-                if (tmp != null && tmp.exists()) {
-                    tmp.deleteOnExit();
-                }
-            }
-        }
-        return timestamp;
-    }
-}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/cve/package-info.java b/src/main/java/org/codesecure/dependencycheck/data/cve/package-info.java
deleted file mode 100644
index 7748a0137..000000000
--- a/src/main/java/org/codesecure/dependencycheck/data/cve/package-info.java
+++ /dev/null
@@ -1,12 +0,0 @@
-/**
- * <html>
- * <head>
- * <title>org.codesecure.dependencycheck.data.cve.xml</title>
- * </head>
- * <body>
- * Contains classes used to parse the CVE XML files.
- * </body>
- * </html>
-*/
-
-package org.codesecure.dependencycheck.data.cve;
diff --git a/src/main/java/org/codesecure/dependencycheck/data/cve/xml/CVEHandler.java b/src/main/java/org/codesecure/dependencycheck/data/cve/xml/CVEHandler.java
deleted file mode 100644
index d1fa366c0..000000000
--- a/src/main/java/org/codesecure/dependencycheck/data/cve/xml/CVEHandler.java
+++ /dev/null
@@ -1,350 +0,0 @@
-package org.codesecure.dependencycheck.data.cve.xml;
-/*
- * This file is part of DependencyCheck.
- *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
- *
- * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
- */
-
-import org.codesecure.dependencycheck.data.cve.Entry;
-import java.io.IOException;
-import java.io.UnsupportedEncodingException;
-import java.text.ParseException;
-import java.util.logging.Level;
-import java.util.logging.Logger;
-import org.apache.lucene.index.CorruptIndexException;
-import org.xml.sax.Attributes;
-import org.xml.sax.SAXException;
-import org.xml.sax.helpers.DefaultHandler;
-
-/**
- * A SAX Handler that will parse the CVE XML Listing.
- *
- * @author Jeremy Long (jeremy.long@gmail.com)
- */
-public class CVEHandler extends DefaultHandler {
-
-    private static final String CURRENT_SCHEMA_VERSION = "2.2";
-    EntrySaveDelegate saveDelegate = null;
-    Entry entry = null;
-    boolean languageIsUS = false;
-    StringBuilder nodeText = null;
-    boolean skip = false;
-    Element current = new Element();
-
-    /**
-     * Register a EntrySaveDelegate object. When the last node of an entry is
-     * reached if a save delegate has been regsitered the save method will be invoked.
-     *
-     * @param delegate the delegate used to save an entry
-     */
-    public void registerSaveDelegate(EntrySaveDelegate delegate) {
-        this.saveDelegate = delegate;
-    }
-
-    @Override
-    public void startElement(String uri, String localName, String qName, Attributes attributes) throws SAXException {
-        nodeText = null;
-        current.setNode(qName);
-        if (current.isCpeItemNode()) {
-            entry = new Entry();
-            String temp = attributes.getValue("deprecated");
-            String name = attributes.getValue("name");
-            skip = (temp != null && temp.equals("true"));
-            try {
-                if (!skip && name.startsWith("cpe:/a:")) {
-                    entry.setName(name);
-                } else {
-                    skip = true;
-                }
-            } catch (UnsupportedEncodingException ex) {
-                throw new SAXException(ex);
-            }
-        } else if (current.isTitleNode()) {
-            nodeText = new StringBuilder(100);
-            if ("en-US".equalsIgnoreCase(attributes.getValue("xml:lang"))) {
-                languageIsUS = true;
-            } else {
-                languageIsUS = false;
-            }
-        } else if (current.isMetaNode()) {
-            try {
-                entry.setModificationDate(attributes.getValue("modification-date"));
-            } catch (ParseException ex) {
-                Logger.getLogger(CVEHandler.class.getName()).log(Level.SEVERE, null, ex);
-            }
-            entry.setStatus(attributes.getValue("status"));
-            entry.setNvdId(attributes.getValue("nvd-id"));
-        } else if (current.isSchemaVersionNode()) {
-            nodeText = new StringBuilder(3);
-        } else if (current.isTimestampNode()) {
-            nodeText = new StringBuilder(24);
-        }
-//        } else if (current.isCpeListNode()) {
-//            //do nothing
-//        } else if (current.isNotesNode()) {
-//            //do nothing
-//        } else if (current.isNoteNode()) {
-//            //do nothing
-//        } else if (current.isCheckNode()) {
-//            //do nothing
-//        } else if (current.isGeneratorNode()) {
-//            //do nothing
-//        } else if (current.isProductNameNode()) {
-//            //do nothing
-//        } else if (current.isProductVersionNode()) {
-//            //do nothing
-    }
-
-    @Override
-    public void characters(char[] ch, int start, int length) throws SAXException {
-        //nodeText += new String(ch, start, length);
-        if (nodeText != null) {
-            nodeText.append(ch, start, length);
-        }
-    }
-
-    @Override
-    public void endElement(String uri, String localName, String qName) throws SAXException {
-        current.setNode(qName);
-        if (current.isCpeItemNode()) {
-            if (saveDelegate != null && !skip) {
-                try {
-                    saveDelegate.saveEntry(entry);
-                } catch (CorruptIndexException ex) {
-                    Logger.getLogger(CVEHandler.class.getName()).log(Level.SEVERE, null, ex);
-                    throw new SAXException(ex);
-                } catch (IOException ex) {
-                    Logger.getLogger(CVEHandler.class.getName()).log(Level.SEVERE, null, ex);
-                    throw new SAXException(ex);
-                }
-                entry = null;
-            }
-        } else if (current.isTitleNode()) {
-            if (languageIsUS) {
-                entry.setTitle(nodeText.toString());
-            }
-        } else if (current.isSchemaVersionNode() && !CURRENT_SCHEMA_VERSION.equals(nodeText.toString())) {
-            throw new SAXException("ERROR: Invalid Schema Version, expected: "
-                    + CURRENT_SCHEMA_VERSION + ", file is: " + nodeText);
-        }
-//        } else if (current.isCpeListNode()) {
-//            //do nothing
-//        } else if (current.isMetaNode()) {
-//            //do nothing
-//        } else if (current.isNotesNode()) {
-//            //do nothing
-//        } else if (current.isNoteNode()) {
-//            //do nothing
-//        } else if (current.isCheckNode()) {
-//            //do nothing
-//        } else if (current.isGeneratorNode()) {
-//            //do nothing
-//        } else if (current.isProductNameNode()) {
-//            //do nothing
-//        } else if (current.isProductVersionNode()) {
-//            //do nothing
-//        else if (current.isTimestampNode()) {
-//            //do nothing
-//        } else {
-//            throw new SAXException("ERROR STATE: Unexpected qName '" + qName + "'");
-//        }
-    }
-
-    // <editor-fold defaultstate="collapsed" desc="The Element Class that maintains state information about the current node">
-    /**
-     * A simple class to maintain information about the current element while parsing
-     * the CPE XML.
-     */
-    protected class Element {
-
-        /**
-         * A node type in the CPE Schema 2.2
-         */
-        public static final String CPE_LIST = "cpe-list";
-        /**
-         * A node type in the CPE Schema 2.2
-         */
-        public static final String CPE_ITEM = "cpe-item";
-        /**
-         * A node type in the CPE Schema 2.2
-         */
-        public static final String TITLE = "title";
-        /**
-         * A node type in the CPE Schema 2.2
-         */
-        public static final String NOTES = "notes";
-        /**
-         * A node type in the CPE Schema 2.2
-         */
-        public static final String NOTE = "note";
-        /**
-         * A node type in the CPE Schema 2.2
-         */
-        public static final String CHECK = "check";
-        /**
-         * A node type in the CPE Schema 2.2
-         */
-        public static final String META = "meta:item-metadata";
-        /**
-         * A node type in the CPE Schema 2.2
-         */
-        public static final String GENERATOR = "generator";
-        /**
-         * A node type in the CPE Schema 2.2
-         */
-        public static final String PRODUCT_NAME = "product_name";
-        /**
-         * A node type in the CPE Schema 2.2
-         */
-        public static final String PRODUCT_VERSION = "product_version";
-        /**
-         * A node type in the CPE Schema 2.2
-         */
-        public static final String SCHEMA_VERSION = "schema_version";
-        /**
-         * A node type in the CPE Schema 2.2
-         */
-        public static final String TIMESTAMP = "timestamp";
-        private String node = null;
-
-        /**
-         * Gets the value of node
-         *
-         * @return the value of node
-         */
-        public String getNode() {
-            return this.node;
-        }
-
-        /**
-         * Sets the value of node
-         *
-         * @param node new value of node
-         */
-        public void setNode(String node) {
-            this.node = node;
-        }
-
-        /**
-         * Checks if the handler is at the CPE_LIST node
-         *
-         * @return true or false
-         */
-        public boolean isCpeListNode() {
-            return CPE_LIST.equals(node);
-        }
-
-        /**
-         * Checks if the handler is at the CPE_ITEM node
-         *
-         * @return true or false
-         */
-        public boolean isCpeItemNode() {
-            return CPE_ITEM.equals(node);
-        }
-
-        /**
-         * Checks if the handler is at the TITLE node
-         *
-         * @return true or false
-         */
-        public boolean isTitleNode() {
-            return TITLE.equals(node);
-        }
-
-        /**
-         * Checks if the handler is at the NOTES node
-         *
-         * @return true or false
-         */
-        public boolean isNotesNode() {
-            return NOTES.equals(node);
-        }
-
-        /**
-         * Checks if the handler is at the NOTE node
-         *
-         * @return true or false
-         */
-        public boolean isNoteNode() {
-            return NOTE.equals(node);
-        }
-
-        /**
-         * Checks if the handler is at the CHECK node
-         *
-         * @return true or false
-         */
-        public boolean isCheckNode() {
-            return CHECK.equals(node);
-        }
-
-        /**
-         * Checks if the handler is at the META node
-         *
-         * @return true or false
-         */
-        public boolean isMetaNode() {
-            return META.equals(node);
-        }
-
-        /**
-         * Checks if the handler is at the GENERATOR node
-         *
-         * @return true or false
-         */
-        public boolean isGeneratorNode() {
-            return GENERATOR.equals(node);
-        }
-
-        /**
-         * Checks if the handler is at the PRODUCT_NAME node
-         *
-         * @return true or false
-         */
-        public boolean isProductNameNode() {
-            return PRODUCT_NAME.equals(node);
-        }
-
-        /**
-         * Checks if the handler is at the PRODUCT_VERSION node
-         *
-         * @return true or false
-         */
-        public boolean isProductVersionNode() {
-            return PRODUCT_VERSION.equals(node);
-        }
-
-        /**
-         * Checks if the handler is at the SCHEMA_VERSION node
-         *
-         * @return true or false
-         */
-        public boolean isSchemaVersionNode() {
-            return SCHEMA_VERSION.equals(node);
-        }
-
-        /**
-         * Checks if the handler is at the TIMESTAMP node
-         *
-         * @return true or false
-         */
-        public boolean isTimestampNode() {
-            return TIMESTAMP.equals(node);
-        }
-    }
-    // </editor-fold>
-}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/cve/xml/Importer.java b/src/main/java/org/codesecure/dependencycheck/data/cve/xml/Importer.java
deleted file mode 100644
index a001ac6b6..000000000
--- a/src/main/java/org/codesecure/dependencycheck/data/cve/xml/Importer.java
+++ /dev/null
@@ -1,75 +0,0 @@
-package org.codesecure.dependencycheck.data.cve.xml;
-/*
- * This file is part of DependencyCheck.
- *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
- *
- * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
- */
-
-import java.io.File;
-import java.io.IOException;
-import javax.xml.parsers.ParserConfigurationException;
-import javax.xml.parsers.SAXParser;
-import javax.xml.parsers.SAXParserFactory;
-import org.xml.sax.SAXException;
-
-/**
- * Imports a CVE XML file into the Lucene CVE Index.
- *
- * @author Jeremy Long (jeremy.long@gmail.com)
- */
-public class Importer {
-
-    /**
-     * Private constructor for utility class.
-     */
-    private Importer() {
-
-    }
-
-    /**
-     * Imports the CPE XML File into the Lucene Index.
-     *
-     * @param file containing the path to the CPE XML file.
-     * @throws ParserConfigurationException is thrown if the parser is misconfigured.
-     * @throws SAXException is thrown when there is a SAXException.
-     * @throws IOException is thrown when there is an IOException.
-     */
-    public static void importXML(File file) throws ParserConfigurationException, SAXException, IOException {
-        SAXParserFactory factory = SAXParserFactory.newInstance();
-        SAXParser saxParser = factory.newSAXParser();
-        CVEHandler handler = new CVEHandler();
-        Indexer indexer = new Indexer();
-        indexer.open();
-        handler.registerSaveDelegate(indexer);
-        saxParser.parse(file, handler);
-        indexer.close();
-    }
-    /**
-     * Imports the CPE XML File into the Lucene Index.
-     *
-     * @param path the path to the CPE XML file.
-     * @throws ParserConfigurationException is thrown if the parser is misconfigured.
-     * @throws SAXException is thrown when there is a SAXException.
-     * @throws IOException is thrown when there is an IOException.
-     */
-    public static void importXML(String path) throws ParserConfigurationException, SAXException, IOException {
-        File f = new File(path);
-        if (!f.exists()) {
-            f.mkdirs();
-        }
-        Importer.importXML(f);
-    }
-}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/cve/xml/Indexer.java b/src/main/java/org/codesecure/dependencycheck/data/cve/xml/Indexer.java
deleted file mode 100644
index f375c4235..000000000
--- a/src/main/java/org/codesecure/dependencycheck/data/cve/xml/Indexer.java
+++ /dev/null
@@ -1,102 +0,0 @@
-package org.codesecure.dependencycheck.data.cve.xml;
-/*
- * This file is part of DependencyCheck.
- *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
- *
- * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
- */
-
-import java.io.IOException;
-import org.apache.lucene.document.Document;
-import org.apache.lucene.document.Field;
-import org.apache.lucene.index.CorruptIndexException;
-import org.apache.lucene.index.FieldInfo.IndexOptions;
-import org.apache.lucene.index.Term;
-import org.codesecure.dependencycheck.data.lucene.LuceneUtils;
-import org.codesecure.dependencycheck.data.cve.Entry;
-import org.codesecure.dependencycheck.data.cve.Fields;
-import org.codesecure.dependencycheck.data.cve.Index;
-
-/**
- * The Indexer is used to convert a CPE Entry, retrieved from the CPE XML file,
- * into a Document that is stored in the Lucene index.
- *
- * @author Jeremy Long (jeremy.long@gmail.com)
- */
-public class Indexer extends Index implements EntrySaveDelegate {
-
-    /**
-     * Saves a CPE Entry into the Lucene index.
-     *
-     * @param entry a CPE entry.
-     * @throws CorruptIndexException is thrown if the index is corrupt.
-     * @throws IOException is thrown if an IOException occurs.
-     */
-    public void saveEntry(Entry entry) throws CorruptIndexException, IOException {
-        Document doc = convertEntryToDoc(entry);
-        Term term = new Term(Fields.NVDID, LuceneUtils.escapeLuceneQuery(entry.getNvdId()));
-        indexWriter.updateDocument(term, doc);
-    }
-
-    /**
-     * Converst a CPE entry into a Lucene Document.
-     *
-     * @param entry a CPE Entry.
-     * @return a Lucene Document containing a CPE Entry.
-     */
-    protected Document convertEntryToDoc(Entry entry) {
-        Document doc = new Document();
-
-        Field name = new Field(Fields.NAME, entry.getName(), Field.Store.YES, Field.Index.ANALYZED);
-        name.setIndexOptions(IndexOptions.DOCS_ONLY);
-        doc.add(name);
-
-        Field nvdId = new Field(Fields.NVDID, entry.getNvdId(), Field.Store.NO, Field.Index.ANALYZED);
-        nvdId.setIndexOptions(IndexOptions.DOCS_ONLY);
-        doc.add(nvdId);
-
-        Field vendor = new Field(Fields.VENDOR, entry.getVendor(), Field.Store.NO, Field.Index.ANALYZED);
-        vendor.setIndexOptions(IndexOptions.DOCS_ONLY);
-        vendor.setBoost(5.0F);
-        doc.add(vendor);
-
-        Field product = new Field(Fields.PRODUCT, entry.getProduct(), Field.Store.NO, Field.Index.ANALYZED);
-        product.setIndexOptions(IndexOptions.DOCS_ONLY);
-        product.setBoost(5.0F);
-        doc.add(product);
-
-        Field title = new Field(Fields.TITLE, entry.getTitle(), Field.Store.NO, Field.Index.ANALYZED);
-        title.setIndexOptions(IndexOptions.DOCS_ONLY);
-        //title.setBoost(1.0F);
-        doc.add(title);
-
-        //TODO revision should likely be its own field
-        if (entry.getVersion() != null) {
-            Field version = null;
-            if (entry.getRevision() != null) {
-                version = new Field(Fields.VERSION, entry.getVersion() + " "
-                        + entry.getRevision(), Field.Store.NO, Field.Index.ANALYZED);
-            } else {
-                version = new Field(Fields.VERSION, entry.getVersion(),
-                        Field.Store.NO, Field.Index.ANALYZED);
-            }
-            version.setIndexOptions(IndexOptions.DOCS_ONLY);
-            version.setBoost(0.8F);
-            doc.add(version);
-        }
-
-        return doc;
-    }
-}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/cve/xml/package-info.java b/src/main/java/org/codesecure/dependencycheck/data/cve/xml/package-info.java
deleted file mode 100644
index 9256378f9..000000000
--- a/src/main/java/org/codesecure/dependencycheck/data/cve/xml/package-info.java
+++ /dev/null
@@ -1,12 +0,0 @@
-/**
- * <html>
- * <head>
- * <title>org.codesecure.dependencycheck.data.cve.xml</title>
- * </head>
- * <body>
- * Contains classes used to parse the CVE XML file.
- * </body>
- * </html>
-*/
-
-package org.codesecure.dependencycheck.data.cve.xml;
diff --git a/src/main/java/org/codesecure/dependencycheck/data/lucene/AbstractIndex.java b/src/main/java/org/codesecure/dependencycheck/data/lucene/AbstractIndex.java
index 174b92e95..9c340e8c7 100644
--- a/src/main/java/org/codesecure/dependencycheck/data/lucene/AbstractIndex.java
+++ b/src/main/java/org/codesecure/dependencycheck/data/lucene/AbstractIndex.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.data.lucene;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -32,7 +32,8 @@ import org.apache.lucene.store.LockObtainFailedException;
 import org.apache.lucene.util.Version;
 
 /**
- * The base Index for other index objects. Implements the open and close methods.
+ * The base Index for other index objects. Implements the open and close
+ * methods.
  *
  * @author Jeremy Long (jeremy.long@gmail.com)
  */
@@ -65,6 +66,7 @@ public abstract class AbstractIndex {
 
     /**
      * Opens the CPE Index.
+     *
      * @throws IOException is thrown if an IOException occurs opening the index.
      */
     public void open() throws IOException {
@@ -121,6 +123,7 @@ public abstract class AbstractIndex {
 
     /**
      * Returns the status of the data source - is the index open.
+     *
      * @return true or false.
      */
     public boolean isOpen() {
@@ -146,7 +149,8 @@ public abstract class AbstractIndex {
      *
      * @return an IndexWriter.
      * @throws CorruptIndexException is thrown if the Lucene Index is corrupt.
-     * @throws LockObtainFailedException is thrown if there is an exception obtaining a lock on the Lucene index.
+     * @throws LockObtainFailedException is thrown if there is an exception
+     * obtaining a lock on the Lucene index.
      * @throws IOException is thrown if an IOException occurs opening the index.
      */
     public IndexWriter getIndexWriter() throws CorruptIndexException, LockObtainFailedException, IOException {
@@ -158,6 +162,7 @@ public abstract class AbstractIndex {
 
     /**
      * Opens the Lucene Index for reading.
+     *
      * @throws CorruptIndexException is thrown if the index is corrupt.
      * @throws IOException is thrown if there is an exception reading the index.
      */
@@ -170,6 +175,7 @@ public abstract class AbstractIndex {
 
     /**
      * Returns an IndexSearcher for the Lucene Index.
+     *
      * @return an IndexSearcher.
      * @throws CorruptIndexException is thrown if the index is corrupt.
      * @throws IOException is thrown if there is an exception reading the index.
@@ -186,6 +192,7 @@ public abstract class AbstractIndex {
 
     /**
      * Returns an Analyzer for the Lucene Index.
+     *
      * @return an Analyzer.
      */
     public Analyzer getAnalyzer() {
@@ -197,6 +204,7 @@ public abstract class AbstractIndex {
 
     /**
      * Gets the directory that contains the Lucene Index.
+     *
      * @return a Lucene Directory.
      * @throws IOException is thrown when an IOException occurs.
      */
@@ -204,6 +212,7 @@ public abstract class AbstractIndex {
 
     /**
      * Creates the Lucene Analyzer used when indexing and searching the index.
+     *
      * @return a Lucene Analyzer.
      */
     public abstract Analyzer createAnalyzer();
diff --git a/src/main/java/org/codesecure/dependencycheck/data/lucene/DependencySimilarity.java b/src/main/java/org/codesecure/dependencycheck/data/lucene/DependencySimilarity.java
index f3d6e7bfd..ae29dba0b 100644
--- a/src/main/java/org/codesecure/dependencycheck/data/lucene/DependencySimilarity.java
+++ b/src/main/java/org/codesecure/dependencycheck/data/lucene/DependencySimilarity.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.data.lucene;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -29,10 +29,12 @@ public class DependencySimilarity extends DefaultSimilarity {
     private static final long serialVersionUID = 1L;
 
     /**
-     * <p>Override the default idf implementation so that frequency within
-     * all document is ignored.</p>
+     * <p>Override the default idf implementation so that frequency within all
+     * document is ignored.</p>
      *
-     * See <a href="http://www.lucenetutorial.com/advanced-topics/scoring.html">this article</a> for more details.
+     * See <a
+     * href="http://www.lucenetutorial.com/advanced-topics/scoring.html">this
+     * article</a> for more details.
      *
      * @param docFreq - the number of documents which contain the term
      * @param numDocs - the total number of documents in the collection
diff --git a/src/main/java/org/codesecure/dependencycheck/data/lucene/LuceneUtils.java b/src/main/java/org/codesecure/dependencycheck/data/lucene/LuceneUtils.java
index 2f4abc283..9b52d2b83 100644
--- a/src/main/java/org/codesecure/dependencycheck/data/lucene/LuceneUtils.java
+++ b/src/main/java/org/codesecure/dependencycheck/data/lucene/LuceneUtils.java
@@ -2,25 +2,25 @@ package org.codesecure.dependencycheck.data.lucene;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
 
 /**
- * <p>Lucene utils is a set of utilitize written to make constructing
- * Lucene queries simplier.</p>
+ * <p>Lucene utils is a set of utilitize written to make constructing Lucene
+ * queries simplier.</p>
  *
  * @author Jeremy Long (jeremy.long@gmail.com)
  */
diff --git a/src/main/java/org/codesecure/dependencycheck/data/lucene/VersionAnalyzer.java b/src/main/java/org/codesecure/dependencycheck/data/lucene/VersionAnalyzer.java
index 957794307..5c180578d 100644
--- a/src/main/java/org/codesecure/dependencycheck/data/lucene/VersionAnalyzer.java
+++ b/src/main/java/org/codesecure/dependencycheck/data/lucene/VersionAnalyzer.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.data.lucene;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/Fields.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/Fields.java
new file mode 100644
index 000000000..95a05e330
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/Fields.java
@@ -0,0 +1,45 @@
+package org.codesecure.dependencycheck.data.nvdcve;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+/**
+ * Fields is a collection of field names used within the Lucene index for NVD
+ * VULNERABLE_CPE entries.
+ *
+ * @author Jeremy Long (jeremy.long@gmail.com)
+ */
+public abstract class Fields {
+
+    /**
+     * The key for the name field.
+     */
+    public static final String CVE_ID = "cve";
+    /**
+     * The key for the vulnerable cpes field.
+     */
+    public static final String VULNERABLE_CPE = "cpe";
+    /**
+     * The key for the description field.
+     */
+    public static final String DESCRIPTION = "description";
+    /**
+     * The key for the xml field. Stores the entire NVD VULNERABLE_CPE Entry.
+     */
+    public static final String XML = "xml";
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/Index.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/Index.java
new file mode 100644
index 000000000..43f64aa0b
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/Index.java
@@ -0,0 +1,525 @@
+package org.codesecure.dependencycheck.data.nvdcve;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+import java.io.*;
+import java.net.MalformedURLException;
+import java.net.URL;
+import java.util.*;
+import java.util.logging.Level;
+import java.util.logging.Logger;
+import java.util.regex.Matcher;
+import java.util.regex.Pattern;
+import javax.xml.bind.JAXBException;
+import javax.xml.parsers.ParserConfigurationException;
+import org.apache.lucene.analysis.Analyzer;
+import org.apache.lucene.analysis.KeywordAnalyzer;
+import org.apache.lucene.analysis.PerFieldAnalyzerWrapper;
+import org.apache.lucene.analysis.standard.StandardAnalyzer;
+import org.apache.lucene.store.Directory;
+import org.apache.lucene.store.FSDirectory;
+import org.apache.lucene.util.Version;
+import org.codesecure.dependencycheck.data.CachedWebDataSource;
+import org.codesecure.dependencycheck.data.UpdateException;
+import org.codesecure.dependencycheck.data.lucene.AbstractIndex;
+import org.codesecure.dependencycheck.data.nvdcve.xml.Importer;
+import org.codesecure.dependencycheck.utils.DownloadFailedException;
+import org.codesecure.dependencycheck.utils.Downloader;
+import org.codesecure.dependencycheck.utils.Settings;
+import org.xml.sax.SAXException;
+
+/**
+ * The Index class is used to utilize and maintain the NVD CVE Index.
+ *
+ * @author Jeremy Long (jeremy.long@gmail.com)
+ */
+public class Index extends AbstractIndex implements CachedWebDataSource {
+
+    /**
+     * The name of the properties file containing the timestamp of the last
+     * update.
+     */
+    private static final String UPDATE_PROPERTIES_FILE = "lastupdated.prop";
+    /**
+     * The properties file key for the last updated field - used to store the
+     * last updated time of the Modified NVD CVE xml file.
+     */
+    private static final String LAST_UPDATED_MODIFIED = "lastupdated.modified";
+    /**
+     * Stores the last updated time for each of the NVD CVE files. These
+     * timestamps should be updated if we process the modified file within 7
+     * days of the last update.
+     */
+    private static final String LAST_UPDATED_BASE = "lastupdated.";
+
+    /**
+     * Returns the directory that holds the NVD CVE Index.
+     *
+     * @return the Directory containing the NVD CVE Index.
+     * @throws IOException is thrown if an IOException occurs.
+     */
+    public Directory getDirectory() throws IOException {
+        String fileName = Settings.getString(Settings.KEYS.CVE_INDEX);
+        File path = new File(fileName);
+        Directory dir = FSDirectory.open(path);
+        return dir;
+    }
+
+    /**
+     * Creates an Analyzer for the NVD VULNERABLE_CPE Index.
+     *
+     * @return the VULNERABLE_CPE Analyzer.
+     */
+    @SuppressWarnings("unchecked")
+    public Analyzer createAnalyzer() {
+        Map fieldAnalyzers = new HashMap();
+
+        fieldAnalyzers.put(Fields.CVE_ID, new KeywordAnalyzer());
+        fieldAnalyzers.put(Fields.VULNERABLE_CPE, new KeywordAnalyzer());
+
+        PerFieldAnalyzerWrapper wrapper = new PerFieldAnalyzerWrapper(
+                new StandardAnalyzer(Version.LUCENE_35), fieldAnalyzers);
+
+        return wrapper;
+    }
+
+    /**
+     * <p>Downloads the latest NVD CVE XML file from the web and imports it into
+     * the current CVE Index.</p>
+     *
+     * @throws UpdateException is thrown if there is an error updating the index
+     */
+    public void update() throws UpdateException {
+        try {
+            Map<String, NvdCveUrl> update = updateNeeded();
+            int maxUpdates = 0;
+            for (NvdCveUrl cve : update.values()) {
+                if (cve.getNeedsUpdate()) {
+                    maxUpdates += 1;
+                }
+            }
+            if (maxUpdates > 3) {
+                Logger.getLogger(Index.class.getName()).log(Level.WARNING, "NVD CVE requires several updates. This could take a couple of hours. To avoid this in the future, ensure that an update is run at least every seven days.");
+            }
+            int count = 0;
+            for (NvdCveUrl cve : update.values()) {
+                if (cve.getNeedsUpdate()) {
+                    count += 1;
+                    Logger.getLogger(Index.class.getName()).log(Level.WARNING, "Updating NVD CVE (" + count + " of " + maxUpdates + ") :" + cve.getUrl());
+                    URL url = new URL(cve.getUrl());
+                    File outputPath = null;
+                    try {
+                        outputPath = File.createTempFile("cve" + cve.getId() + "_", ".xml");
+                        Downloader.fetchFile(url, outputPath, false);
+                        Importer.importXML(outputPath.toString());
+                    } catch (FileNotFoundException ex) {
+                        //Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
+                        throw new UpdateException(ex);
+                    } catch (JAXBException ex) {
+                        //Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
+                        throw new UpdateException(ex);
+                    } catch (ParserConfigurationException ex) {
+                        //Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
+                        throw new UpdateException(ex);
+                    } catch (SAXException ex) {
+                        //Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
+                        throw new UpdateException(ex);
+                    } catch (IOException ex) {
+                        //Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
+                        throw new UpdateException(ex);
+                    } finally {
+                        try {
+                            if (outputPath != null && outputPath.exists()) {
+                                outputPath.delete();
+                            }
+                        } finally {
+                            if (outputPath != null && outputPath.exists()) {
+                                outputPath.deleteOnExit();
+                            }
+                        }
+                    }
+                }
+            }
+            if (maxUpdates >= 1) {
+                writeLastUpdatedPropertyFile(update);
+            }
+        } catch (MalformedURLException ex) {
+            //Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
+            throw new UpdateException(ex);
+        } catch (DownloadFailedException ex) {
+            //Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
+            throw new UpdateException(ex);
+        }
+    }
+
+    /**
+     * Writes a properties file containing the last updated date to the
+     * VULNERABLE_CPE directory.
+     *
+     * @param timeStamp the timestamp to write.
+     */
+    private void writeLastUpdatedPropertyFile(Map<String, NvdCveUrl> updated) {
+        String dir = Settings.getString(Settings.KEYS.CVE_INDEX);
+        File cveProp = new File(dir + File.separatorChar + UPDATE_PROPERTIES_FILE);
+        Properties prop = new Properties();
+
+        for (NvdCveUrl cve : updated.values()) {
+            prop.put(LAST_UPDATED_BASE + cve.id, String.valueOf(cve.getTimestamp()));
+        }
+
+        OutputStream os = null;
+        try {
+            os = new FileOutputStream(cveProp);
+            OutputStreamWriter out = new OutputStreamWriter(os);
+            prop.store(out, dir);
+        } catch (FileNotFoundException ex) {
+            Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
+        } catch (IOException ex) {
+            Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
+        } finally {
+            try {
+                os.flush();
+            } catch (IOException ex) {
+                Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
+            }
+            try {
+                os.close();
+            } catch (IOException ex) {
+                Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
+            }
+        }
+    }
+
+    /**
+     * Determines if the index needs to be updated. This is done by fetching the
+     * nvd cve meta data and checking the last update date. If the data needs to
+     * be refreshed this method will return the NvdCveUrl for the files that
+     * need to be updated.
+     *
+     * @return the NvdCveUrl of the files that need to be updated.
+     * @throws MalformedURLException is thrown if the URL for the NVD CVE Meta
+     * data is incorrect.
+     * @throws DownloadFailedException is thrown if there is an error
+     * downloading the nvd cve download data file.
+     */
+    public Map<String, NvdCveUrl> updateNeeded() throws MalformedURLException, DownloadFailedException {
+
+        Map<String, NvdCveUrl> currentlyPublished;
+        try {
+            currentlyPublished = retrieveCurrentTimestampsFromWeb();
+        } catch (InvalidDataException ex) {
+            Logger.getLogger(Index.class.getName()).log(Level.SEVERE, null, ex);
+            throw new DownloadFailedException("Unable to retrieve valid timestamp from nvd cve downloads page", ex);
+        }
+        if (currentlyPublished == null) {
+            throw new DownloadFailedException("Unable to retrieve valid timestamp from nvd cve downloads page");
+        }
+        String dir = Settings.getString(Settings.KEYS.CVE_INDEX);
+        File f = new File(dir);
+        if (f.exists()) {
+            File cveProp = new File(dir + File.separatorChar + UPDATE_PROPERTIES_FILE);
+            if (cveProp.exists()) {
+                Properties prop = new Properties();
+                InputStream is;
+                try {
+                    is = new FileInputStream(cveProp);
+                    prop.load(is);
+                    long lastUpdated = Long.parseLong(prop.getProperty(Index.LAST_UPDATED_MODIFIED));
+                    Date now = new Date();
+                    int days = Settings.getInt(Settings.KEYS.CVE_MODIFIED_VALID_FOR_DAYS);
+                    int maxEntries = Settings.getInt(Settings.KEYS.CVE_URL_COUNT);
+                    if (lastUpdated == currentlyPublished.get("modified").timestamp) {
+                        currentlyPublished.clear(); //we don't need to update anything.
+                    } else if (withinRange(lastUpdated, now.getTime(), days)) {
+                        currentlyPublished.get("modified").setNeedsUpdate(true);
+                        for (int i = 1; i <= maxEntries; i++) {
+                            currentlyPublished.get(String.valueOf(i)).setNeedsUpdate(false);
+                        }
+                    } else { //we figure out which of the several XML files need to be downloaded.
+                        currentlyPublished.get("modified").setNeedsUpdate(false);
+                        for (int i = 1; i <= maxEntries; i++) {
+                            NvdCveUrl cve = currentlyPublished.get(String.valueOf(i));
+                            long currentTimestamp = 0;
+                            try {
+                                currentTimestamp = Long.parseLong(prop.getProperty(LAST_UPDATED_BASE + String.valueOf(i), "0"));
+                            } catch (NumberFormatException ex) {
+                                Logger.getLogger(Index.class.getName()).log(Level.FINEST, "Error parsing " + LAST_UPDATED_BASE
+                                        + String.valueOf(i) + " from nvdcve.lastupdated", ex);
+                            }
+                            if (currentTimestamp == cve.getTimestamp()) {
+                                cve.setNeedsUpdate(false); //they default to true.
+                            }
+                        }
+                    }
+                } catch (FileNotFoundException ex) {
+                    Logger.getLogger(Index.class.getName()).log(Level.FINEST, null, ex);
+                } catch (IOException ex) {
+                    Logger.getLogger(Index.class.getName()).log(Level.FINEST, null, ex);
+                } catch (NumberFormatException ex) {
+                    Logger.getLogger(Index.class.getName()).log(Level.FINEST, null, ex);
+                }
+            }
+        }
+        return currentlyPublished;
+    }
+
+    /**
+     * Determines if the epoch date is within the range specified of the
+     * compareTo epoch time. This takes the (compareTo-date)/1000/60/60/24 to
+     * get the number of days. If the calculated days is less then the range the
+     * date is considered valid.
+     *
+     * @param date the date to be checked.
+     * @param compareTo the date to compare to.
+     * @param range the range in days to be considered valid.
+     * @return whether or not the date is within the range.
+     */
+    private boolean withinRange(long date, long compareTo, int range) {
+        double differenceInDays = (compareTo - date) / 1000 / 60 / 60 / 24;
+        return differenceInDays < range;
+    }
+
+    /**
+     * Retrieves the timestamps from the NVD CVE meta data file.
+     *
+     * @return the timestamp from the currently published nvdcve downloads page
+     * @throws MalformedURLException is thrown if the URL for the NVD CCE Meta
+     * data is incorrect.
+     * @throws DownloadFailedException is thrown if there is an error
+     * downloading the nvd cve meta data file
+     * @throws InvalidDataException is thrown if there is an exception parsing
+     * the timestamps
+     */
+    protected Map<String, NvdCveUrl> retrieveCurrentTimestampsFromWeb() throws MalformedURLException, DownloadFailedException, InvalidDataException {
+        Map<String, NvdCveUrl> map = new HashMap<String, NvdCveUrl>();
+
+        File tmp = null;
+        try {
+            tmp = File.createTempFile("cve", "meta");
+            URL url = new URL(Settings.getString(Settings.KEYS.CVE_META_URL));
+            Downloader.fetchFile(url, tmp);
+            String html = readFile(tmp);
+
+            String retrieveUrl = Settings.getString(Settings.KEYS.CVE_MODIFIED_URL);
+            NvdCveUrl cve = createNvdCveUrl("modified", retrieveUrl, html);
+            cve.setNeedsUpdate(false); //the others default to true, to make life easier later this should default to false.
+            map.put("modified", cve);
+            int max = Settings.getInt(Settings.KEYS.CVE_URL_COUNT);
+            for (int i = 1; i <= max; i++) {
+                retrieveUrl = Settings.getString(Settings.KEYS.CVE_BASE_URL + i);
+                String key = Integer.toString(i);
+                cve = createNvdCveUrl(key, retrieveUrl, html);
+                map.put(key, cve);
+            }
+        } catch (IOException ex) {
+            throw new DownloadFailedException("Unable to create temporary file for NVD CVE Meta File download.", ex);
+        } finally {
+            try {
+                if (tmp != null && tmp.exists()) {
+                    tmp.delete();
+                }
+            } finally {
+                if (tmp != null && tmp.exists()) {
+                    tmp.deleteOnExit();
+                }
+            }
+        }
+        return map;
+    }
+
+    /**
+     * Creates a new NvdCveUrl object from the provide id, url, and text/html
+     * from the NVD CVE downloads page.
+     *
+     * @param id the name of this NVD CVE Url
+     * @param retrieveUrl the URL to download the file from
+     * @param text a bit of HTML from the NVD CVE downloads page that contains
+     * the URL and the last updated timestamp.
+     * @return a shiny new NvdCveUrl object.
+     * @throws InvalidDataException is thrown if the timestamp could not be
+     * extracted from the provided text.
+     */
+    private NvdCveUrl createNvdCveUrl(String id, String retrieveUrl, String text) throws InvalidDataException {
+        Pattern pattern = Pattern.compile(Pattern.quote(retrieveUrl) + ".+?\\<br");
+        Matcher m = pattern.matcher(text);
+        NvdCveUrl item = new NvdCveUrl();
+        item.id = id;
+        item.url = retrieveUrl;
+        if (m.find()) {
+            String line = m.group();
+            int pos = line.indexOf("Updated:");
+            if (pos > 0) {
+                pos += 9;
+                try {
+                    String timestampstr = line.substring(pos, line.length() - 3).replace("at ", "");
+                    long timestamp = getEpochTimeFromDateTime(timestampstr);
+                    item.setTimestamp(timestamp);
+                } catch (NumberFormatException ex) {
+                    throw new InvalidDataException("NVD CVE Meta file does not contain a valid timestamp for '" + retrieveUrl + "'.", ex);
+                }
+            } else {
+                throw new InvalidDataException("NVD CVE Meta file does not contain the updated timestamp for '" + retrieveUrl + "'.");
+            }
+        } else {
+            throw new InvalidDataException("NVD CVE Meta file does not contain the url for '" + retrieveUrl + "'.");
+        }
+        return item;
+    }
+
+    /**
+     * Parses a timestamp in the format of "MM/dd/yy hh:mm" into a calendar
+     * object and returns the epoch time. Note, this removes the millisecond
+     * portion of the epoch time so all numbers returned should end in 000.
+     *
+     * @param timestamp a string in the format of "MM/dd/yy hh:mm"
+     * @return a Calendar object.
+     * @throws NumberFormatException if the timestamp was parsed incorrectly.
+     */
+    private long getEpochTimeFromDateTime(String timestamp) throws NumberFormatException {
+        Calendar c = new GregorianCalendar();
+        int month = Integer.parseInt(timestamp.substring(0, 2));
+        int date = Integer.parseInt(timestamp.substring(3, 5));
+        int year = 2000 + Integer.parseInt(timestamp.substring(6, 8));
+        int hourOfDay = Integer.parseInt(timestamp.substring(9, 11));
+        int minute = Integer.parseInt(timestamp.substring(12, 14));
+        c.set(year, month, date, hourOfDay, minute, 0);
+        long t = c.getTimeInMillis();
+        t = (t / 1000) * 1000;
+        return t;
+    }
+
+    /**
+     * Reads a file into a string.
+     *
+     * @param file the file to be read.
+     * @return the contents of the file.
+     * @throws IOException is thrown if an IOExcpetion occurs.
+     */
+    private String readFile(File file) throws IOException {
+        FileReader stream = new FileReader(file);
+        StringBuilder str = new StringBuilder((int) file.length());
+        try {
+            char[] buf = new char[8096];
+            int read = stream.read(buf, 0, 8096);
+            while (read > 0) {
+                str.append(buf, 0, read);
+                read = stream.read(buf, 0, 8096);
+            }
+        } finally {
+            stream.close();
+        }
+        return str.toString();
+    }
+
+    /**
+     * A pojo that contains the Url and timestamp of the current NvdCve XML
+     * files.
+     */
+    protected class NvdCveUrl {
+
+        /**
+         * an id.
+         */
+        private String id;
+
+        /**
+         * Get the value of id
+         *
+         * @return the value of id
+         */
+        public String getId() {
+            return id;
+        }
+
+        /**
+         * Set the value of id
+         *
+         * @param id new value of id
+         */
+        public void setId(String id) {
+            this.id = id;
+        }
+        /**
+         * a url.
+         */
+        private String url;
+
+        /**
+         * Get the value of url
+         *
+         * @return the value of url
+         */
+        public String getUrl() {
+            return url;
+        }
+
+        /**
+         * Set the value of url
+         *
+         * @param url new value of url
+         */
+        public void setUrl(String url) {
+            this.url = url;
+        }
+        /**
+         * a timestamp - epoch time.
+         */
+        private long timestamp;
+
+        /**
+         * Get the value of timestamp - epoch time
+         *
+         * @return the value of timestamp - epoch time
+         */
+        public long getTimestamp() {
+            return timestamp;
+        }
+
+        /**
+         * Set the value of timestamp - epoch time
+         *
+         * @param timestamp new value of timestamp - epoch time
+         */
+        public void setTimestamp(long timestamp) {
+            this.timestamp = timestamp;
+        }
+        /**
+         * indicates whether or not this item should be updated.
+         */
+        private boolean needsUpdate = true;
+
+        /**
+         * Get the value of needsUpdate
+         *
+         * @return the value of needsUpdate
+         */
+        public boolean getNeedsUpdate() {
+            return needsUpdate;
+        }
+
+        /**
+         * Set the value of needsUpdate
+         *
+         * @param needsUpdate new value of needsUpdate
+         */
+        public void setNeedsUpdate(boolean needsUpdate) {
+            this.needsUpdate = needsUpdate;
+        }
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/InvalidDataException.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/InvalidDataException.java
new file mode 100644
index 000000000..1dd3442ed
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/InvalidDataException.java
@@ -0,0 +1,47 @@
+package org.codesecure.dependencycheck.data.nvdcve;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+/**
+ * An InvalidataDataException is a generic exception used when trying to load
+ * the nvd cve meta data.
+ *
+ * @author Jeremy
+ */
+class InvalidDataException extends Exception {
+
+    /**
+     * Creates an InvalidDataException
+     *
+     * @param msg the exception message
+     */
+    public InvalidDataException(String msg) {
+        super(msg);
+    }
+
+    /**
+     * Creates an InvalidDataException
+     *
+     * @param msg the exception message
+     * @param ex the cause of the exception
+     */
+    public InvalidDataException(String msg, Exception ex) {
+        super(msg, ex);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/NvdCveAnalyzer.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/NvdCveAnalyzer.java
new file mode 100644
index 000000000..8526ae455
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/NvdCveAnalyzer.java
@@ -0,0 +1,225 @@
+package org.codesecure.dependencycheck.data.nvdcve;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+import java.io.ByteArrayInputStream;
+import java.io.IOException;
+import java.util.Set;
+import java.util.logging.Level;
+import java.util.logging.Logger;
+import javax.xml.bind.JAXBContext;
+import javax.xml.bind.JAXBException;
+import javax.xml.bind.Unmarshaller;
+import org.apache.lucene.document.Document;
+import org.apache.lucene.index.Term;
+import org.apache.lucene.search.*;
+import org.codesecure.dependencycheck.analyzer.AnalysisException;
+import org.codesecure.dependencycheck.analyzer.AnalysisPhase;
+import org.codesecure.dependencycheck.data.nvdcve.generated.VulnerabilityReferenceType;
+import org.codesecure.dependencycheck.data.nvdcve.generated.VulnerabilityType;
+import org.codesecure.dependencycheck.dependency.Dependency;
+import org.codesecure.dependencycheck.dependency.Vulnerability;
+import org.codesecure.dependencycheck.dependency.Identifier;
+import org.codesecure.dependencycheck.dependency.Reference;
+
+/**
+ * NvdCveAnalyzer is a utility class that takes a project dependency and
+ * attempts to decern if there is an associated CVEs. It uses the the
+ * identifiers found by other analyzers to lookup the CVE data.
+ *
+ * @author Jeremy Long (jeremy.long@gmail.com)
+ */
+public class NvdCveAnalyzer implements org.codesecure.dependencycheck.analyzer.Analyzer {
+
+    /**
+     * The maximum number of query results to return.
+     */
+    static final int MAX_QUERY_RESULTS = 100;
+    /**
+     * The CVE Index.
+     */
+    protected Index cve = null;
+    /**
+     * The Lucene IndexSearcher.
+     */
+    private IndexSearcher indexSearcher = null;
+
+    /**
+     * Opens the data source.
+     *
+     * @throws IOException when the Lucene directory to be querried does not
+     * exist or is corrupt.
+     */
+    public void open() throws IOException {
+        cve = new Index();
+        cve.open();
+        indexSearcher = cve.getIndexSearcher();
+    }
+
+    /**
+     * Closes the data source.
+     */
+    public void close() {
+        indexSearcher = null;
+        cve.close();
+    }
+
+    /**
+     * Returns the status of the data source - is the index open.
+     *
+     * @return true or false.
+     */
+    public boolean isOpen() {
+        return (cve == null) ? false : cve.isOpen();
+    }
+
+    /**
+     * Ensures that the Lucene index is closed.
+     *
+     * @throws Throwable when a throwable is thrown.
+     */
+    @Override
+    protected void finalize() throws Throwable {
+        super.finalize();
+        if (isOpen()) {
+            close();
+        }
+    }
+
+    /**
+     * Analyzes a dependency and attempts to determine if there are any CPE
+     * identifiers for this dependency.
+     *
+     * @param dependency The Dependency to analyze.
+     * @throws AnalysisException is thrown if there is an issue analyzing the
+     * dependency.
+     */
+    public void analyze(Dependency dependency) throws AnalysisException {
+        for (Identifier id : dependency.getIdentifiers()) {
+            if ("cpe".equals(id.getType())) {
+                try {
+                    String value = id.getValue();
+                    Term term1 = new Term(Fields.VULNERABLE_CPE, value);
+                    Query query1 = new TermQuery(term1);
+
+                    //need to get the cpe:/a:vendor:product - some CVEs are referenced very broadly.
+                    //find the index of the colon after the product of the cpe value
+                    //cpe:/a:microsoft:anti-cross_site_scripting_library:3.1
+                    int pos = value.indexOf(":", 7) + 1;
+                    pos = value.indexOf(":", pos);
+                    String productVendor = value.substring(0, pos);
+                    Term term2 = new Term(Fields.VULNERABLE_CPE, productVendor);
+                    Query query2 = new TermQuery(term2);
+
+                    BooleanQuery query = new BooleanQuery();
+                    query.add(query1, BooleanClause.Occur.SHOULD);
+                    query.add(query2, BooleanClause.Occur.SHOULD);
+
+                    TopDocs docs = indexSearcher.search(query, MAX_QUERY_RESULTS);
+                    for (ScoreDoc d : docs.scoreDocs) {
+                        Document doc = indexSearcher.doc(d.doc);
+                        String xml = doc.get(Fields.XML);
+                        Vulnerability vuln;
+                        try {
+                            vuln = parseVulnerability(xml);
+                            dependency.addVulnerability(vuln);
+                        } catch (JAXBException ex) {
+                            Logger.getLogger(NvdCveAnalyzer.class.getName()).log(Level.SEVERE, null, ex);
+                            dependency.addAnalysisException(new AnalysisException("Unable to retrieve vulnerability data", ex));
+                        }
+                    }
+                } catch (IOException ex) {
+                    Logger.getLogger(NvdCveAnalyzer.class.getName()).log(Level.SEVERE, null, ex);
+                    throw new AnalysisException("Exception occured while determining CVEs", ex);
+                }
+            }
+        }
+    }
+
+    /**
+     * Returns true because this analyzer supports all dependency types.
+     *
+     * @return true.
+     */
+    public Set<String> getSupportedExtensions() {
+        return null;
+    }
+
+    /**
+     * Returns the name of this analyzer.
+     *
+     * @return the name of this analyzer.
+     */
+    public String getName() {
+        return "NVD CVE Analyzer";
+    }
+
+    /**
+     * Returns true because this analyzer supports all dependency types.
+     *
+     * @param extension the file extension of the dependency being analyzed.
+     * @return true.
+     */
+    public boolean supportsExtension(String extension) {
+        return true;
+    }
+
+    /**
+     * Returns the analysis phase that this analyzer should run in.
+     *
+     * @return the analysis phase that this analyzer should run in.
+     */
+    public AnalysisPhase getAnalysisPhase() {
+        return AnalysisPhase.FINDING_ANALYSIS;
+    }
+
+    /**
+     * Opens the NVD CVE Lucene Index.
+     *
+     * @throws Exception is thrown if there is an issue opening the index.
+     */
+    public void initialize() throws Exception {
+        this.open();
+    }
+
+    private Vulnerability parseVulnerability(String xml) throws JAXBException {
+
+        JAXBContext jaxbContext = JAXBContext.newInstance(VulnerabilityType.class);
+        Unmarshaller unmarshaller = jaxbContext.createUnmarshaller();
+        ByteArrayInputStream input = new ByteArrayInputStream(xml.getBytes());
+        VulnerabilityType cvedata = (VulnerabilityType) unmarshaller.unmarshal(input);
+        if (cvedata == null) {
+            return null;
+        }
+
+        Vulnerability vuln = new Vulnerability();
+        vuln.setName(cvedata.getId());
+        vuln.setDescription(cvedata.getSummary());
+        if (cvedata.getReferences() != null) {
+            for (VulnerabilityReferenceType r : cvedata.getReferences()) {
+                Reference ref = new Reference();
+                ref.setName(r.getReference().getValue());
+                ref.setSource(r.getSource());
+                ref.setUrl(r.getReference().getHref());
+                vuln.addReference(ref);
+            }
+        }
+        return vuln;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AccessComplexityEnumType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AccessComplexityEnumType.java
new file mode 100644
index 000000000..ad7f98cd0
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AccessComplexityEnumType.java
@@ -0,0 +1,63 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlEnum;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for accessComplexityEnumType.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class. <p>
+ * <pre>
+ * &lt;simpleType name="accessComplexityEnumType">
+ *   &lt;restriction base="{http://www.w3.org/2001/XMLSchema}token">
+ *     &lt;enumeration value="HIGH"/>
+ *     &lt;enumeration value="MEDIUM"/>
+ *     &lt;enumeration value="LOW"/>
+ *   &lt;/restriction>
+ * &lt;/simpleType>
+ * </pre>
+ *
+ */
+@XmlType(name = "accessComplexityEnumType")
+@XmlEnum
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public enum AccessComplexityEnumType {
+
+    HIGH,
+    MEDIUM,
+    LOW;
+
+    public String value() {
+        return name();
+    }
+
+    public static AccessComplexityEnumType fromValue(String v) {
+        return valueOf(v);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AccessComplexityType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AccessComplexityType.java
new file mode 100644
index 000000000..e84b1b78f
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AccessComplexityType.java
@@ -0,0 +1,117 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.XmlValue;
+
+/**
+ * <p>Java class for accessComplexityType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="accessComplexityType">
+ *   &lt;simpleContent>
+ *     &lt;extension base="&lt;http://scap.nist.gov/schema/cvss-v2/0.2>accessComplexityEnumType">
+ *       &lt;attGroup ref="{http://scap.nist.gov/schema/cvss-v2/0.2}vectorAttributeGroup"/>
+ *     &lt;/extension>
+ *   &lt;/simpleContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "accessComplexityType", propOrder = {
+    "value"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class AccessComplexityType {
+
+    @XmlValue
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected AccessComplexityEnumType value;
+    @XmlAttribute
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Boolean approximated;
+
+    /**
+     * Gets the value of the value property.
+     *
+     * @return possible object is
+     *     {@link AccessComplexityEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public AccessComplexityEnumType getValue() {
+        return value;
+    }
+
+    /**
+     * Sets the value of the value property.
+     *
+     * @param value allowed object is
+     *     {@link AccessComplexityEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setValue(AccessComplexityEnumType value) {
+        this.value = value;
+    }
+
+    /**
+     * Gets the value of the approximated property.
+     *
+     * @return possible object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public boolean isApproximated() {
+        if (approximated == null) {
+            return false;
+        } else {
+            return approximated;
+        }
+    }
+
+    /**
+     * Sets the value of the approximated property.
+     *
+     * @param value allowed object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setApproximated(Boolean value) {
+        this.approximated = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AccessVectorEnumType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AccessVectorEnumType.java
new file mode 100644
index 000000000..4592ea863
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AccessVectorEnumType.java
@@ -0,0 +1,63 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlEnum;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for accessVectorEnumType.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class. <p>
+ * <pre>
+ * &lt;simpleType name="accessVectorEnumType">
+ *   &lt;restriction base="{http://www.w3.org/2001/XMLSchema}token">
+ *     &lt;enumeration value="LOCAL"/>
+ *     &lt;enumeration value="ADJACENT_NETWORK"/>
+ *     &lt;enumeration value="NETWORK"/>
+ *   &lt;/restriction>
+ * &lt;/simpleType>
+ * </pre>
+ *
+ */
+@XmlType(name = "accessVectorEnumType")
+@XmlEnum
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public enum AccessVectorEnumType {
+
+    LOCAL,
+    ADJACENT_NETWORK,
+    NETWORK;
+
+    public String value() {
+        return name();
+    }
+
+    public static AccessVectorEnumType fromValue(String v) {
+        return valueOf(v);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AccessVectorType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AccessVectorType.java
new file mode 100644
index 000000000..596e070c0
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AccessVectorType.java
@@ -0,0 +1,124 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+
+
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.XmlValue;
+
+
+/**
+ * <p>Java class for accessVectorType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained within this class.
+ *
+ * <pre>
+ * &lt;complexType name="accessVectorType">
+ *   &lt;simpleContent>
+ *     &lt;extension base="&lt;http://scap.nist.gov/schema/cvss-v2/0.2>accessVectorEnumType">
+ *       &lt;attGroup ref="{http://scap.nist.gov/schema/cvss-v2/0.2}vectorAttributeGroup"/>
+ *     &lt;/extension>
+ *   &lt;/simpleContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "accessVectorType", propOrder = {
+    "value"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class AccessVectorType {
+
+    @XmlValue
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected AccessVectorEnumType value;
+    @XmlAttribute
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Boolean approximated;
+
+    /**
+     * Gets the value of the value property.
+     *
+     * @return
+     *     possible object is
+     *     {@link AccessVectorEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public AccessVectorEnumType getValue() {
+        return value;
+    }
+
+    /**
+     * Sets the value of the value property.
+     *
+     * @param value
+     *     allowed object is
+     *     {@link AccessVectorEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setValue(AccessVectorEnumType value) {
+        this.value = value;
+    }
+
+    /**
+     * Gets the value of the approximated property.
+     *
+     * @return
+     *     possible object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public boolean isApproximated() {
+        if (approximated == null) {
+            return false;
+        } else {
+            return approximated;
+        }
+    }
+
+    /**
+     * Sets the value of the approximated property.
+     *
+     * @param value
+     *     allowed object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setApproximated(Boolean value) {
+        this.approximated = value;
+    }
+
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AssociatedExploitLocationType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AssociatedExploitLocationType.java
new file mode 100644
index 000000000..2459cde7a
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AssociatedExploitLocationType.java
@@ -0,0 +1,174 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for associatedExploitLocationType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="associatedExploitLocationType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;element name="physical-access" type="{http://www.w3.org/2001/XMLSchema}boolean" minOccurs="0"/>
+ *         &lt;element name="voluntarily-interact" type="{http://www.w3.org/2001/XMLSchema}boolean" minOccurs="0"/>
+ *         &lt;element name="dialup" type="{http://www.w3.org/2001/XMLSchema}boolean" minOccurs="0"/>
+ *         &lt;element name="unknown" type="{http://www.w3.org/2001/XMLSchema}boolean" minOccurs="0"/>
+ *       &lt;/sequence>
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "associatedExploitLocationType", namespace = "http://scap.nist.gov/schema/vulnerability/0.4", propOrder = {
+    "physicalAccess",
+    "voluntarilyInteract",
+    "dialup",
+    "unknown"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class AssociatedExploitLocationType {
+
+    @XmlElement(name = "physical-access", defaultValue = "false")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Boolean physicalAccess;
+    @XmlElement(name = "voluntarily-interact", defaultValue = "false")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Boolean voluntarilyInteract;
+    @XmlElement(defaultValue = "false")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Boolean dialup;
+    @XmlElement(defaultValue = "false")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Boolean unknown;
+
+    /**
+     * Gets the value of the physicalAccess property.
+     *
+     * @return possible object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public Boolean isPhysicalAccess() {
+        return physicalAccess;
+    }
+
+    /**
+     * Sets the value of the physicalAccess property.
+     *
+     * @param value allowed object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setPhysicalAccess(Boolean value) {
+        this.physicalAccess = value;
+    }
+
+    /**
+     * Gets the value of the voluntarilyInteract property.
+     *
+     * @return possible object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public Boolean isVoluntarilyInteract() {
+        return voluntarilyInteract;
+    }
+
+    /**
+     * Sets the value of the voluntarilyInteract property.
+     *
+     * @param value allowed object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setVoluntarilyInteract(Boolean value) {
+        this.voluntarilyInteract = value;
+    }
+
+    /**
+     * Gets the value of the dialup property.
+     *
+     * @return possible object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public Boolean isDialup() {
+        return dialup;
+    }
+
+    /**
+     * Sets the value of the dialup property.
+     *
+     * @param value allowed object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setDialup(Boolean value) {
+        this.dialup = value;
+    }
+
+    /**
+     * Gets the value of the unknown property.
+     *
+     * @return possible object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public Boolean isUnknown() {
+        return unknown;
+    }
+
+    /**
+     * Sets the value of the unknown property.
+     *
+     * @param value allowed object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setUnknown(Boolean value) {
+        this.unknown = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AuthenticationEnumType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AuthenticationEnumType.java
new file mode 100644
index 000000000..6349ca81d
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AuthenticationEnumType.java
@@ -0,0 +1,63 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlEnum;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for authenticationEnumType.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class. <p>
+ * <pre>
+ * &lt;simpleType name="authenticationEnumType">
+ *   &lt;restriction base="{http://www.w3.org/2001/XMLSchema}token">
+ *     &lt;enumeration value="MULTIPLE_INSTANCES"/>
+ *     &lt;enumeration value="SINGLE_INSTANCE"/>
+ *     &lt;enumeration value="NONE"/>
+ *   &lt;/restriction>
+ * &lt;/simpleType>
+ * </pre>
+ *
+ */
+@XmlType(name = "authenticationEnumType")
+@XmlEnum
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public enum AuthenticationEnumType {
+
+    MULTIPLE_INSTANCES,
+    SINGLE_INSTANCE,
+    NONE;
+
+    public String value() {
+        return name();
+    }
+
+    public static AuthenticationEnumType fromValue(String v) {
+        return valueOf(v);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AuthenticationType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AuthenticationType.java
new file mode 100644
index 000000000..ece74a8ad
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/AuthenticationType.java
@@ -0,0 +1,117 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.XmlValue;
+
+/**
+ * <p>Java class for authenticationType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="authenticationType">
+ *   &lt;simpleContent>
+ *     &lt;extension base="&lt;http://scap.nist.gov/schema/cvss-v2/0.2>authenticationEnumType">
+ *       &lt;attGroup ref="{http://scap.nist.gov/schema/cvss-v2/0.2}vectorAttributeGroup"/>
+ *     &lt;/extension>
+ *   &lt;/simpleContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "authenticationType", propOrder = {
+    "value"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class AuthenticationType {
+
+    @XmlValue
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected AuthenticationEnumType value;
+    @XmlAttribute
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Boolean approximated;
+
+    /**
+     * Gets the value of the value property.
+     *
+     * @return possible object is
+     *     {@link AuthenticationEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public AuthenticationEnumType getValue() {
+        return value;
+    }
+
+    /**
+     * Sets the value of the value property.
+     *
+     * @param value allowed object is
+     *     {@link AuthenticationEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setValue(AuthenticationEnumType value) {
+        this.value = value;
+    }
+
+    /**
+     * Gets the value of the approximated property.
+     *
+     * @return possible object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public boolean isApproximated() {
+        if (approximated == null) {
+            return false;
+        } else {
+            return approximated;
+        }
+    }
+
+    /**
+     * Sets the value of the approximated property.
+     *
+     * @param value allowed object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setApproximated(Boolean value) {
+        this.approximated = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/BaseMetricsType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/BaseMetricsType.java
new file mode 100644
index 000000000..c2b3395a8
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/BaseMetricsType.java
@@ -0,0 +1,376 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.math.BigDecimal;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlSchemaType;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.datatype.XMLGregorianCalendar;
+
+/**
+ * <p>Java class for baseMetricsType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="baseMetricsType">
+ *   &lt;complexContent>
+ *     &lt;extension base="{http://scap.nist.gov/schema/cvss-v2/0.2}metricsType">
+ *       &lt;sequence>
+ *         &lt;element name="score" type="{http://scap.nist.gov/schema/cvss-v2/0.2}zeroToTenDecimalType" minOccurs="0"/>
+ *         &lt;element name="exploit-subscore" type="{http://scap.nist.gov/schema/cvss-v2/0.2}zeroToTenDecimalType" minOccurs="0"/>
+ *         &lt;element name="impact-subscore" type="{http://scap.nist.gov/schema/cvss-v2/0.2}zeroToTenDecimalType" minOccurs="0"/>
+ *         &lt;group ref="{http://scap.nist.gov/schema/cvss-v2/0.2}baseVectorsGroup"/>
+ *         &lt;element name="source" type="{http://www.w3.org/2001/XMLSchema}anyURI"/>
+ *         &lt;element name="generated-on-datetime" type="{http://www.w3.org/2001/XMLSchema}dateTime" minOccurs="0"/>
+ *       &lt;/sequence>
+ *     &lt;/extension>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "baseMetricsType", propOrder = {
+    "score",
+    "exploitSubscore",
+    "impactSubscore",
+    "accessVector",
+    "accessComplexity",
+    "authentication",
+    "confidentialityImpact",
+    "integrityImpact",
+    "availabilityImpact",
+    "source",
+    "generatedOnDatetime"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class BaseMetricsType
+        extends MetricsType {
+
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected BigDecimal score;
+    @XmlElement(name = "exploit-subscore")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected BigDecimal exploitSubscore;
+    @XmlElement(name = "impact-subscore")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected BigDecimal impactSubscore;
+    @XmlElement(name = "access-vector")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected AccessVectorType accessVector;
+    @XmlElement(name = "access-complexity")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected AccessComplexityType accessComplexity;
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected AuthenticationType authentication;
+    @XmlElement(name = "confidentiality-impact")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected CiaType confidentialityImpact;
+    @XmlElement(name = "integrity-impact")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected CiaType integrityImpact;
+    @XmlElement(name = "availability-impact")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected CiaType availabilityImpact;
+    @XmlElement(required = true)
+    @XmlSchemaType(name = "anyURI")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String source;
+    @XmlElement(name = "generated-on-datetime")
+    @XmlSchemaType(name = "dateTime")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected XMLGregorianCalendar generatedOnDatetime;
+
+    /**
+     * Gets the value of the score property.
+     *
+     * @return possible object is
+     *     {@link BigDecimal }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public BigDecimal getScore() {
+        return score;
+    }
+
+    /**
+     * Sets the value of the score property.
+     *
+     * @param value allowed object is
+     *     {@link BigDecimal }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setScore(BigDecimal value) {
+        this.score = value;
+    }
+
+    /**
+     * Gets the value of the exploitSubscore property.
+     *
+     * @return possible object is
+     *     {@link BigDecimal }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public BigDecimal getExploitSubscore() {
+        return exploitSubscore;
+    }
+
+    /**
+     * Sets the value of the exploitSubscore property.
+     *
+     * @param value allowed object is
+     *     {@link BigDecimal }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setExploitSubscore(BigDecimal value) {
+        this.exploitSubscore = value;
+    }
+
+    /**
+     * Gets the value of the impactSubscore property.
+     *
+     * @return possible object is
+     *     {@link BigDecimal }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public BigDecimal getImpactSubscore() {
+        return impactSubscore;
+    }
+
+    /**
+     * Sets the value of the impactSubscore property.
+     *
+     * @param value allowed object is
+     *     {@link BigDecimal }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setImpactSubscore(BigDecimal value) {
+        this.impactSubscore = value;
+    }
+
+    /**
+     * Gets the value of the accessVector property.
+     *
+     * @return possible object is
+     *     {@link AccessVectorType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public AccessVectorType getAccessVector() {
+        return accessVector;
+    }
+
+    /**
+     * Sets the value of the accessVector property.
+     *
+     * @param value allowed object is
+     *     {@link AccessVectorType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setAccessVector(AccessVectorType value) {
+        this.accessVector = value;
+    }
+
+    /**
+     * Gets the value of the accessComplexity property.
+     *
+     * @return possible object is
+     *     {@link AccessComplexityType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public AccessComplexityType getAccessComplexity() {
+        return accessComplexity;
+    }
+
+    /**
+     * Sets the value of the accessComplexity property.
+     *
+     * @param value allowed object is
+     *     {@link AccessComplexityType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setAccessComplexity(AccessComplexityType value) {
+        this.accessComplexity = value;
+    }
+
+    /**
+     * Gets the value of the authentication property.
+     *
+     * @return possible object is
+     *     {@link AuthenticationType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public AuthenticationType getAuthentication() {
+        return authentication;
+    }
+
+    /**
+     * Sets the value of the authentication property.
+     *
+     * @param value allowed object is
+     *     {@link AuthenticationType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setAuthentication(AuthenticationType value) {
+        this.authentication = value;
+    }
+
+    /**
+     * Gets the value of the confidentialityImpact property.
+     *
+     * @return possible object is
+     *     {@link CiaType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public CiaType getConfidentialityImpact() {
+        return confidentialityImpact;
+    }
+
+    /**
+     * Sets the value of the confidentialityImpact property.
+     *
+     * @param value allowed object is
+     *     {@link CiaType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setConfidentialityImpact(CiaType value) {
+        this.confidentialityImpact = value;
+    }
+
+    /**
+     * Gets the value of the integrityImpact property.
+     *
+     * @return possible object is
+     *     {@link CiaType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public CiaType getIntegrityImpact() {
+        return integrityImpact;
+    }
+
+    /**
+     * Sets the value of the integrityImpact property.
+     *
+     * @param value allowed object is
+     *     {@link CiaType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setIntegrityImpact(CiaType value) {
+        this.integrityImpact = value;
+    }
+
+    /**
+     * Gets the value of the availabilityImpact property.
+     *
+     * @return possible object is
+     *     {@link CiaType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public CiaType getAvailabilityImpact() {
+        return availabilityImpact;
+    }
+
+    /**
+     * Sets the value of the availabilityImpact property.
+     *
+     * @param value allowed object is
+     *     {@link CiaType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setAvailabilityImpact(CiaType value) {
+        this.availabilityImpact = value;
+    }
+
+    /**
+     * Gets the value of the source property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getSource() {
+        return source;
+    }
+
+    /**
+     * Sets the value of the source property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setSource(String value) {
+        this.source = value;
+    }
+
+    /**
+     * Gets the value of the generatedOnDatetime property.
+     *
+     * @return possible object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public XMLGregorianCalendar getGeneratedOnDatetime() {
+        return generatedOnDatetime;
+    }
+
+    /**
+     * Sets the value of the generatedOnDatetime property.
+     *
+     * @param value allowed object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setGeneratedOnDatetime(XMLGregorianCalendar value) {
+        this.generatedOnDatetime = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CceParameterType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CceParameterType.java
new file mode 100644
index 000000000..188b14e62
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CceParameterType.java
@@ -0,0 +1,156 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.util.ArrayList;
+import java.util.List;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlSchemaType;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.adapters.CollapsedStringAdapter;
+import javax.xml.bind.annotation.adapters.XmlJavaTypeAdapter;
+
+/**
+ * <p>Java class for cceParameterType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="cceParameterType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;element name="value" type="{http://www.w3.org/2001/XMLSchema}string" maxOccurs="unbounded"/>
+ *       &lt;/sequence>
+ *       &lt;attribute name="identifier" type="{http://www.w3.org/2001/XMLSchema}token" />
+ *       &lt;attribute name="operator" type="{http://www.w3.org/2001/XMLSchema}token" />
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "cceParameterType", namespace = "http://scap.nist.gov/schema/cce/0.1", propOrder = {
+    "values"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class CceParameterType {
+
+    @XmlElement(name = "value", required = true)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<String> values;
+    @XmlAttribute
+    @XmlJavaTypeAdapter(CollapsedStringAdapter.class)
+    @XmlSchemaType(name = "token")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String identifier;
+    @XmlAttribute
+    @XmlJavaTypeAdapter(CollapsedStringAdapter.class)
+    @XmlSchemaType(name = "token")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String operator;
+
+    /**
+     * Gets the value of the values property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the values property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getValues().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link String }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<String> getValues() {
+        if (values == null) {
+            values = new ArrayList<String>();
+        }
+        return this.values;
+    }
+
+    /**
+     * Gets the value of the identifier property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getIdentifier() {
+        return identifier;
+    }
+
+    /**
+     * Sets the value of the identifier property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setIdentifier(String value) {
+        this.identifier = value;
+    }
+
+    /**
+     * Gets the value of the operator property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getOperator() {
+        return operator;
+    }
+
+    /**
+     * Sets the value of the operator property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setOperator(String value) {
+        this.operator = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CceType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CceType.java
new file mode 100644
index 000000000..6fdbfccdf
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CceType.java
@@ -0,0 +1,215 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.util.ArrayList;
+import java.util.List;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.adapters.CollapsedStringAdapter;
+import javax.xml.bind.annotation.adapters.XmlJavaTypeAdapter;
+
+/**
+ * <p>Java class for cceType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="cceType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;element name="definition" type="{http://www.w3.org/2001/XMLSchema}string" minOccurs="0"/>
+ *         &lt;element name="parameter" type="{http://scap.nist.gov/schema/cce/0.1}cceParameterType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="technical-mechanisms" type="{http://www.w3.org/2001/XMLSchema}string" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="references" type="{http://scap.nist.gov/schema/scap-core/0.1}referenceType" maxOccurs="unbounded" minOccurs="0"/>
+ *       &lt;/sequence>
+ *       &lt;attribute name="id" use="required" type="{http://scap.nist.gov/schema/cce/0.1}cceNamePatternType" />
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "cceType", namespace = "http://scap.nist.gov/schema/cce/0.1", propOrder = {
+    "definition",
+    "parameters",
+    "technicalMechanisms",
+    "references"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class CceType {
+
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String definition;
+    @XmlElement(name = "parameter")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<CceParameterType> parameters;
+    @XmlElement(name = "technical-mechanisms")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<String> technicalMechanisms;
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<ReferenceType> references;
+    @XmlAttribute(required = true)
+    @XmlJavaTypeAdapter(CollapsedStringAdapter.class)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String id;
+
+    /**
+     * Gets the value of the definition property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getDefinition() {
+        return definition;
+    }
+
+    /**
+     * Sets the value of the definition property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setDefinition(String value) {
+        this.definition = value;
+    }
+
+    /**
+     * Gets the value of the parameters property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the parameters property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getParameters().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link CceParameterType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<CceParameterType> getParameters() {
+        if (parameters == null) {
+            parameters = new ArrayList<CceParameterType>();
+        }
+        return this.parameters;
+    }
+
+    /**
+     * Gets the value of the technicalMechanisms property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the technicalMechanisms property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getTechnicalMechanisms().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link String }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<String> getTechnicalMechanisms() {
+        if (technicalMechanisms == null) {
+            technicalMechanisms = new ArrayList<String>();
+        }
+        return this.technicalMechanisms;
+    }
+
+    /**
+     * Gets the value of the references property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the references property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getReferences().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link ReferenceType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<ReferenceType> getReferences() {
+        if (references == null) {
+            references = new ArrayList<ReferenceType>();
+        }
+        return this.references;
+    }
+
+    /**
+     * Gets the value of the id property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getId() {
+        return id;
+    }
+
+    /**
+     * Sets the value of the id property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setId(String value) {
+        this.id = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CheckReferenceType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CheckReferenceType.java
new file mode 100644
index 000000000..70c580e2c
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CheckReferenceType.java
@@ -0,0 +1,153 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlSchemaType;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.adapters.CollapsedStringAdapter;
+import javax.xml.bind.annotation.adapters.XmlJavaTypeAdapter;
+
+/**
+ * Data type for the check element, a checking system specification URI, string
+ * content, and an optional external file reference. The checking system
+ * specification should be the URI for a particular version of OVAL or a related
+ * system testing language, and the content will be an identifier of a test
+ * written in that language. The external file reference could be used to point
+ * to the file in which the content test identifier is defined.
+ *
+ * <p>Java class for checkReferenceType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="checkReferenceType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;attribute name="system" use="required" type="{http://www.w3.org/2001/XMLSchema}anyURI" />
+ *       &lt;attribute name="href" use="required" type="{http://www.w3.org/2001/XMLSchema}anyURI" />
+ *       &lt;attribute name="name" type="{http://www.w3.org/2001/XMLSchema}token" />
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "checkReferenceType", namespace = "http://scap.nist.gov/schema/scap-core/0.1")
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class CheckReferenceType {
+
+    @XmlAttribute(required = true)
+    @XmlSchemaType(name = "anyURI")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String system;
+    @XmlAttribute(required = true)
+    @XmlSchemaType(name = "anyURI")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String href;
+    @XmlAttribute
+    @XmlJavaTypeAdapter(CollapsedStringAdapter.class)
+    @XmlSchemaType(name = "token")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String name;
+
+    /**
+     * Gets the value of the system property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getSystem() {
+        return system;
+    }
+
+    /**
+     * Sets the value of the system property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setSystem(String value) {
+        this.system = value;
+    }
+
+    /**
+     * Gets the value of the href property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getHref() {
+        return href;
+    }
+
+    /**
+     * Sets the value of the href property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setHref(String value) {
+        this.href = value;
+    }
+
+    /**
+     * Gets the value of the name property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getName() {
+        return name;
+    }
+
+    /**
+     * Sets the value of the name property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setName(String value) {
+        this.name = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CheckSearchType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CheckSearchType.java
new file mode 100644
index 000000000..1408a81c0
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CheckSearchType.java
@@ -0,0 +1,117 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlSchemaType;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.adapters.CollapsedStringAdapter;
+import javax.xml.bind.annotation.adapters.XmlJavaTypeAdapter;
+
+/**
+ * <p>Java class for checkSearchType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="checkSearchType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;attribute name="system" use="required" type="{http://www.w3.org/2001/XMLSchema}anyURI" />
+ *       &lt;attribute name="name" type="{http://www.w3.org/2001/XMLSchema}token" />
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "checkSearchType", namespace = "http://scap.nist.gov/schema/scap-core/0.1")
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class CheckSearchType {
+
+    @XmlAttribute(required = true)
+    @XmlSchemaType(name = "anyURI")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String system;
+    @XmlAttribute
+    @XmlJavaTypeAdapter(CollapsedStringAdapter.class)
+    @XmlSchemaType(name = "token")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String name;
+
+    /**
+     * Gets the value of the system property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getSystem() {
+        return system;
+    }
+
+    /**
+     * Sets the value of the system property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setSystem(String value) {
+        this.system = value;
+    }
+
+    /**
+     * Gets the value of the name property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getName() {
+        return name;
+    }
+
+    /**
+     * Sets the value of the name property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setName(String value) {
+        this.name = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CiaEnumType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CiaEnumType.java
new file mode 100644
index 000000000..4434cf1f8
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CiaEnumType.java
@@ -0,0 +1,63 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlEnum;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for ciaEnumType.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class. <p>
+ * <pre>
+ * &lt;simpleType name="ciaEnumType">
+ *   &lt;restriction base="{http://www.w3.org/2001/XMLSchema}token">
+ *     &lt;enumeration value="NONE"/>
+ *     &lt;enumeration value="PARTIAL"/>
+ *     &lt;enumeration value="COMPLETE"/>
+ *   &lt;/restriction>
+ * &lt;/simpleType>
+ * </pre>
+ *
+ */
+@XmlType(name = "ciaEnumType")
+@XmlEnum
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public enum CiaEnumType {
+
+    NONE,
+    PARTIAL,
+    COMPLETE;
+
+    public String value() {
+        return name();
+    }
+
+    public static CiaEnumType fromValue(String v) {
+        return valueOf(v);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CiaRequirementEnumType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CiaRequirementEnumType.java
new file mode 100644
index 000000000..953de43c7
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CiaRequirementEnumType.java
@@ -0,0 +1,65 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlEnum;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for ciaRequirementEnumType.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class. <p>
+ * <pre>
+ * &lt;simpleType name="ciaRequirementEnumType">
+ *   &lt;restriction base="{http://www.w3.org/2001/XMLSchema}token">
+ *     &lt;enumeration value="LOW"/>
+ *     &lt;enumeration value="MEDIUM"/>
+ *     &lt;enumeration value="HIGH"/>
+ *     &lt;enumeration value="NOT_DEFINED"/>
+ *   &lt;/restriction>
+ * &lt;/simpleType>
+ * </pre>
+ *
+ */
+@XmlType(name = "ciaRequirementEnumType")
+@XmlEnum
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public enum CiaRequirementEnumType {
+
+    LOW,
+    MEDIUM,
+    HIGH,
+    NOT_DEFINED;
+
+    public String value() {
+        return name();
+    }
+
+    public static CiaRequirementEnumType fromValue(String v) {
+        return valueOf(v);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CiaRequirementType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CiaRequirementType.java
new file mode 100644
index 000000000..50fd441ad
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CiaRequirementType.java
@@ -0,0 +1,117 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.XmlValue;
+
+/**
+ * <p>Java class for ciaRequirementType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="ciaRequirementType">
+ *   &lt;simpleContent>
+ *     &lt;extension base="&lt;http://scap.nist.gov/schema/cvss-v2/0.2>ciaRequirementEnumType">
+ *       &lt;attGroup ref="{http://scap.nist.gov/schema/cvss-v2/0.2}vectorAttributeGroup"/>
+ *     &lt;/extension>
+ *   &lt;/simpleContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "ciaRequirementType", propOrder = {
+    "value"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class CiaRequirementType {
+
+    @XmlValue
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected CiaRequirementEnumType value;
+    @XmlAttribute
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Boolean approximated;
+
+    /**
+     * Gets the value of the value property.
+     *
+     * @return possible object is
+     *     {@link CiaRequirementEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public CiaRequirementEnumType getValue() {
+        return value;
+    }
+
+    /**
+     * Sets the value of the value property.
+     *
+     * @param value allowed object is
+     *     {@link CiaRequirementEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setValue(CiaRequirementEnumType value) {
+        this.value = value;
+    }
+
+    /**
+     * Gets the value of the approximated property.
+     *
+     * @return possible object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public boolean isApproximated() {
+        if (approximated == null) {
+            return false;
+        } else {
+            return approximated;
+        }
+    }
+
+    /**
+     * Sets the value of the approximated property.
+     *
+     * @param value allowed object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setApproximated(Boolean value) {
+        this.approximated = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CiaType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CiaType.java
new file mode 100644
index 000000000..0a7bbc400
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CiaType.java
@@ -0,0 +1,117 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.XmlValue;
+
+/**
+ * <p>Java class for ciaType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="ciaType">
+ *   &lt;simpleContent>
+ *     &lt;extension base="&lt;http://scap.nist.gov/schema/cvss-v2/0.2>ciaEnumType">
+ *       &lt;attGroup ref="{http://scap.nist.gov/schema/cvss-v2/0.2}vectorAttributeGroup"/>
+ *     &lt;/extension>
+ *   &lt;/simpleContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "ciaType", propOrder = {
+    "value"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class CiaType {
+
+    @XmlValue
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected CiaEnumType value;
+    @XmlAttribute
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Boolean approximated;
+
+    /**
+     * Gets the value of the value property.
+     *
+     * @return possible object is
+     *     {@link CiaEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public CiaEnumType getValue() {
+        return value;
+    }
+
+    /**
+     * Sets the value of the value property.
+     *
+     * @param value allowed object is
+     *     {@link CiaEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setValue(CiaEnumType value) {
+        this.value = value;
+    }
+
+    /**
+     * Gets the value of the approximated property.
+     *
+     * @return possible object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public boolean isApproximated() {
+        if (approximated == null) {
+            return false;
+        } else {
+            return approximated;
+        }
+    }
+
+    /**
+     * Sets the value of the approximated property.
+     *
+     * @param value allowed object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setApproximated(Boolean value) {
+        this.approximated = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CollateralDamagePotentialEnumType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CollateralDamagePotentialEnumType.java
new file mode 100644
index 000000000..4a9e2542a
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CollateralDamagePotentialEnumType.java
@@ -0,0 +1,69 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlEnum;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for collateralDamagePotentialEnumType.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class. <p>
+ * <pre>
+ * &lt;simpleType name="collateralDamagePotentialEnumType">
+ *   &lt;restriction base="{http://www.w3.org/2001/XMLSchema}token">
+ *     &lt;enumeration value="NONE"/>
+ *     &lt;enumeration value="LOW"/>
+ *     &lt;enumeration value="LOW_MEDIUM"/>
+ *     &lt;enumeration value="MEDIUM_HIGH"/>
+ *     &lt;enumeration value="HIGH"/>
+ *     &lt;enumeration value="NOT_DEFINED"/>
+ *   &lt;/restriction>
+ * &lt;/simpleType>
+ * </pre>
+ *
+ */
+@XmlType(name = "collateralDamagePotentialEnumType")
+@XmlEnum
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public enum CollateralDamagePotentialEnumType {
+
+    NONE,
+    LOW,
+    LOW_MEDIUM,
+    MEDIUM_HIGH,
+    HIGH,
+    NOT_DEFINED;
+
+    public String value() {
+        return name();
+    }
+
+    public static CollateralDamagePotentialEnumType fromValue(String v) {
+        return valueOf(v);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CollateralDamagePotentialType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CollateralDamagePotentialType.java
new file mode 100644
index 000000000..63d47afbc
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CollateralDamagePotentialType.java
@@ -0,0 +1,117 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.XmlValue;
+
+/**
+ * <p>Java class for collateralDamagePotentialType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="collateralDamagePotentialType">
+ *   &lt;simpleContent>
+ *     &lt;extension base="&lt;http://scap.nist.gov/schema/cvss-v2/0.2>collateralDamagePotentialEnumType">
+ *       &lt;attGroup ref="{http://scap.nist.gov/schema/cvss-v2/0.2}vectorAttributeGroup"/>
+ *     &lt;/extension>
+ *   &lt;/simpleContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "collateralDamagePotentialType", propOrder = {
+    "value"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class CollateralDamagePotentialType {
+
+    @XmlValue
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected CollateralDamagePotentialEnumType value;
+    @XmlAttribute
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Boolean approximated;
+
+    /**
+     * Gets the value of the value property.
+     *
+     * @return possible object is
+     *     {@link CollateralDamagePotentialEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public CollateralDamagePotentialEnumType getValue() {
+        return value;
+    }
+
+    /**
+     * Sets the value of the value property.
+     *
+     * @param value allowed object is
+     *     {@link CollateralDamagePotentialEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setValue(CollateralDamagePotentialEnumType value) {
+        this.value = value;
+    }
+
+    /**
+     * Gets the value of the approximated property.
+     *
+     * @return possible object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public boolean isApproximated() {
+        if (approximated == null) {
+            return false;
+        } else {
+            return approximated;
+        }
+    }
+
+    /**
+     * Sets the value of the approximated property.
+     *
+     * @param value allowed object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setApproximated(Boolean value) {
+        this.approximated = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ConfidenceEnumType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ConfidenceEnumType.java
new file mode 100644
index 000000000..16f72effc
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ConfidenceEnumType.java
@@ -0,0 +1,65 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlEnum;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for confidenceEnumType.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class. <p>
+ * <pre>
+ * &lt;simpleType name="confidenceEnumType">
+ *   &lt;restriction base="{http://www.w3.org/2001/XMLSchema}token">
+ *     &lt;enumeration value="UNCONFIRMED"/>
+ *     &lt;enumeration value="UNCORROBORATED"/>
+ *     &lt;enumeration value="CONFIRMED"/>
+ *     &lt;enumeration value="NOT_DEFINED"/>
+ *   &lt;/restriction>
+ * &lt;/simpleType>
+ * </pre>
+ *
+ */
+@XmlType(name = "confidenceEnumType")
+@XmlEnum
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public enum ConfidenceEnumType {
+
+    UNCONFIRMED,
+    UNCORROBORATED,
+    CONFIRMED,
+    NOT_DEFINED;
+
+    public String value() {
+        return name();
+    }
+
+    public static ConfidenceEnumType fromValue(String v) {
+        return valueOf(v);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ConfidenceType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ConfidenceType.java
new file mode 100644
index 000000000..a2013a3ad
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ConfidenceType.java
@@ -0,0 +1,117 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.XmlValue;
+
+/**
+ * <p>Java class for confidenceType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="confidenceType">
+ *   &lt;simpleContent>
+ *     &lt;extension base="&lt;http://scap.nist.gov/schema/cvss-v2/0.2>confidenceEnumType">
+ *       &lt;attGroup ref="{http://scap.nist.gov/schema/cvss-v2/0.2}vectorAttributeGroup"/>
+ *     &lt;/extension>
+ *   &lt;/simpleContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "confidenceType", propOrder = {
+    "value"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class ConfidenceType {
+
+    @XmlValue
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected ConfidenceEnumType value;
+    @XmlAttribute
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Boolean approximated;
+
+    /**
+     * Gets the value of the value property.
+     *
+     * @return possible object is
+     *     {@link ConfidenceEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public ConfidenceEnumType getValue() {
+        return value;
+    }
+
+    /**
+     * Sets the value of the value property.
+     *
+     * @param value allowed object is
+     *     {@link ConfidenceEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setValue(ConfidenceEnumType value) {
+        this.value = value;
+    }
+
+    /**
+     * Gets the value of the approximated property.
+     *
+     * @return possible object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public boolean isApproximated() {
+        if (approximated == null) {
+            return false;
+        } else {
+            return approximated;
+        }
+    }
+
+    /**
+     * Sets the value of the approximated property.
+     *
+     * @param value allowed object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setApproximated(Boolean value) {
+        this.approximated = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CveStatus.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CveStatus.java
new file mode 100644
index 000000000..b63aef371
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CveStatus.java
@@ -0,0 +1,63 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlEnum;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for cveStatus.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class. <p>
+ * <pre>
+ * &lt;simpleType name="cveStatus">
+ *   &lt;restriction base="{http://www.w3.org/2001/XMLSchema}token">
+ *     &lt;enumeration value="CANDIDATE"/>
+ *     &lt;enumeration value="ENTRY"/>
+ *     &lt;enumeration value="DEPRECATED"/>
+ *   &lt;/restriction>
+ * &lt;/simpleType>
+ * </pre>
+ *
+ */
+@XmlType(name = "cveStatus", namespace = "http://scap.nist.gov/schema/cve/0.1")
+@XmlEnum
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public enum CveStatus {
+
+    CANDIDATE,
+    ENTRY,
+    DEPRECATED;
+
+    public String value() {
+        return name();
+    }
+
+    public static CveStatus fromValue(String v) {
+        return valueOf(v);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CveType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CveType.java
new file mode 100644
index 000000000..62c0e85e1
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CveType.java
@@ -0,0 +1,178 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.util.ArrayList;
+import java.util.List;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.adapters.CollapsedStringAdapter;
+import javax.xml.bind.annotation.adapters.XmlJavaTypeAdapter;
+
+/**
+ * <p>Java class for cveType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="cveType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;element name="status" type="{http://scap.nist.gov/schema/cve/0.1}cveStatus" minOccurs="0"/>
+ *         &lt;element name="description" type="{http://www.w3.org/2001/XMLSchema}string" minOccurs="0"/>
+ *         &lt;element name="references" type="{http://scap.nist.gov/schema/scap-core/0.1}referenceType" maxOccurs="unbounded" minOccurs="0"/>
+ *       &lt;/sequence>
+ *       &lt;attribute name="id" use="required" type="{http://scap.nist.gov/schema/cve/0.1}cveNamePatternType" />
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "cveType", namespace = "http://scap.nist.gov/schema/cve/0.1", propOrder = {
+    "status",
+    "description",
+    "references"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class CveType {
+
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected CveStatus status;
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String description;
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<ReferenceType> references;
+    @XmlAttribute(required = true)
+    @XmlJavaTypeAdapter(CollapsedStringAdapter.class)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String id;
+
+    /**
+     * Gets the value of the status property.
+     *
+     * @return possible object is
+     *     {@link CveStatus }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public CveStatus getStatus() {
+        return status;
+    }
+
+    /**
+     * Sets the value of the status property.
+     *
+     * @param value allowed object is
+     *     {@link CveStatus }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setStatus(CveStatus value) {
+        this.status = value;
+    }
+
+    /**
+     * Gets the value of the description property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getDescription() {
+        return description;
+    }
+
+    /**
+     * Sets the value of the description property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setDescription(String value) {
+        this.description = value;
+    }
+
+    /**
+     * Gets the value of the references property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the references property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getReferences().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link ReferenceType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<ReferenceType> getReferences() {
+        if (references == null) {
+            references = new ArrayList<ReferenceType>();
+        }
+        return this.references;
+    }
+
+    /**
+     * Gets the value of the id property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getId() {
+        return id;
+    }
+
+    /**
+     * Sets the value of the id property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setId(String value) {
+        this.id = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CvssImpactType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CvssImpactType.java
new file mode 100644
index 000000000..0f8d1b446
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CvssImpactType.java
@@ -0,0 +1,59 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for cvssImpactType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="cvssImpactType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://scap.nist.gov/schema/cvss-v2/0.2}cvssType">
+ *       &lt;sequence>
+ *         &lt;element name="base_metrics" type="{http://scap.nist.gov/schema/cvss-v2/0.2}baseMetricsType"/>
+ *         &lt;element name="environmental_metrics" type="{http://scap.nist.gov/schema/cvss-v2/0.2}environmentalMetricsType" minOccurs="0"/>
+ *         &lt;element name="temporal_metrics" type="{http://scap.nist.gov/schema/cvss-v2/0.2}temporalMetricsType" minOccurs="0"/>
+ *       &lt;/sequence>
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "cvssImpactType")
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class CvssImpactType
+        extends CvssType {
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CvssType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CvssType.java
new file mode 100644
index 000000000..3c781e7d0
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CvssType.java
@@ -0,0 +1,170 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.util.ArrayList;
+import java.util.List;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlSeeAlso;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * "This schema was intentionally designed to avoid mixing classes and
+ * attributes between CVSS version 1, CVSS version 2, and future versions.
+ * Scores in the CVSS system are interdependent. The temporal score is a
+ * multiplier of the base score. The environmental score, in turn, is a
+ * multiplier of the temporal score. The ability to transfer these scores
+ * independently is provided on the assumption that the user understands the
+ * business logic. For any given metric, it is preferred that the score, as a
+ * minimum is provided, however the score can be re-created from the metrics or
+ * the multiplier and any scores they are dependent on."
+ *
+ * <p>Java class for cvssType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="cvssType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;element name="base_metrics" type="{http://scap.nist.gov/schema/cvss-v2/0.2}baseMetricsType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="environmental_metrics" type="{http://scap.nist.gov/schema/cvss-v2/0.2}environmentalMetricsType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="temporal_metrics" type="{http://scap.nist.gov/schema/cvss-v2/0.2}temporalMetricsType" maxOccurs="unbounded" minOccurs="0"/>
+ *       &lt;/sequence>
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "cvssType", propOrder = {
+    "baseMetrics",
+    "environmentalMetrics",
+    "temporalMetrics"
+})
+@XmlSeeAlso({
+    CvssImpactType.class
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class CvssType {
+
+    @XmlElement(name = "base_metrics")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<BaseMetricsType> baseMetrics;
+    @XmlElement(name = "environmental_metrics")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<EnvironmentalMetricsType> environmentalMetrics;
+    @XmlElement(name = "temporal_metrics")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<TemporalMetricsType> temporalMetrics;
+
+    /**
+     * Gets the value of the baseMetrics property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the baseMetrics property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getBaseMetrics().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link BaseMetricsType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<BaseMetricsType> getBaseMetrics() {
+        if (baseMetrics == null) {
+            baseMetrics = new ArrayList<BaseMetricsType>();
+        }
+        return this.baseMetrics;
+    }
+
+    /**
+     * Gets the value of the environmentalMetrics property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the environmentalMetrics property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getEnvironmentalMetrics().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link EnvironmentalMetricsType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<EnvironmentalMetricsType> getEnvironmentalMetrics() {
+        if (environmentalMetrics == null) {
+            environmentalMetrics = new ArrayList<EnvironmentalMetricsType>();
+        }
+        return this.environmentalMetrics;
+    }
+
+    /**
+     * Gets the value of the temporalMetrics property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the temporalMetrics property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getTemporalMetrics().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link TemporalMetricsType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<TemporalMetricsType> getTemporalMetrics() {
+        if (temporalMetrics == null) {
+            temporalMetrics = new ArrayList<TemporalMetricsType>();
+        }
+        return this.temporalMetrics;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CweReferenceType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CweReferenceType.java
new file mode 100644
index 000000000..0d0baebd9
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/CweReferenceType.java
@@ -0,0 +1,86 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.adapters.CollapsedStringAdapter;
+import javax.xml.bind.annotation.adapters.XmlJavaTypeAdapter;
+
+/**
+ * <p>Java class for cweReferenceType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="cweReferenceType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;attribute name="id" use="required" type="{http://scap.nist.gov/schema/scap-core/0.1}cweNamePatternType" />
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "cweReferenceType", namespace = "http://scap.nist.gov/schema/vulnerability/0.4")
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class CweReferenceType {
+
+    @XmlAttribute(required = true)
+    @XmlJavaTypeAdapter(CollapsedStringAdapter.class)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String id;
+
+    /**
+     * Gets the value of the id property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getId() {
+        return id;
+    }
+
+    /**
+     * Sets the value of the id property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setId(String value) {
+        this.id = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/EnvironmentalMetricsType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/EnvironmentalMetricsType.java
new file mode 100644
index 000000000..4749c1c3d
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/EnvironmentalMetricsType.java
@@ -0,0 +1,291 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.math.BigDecimal;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlSchemaType;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.datatype.XMLGregorianCalendar;
+
+/**
+ * <p>Java class for environmentalMetricsType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="environmentalMetricsType">
+ *   &lt;complexContent>
+ *     &lt;extension base="{http://scap.nist.gov/schema/cvss-v2/0.2}metricsType">
+ *       &lt;sequence>
+ *         &lt;element name="score" type="{http://scap.nist.gov/schema/cvss-v2/0.2}zeroToTenDecimalType" minOccurs="0"/>
+ *         &lt;group ref="{http://scap.nist.gov/schema/cvss-v2/0.2}environmentalVectorsGroup"/>
+ *         &lt;element name="source" type="{http://www.w3.org/2001/XMLSchema}anyURI"/>
+ *         &lt;element name="generated-on-datetime" type="{http://www.w3.org/2001/XMLSchema}dateTime" minOccurs="0"/>
+ *       &lt;/sequence>
+ *     &lt;/extension>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "environmentalMetricsType", propOrder = {
+    "score",
+    "collateralDamagePotential",
+    "targetDistribution",
+    "confidentialityRequirement",
+    "integrityRequirement",
+    "availabilityRequirement",
+    "source",
+    "generatedOnDatetime"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class EnvironmentalMetricsType
+        extends MetricsType {
+
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected BigDecimal score;
+    @XmlElement(name = "collateral-damage-potential")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected CollateralDamagePotentialType collateralDamagePotential;
+    @XmlElement(name = "target-distribution")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected TargetDistributionType targetDistribution;
+    @XmlElement(name = "confidentiality-requirement")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected CiaRequirementType confidentialityRequirement;
+    @XmlElement(name = "integrity-requirement")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected CiaRequirementType integrityRequirement;
+    @XmlElement(name = "availability-requirement")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected CiaRequirementType availabilityRequirement;
+    @XmlElement(required = true)
+    @XmlSchemaType(name = "anyURI")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String source;
+    @XmlElement(name = "generated-on-datetime")
+    @XmlSchemaType(name = "dateTime")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected XMLGregorianCalendar generatedOnDatetime;
+
+    /**
+     * Gets the value of the score property.
+     *
+     * @return possible object is
+     *     {@link BigDecimal }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public BigDecimal getScore() {
+        return score;
+    }
+
+    /**
+     * Sets the value of the score property.
+     *
+     * @param value allowed object is
+     *     {@link BigDecimal }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setScore(BigDecimal value) {
+        this.score = value;
+    }
+
+    /**
+     * Gets the value of the collateralDamagePotential property.
+     *
+     * @return possible object is
+     *     {@link CollateralDamagePotentialType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public CollateralDamagePotentialType getCollateralDamagePotential() {
+        return collateralDamagePotential;
+    }
+
+    /**
+     * Sets the value of the collateralDamagePotential property.
+     *
+     * @param value allowed object is
+     *     {@link CollateralDamagePotentialType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setCollateralDamagePotential(CollateralDamagePotentialType value) {
+        this.collateralDamagePotential = value;
+    }
+
+    /**
+     * Gets the value of the targetDistribution property.
+     *
+     * @return possible object is
+     *     {@link TargetDistributionType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public TargetDistributionType getTargetDistribution() {
+        return targetDistribution;
+    }
+
+    /**
+     * Sets the value of the targetDistribution property.
+     *
+     * @param value allowed object is
+     *     {@link TargetDistributionType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setTargetDistribution(TargetDistributionType value) {
+        this.targetDistribution = value;
+    }
+
+    /**
+     * Gets the value of the confidentialityRequirement property.
+     *
+     * @return possible object is
+     *     {@link CiaRequirementType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public CiaRequirementType getConfidentialityRequirement() {
+        return confidentialityRequirement;
+    }
+
+    /**
+     * Sets the value of the confidentialityRequirement property.
+     *
+     * @param value allowed object is
+     *     {@link CiaRequirementType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setConfidentialityRequirement(CiaRequirementType value) {
+        this.confidentialityRequirement = value;
+    }
+
+    /**
+     * Gets the value of the integrityRequirement property.
+     *
+     * @return possible object is
+     *     {@link CiaRequirementType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public CiaRequirementType getIntegrityRequirement() {
+        return integrityRequirement;
+    }
+
+    /**
+     * Sets the value of the integrityRequirement property.
+     *
+     * @param value allowed object is
+     *     {@link CiaRequirementType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setIntegrityRequirement(CiaRequirementType value) {
+        this.integrityRequirement = value;
+    }
+
+    /**
+     * Gets the value of the availabilityRequirement property.
+     *
+     * @return possible object is
+     *     {@link CiaRequirementType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public CiaRequirementType getAvailabilityRequirement() {
+        return availabilityRequirement;
+    }
+
+    /**
+     * Sets the value of the availabilityRequirement property.
+     *
+     * @param value allowed object is
+     *     {@link CiaRequirementType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setAvailabilityRequirement(CiaRequirementType value) {
+        this.availabilityRequirement = value;
+    }
+
+    /**
+     * Gets the value of the source property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getSource() {
+        return source;
+    }
+
+    /**
+     * Sets the value of the source property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setSource(String value) {
+        this.source = value;
+    }
+
+    /**
+     * Gets the value of the generatedOnDatetime property.
+     *
+     * @return possible object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public XMLGregorianCalendar getGeneratedOnDatetime() {
+        return generatedOnDatetime;
+    }
+
+    /**
+     * Sets the value of the generatedOnDatetime property.
+     *
+     * @param value allowed object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setGeneratedOnDatetime(XMLGregorianCalendar value) {
+        this.generatedOnDatetime = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ExploitabilityEnumType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ExploitabilityEnumType.java
new file mode 100644
index 000000000..882b56cec
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ExploitabilityEnumType.java
@@ -0,0 +1,67 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlEnum;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for exploitabilityEnumType.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class. <p>
+ * <pre>
+ * &lt;simpleType name="exploitabilityEnumType">
+ *   &lt;restriction base="{http://www.w3.org/2001/XMLSchema}token">
+ *     &lt;enumeration value="UNPROVEN"/>
+ *     &lt;enumeration value="PROOF_OF_CONCEPT"/>
+ *     &lt;enumeration value="FUNCTIONAL"/>
+ *     &lt;enumeration value="HIGH"/>
+ *     &lt;enumeration value="NOT_DEFINED"/>
+ *   &lt;/restriction>
+ * &lt;/simpleType>
+ * </pre>
+ *
+ */
+@XmlType(name = "exploitabilityEnumType")
+@XmlEnum
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public enum ExploitabilityEnumType {
+
+    UNPROVEN,
+    PROOF_OF_CONCEPT,
+    FUNCTIONAL,
+    HIGH,
+    NOT_DEFINED;
+
+    public String value() {
+        return name();
+    }
+
+    public static ExploitabilityEnumType fromValue(String v) {
+        return valueOf(v);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ExploitabilityType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ExploitabilityType.java
new file mode 100644
index 000000000..f0bb8ba48
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ExploitabilityType.java
@@ -0,0 +1,117 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.XmlValue;
+
+/**
+ * <p>Java class for exploitabilityType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="exploitabilityType">
+ *   &lt;simpleContent>
+ *     &lt;extension base="&lt;http://scap.nist.gov/schema/cvss-v2/0.2>exploitabilityEnumType">
+ *       &lt;attGroup ref="{http://scap.nist.gov/schema/cvss-v2/0.2}vectorAttributeGroup"/>
+ *     &lt;/extension>
+ *   &lt;/simpleContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "exploitabilityType", propOrder = {
+    "value"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class ExploitabilityType {
+
+    @XmlValue
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected ExploitabilityEnumType value;
+    @XmlAttribute
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Boolean approximated;
+
+    /**
+     * Gets the value of the value property.
+     *
+     * @return possible object is
+     *     {@link ExploitabilityEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public ExploitabilityEnumType getValue() {
+        return value;
+    }
+
+    /**
+     * Sets the value of the value property.
+     *
+     * @param value allowed object is
+     *     {@link ExploitabilityEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setValue(ExploitabilityEnumType value) {
+        this.value = value;
+    }
+
+    /**
+     * Gets the value of the approximated property.
+     *
+     * @return possible object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public boolean isApproximated() {
+        if (approximated == null) {
+            return false;
+        } else {
+            return approximated;
+        }
+    }
+
+    /**
+     * Sets the value of the approximated property.
+     *
+     * @param value allowed object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setApproximated(Boolean value) {
+        this.approximated = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FactRefType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FactRefType.java
new file mode 100644
index 000000000..20d2004ee
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FactRefType.java
@@ -0,0 +1,86 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * The fact-ref element appears as a child of a logical-test element. It is
+ * simply a reference to a CPE Name that always evaluates to a Boolean result.
+ *
+ * <p>Java class for FactRefType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="FactRefType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;attribute name="name" use="required" type="{http://cpe.mitre.org/language/2.0}namePattern" />
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "FactRefType", namespace = "http://cpe.mitre.org/language/2.0")
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class FactRefType {
+
+    @XmlAttribute(required = true)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String name;
+
+    /**
+     * Gets the value of the name property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getName() {
+        return name;
+    }
+
+    /**
+     * Sets the value of the name property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setName(String value) {
+        this.name = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FixActionDescriptionEnumType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FixActionDescriptionEnumType.java
new file mode 100644
index 000000000..0025b8550
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FixActionDescriptionEnumType.java
@@ -0,0 +1,67 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlEnum;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for fixActionDescriptionEnumType.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class. <p>
+ * <pre>
+ * &lt;simpleType name="fixActionDescriptionEnumType">
+ *   &lt;restriction base="{http://www.w3.org/2001/XMLSchema}token">
+ *     &lt;enumeration value="PATCH"/>
+ *     &lt;enumeration value="SOFTWARE_UPDATE"/>
+ *     &lt;enumeration value="CONFIGURATION_CHANGE"/>
+ *     &lt;enumeration value="POLICY_CHANGE"/>
+ *     &lt;enumeration value="EXTERNAL_MITIGATION"/>
+ *   &lt;/restriction>
+ * &lt;/simpleType>
+ * </pre>
+ *
+ */
+@XmlType(name = "fixActionDescriptionEnumType", namespace = "http://scap.nist.gov/schema/vulnerability/0.4")
+@XmlEnum
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public enum FixActionDescriptionEnumType {
+
+    PATCH,
+    SOFTWARE_UPDATE,
+    CONFIGURATION_CHANGE,
+    POLICY_CHANGE,
+    EXTERNAL_MITIGATION;
+
+    public String value() {
+        return name();
+    }
+
+    public static FixActionDescriptionEnumType fromValue(String v) {
+        return valueOf(v);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FixActionType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FixActionType.java
new file mode 100644
index 000000000..fc8338dfe
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FixActionType.java
@@ -0,0 +1,493 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.util.ArrayList;
+import java.util.List;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlSchemaType;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.adapters.CollapsedStringAdapter;
+import javax.xml.bind.annotation.adapters.XmlJavaTypeAdapter;
+
+/**
+ * A single fix action should only cover a single patch application, software
+ * update, configuration change, or external fix. Dependencies should be
+ * documented by using the "next_fix_action" element to point to a recursive
+ * list of fix actions.
+ *
+ * <p>Java class for fixActionType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="fixActionType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;element ref="{http://scap.nist.gov/schema/patch/0.1}patch" minOccurs="0"/>
+ *         &lt;element name="configuration-remediation" type="{http://scap.nist.gov/schema/vulnerability/0.4}vulnerabilityReferenceType" minOccurs="0"/>
+ *         &lt;element name="software-update" type="{http://scap.nist.gov/schema/scap-core/0.1}cpeNamePatternType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="notes" type="{http://www.w3.org/2001/XMLSchema}string" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="deprecated-by" type="{http://scap.nist.gov/schema/scap-core/0.1}cpeNamePatternType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="next-fix-action" type="{http://scap.nist.gov/schema/vulnerability/0.4}fixActionType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="fix-action-tool-configuration" type="{http://scap.nist.gov/schema/vulnerability/0.4}toolConfigurationType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="applicable-configuration" type="{http://cpe.mitre.org/language/2.0}PlatformType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="effectiveness" type="{http://scap.nist.gov/schema/vulnerability/0.4}fixEffectivenessEnumType" minOccurs="0"/>
+ *         &lt;element name="applicable-check" type="{http://scap.nist.gov/schema/scap-core/0.1}checkReferenceType" maxOccurs="unbounded" minOccurs="0"/>
+ *       &lt;/sequence>
+ *       &lt;attribute name="fix_action_description" use="required" type="{http://scap.nist.gov/schema/vulnerability/0.4}fixActionDescriptionEnumType" />
+ *       &lt;attribute name="fix_action_type" use="required" type="{http://scap.nist.gov/schema/vulnerability/0.4}fixActionTypeEnumType" />
+ *       &lt;attribute name="id" use="required" type="{http://www.w3.org/2001/XMLSchema}token" />
+ *       &lt;attribute name="source" use="required" type="{http://www.w3.org/2001/XMLSchema}anyURI" />
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "fixActionType", namespace = "http://scap.nist.gov/schema/vulnerability/0.4", propOrder = {
+    "patch",
+    "configurationRemediation",
+    "softwareUpdates",
+    "notes",
+    "deprecatedBies",
+    "nextFixActions",
+    "fixActionToolConfigurations",
+    "applicableConfigurations",
+    "effectiveness",
+    "applicableChecks"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class FixActionType {
+
+    @XmlElement(namespace = "http://scap.nist.gov/schema/patch/0.1")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Patch patch;
+    @XmlElement(name = "configuration-remediation")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected VulnerabilityReferenceType configurationRemediation;
+    @XmlElement(name = "software-update")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<String> softwareUpdates;
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<String> notes;
+    @XmlElement(name = "deprecated-by")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<String> deprecatedBies;
+    @XmlElement(name = "next-fix-action")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<FixActionType> nextFixActions;
+    @XmlElement(name = "fix-action-tool-configuration")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<ToolConfigurationType> fixActionToolConfigurations;
+    @XmlElement(name = "applicable-configuration")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<PlatformType> applicableConfigurations;
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected FixEffectivenessEnumType effectiveness;
+    @XmlElement(name = "applicable-check")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<CheckReferenceType> applicableChecks;
+    @XmlAttribute(name = "fix_action_description", required = true)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected FixActionDescriptionEnumType fixActionDescription;
+    @XmlAttribute(name = "fix_action_type", required = true)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected FixActionTypeEnumType fixActionType;
+    @XmlAttribute(required = true)
+    @XmlJavaTypeAdapter(CollapsedStringAdapter.class)
+    @XmlSchemaType(name = "token")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String id;
+    @XmlAttribute(required = true)
+    @XmlSchemaType(name = "anyURI")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String source;
+
+    /**
+     * Gets the value of the patch property.
+     *
+     * @return possible object is
+     *     {@link Patch }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public Patch getPatch() {
+        return patch;
+    }
+
+    /**
+     * Sets the value of the patch property.
+     *
+     * @param value allowed object is
+     *     {@link Patch }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setPatch(Patch value) {
+        this.patch = value;
+    }
+
+    /**
+     * Gets the value of the configurationRemediation property.
+     *
+     * @return possible object is
+     *     {@link VulnerabilityReferenceType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public VulnerabilityReferenceType getConfigurationRemediation() {
+        return configurationRemediation;
+    }
+
+    /**
+     * Sets the value of the configurationRemediation property.
+     *
+     * @param value allowed object is
+     *     {@link VulnerabilityReferenceType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setConfigurationRemediation(VulnerabilityReferenceType value) {
+        this.configurationRemediation = value;
+    }
+
+    /**
+     * Gets the value of the softwareUpdates property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the softwareUpdates property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getSoftwareUpdates().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link String }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<String> getSoftwareUpdates() {
+        if (softwareUpdates == null) {
+            softwareUpdates = new ArrayList<String>();
+        }
+        return this.softwareUpdates;
+    }
+
+    /**
+     * Gets the value of the notes property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the notes property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getNotes().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link String }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<String> getNotes() {
+        if (notes == null) {
+            notes = new ArrayList<String>();
+        }
+        return this.notes;
+    }
+
+    /**
+     * Gets the value of the deprecatedBies property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the deprecatedBies property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getDeprecatedBies().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link String }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<String> getDeprecatedBies() {
+        if (deprecatedBies == null) {
+            deprecatedBies = new ArrayList<String>();
+        }
+        return this.deprecatedBies;
+    }
+
+    /**
+     * Gets the value of the nextFixActions property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the nextFixActions property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getNextFixActions().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link FixActionType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<FixActionType> getNextFixActions() {
+        if (nextFixActions == null) {
+            nextFixActions = new ArrayList<FixActionType>();
+        }
+        return this.nextFixActions;
+    }
+
+    /**
+     * Gets the value of the fixActionToolConfigurations property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the fixActionToolConfigurations property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getFixActionToolConfigurations().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link ToolConfigurationType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<ToolConfigurationType> getFixActionToolConfigurations() {
+        if (fixActionToolConfigurations == null) {
+            fixActionToolConfigurations = new ArrayList<ToolConfigurationType>();
+        }
+        return this.fixActionToolConfigurations;
+    }
+
+    /**
+     * Gets the value of the applicableConfigurations property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the applicableConfigurations property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getApplicableConfigurations().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link PlatformType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<PlatformType> getApplicableConfigurations() {
+        if (applicableConfigurations == null) {
+            applicableConfigurations = new ArrayList<PlatformType>();
+        }
+        return this.applicableConfigurations;
+    }
+
+    /**
+     * Gets the value of the effectiveness property.
+     *
+     * @return possible object is
+     *     {@link FixEffectivenessEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public FixEffectivenessEnumType getEffectiveness() {
+        return effectiveness;
+    }
+
+    /**
+     * Sets the value of the effectiveness property.
+     *
+     * @param value allowed object is
+     *     {@link FixEffectivenessEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setEffectiveness(FixEffectivenessEnumType value) {
+        this.effectiveness = value;
+    }
+
+    /**
+     * Gets the value of the applicableChecks property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the applicableChecks property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getApplicableChecks().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link CheckReferenceType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<CheckReferenceType> getApplicableChecks() {
+        if (applicableChecks == null) {
+            applicableChecks = new ArrayList<CheckReferenceType>();
+        }
+        return this.applicableChecks;
+    }
+
+    /**
+     * Gets the value of the fixActionDescription property.
+     *
+     * @return possible object is
+     *     {@link FixActionDescriptionEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public FixActionDescriptionEnumType getFixActionDescription() {
+        return fixActionDescription;
+    }
+
+    /**
+     * Sets the value of the fixActionDescription property.
+     *
+     * @param value allowed object is
+     *     {@link FixActionDescriptionEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setFixActionDescription(FixActionDescriptionEnumType value) {
+        this.fixActionDescription = value;
+    }
+
+    /**
+     * Gets the value of the fixActionType property.
+     *
+     * @return possible object is
+     *     {@link FixActionTypeEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public FixActionTypeEnumType getFixActionType() {
+        return fixActionType;
+    }
+
+    /**
+     * Sets the value of the fixActionType property.
+     *
+     * @param value allowed object is
+     *     {@link FixActionTypeEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setFixActionType(FixActionTypeEnumType value) {
+        this.fixActionType = value;
+    }
+
+    /**
+     * Gets the value of the id property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getId() {
+        return id;
+    }
+
+    /**
+     * Sets the value of the id property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setId(String value) {
+        this.id = value;
+    }
+
+    /**
+     * Gets the value of the source property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getSource() {
+        return source;
+    }
+
+    /**
+     * Sets the value of the source property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setSource(String value) {
+        this.source = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FixActionTypeEnumType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FixActionTypeEnumType.java
new file mode 100644
index 000000000..4ea136cab
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FixActionTypeEnumType.java
@@ -0,0 +1,61 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlEnum;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for fixActionTypeEnumType.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class. <p>
+ * <pre>
+ * &lt;simpleType name="fixActionTypeEnumType">
+ *   &lt;restriction base="{http://www.w3.org/2001/XMLSchema}token">
+ *     &lt;enumeration value="MITIGATION"/>
+ *     &lt;enumeration value="REMEDIATION"/>
+ *   &lt;/restriction>
+ * &lt;/simpleType>
+ * </pre>
+ *
+ */
+@XmlType(name = "fixActionTypeEnumType", namespace = "http://scap.nist.gov/schema/vulnerability/0.4")
+@XmlEnum
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public enum FixActionTypeEnumType {
+
+    MITIGATION,
+    REMEDIATION;
+
+    public String value() {
+        return name();
+    }
+
+    public static FixActionTypeEnumType fromValue(String v) {
+        return valueOf(v);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FixEffectivenessEnumType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FixEffectivenessEnumType.java
new file mode 100644
index 000000000..18658025c
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/FixEffectivenessEnumType.java
@@ -0,0 +1,61 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlEnum;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for fixEffectivenessEnumType.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class. <p>
+ * <pre>
+ * &lt;simpleType name="fixEffectivenessEnumType">
+ *   &lt;restriction base="{http://www.w3.org/2001/XMLSchema}token">
+ *     &lt;enumeration value="PARTIAL"/>
+ *     &lt;enumeration value="COMPLETE"/>
+ *   &lt;/restriction>
+ * &lt;/simpleType>
+ * </pre>
+ *
+ */
+@XmlType(name = "fixEffectivenessEnumType", namespace = "http://scap.nist.gov/schema/vulnerability/0.4")
+@XmlEnum
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public enum FixEffectivenessEnumType {
+
+    PARTIAL,
+    COMPLETE;
+
+    public String value() {
+        return name();
+    }
+
+    public static FixEffectivenessEnumType fromValue(String v) {
+        return valueOf(v);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/LogicalTest.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/LogicalTest.java
new file mode 100644
index 000000000..a7ab6f30f
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/LogicalTest.java
@@ -0,0 +1,183 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.util.ArrayList;
+import java.util.List;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlRootElement;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * The logical-test element appears as a child of a platform element, and may
+ * also be nested to create more complex logical tests. The content consists of
+ * one or more elements: fact-ref, and logical-test children are permitted. The
+ * operator to be applied, and optional negation of the test, are given as
+ * attributes.
+ *
+ * <p>Java class for LogicalTestType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="LogicalTestType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;element name="logical-test" type="{http://cpe.mitre.org/language/2.0}LogicalTestType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="fact-ref" type="{http://cpe.mitre.org/language/2.0}FactRefType" maxOccurs="unbounded" minOccurs="0"/>
+ *       &lt;/sequence>
+ *       &lt;attribute name="operator" use="required" type="{http://cpe.mitre.org/language/2.0}operatorEnumeration" />
+ *       &lt;attribute name="negate" use="required" type="{http://www.w3.org/2001/XMLSchema}boolean" />
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "LogicalTestType", namespace = "http://cpe.mitre.org/language/2.0", propOrder = {
+    "logicalTests",
+    "factReves"
+})
+@XmlRootElement(name = "logical-test", namespace = "http://cpe.mitre.org/language/2.0")
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class LogicalTest {
+
+    @XmlElement(name = "logical-test")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<LogicalTest> logicalTests;
+    @XmlElement(name = "fact-ref")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<FactRefType> factReves;
+    @XmlAttribute(required = true)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected OperatorEnumeration operator;
+    @XmlAttribute(required = true)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected boolean negate;
+
+    /**
+     * Gets the value of the logicalTests property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the logicalTests property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getLogicalTests().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link LogicalTest }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<LogicalTest> getLogicalTests() {
+        if (logicalTests == null) {
+            logicalTests = new ArrayList<LogicalTest>();
+        }
+        return this.logicalTests;
+    }
+
+    /**
+     * Gets the value of the factReves property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the factReves property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getFactReves().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link FactRefType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<FactRefType> getFactReves() {
+        if (factReves == null) {
+            factReves = new ArrayList<FactRefType>();
+        }
+        return this.factReves;
+    }
+
+    /**
+     * Gets the value of the operator property.
+     *
+     * @return possible object is
+     *     {@link OperatorEnumeration }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public OperatorEnumeration getOperator() {
+        return operator;
+    }
+
+    /**
+     * Sets the value of the operator property.
+     *
+     * @param value allowed object is
+     *     {@link OperatorEnumeration }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setOperator(OperatorEnumeration value) {
+        this.operator = value;
+    }
+
+    /**
+     * Gets the value of the negate property.
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public boolean isNegate() {
+        return negate;
+    }
+
+    /**
+     * Sets the value of the negate property.
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setNegate(boolean value) {
+        this.negate = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/MetricsType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/MetricsType.java
new file mode 100644
index 000000000..8cc7c70b3
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/MetricsType.java
@@ -0,0 +1,92 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.math.BigDecimal;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlSeeAlso;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * Base type for metrics that defines common attributes of all metrics.
+ *
+ * <p>Java class for metricsType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="metricsType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;attribute name="upgraded-from-version" type="{http://www.w3.org/2001/XMLSchema}decimal" />
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "metricsType")
+@XmlSeeAlso({
+    TemporalMetricsType.class,
+    BaseMetricsType.class,
+    EnvironmentalMetricsType.class
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public abstract class MetricsType {
+
+    @XmlAttribute(name = "upgraded-from-version")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected BigDecimal upgradedFromVersion;
+
+    /**
+     * Gets the value of the upgradedFromVersion property.
+     *
+     * @return possible object is
+     *     {@link BigDecimal }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public BigDecimal getUpgradedFromVersion() {
+        return upgradedFromVersion;
+    }
+
+    /**
+     * Sets the value of the upgradedFromVersion property.
+     *
+     * @param value allowed object is
+     *     {@link BigDecimal }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setUpgradedFromVersion(BigDecimal value) {
+        this.upgradedFromVersion = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/NotesType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/NotesType.java
new file mode 100644
index 000000000..44a1cade2
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/NotesType.java
@@ -0,0 +1,96 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.util.ArrayList;
+import java.util.List;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * The notesType defines an element that consists of one or more child note
+ * elements. It is assumed that each of these note elements are representative
+ * of the same language as defined by their parent.
+ *
+ * <p>Java class for notesType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="notesType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;element name="note" type="{http://scap.nist.gov/schema/scap-core/0.1}textType" maxOccurs="unbounded"/>
+ *       &lt;/sequence>
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "notesType", namespace = "http://scap.nist.gov/schema/scap-core/0.1", propOrder = {
+    "notes"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class NotesType {
+
+    @XmlElement(name = "note", required = true)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<TextType2> notes;
+
+    /**
+     * Gets the value of the notes property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the notes property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getNotes().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link TextType2 }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<TextType2> getNotes() {
+        if (notes == null) {
+            notes = new ArrayList<TextType2>();
+        }
+        return this.notes;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/Nvd.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/Nvd.java
new file mode 100644
index 000000000..ee1510456
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/Nvd.java
@@ -0,0 +1,155 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.math.BigDecimal;
+import java.util.ArrayList;
+import java.util.List;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlRootElement;
+import javax.xml.bind.annotation.XmlSchemaType;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.datatype.XMLGregorianCalendar;
+
+/**
+ * <p>Java class for anonymous complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType>
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;element ref="{http://scap.nist.gov/schema/feed/vulnerability/2.0}entry" maxOccurs="unbounded" minOccurs="0"/>
+ *       &lt;/sequence>
+ *       &lt;attribute name="nvd_xml_version" use="required" type="{http://www.w3.org/2001/XMLSchema}decimal" />
+ *       &lt;attribute name="pub_date" use="required" type="{http://www.w3.org/2001/XMLSchema}dateTime" />
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "", propOrder = {
+    "entries"
+})
+@XmlRootElement(name = "nvd", namespace = "http://scap.nist.gov/schema/feed/vulnerability/2.0")
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class Nvd {
+
+    @XmlElement(name = "entry", namespace = "http://scap.nist.gov/schema/feed/vulnerability/2.0")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<VulnerabilityType> entries;
+    @XmlAttribute(name = "nvd_xml_version", required = true)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected BigDecimal nvdXmlVersion;
+    @XmlAttribute(name = "pub_date", required = true)
+    @XmlSchemaType(name = "dateTime")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected XMLGregorianCalendar pubDate;
+
+    /**
+     * A CVE entry.Gets the value of the entries property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the entries property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getEntries().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link VulnerabilityType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<VulnerabilityType> getEntries() {
+        if (entries == null) {
+            entries = new ArrayList<VulnerabilityType>();
+        }
+        return this.entries;
+    }
+
+    /**
+     * Gets the value of the nvdXmlVersion property.
+     *
+     * @return possible object is
+     *     {@link BigDecimal }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public BigDecimal getNvdXmlVersion() {
+        return nvdXmlVersion;
+    }
+
+    /**
+     * Sets the value of the nvdXmlVersion property.
+     *
+     * @param value allowed object is
+     *     {@link BigDecimal }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setNvdXmlVersion(BigDecimal value) {
+        this.nvdXmlVersion = value;
+    }
+
+    /**
+     * Gets the value of the pubDate property.
+     *
+     * @return possible object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public XMLGregorianCalendar getPubDate() {
+        return pubDate;
+    }
+
+    /**
+     * Sets the value of the pubDate property.
+     *
+     * @param value allowed object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setPubDate(XMLGregorianCalendar value) {
+        this.pubDate = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ObjectFactory.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ObjectFactory.java
new file mode 100644
index 000000000..e27744304
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ObjectFactory.java
@@ -0,0 +1,423 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.xml.bind.JAXBElement;
+import javax.xml.bind.annotation.XmlElementDecl;
+import javax.xml.bind.annotation.XmlRegistry;
+import javax.xml.namespace.QName;
+
+/**
+ * This object contains factory methods for each Java content interface and Java
+ * element interface generated in the
+ * org.codesecure.dependencycheck.data.nvdcve.generated package. <p>An
+ * ObjectFactory allows you to programatically construct new instances of the
+ * Java representation for XML content. The Java representation of XML content
+ * can consist of schema derived interfaces and classes representing the binding
+ * of schema type definitions, element declarations and model groups. Factory
+ * methods for each of these are provided in this class.
+ *
+ */
+@XmlRegistry
+public class ObjectFactory {
+
+    private final static QName _Entry_QNAME = new QName("http://scap.nist.gov/schema/feed/vulnerability/2.0", "entry");
+    private final static QName _Vulnerability_QNAME = new QName("http://scap.nist.gov/schema/vulnerability/0.4", "vulnerability");
+    private final static QName _SearchableCpeReferencesTypeCpeName_QNAME = new QName("http://scap.nist.gov/schema/scap-core/0.1", "cpe-name");
+    private final static QName _SearchableCpeReferencesTypeCpeSearchableName_QNAME = new QName("http://scap.nist.gov/schema/scap-core/0.1", "cpe-searchable-name");
+
+    /**
+     * Create a new ObjectFactory that can be used to create new instances of
+     * schema derived classes for package:
+     * org.codesecure.dependencycheck.data.nvdcve.generated
+     *
+     */
+    public ObjectFactory() {
+    }
+
+    /**
+     * Create an instance of {@link AccessComplexityType }
+     *
+     */
+    public AccessComplexityType createAccessComplexityType() {
+        return new AccessComplexityType();
+    }
+
+    /**
+     * Create an instance of {@link ExploitabilityType }
+     *
+     */
+    public ExploitabilityType createExploitabilityType() {
+        return new ExploitabilityType();
+    }
+
+    /**
+     * Create an instance of {@link ConfidenceType }
+     *
+     */
+    public ConfidenceType createConfidenceType() {
+        return new ConfidenceType();
+    }
+
+    /**
+     * Create an instance of {@link TemporalMetricsType }
+     *
+     */
+    public TemporalMetricsType createTemporalMetricsType() {
+        return new TemporalMetricsType();
+    }
+
+    /**
+     * Create an instance of {@link FactRefType }
+     *
+     */
+    public FactRefType createFactRefType() {
+        return new FactRefType();
+    }
+
+    /**
+     * Create an instance of {@link VulnerableSoftwareType }
+     *
+     */
+    public VulnerableSoftwareType createVulnerableSoftwareType() {
+        return new VulnerableSoftwareType();
+    }
+
+    /**
+     * Create an instance of {@link CveType }
+     *
+     */
+    public CveType createCveType() {
+        return new CveType();
+    }
+
+    /**
+     * Create an instance of {@link AssociatedExploitLocationType }
+     *
+     */
+    public AssociatedExploitLocationType createAssociatedExploitLocationType() {
+        return new AssociatedExploitLocationType();
+    }
+
+    /**
+     * Create an instance of {@link SearchableCpeReferencesType }
+     *
+     */
+    public SearchableCpeReferencesType createSearchableCpeReferencesType() {
+        return new SearchableCpeReferencesType();
+    }
+
+    /**
+     * Create an instance of {@link CvssImpactType }
+     *
+     */
+    public CvssImpactType createCvssImpactType() {
+        return new CvssImpactType();
+    }
+
+    /**
+     * Create an instance of {@link CweReferenceType }
+     *
+     */
+    public CweReferenceType createCweReferenceType() {
+        return new CweReferenceType();
+    }
+
+    /**
+     * Create an instance of {@link CceParameterType }
+     *
+     */
+    public CceParameterType createCceParameterType() {
+        return new CceParameterType();
+    }
+
+    /**
+     * Create an instance of {@link FixActionType }
+     *
+     */
+    public FixActionType createFixActionType() {
+        return new FixActionType();
+    }
+
+    /**
+     * Create an instance of {@link OsvdbExtensionType }
+     *
+     */
+    public OsvdbExtensionType createOsvdbExtensionType() {
+        return new OsvdbExtensionType();
+    }
+
+    /**
+     * Create an instance of {@link CheckSearchType }
+     *
+     */
+    public CheckSearchType createCheckSearchType() {
+        return new CheckSearchType();
+    }
+
+    /**
+     * Create an instance of {@link RemediationLevelType }
+     *
+     */
+    public RemediationLevelType createRemediationLevelType() {
+        return new RemediationLevelType();
+    }
+
+    /**
+     * Create an instance of {@link ToolConfigurationType }
+     *
+     */
+    public ToolConfigurationType createToolConfigurationType() {
+        return new ToolConfigurationType();
+    }
+
+    /**
+     * Create an instance of {@link TextType1 }
+     *
+     */
+    public TextType1 createTextType1() {
+        return new TextType1();
+    }
+
+    /**
+     * Create an instance of {@link PlatformSpecification }
+     *
+     */
+    public PlatformSpecification createPlatformSpecification() {
+        return new PlatformSpecification();
+    }
+
+    /**
+     * Create an instance of {@link NotesType }
+     *
+     */
+    public NotesType createNotesType() {
+        return new NotesType();
+    }
+
+    /**
+     * Create an instance of {@link CollateralDamagePotentialType }
+     *
+     */
+    public CollateralDamagePotentialType createCollateralDamagePotentialType() {
+        return new CollateralDamagePotentialType();
+    }
+
+    /**
+     * Create an instance of {@link BaseMetricsType }
+     *
+     */
+    public BaseMetricsType createBaseMetricsType() {
+        return new BaseMetricsType();
+    }
+
+    /**
+     * Create an instance of {@link CheckReferenceType }
+     *
+     */
+    public CheckReferenceType createCheckReferenceType() {
+        return new CheckReferenceType();
+    }
+
+    /**
+     * Create an instance of {@link ReferenceType }
+     *
+     */
+    public ReferenceType createReferenceType() {
+        return new ReferenceType();
+    }
+
+    /**
+     * Create an instance of {@link VulnerabilityReferenceType }
+     *
+     */
+    public VulnerabilityReferenceType createVulnerabilityReferenceType() {
+        return new VulnerabilityReferenceType();
+    }
+
+    /**
+     * Create an instance of {@link CiaRequirementType }
+     *
+     */
+    public CiaRequirementType createCiaRequirementType() {
+        return new CiaRequirementType();
+    }
+
+    /**
+     * Create an instance of {@link CvssType }
+     *
+     */
+    public CvssType createCvssType() {
+        return new CvssType();
+    }
+
+    /**
+     * Create an instance of {@link TargetDistributionType }
+     *
+     */
+    public TargetDistributionType createTargetDistributionType() {
+        return new TargetDistributionType();
+    }
+
+    /**
+     * Create an instance of {@link VulnerabilityType }
+     *
+     */
+    public VulnerabilityType createVulnerabilityType() {
+        return new VulnerabilityType();
+    }
+
+    /**
+     * Create an instance of {@link Nvd }
+     *
+     */
+    public Nvd createNvd() {
+        return new Nvd();
+    }
+
+    /**
+     * Create an instance of {@link Patch }
+     *
+     */
+    public Patch createPatch() {
+        return new Patch();
+    }
+
+    /**
+     * Create an instance of {@link EnvironmentalMetricsType }
+     *
+     */
+    public EnvironmentalMetricsType createEnvironmentalMetricsType() {
+        return new EnvironmentalMetricsType();
+    }
+
+    /**
+     * Create an instance of {@link LogicalTest }
+     *
+     */
+    public LogicalTest createLogicalTest() {
+        return new LogicalTest();
+    }
+
+    /**
+     * Create an instance of {@link TextType2 }
+     *
+     */
+    public TextType2 createTextType2() {
+        return new TextType2();
+    }
+
+    /**
+     * Create an instance of {@link AccessVectorType }
+     *
+     */
+    public AccessVectorType createAccessVectorType() {
+        return new AccessVectorType();
+    }
+
+    /**
+     * Create an instance of {@link AuthenticationType }
+     *
+     */
+    public AuthenticationType createAuthenticationType() {
+        return new AuthenticationType();
+    }
+
+    /**
+     * Create an instance of {@link Patch.References }
+     *
+     */
+    public Patch.References createPatchReferences() {
+        return new Patch.References();
+    }
+
+    /**
+     * Create an instance of {@link TagType }
+     *
+     */
+    public TagType createTagType() {
+        return new TagType();
+    }
+
+    /**
+     * Create an instance of {@link CceType }
+     *
+     */
+    public CceType createCceType() {
+        return new CceType();
+    }
+
+    /**
+     * Create an instance of {@link PlatformType }
+     *
+     */
+    public PlatformType createPlatformType() {
+        return new PlatformType();
+    }
+
+    /**
+     * Create an instance of {@link CiaType }
+     *
+     */
+    public CiaType createCiaType() {
+        return new CiaType();
+    }
+
+    /**
+     * Create an instance of {@link JAXBElement }{@code <}{@link VulnerabilityType }{@code >}}
+     *
+     */
+    @XmlElementDecl(namespace = "http://scap.nist.gov/schema/feed/vulnerability/2.0", name = "entry")
+    public JAXBElement<VulnerabilityType> createEntry(VulnerabilityType value) {
+        return new JAXBElement<VulnerabilityType>(_Entry_QNAME, VulnerabilityType.class, null, value);
+    }
+
+    /**
+     * Create an instance of {@link JAXBElement }{@code <}{@link VulnerabilityType }{@code >}}
+     *
+     */
+    @XmlElementDecl(namespace = "http://scap.nist.gov/schema/vulnerability/0.4", name = "vulnerability")
+    public JAXBElement<VulnerabilityType> createVulnerability(VulnerabilityType value) {
+        return new JAXBElement<VulnerabilityType>(_Vulnerability_QNAME, VulnerabilityType.class, null, value);
+    }
+
+    /**
+     * Create an instance of {@link JAXBElement }{@code <}{@link String }{@code >}}
+     *
+     */
+    @XmlElementDecl(namespace = "http://scap.nist.gov/schema/scap-core/0.1", name = "cpe-name", scope = SearchableCpeReferencesType.class)
+    public JAXBElement<String> createSearchableCpeReferencesTypeCpeName(String value) {
+        return new JAXBElement<String>(_SearchableCpeReferencesTypeCpeName_QNAME, String.class, SearchableCpeReferencesType.class, value);
+    }
+
+    /**
+     * Create an instance of {@link JAXBElement }{@code <}{@link String }{@code >}}
+     *
+     */
+    @XmlElementDecl(namespace = "http://scap.nist.gov/schema/scap-core/0.1", name = "cpe-searchable-name", scope = SearchableCpeReferencesType.class)
+    public JAXBElement<String> createSearchableCpeReferencesTypeCpeSearchableName(String value) {
+        return new JAXBElement<String>(_SearchableCpeReferencesTypeCpeSearchableName_QNAME, String.class, SearchableCpeReferencesType.class, value);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/OperatorEnumeration.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/OperatorEnumeration.java
new file mode 100644
index 000000000..1f2007535
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/OperatorEnumeration.java
@@ -0,0 +1,61 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlEnum;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for operatorEnumeration.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class. <p>
+ * <pre>
+ * &lt;simpleType name="operatorEnumeration">
+ *   &lt;restriction base="{http://www.w3.org/2001/XMLSchema}string">
+ *     &lt;enumeration value="AND"/>
+ *     &lt;enumeration value="OR"/>
+ *   &lt;/restriction>
+ * &lt;/simpleType>
+ * </pre>
+ *
+ */
+@XmlType(name = "operatorEnumeration", namespace = "http://cpe.mitre.org/language/2.0")
+@XmlEnum
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public enum OperatorEnumeration {
+
+    AND,
+    OR;
+
+    public String value() {
+        return name();
+    }
+
+    public static OperatorEnumeration fromValue(String v) {
+        return valueOf(v);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/OsvdbExtensionType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/OsvdbExtensionType.java
new file mode 100644
index 000000000..f2a9caac0
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/OsvdbExtensionType.java
@@ -0,0 +1,87 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for osvdbExtensionType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="osvdbExtensionType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;element name="exploit-location" type="{http://scap.nist.gov/schema/vulnerability/0.4}associatedExploitLocationType"/>
+ *       &lt;/sequence>
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "osvdbExtensionType", namespace = "http://scap.nist.gov/schema/vulnerability/0.4", propOrder = {
+    "exploitLocation"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class OsvdbExtensionType {
+
+    @XmlElement(name = "exploit-location", required = true)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected AssociatedExploitLocationType exploitLocation;
+
+    /**
+     * Gets the value of the exploitLocation property.
+     *
+     * @return possible object is
+     *     {@link AssociatedExploitLocationType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public AssociatedExploitLocationType getExploitLocation() {
+        return exploitLocation;
+    }
+
+    /**
+     * Sets the value of the exploitLocation property.
+     *
+     * @param value allowed object is
+     *     {@link AssociatedExploitLocationType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setExploitLocation(AssociatedExploitLocationType value) {
+        this.exploitLocation = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/Patch.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/Patch.java
new file mode 100644
index 000000000..59657f3fc
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/Patch.java
@@ -0,0 +1,414 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.util.ArrayList;
+import java.util.List;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlRootElement;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for patchType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="patchType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;element name="title" type="{http://scap.nist.gov/schema/scap-core/0.1}textType" minOccurs="0"/>
+ *         &lt;element name="references" minOccurs="0">
+ *           &lt;complexType>
+ *             &lt;complexContent>
+ *               &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *                 &lt;sequence>
+ *                   &lt;element name="reference" type="{http://scap.nist.gov/schema/scap-core/0.1}referenceType" maxOccurs="unbounded"/>
+ *                 &lt;/sequence>
+ *               &lt;/restriction>
+ *             &lt;/complexContent>
+ *           &lt;/complexType>
+ *         &lt;/element>
+ *         &lt;element name="notes" type="{http://scap.nist.gov/schema/scap-core/0.1}notesType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="check" type="{http://scap.nist.gov/schema/scap-core/0.1}checkReferenceType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="supersedes" type="{http://scap.nist.gov/schema/patch/0.1}patchType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="superseded-by" type="{http://scap.nist.gov/schema/patch/0.1}patchType" maxOccurs="unbounded" minOccurs="0"/>
+ *       &lt;/sequence>
+ *       &lt;attribute name="identifier" use="required" type="{http://www.w3.org/2001/XMLSchema}double" />
+ *       &lt;attribute name="name" use="required" type="{http://www.w3.org/2001/XMLSchema}string" />
+ *       &lt;attribute name="superseded" use="required" type="{http://www.w3.org/2001/XMLSchema}boolean" />
+ *       &lt;attribute name="deprecated" type="{http://www.w3.org/2001/XMLSchema}boolean" />
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "patchType", namespace = "http://scap.nist.gov/schema/patch/0.1", propOrder = {
+    "title",
+    "references",
+    "notes",
+    "checks",
+    "supersedes",
+    "supersededBies"
+})
+@XmlRootElement(name = "patch", namespace = "http://scap.nist.gov/schema/patch/0.1")
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class Patch {
+
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected TextType2 title;
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Patch.References references;
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<NotesType> notes;
+    @XmlElement(name = "check")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<CheckReferenceType> checks;
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<Patch> supersedes;
+    @XmlElement(name = "superseded-by")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<Patch> supersededBies;
+    @XmlAttribute(required = true)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected double identifier;
+    @XmlAttribute(required = true)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String name;
+    @XmlAttribute(required = true)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected boolean superseded;
+    @XmlAttribute
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Boolean deprecated;
+
+    /**
+     * Gets the value of the title property.
+     *
+     * @return possible object is
+     *     {@link TextType2 }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public TextType2 getTitle() {
+        return title;
+    }
+
+    /**
+     * Sets the value of the title property.
+     *
+     * @param value allowed object is
+     *     {@link TextType2 }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setTitle(TextType2 value) {
+        this.title = value;
+    }
+
+    /**
+     * Gets the value of the references property.
+     *
+     * @return possible object is
+     *     {@link Patch.References }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public Patch.References getReferences() {
+        return references;
+    }
+
+    /**
+     * Sets the value of the references property.
+     *
+     * @param value allowed object is
+     *     {@link Patch.References }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setReferences(Patch.References value) {
+        this.references = value;
+    }
+
+    /**
+     * Gets the value of the notes property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the notes property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getNotes().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link NotesType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<NotesType> getNotes() {
+        if (notes == null) {
+            notes = new ArrayList<NotesType>();
+        }
+        return this.notes;
+    }
+
+    /**
+     * Gets the value of the checks property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the checks property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getChecks().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link CheckReferenceType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<CheckReferenceType> getChecks() {
+        if (checks == null) {
+            checks = new ArrayList<CheckReferenceType>();
+        }
+        return this.checks;
+    }
+
+    /**
+     * Gets the value of the supersedes property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the supersedes property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getSupersedes().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link Patch }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<Patch> getSupersedes() {
+        if (supersedes == null) {
+            supersedes = new ArrayList<Patch>();
+        }
+        return this.supersedes;
+    }
+
+    /**
+     * Gets the value of the supersededBies property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the supersededBies property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getSupersededBies().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link Patch }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<Patch> getSupersededBies() {
+        if (supersededBies == null) {
+            supersededBies = new ArrayList<Patch>();
+        }
+        return this.supersededBies;
+    }
+
+    /**
+     * Gets the value of the identifier property.
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public double getIdentifier() {
+        return identifier;
+    }
+
+    /**
+     * Sets the value of the identifier property.
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setIdentifier(double value) {
+        this.identifier = value;
+    }
+
+    /**
+     * Gets the value of the name property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getName() {
+        return name;
+    }
+
+    /**
+     * Sets the value of the name property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setName(String value) {
+        this.name = value;
+    }
+
+    /**
+     * Gets the value of the superseded property.
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public boolean isSuperseded() {
+        return superseded;
+    }
+
+    /**
+     * Sets the value of the superseded property.
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setSuperseded(boolean value) {
+        this.superseded = value;
+    }
+
+    /**
+     * Gets the value of the deprecated property.
+     *
+     * @return possible object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public Boolean isDeprecated() {
+        return deprecated;
+    }
+
+    /**
+     * Sets the value of the deprecated property.
+     *
+     * @param value allowed object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setDeprecated(Boolean value) {
+        this.deprecated = value;
+    }
+
+    /**
+     * <p>Java class for anonymous complex type.
+     *
+     * <p>The following schema fragment specifies the expected content contained
+     * within this class.
+     *
+     * <pre>
+     * &lt;complexType>
+     *   &lt;complexContent>
+     *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+     *       &lt;sequence>
+     *         &lt;element name="reference" type="{http://scap.nist.gov/schema/scap-core/0.1}referenceType" maxOccurs="unbounded"/>
+     *       &lt;/sequence>
+     *     &lt;/restriction>
+     *   &lt;/complexContent>
+     * &lt;/complexType>
+     * </pre>
+     *
+     *
+     */
+    @XmlAccessorType(XmlAccessType.FIELD)
+    @XmlType(name = "", propOrder = {
+        "references"
+    })
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public static class References {
+
+        @XmlElement(name = "reference", namespace = "http://scap.nist.gov/schema/patch/0.1", required = true)
+        @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+        protected List<ReferenceType> references;
+
+        /**
+         * Gets the value of the references property.
+         *
+         * <p> This accessor method returns a reference to the live list, not a
+         * snapshot. Therefore any modification you make to the returned list
+         * will be present inside the JAXB object. This is why there is not a
+         * <CODE>set</CODE> method for the references property.
+         *
+         * <p> For example, to add a new item, do as follows:
+         * <pre>
+         *    getReferences().add(newItem);
+         * </pre>
+         *
+         *
+         * <p> Objects of the following type(s) are allowed in the list
+         * {@link ReferenceType }
+         *
+         *
+         */
+        @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+        public List<ReferenceType> getReferences() {
+            if (references == null) {
+                references = new ArrayList<ReferenceType>();
+            }
+            return this.references;
+        }
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/PlatformSpecification.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/PlatformSpecification.java
new file mode 100644
index 000000000..97abb3e8c
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/PlatformSpecification.java
@@ -0,0 +1,94 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.util.ArrayList;
+import java.util.List;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlRootElement;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for anonymous complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType>
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;element name="platform" type="{http://cpe.mitre.org/language/2.0}PlatformType" maxOccurs="unbounded"/>
+ *       &lt;/sequence>
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "", propOrder = {
+    "platforms"
+})
+@XmlRootElement(name = "platform-specification", namespace = "http://cpe.mitre.org/language/2.0")
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class PlatformSpecification {
+
+    @XmlElement(name = "platform", namespace = "http://cpe.mitre.org/language/2.0", required = true)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<PlatformType> platforms;
+
+    /**
+     * Gets the value of the platforms property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the platforms property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getPlatforms().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link PlatformType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<PlatformType> getPlatforms() {
+        if (platforms == null) {
+            platforms = new ArrayList<PlatformType>();
+        }
+        return this.platforms;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/PlatformType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/PlatformType.java
new file mode 100644
index 000000000..06e8bb23a
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/PlatformType.java
@@ -0,0 +1,190 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.util.ArrayList;
+import java.util.List;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlSchemaType;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * The optional remark element may appear as a child of a platform element. It
+ * provides some additional description. Zero or more remark elements may
+ * appear. To support uses intended for multiple languages, this element
+ * supports the �xml:lang� attribute. There can be multiple remarks for a single
+ * language.
+ *
+ * <p>Java class for PlatformType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="PlatformType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;element name="title" type="{http://cpe.mitre.org/language/2.0}TextType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="remark" type="{http://cpe.mitre.org/language/2.0}TextType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="logical-test" type="{http://cpe.mitre.org/language/2.0}LogicalTestType"/>
+ *       &lt;/sequence>
+ *       &lt;attribute name="id" use="required" type="{http://www.w3.org/2001/XMLSchema}anyURI" />
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "PlatformType", namespace = "http://cpe.mitre.org/language/2.0", propOrder = {
+    "titles",
+    "remarks",
+    "logicalTest"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class PlatformType {
+
+    @XmlElement(name = "title")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<TextType1> titles;
+    @XmlElement(name = "remark")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<TextType1> remarks;
+    @XmlElement(name = "logical-test", required = true)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected LogicalTest logicalTest;
+    @XmlAttribute(required = true)
+    @XmlSchemaType(name = "anyURI")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String id;
+
+    /**
+     * Gets the value of the titles property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the titles property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getTitles().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link TextType1 }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<TextType1> getTitles() {
+        if (titles == null) {
+            titles = new ArrayList<TextType1>();
+        }
+        return this.titles;
+    }
+
+    /**
+     * Gets the value of the remarks property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the remarks property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getRemarks().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link TextType1 }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<TextType1> getRemarks() {
+        if (remarks == null) {
+            remarks = new ArrayList<TextType1>();
+        }
+        return this.remarks;
+    }
+
+    /**
+     * Gets the value of the logicalTest property.
+     *
+     * @return possible object is
+     *     {@link LogicalTest }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public LogicalTest getLogicalTest() {
+        return logicalTest;
+    }
+
+    /**
+     * Sets the value of the logicalTest property.
+     *
+     * @param value allowed object is
+     *     {@link LogicalTest }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setLogicalTest(LogicalTest value) {
+        this.logicalTest = value;
+    }
+
+    /**
+     * Gets the value of the id property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getId() {
+        return id;
+    }
+
+    /**
+     * Sets the value of the id property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setId(String value) {
+        this.id = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ReferenceType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ReferenceType.java
new file mode 100644
index 000000000..4686799c4
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ReferenceType.java
@@ -0,0 +1,92 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlSchemaType;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * Type for a reference in the description of a CPE item. This would normally be
+ * used to point to extra descriptive material, or the supplier's web site, or
+ * the platform documentation. It consists of a piece of text (intended to be
+ * human-readable) and a URI (intended to be a URL, and point to a real
+ * resource).
+ *
+ * <p>Java class for referenceType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="referenceType">
+ *   &lt;simpleContent>
+ *     &lt;extension base="&lt;http://scap.nist.gov/schema/scap-core/0.1>textType">
+ *       &lt;attribute name="href" type="{http://www.w3.org/2001/XMLSchema}anyURI" />
+ *     &lt;/extension>
+ *   &lt;/simpleContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "referenceType", namespace = "http://scap.nist.gov/schema/scap-core/0.1")
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class ReferenceType
+        extends TextType2 {
+
+    @XmlAttribute
+    @XmlSchemaType(name = "anyURI")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String href;
+
+    /**
+     * Gets the value of the href property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getHref() {
+        return href;
+    }
+
+    /**
+     * Sets the value of the href property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setHref(String value) {
+        this.href = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/RemediationLevelEnumType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/RemediationLevelEnumType.java
new file mode 100644
index 000000000..f0c72b582
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/RemediationLevelEnumType.java
@@ -0,0 +1,67 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlEnum;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for remediationLevelEnumType.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class. <p>
+ * <pre>
+ * &lt;simpleType name="remediationLevelEnumType">
+ *   &lt;restriction base="{http://www.w3.org/2001/XMLSchema}token">
+ *     &lt;enumeration value="OFFICIAL_FIX"/>
+ *     &lt;enumeration value="TEMPORARY_FIX"/>
+ *     &lt;enumeration value="WORKAROUND"/>
+ *     &lt;enumeration value="UNAVAILABLE"/>
+ *     &lt;enumeration value="NOT_DEFINED"/>
+ *   &lt;/restriction>
+ * &lt;/simpleType>
+ * </pre>
+ *
+ */
+@XmlType(name = "remediationLevelEnumType")
+@XmlEnum
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public enum RemediationLevelEnumType {
+
+    OFFICIAL_FIX,
+    TEMPORARY_FIX,
+    WORKAROUND,
+    UNAVAILABLE,
+    NOT_DEFINED;
+
+    public String value() {
+        return name();
+    }
+
+    public static RemediationLevelEnumType fromValue(String v) {
+        return valueOf(v);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/RemediationLevelType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/RemediationLevelType.java
new file mode 100644
index 000000000..cfe3e6049
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/RemediationLevelType.java
@@ -0,0 +1,117 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.XmlValue;
+
+/**
+ * <p>Java class for remediationLevelType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="remediationLevelType">
+ *   &lt;simpleContent>
+ *     &lt;extension base="&lt;http://scap.nist.gov/schema/cvss-v2/0.2>remediationLevelEnumType">
+ *       &lt;attGroup ref="{http://scap.nist.gov/schema/cvss-v2/0.2}vectorAttributeGroup"/>
+ *     &lt;/extension>
+ *   &lt;/simpleContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "remediationLevelType", propOrder = {
+    "value"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class RemediationLevelType {
+
+    @XmlValue
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected RemediationLevelEnumType value;
+    @XmlAttribute
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Boolean approximated;
+
+    /**
+     * Gets the value of the value property.
+     *
+     * @return possible object is
+     *     {@link RemediationLevelEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public RemediationLevelEnumType getValue() {
+        return value;
+    }
+
+    /**
+     * Sets the value of the value property.
+     *
+     * @param value allowed object is
+     *     {@link RemediationLevelEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setValue(RemediationLevelEnumType value) {
+        this.value = value;
+    }
+
+    /**
+     * Gets the value of the approximated property.
+     *
+     * @return possible object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public boolean isApproximated() {
+        if (approximated == null) {
+            return false;
+        } else {
+            return approximated;
+        }
+    }
+
+    /**
+     * Sets the value of the approximated property.
+     *
+     * @param value allowed object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setApproximated(Boolean value) {
+        this.approximated = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/SearchableCpeReferencesType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/SearchableCpeReferencesType.java
new file mode 100644
index 000000000..43528b4fc
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/SearchableCpeReferencesType.java
@@ -0,0 +1,98 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.util.ArrayList;
+import java.util.List;
+import javax.annotation.Generated;
+import javax.xml.bind.JAXBElement;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlElementRef;
+import javax.xml.bind.annotation.XmlElementRefs;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for searchableCpeReferencesType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="searchableCpeReferencesType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;group ref="{http://scap.nist.gov/schema/scap-core/0.1}cpeReferenceGroup" maxOccurs="unbounded"/>
+ *       &lt;/sequence>
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "searchableCpeReferencesType", namespace = "http://scap.nist.gov/schema/scap-core/0.1", propOrder = {
+    "cpeNamesAndCpeSearchableNames"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class SearchableCpeReferencesType {
+
+    @XmlElementRefs({
+        @XmlElementRef(name = "cpe-searchable-name", namespace = "http://scap.nist.gov/schema/scap-core/0.1", type = JAXBElement.class),
+        @XmlElementRef(name = "cpe-name", namespace = "http://scap.nist.gov/schema/scap-core/0.1", type = JAXBElement.class)
+    })
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<JAXBElement<String>> cpeNamesAndCpeSearchableNames;
+
+    /**
+     * Gets the value of the cpeNamesAndCpeSearchableNames property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the cpeNamesAndCpeSearchableNames property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getCpeNamesAndCpeSearchableNames().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link JAXBElement }{@code <}{@link String }{@code >}
+     * {@link JAXBElement }{@code <}{@link String }{@code >}
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<JAXBElement<String>> getCpeNamesAndCpeSearchableNames() {
+        if (cpeNamesAndCpeSearchableNames == null) {
+            cpeNamesAndCpeSearchableNames = new ArrayList<JAXBElement<String>>();
+        }
+        return this.cpeNamesAndCpeSearchableNames;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/SecurityProtectionType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/SecurityProtectionType.java
new file mode 100644
index 000000000..33c3ba918
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/SecurityProtectionType.java
@@ -0,0 +1,71 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlEnum;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for securityProtectionType.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class. <p>
+ * <pre>
+ * &lt;simpleType name="securityProtectionType">
+ *   &lt;restriction base="{http://www.w3.org/2001/XMLSchema}token">
+ *     &lt;enumeration value="ALLOWS_ADMIN_ACCESS"/>
+ *     &lt;enumeration value="ALLOWS_USER_ACCESS"/>
+ *     &lt;enumeration value="ALLOWS_OTHER_ACCESS"/>
+ *   &lt;/restriction>
+ * &lt;/simpleType>
+ * </pre>
+ *
+ */
+@XmlType(name = "securityProtectionType", namespace = "http://scap.nist.gov/schema/vulnerability/0.4")
+@XmlEnum
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public enum SecurityProtectionType {
+
+    /**
+     * gain administrative access
+     *
+     */
+    ALLOWS_ADMIN_ACCESS,
+    /**
+     * gain user access
+     *
+     */
+    ALLOWS_USER_ACCESS,
+    ALLOWS_OTHER_ACCESS;
+
+    public String value() {
+        return name();
+    }
+
+    public static SecurityProtectionType fromValue(String v) {
+        return valueOf(v);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TagType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TagType.java
new file mode 100644
index 000000000..c51766d53
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TagType.java
@@ -0,0 +1,118 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlSchemaType;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.adapters.CollapsedStringAdapter;
+import javax.xml.bind.annotation.adapters.XmlJavaTypeAdapter;
+
+/**
+ * <p>Java class for tagType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="tagType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;attribute name="name" use="required" type="{http://www.w3.org/2001/XMLSchema}token" />
+ *       &lt;attribute name="value" use="required" type="{http://www.w3.org/2001/XMLSchema}token" />
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "tagType", namespace = "http://scap.nist.gov/schema/scap-core/0.1")
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class TagType {
+
+    @XmlAttribute(required = true)
+    @XmlJavaTypeAdapter(CollapsedStringAdapter.class)
+    @XmlSchemaType(name = "token")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String name;
+    @XmlAttribute(required = true)
+    @XmlJavaTypeAdapter(CollapsedStringAdapter.class)
+    @XmlSchemaType(name = "token")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String value;
+
+    /**
+     * Gets the value of the name property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getName() {
+        return name;
+    }
+
+    /**
+     * Sets the value of the name property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setName(String value) {
+        this.name = value;
+    }
+
+    /**
+     * Gets the value of the value property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getValue() {
+        return value;
+    }
+
+    /**
+     * Sets the value of the value property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setValue(String value) {
+        this.value = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TargetDistributionEnumType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TargetDistributionEnumType.java
new file mode 100644
index 000000000..24f302be1
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TargetDistributionEnumType.java
@@ -0,0 +1,67 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlEnum;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for targetDistributionEnumType.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class. <p>
+ * <pre>
+ * &lt;simpleType name="targetDistributionEnumType">
+ *   &lt;restriction base="{http://www.w3.org/2001/XMLSchema}token">
+ *     &lt;enumeration value="NONE"/>
+ *     &lt;enumeration value="LOW"/>
+ *     &lt;enumeration value="MEDIUM"/>
+ *     &lt;enumeration value="HIGH"/>
+ *     &lt;enumeration value="NOT_DEFINED"/>
+ *   &lt;/restriction>
+ * &lt;/simpleType>
+ * </pre>
+ *
+ */
+@XmlType(name = "targetDistributionEnumType")
+@XmlEnum
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public enum TargetDistributionEnumType {
+
+    NONE,
+    LOW,
+    MEDIUM,
+    HIGH,
+    NOT_DEFINED;
+
+    public String value() {
+        return name();
+    }
+
+    public static TargetDistributionEnumType fromValue(String v) {
+        return valueOf(v);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TargetDistributionType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TargetDistributionType.java
new file mode 100644
index 000000000..876bd7f04
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TargetDistributionType.java
@@ -0,0 +1,117 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.XmlValue;
+
+/**
+ * <p>Java class for targetDistributionType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="targetDistributionType">
+ *   &lt;simpleContent>
+ *     &lt;extension base="&lt;http://scap.nist.gov/schema/cvss-v2/0.2>targetDistributionEnumType">
+ *       &lt;attGroup ref="{http://scap.nist.gov/schema/cvss-v2/0.2}vectorAttributeGroup"/>
+ *     &lt;/extension>
+ *   &lt;/simpleContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "targetDistributionType", propOrder = {
+    "value"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class TargetDistributionType {
+
+    @XmlValue
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected TargetDistributionEnumType value;
+    @XmlAttribute
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Boolean approximated;
+
+    /**
+     * Gets the value of the value property.
+     *
+     * @return possible object is
+     *     {@link TargetDistributionEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public TargetDistributionEnumType getValue() {
+        return value;
+    }
+
+    /**
+     * Sets the value of the value property.
+     *
+     * @param value allowed object is
+     *     {@link TargetDistributionEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setValue(TargetDistributionEnumType value) {
+        this.value = value;
+    }
+
+    /**
+     * Gets the value of the approximated property.
+     *
+     * @return possible object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public boolean isApproximated() {
+        if (approximated == null) {
+            return false;
+        } else {
+            return approximated;
+        }
+    }
+
+    /**
+     * Sets the value of the approximated property.
+     *
+     * @param value allowed object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setApproximated(Boolean value) {
+        this.approximated = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TemporalMetricsType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TemporalMetricsType.java
new file mode 100644
index 000000000..6dcc15e3a
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TemporalMetricsType.java
@@ -0,0 +1,263 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.math.BigDecimal;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlSchemaType;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.datatype.XMLGregorianCalendar;
+
+/**
+ * <p>Java class for temporalMetricsType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="temporalMetricsType">
+ *   &lt;complexContent>
+ *     &lt;extension base="{http://scap.nist.gov/schema/cvss-v2/0.2}metricsType">
+ *       &lt;sequence>
+ *         &lt;element name="score" type="{http://scap.nist.gov/schema/cvss-v2/0.2}zeroToTenDecimalType" minOccurs="0"/>
+ *         &lt;element name="temporal-multiplier" type="{http://www.w3.org/2001/XMLSchema}decimal" minOccurs="0"/>
+ *         &lt;group ref="{http://scap.nist.gov/schema/cvss-v2/0.2}temporalVectorsGroup"/>
+ *         &lt;element name="source" type="{http://www.w3.org/2001/XMLSchema}anyURI"/>
+ *         &lt;element name="generated-on-datetime" type="{http://www.w3.org/2001/XMLSchema}dateTime"/>
+ *       &lt;/sequence>
+ *     &lt;/extension>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "temporalMetricsType", propOrder = {
+    "score",
+    "temporalMultiplier",
+    "exploitability",
+    "remediationLevel",
+    "reportConfidence",
+    "source",
+    "generatedOnDatetime"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class TemporalMetricsType
+        extends MetricsType {
+
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected BigDecimal score;
+    @XmlElement(name = "temporal-multiplier")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected BigDecimal temporalMultiplier;
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected ExploitabilityType exploitability;
+    @XmlElement(name = "remediation-level")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected RemediationLevelType remediationLevel;
+    @XmlElement(name = "report-confidence")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected ConfidenceType reportConfidence;
+    @XmlElement(required = true)
+    @XmlSchemaType(name = "anyURI")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String source;
+    @XmlElement(name = "generated-on-datetime", required = true)
+    @XmlSchemaType(name = "dateTime")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected XMLGregorianCalendar generatedOnDatetime;
+
+    /**
+     * Gets the value of the score property.
+     *
+     * @return possible object is
+     *     {@link BigDecimal }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public BigDecimal getScore() {
+        return score;
+    }
+
+    /**
+     * Sets the value of the score property.
+     *
+     * @param value allowed object is
+     *     {@link BigDecimal }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setScore(BigDecimal value) {
+        this.score = value;
+    }
+
+    /**
+     * Gets the value of the temporalMultiplier property.
+     *
+     * @return possible object is
+     *     {@link BigDecimal }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public BigDecimal getTemporalMultiplier() {
+        return temporalMultiplier;
+    }
+
+    /**
+     * Sets the value of the temporalMultiplier property.
+     *
+     * @param value allowed object is
+     *     {@link BigDecimal }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setTemporalMultiplier(BigDecimal value) {
+        this.temporalMultiplier = value;
+    }
+
+    /**
+     * Gets the value of the exploitability property.
+     *
+     * @return possible object is
+     *     {@link ExploitabilityType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public ExploitabilityType getExploitability() {
+        return exploitability;
+    }
+
+    /**
+     * Sets the value of the exploitability property.
+     *
+     * @param value allowed object is
+     *     {@link ExploitabilityType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setExploitability(ExploitabilityType value) {
+        this.exploitability = value;
+    }
+
+    /**
+     * Gets the value of the remediationLevel property.
+     *
+     * @return possible object is
+     *     {@link RemediationLevelType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public RemediationLevelType getRemediationLevel() {
+        return remediationLevel;
+    }
+
+    /**
+     * Sets the value of the remediationLevel property.
+     *
+     * @param value allowed object is
+     *     {@link RemediationLevelType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setRemediationLevel(RemediationLevelType value) {
+        this.remediationLevel = value;
+    }
+
+    /**
+     * Gets the value of the reportConfidence property.
+     *
+     * @return possible object is
+     *     {@link ConfidenceType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public ConfidenceType getReportConfidence() {
+        return reportConfidence;
+    }
+
+    /**
+     * Sets the value of the reportConfidence property.
+     *
+     * @param value allowed object is
+     *     {@link ConfidenceType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setReportConfidence(ConfidenceType value) {
+        this.reportConfidence = value;
+    }
+
+    /**
+     * Gets the value of the source property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getSource() {
+        return source;
+    }
+
+    /**
+     * Sets the value of the source property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setSource(String value) {
+        this.source = value;
+    }
+
+    /**
+     * Gets the value of the generatedOnDatetime property.
+     *
+     * @return possible object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public XMLGregorianCalendar getGeneratedOnDatetime() {
+        return generatedOnDatetime;
+    }
+
+    /**
+     * Sets the value of the generatedOnDatetime property.
+     *
+     * @param value allowed object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setGeneratedOnDatetime(XMLGregorianCalendar value) {
+        this.generatedOnDatetime = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TextType1.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TextType1.java
new file mode 100644
index 000000000..d22ada75f
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TextType1.java
@@ -0,0 +1,116 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.XmlValue;
+
+/**
+ * This type allows the xml:lang attribute to associate a specific language with
+ * an element's string content.
+ *
+ * <p>Java class for TextType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="TextType">
+ *   &lt;simpleContent>
+ *     &lt;extension base="&lt;http://www.w3.org/2001/XMLSchema>string">
+ *       &lt;attribute ref="{http://www.w3.org/XML/1998/namespace}lang"/>
+ *     &lt;/extension>
+ *   &lt;/simpleContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "TextType", namespace = "http://cpe.mitre.org/language/2.0", propOrder = {
+    "value"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class TextType1 {
+
+    @XmlValue
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String value;
+    @XmlAttribute(namespace = "http://www.w3.org/XML/1998/namespace")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String lang;
+
+    /**
+     * Gets the value of the value property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getValue() {
+        return value;
+    }
+
+    /**
+     * Sets the value of the value property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setValue(String value) {
+        this.value = value;
+    }
+
+    /**
+     * Gets the value of the lang property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getLang() {
+        return lang;
+    }
+
+    /**
+     * Sets the value of the lang property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setLang(String value) {
+        this.lang = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TextType2.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TextType2.java
new file mode 100644
index 000000000..34165668c
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/TextType2.java
@@ -0,0 +1,120 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlSeeAlso;
+import javax.xml.bind.annotation.XmlType;
+import javax.xml.bind.annotation.XmlValue;
+
+/**
+ * This type allows the xml:lang attribute to associate a specific language with
+ * an element's string content.
+ *
+ * <p>Java class for textType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="textType">
+ *   &lt;simpleContent>
+ *     &lt;extension base="&lt;http://www.w3.org/2001/XMLSchema>string">
+ *       &lt;attribute ref="{http://www.w3.org/XML/1998/namespace}lang"/>
+ *     &lt;/extension>
+ *   &lt;/simpleContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "textType", namespace = "http://scap.nist.gov/schema/scap-core/0.1", propOrder = {
+    "value"
+})
+@XmlSeeAlso({
+    ReferenceType.class
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class TextType2 {
+
+    @XmlValue
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String value;
+    @XmlAttribute(namespace = "http://www.w3.org/XML/1998/namespace")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String lang;
+
+    /**
+     * Gets the value of the value property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getValue() {
+        return value;
+    }
+
+    /**
+     * Sets the value of the value property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setValue(String value) {
+        this.value = value;
+    }
+
+    /**
+     * Gets the value of the lang property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getLang() {
+        return lang;
+    }
+
+    /**
+     * Sets the value of the lang property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setLang(String value) {
+        this.lang = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ToolConfigurationType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ToolConfigurationType.java
new file mode 100644
index 000000000..94d695009
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/ToolConfigurationType.java
@@ -0,0 +1,120 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.util.ArrayList;
+import java.util.List;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for toolConfigurationType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="toolConfigurationType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;element name="name" type="{http://scap.nist.gov/schema/scap-core/0.1}cpeNamePatternType" minOccurs="0"/>
+ *         &lt;element name="definition" type="{http://scap.nist.gov/schema/scap-core/0.1}checkReferenceType" maxOccurs="unbounded" minOccurs="0"/>
+ *       &lt;/sequence>
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "toolConfigurationType", namespace = "http://scap.nist.gov/schema/vulnerability/0.4", propOrder = {
+    "name",
+    "definitions"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class ToolConfigurationType {
+
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String name;
+    @XmlElement(name = "definition")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<CheckReferenceType> definitions;
+
+    /**
+     * Gets the value of the name property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getName() {
+        return name;
+    }
+
+    /**
+     * Sets the value of the name property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setName(String value) {
+        this.name = value;
+    }
+
+    /**
+     * Gets the value of the definitions property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the definitions property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getDefinitions().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link CheckReferenceType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<CheckReferenceType> getDefinitions() {
+        if (definitions == null) {
+            definitions = new ArrayList<CheckReferenceType>();
+        }
+        return this.definitions;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/VulnerabilityReferenceCategoryEnumType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/VulnerabilityReferenceCategoryEnumType.java
new file mode 100644
index 000000000..b11a92711
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/VulnerabilityReferenceCategoryEnumType.java
@@ -0,0 +1,71 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlEnum;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for vulnerabilityReferenceCategoryEnumType.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class. <p>
+ * <pre>
+ * &lt;simpleType name="vulnerabilityReferenceCategoryEnumType">
+ *   &lt;restriction base="{http://www.w3.org/2001/XMLSchema}token">
+ *     &lt;enumeration value="PATCH"/>
+ *     &lt;enumeration value="VENDOR_ADVISORY"/>
+ *     &lt;enumeration value="THIRD_PARTY_ADVISORY"/>
+ *     &lt;enumeration value="SIGNATURE_SOURCE"/>
+ *     &lt;enumeration value="MITIGATION_PROCEDURE"/>
+ *     &lt;enumeration value="TOOL_CONFIGURATION_DESCRIPTION"/>
+ *     &lt;enumeration value="UNKNOWN"/>
+ *   &lt;/restriction>
+ * &lt;/simpleType>
+ * </pre>
+ *
+ */
+@XmlType(name = "vulnerabilityReferenceCategoryEnumType", namespace = "http://scap.nist.gov/schema/vulnerability/0.4")
+@XmlEnum
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public enum VulnerabilityReferenceCategoryEnumType {
+
+    PATCH,
+    VENDOR_ADVISORY,
+    THIRD_PARTY_ADVISORY,
+    SIGNATURE_SOURCE,
+    MITIGATION_PROCEDURE,
+    TOOL_CONFIGURATION_DESCRIPTION,
+    UNKNOWN;
+
+    public String value() {
+        return name();
+    }
+
+    public static VulnerabilityReferenceCategoryEnumType fromValue(String v) {
+        return valueOf(v);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/VulnerabilityReferenceType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/VulnerabilityReferenceType.java
new file mode 100644
index 000000000..ada6e4536
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/VulnerabilityReferenceType.java
@@ -0,0 +1,236 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlAttribute;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * Extends the base "reference" class by adding the ability to specify which
+ * kind (within the vulnerability model) of reference it is. See
+ * "Vulnerability_Reference_Category_List" enumeration.
+ *
+ * <p>Java class for vulnerabilityReferenceType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="vulnerabilityReferenceType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;element name="source" type="{http://www.w3.org/2001/XMLSchema}string" minOccurs="0"/>
+ *         &lt;element name="reference" type="{http://scap.nist.gov/schema/scap-core/0.1}referenceType"/>
+ *         &lt;element name="notes" type="{http://scap.nist.gov/schema/scap-core/0.1}notesType" minOccurs="0"/>
+ *       &lt;/sequence>
+ *       &lt;attribute ref="{http://www.w3.org/XML/1998/namespace}lang default="en""/>
+ *       &lt;attribute name="reference_type" use="required" type="{http://scap.nist.gov/schema/vulnerability/0.4}vulnerabilityReferenceCategoryEnumType" />
+ *       &lt;attribute name="deprecated" type="{http://www.w3.org/2001/XMLSchema}boolean" />
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "vulnerabilityReferenceType", namespace = "http://scap.nist.gov/schema/vulnerability/0.4", propOrder = {
+    "source",
+    "reference",
+    "notes"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class VulnerabilityReferenceType {
+
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String source;
+    @XmlElement(required = true)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected ReferenceType reference;
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected NotesType notes;
+    @XmlAttribute(namespace = "http://www.w3.org/XML/1998/namespace")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String lang;
+    @XmlAttribute(name = "reference_type", required = true)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected VulnerabilityReferenceCategoryEnumType referenceType;
+    @XmlAttribute
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected Boolean deprecated;
+
+    /**
+     * Gets the value of the source property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getSource() {
+        return source;
+    }
+
+    /**
+     * Sets the value of the source property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setSource(String value) {
+        this.source = value;
+    }
+
+    /**
+     * Gets the value of the reference property.
+     *
+     * @return possible object is
+     *     {@link ReferenceType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public ReferenceType getReference() {
+        return reference;
+    }
+
+    /**
+     * Sets the value of the reference property.
+     *
+     * @param value allowed object is
+     *     {@link ReferenceType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setReference(ReferenceType value) {
+        this.reference = value;
+    }
+
+    /**
+     * Gets the value of the notes property.
+     *
+     * @return possible object is
+     *     {@link NotesType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public NotesType getNotes() {
+        return notes;
+    }
+
+    /**
+     * Sets the value of the notes property.
+     *
+     * @param value allowed object is
+     *     {@link NotesType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setNotes(NotesType value) {
+        this.notes = value;
+    }
+
+    /**
+     * Gets the value of the lang property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getLang() {
+        if (lang == null) {
+            return "en";
+        } else {
+            return lang;
+        }
+    }
+
+    /**
+     * Sets the value of the lang property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setLang(String value) {
+        this.lang = value;
+    }
+
+    /**
+     * Gets the value of the referenceType property.
+     *
+     * @return possible object is
+     *     {@link VulnerabilityReferenceCategoryEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public VulnerabilityReferenceCategoryEnumType getReferenceType() {
+        return referenceType;
+    }
+
+    /**
+     * Sets the value of the referenceType property.
+     *
+     * @param value allowed object is
+     *     {@link VulnerabilityReferenceCategoryEnumType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setReferenceType(VulnerabilityReferenceCategoryEnumType value) {
+        this.referenceType = value;
+    }
+
+    /**
+     * Gets the value of the deprecated property.
+     *
+     * @return possible object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public Boolean isDeprecated() {
+        return deprecated;
+    }
+
+    /**
+     * Sets the value of the deprecated property.
+     *
+     * @param value allowed object is
+     *     {@link Boolean }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setDeprecated(Boolean value) {
+        this.deprecated = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/VulnerabilityType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/VulnerabilityType.java
new file mode 100644
index 000000000..62dc27ee4
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/VulnerabilityType.java
@@ -0,0 +1,703 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.util.ArrayList;
+import java.util.List;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.*;
+import javax.xml.bind.annotation.adapters.CollapsedStringAdapter;
+import javax.xml.bind.annotation.adapters.XmlJavaTypeAdapter;
+import javax.xml.datatype.XMLGregorianCalendar;
+
+/**
+ * TODO: Low priority: Add reference to notes type to allow analysts, vendor and
+ * other comments. Add source attribute. Maybe categorization?
+ *
+ * <p>Java class for vulnerabilityType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="vulnerabilityType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;element name="osvdb-ext" type="{http://scap.nist.gov/schema/vulnerability/0.4}osvdbExtensionType" minOccurs="0"/>
+ *         &lt;element name="vulnerable-configuration" type="{http://cpe.mitre.org/language/2.0}PlatformType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="vulnerable-software-list" type="{http://scap.nist.gov/schema/vulnerability/0.4}vulnerableSoftwareType" minOccurs="0"/>
+ *         &lt;choice minOccurs="0">
+ *           &lt;element name="cve-id" type="{http://scap.nist.gov/schema/cve/0.1}cveNamePatternType"/>
+ *           &lt;element name="cce-id" type="{http://scap.nist.gov/schema/cce/0.1}cceNamePatternType"/>
+ *         &lt;/choice>
+ *         &lt;element name="discovered-datetime" type="{http://www.w3.org/2001/XMLSchema}dateTime" minOccurs="0"/>
+ *         &lt;element name="disclosure-datetime" type="{http://www.w3.org/2001/XMLSchema}dateTime" minOccurs="0"/>
+ *         &lt;element name="exploit-publish-datetime" type="{http://www.w3.org/2001/XMLSchema}dateTime" minOccurs="0"/>
+ *         &lt;element name="published-datetime" type="{http://www.w3.org/2001/XMLSchema}dateTime" minOccurs="0"/>
+ *         &lt;element name="last-modified-datetime" type="{http://www.w3.org/2001/XMLSchema}dateTime" minOccurs="0"/>
+ *         &lt;element name="cvss" type="{http://scap.nist.gov/schema/cvss-v2/0.2}cvssImpactType" minOccurs="0"/>
+ *         &lt;element name="security-protection" type="{http://scap.nist.gov/schema/vulnerability/0.4}securityProtectionType" minOccurs="0"/>
+ *         &lt;element name="assessment_check" type="{http://scap.nist.gov/schema/scap-core/0.1}checkReferenceType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="cwe" type="{http://scap.nist.gov/schema/vulnerability/0.4}cweReferenceType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="references" type="{http://scap.nist.gov/schema/vulnerability/0.4}vulnerabilityReferenceType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="fix_action" type="{http://scap.nist.gov/schema/vulnerability/0.4}fixActionType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="scanner" type="{http://scap.nist.gov/schema/vulnerability/0.4}toolConfigurationType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="summary" type="{http://www.w3.org/2001/XMLSchema}string" minOccurs="0"/>
+ *         &lt;element name="technical_description" type="{http://scap.nist.gov/schema/scap-core/0.1}referenceType" maxOccurs="unbounded" minOccurs="0"/>
+ *         &lt;element name="attack_scenario" type="{http://scap.nist.gov/schema/scap-core/0.1}referenceType" maxOccurs="unbounded" minOccurs="0"/>
+ *       &lt;/sequence>
+ *       &lt;attribute name="id" use="required" type="{http://scap.nist.gov/schema/vulnerability/0.4}vulnerabilityIdType" />
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlRootElement(name = "vulnerabilityType", namespace = "http://scap.nist.gov/schema/vulnerability/0.4")
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "vulnerabilityType", namespace = "http://scap.nist.gov/schema/vulnerability/0.4", propOrder = {
+    "osvdbExt",
+    "vulnerableConfigurations",
+    "vulnerableSoftwareList",
+    "cceId",
+    "cveId",
+    "discoveredDatetime",
+    "disclosureDatetime",
+    "exploitPublishDatetime",
+    "publishedDatetime",
+    "lastModifiedDatetime",
+    "cvss",
+    "securityProtection",
+    "assessmentChecks",
+    "cwes",
+    "references",
+    "fixActions",
+    "scanners",
+    "summary",
+    "technicalDescriptions",
+    "attackScenarios"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class VulnerabilityType {
+
+    @XmlElement(name = "osvdb-ext")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected OsvdbExtensionType osvdbExt;
+    @XmlElement(name = "vulnerable-configuration")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<PlatformType> vulnerableConfigurations;
+    @XmlElement(name = "vulnerable-software-list")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected VulnerableSoftwareType vulnerableSoftwareList;
+    @XmlElement(name = "cce-id")
+    @XmlJavaTypeAdapter(CollapsedStringAdapter.class)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String cceId;
+    @XmlElement(name = "cve-id")
+    @XmlJavaTypeAdapter(CollapsedStringAdapter.class)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String cveId;
+    @XmlElement(name = "discovered-datetime")
+    @XmlSchemaType(name = "dateTime")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected XMLGregorianCalendar discoveredDatetime;
+    @XmlElement(name = "disclosure-datetime")
+    @XmlSchemaType(name = "dateTime")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected XMLGregorianCalendar disclosureDatetime;
+    @XmlElement(name = "exploit-publish-datetime")
+    @XmlSchemaType(name = "dateTime")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected XMLGregorianCalendar exploitPublishDatetime;
+    @XmlElement(name = "published-datetime")
+    @XmlSchemaType(name = "dateTime")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected XMLGregorianCalendar publishedDatetime;
+    @XmlElement(name = "last-modified-datetime")
+    @XmlSchemaType(name = "dateTime")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected XMLGregorianCalendar lastModifiedDatetime;
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected CvssImpactType cvss;
+    @XmlElement(name = "security-protection")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected SecurityProtectionType securityProtection;
+    @XmlElement(name = "assessment_check")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<CheckReferenceType> assessmentChecks;
+    @XmlElement(name = "cwe")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<CweReferenceType> cwes;
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<VulnerabilityReferenceType> references;
+    @XmlElement(name = "fix_action")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<FixActionType> fixActions;
+    @XmlElement(name = "scanner")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<ToolConfigurationType> scanners;
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String summary;
+    @XmlElement(name = "technical_description")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<ReferenceType> technicalDescriptions;
+    @XmlElement(name = "attack_scenario")
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<ReferenceType> attackScenarios;
+    @XmlAttribute(required = true)
+    @XmlJavaTypeAdapter(CollapsedStringAdapter.class)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected String id;
+
+    /**
+     * Gets the value of the osvdbExt property.
+     *
+     * @return possible object is
+     *     {@link OsvdbExtensionType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public OsvdbExtensionType getOsvdbExt() {
+        return osvdbExt;
+    }
+
+    /**
+     * Sets the value of the osvdbExt property.
+     *
+     * @param value allowed object is
+     *     {@link OsvdbExtensionType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setOsvdbExt(OsvdbExtensionType value) {
+        this.osvdbExt = value;
+    }
+
+    /**
+     * Gets the value of the vulnerableConfigurations property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the vulnerableConfigurations property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getVulnerableConfigurations().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link PlatformType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<PlatformType> getVulnerableConfigurations() {
+        if (vulnerableConfigurations == null) {
+            vulnerableConfigurations = new ArrayList<PlatformType>();
+        }
+        return this.vulnerableConfigurations;
+    }
+
+    /**
+     * Gets the value of the vulnerableSoftwareList property.
+     *
+     * @return possible object is
+     *     {@link VulnerableSoftwareType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public VulnerableSoftwareType getVulnerableSoftwareList() {
+        return vulnerableSoftwareList;
+    }
+
+    /**
+     * Sets the value of the vulnerableSoftwareList property.
+     *
+     * @param value allowed object is
+     *     {@link VulnerableSoftwareType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setVulnerableSoftwareList(VulnerableSoftwareType value) {
+        this.vulnerableSoftwareList = value;
+    }
+
+    /**
+     * Gets the value of the cceId property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getCceId() {
+        return cceId;
+    }
+
+    /**
+     * Sets the value of the cceId property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setCceId(String value) {
+        this.cceId = value;
+    }
+
+    /**
+     * Gets the value of the cveId property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getCveId() {
+        return cveId;
+    }
+
+    /**
+     * Sets the value of the cveId property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setCveId(String value) {
+        this.cveId = value;
+    }
+
+    /**
+     * Gets the value of the discoveredDatetime property.
+     *
+     * @return possible object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public XMLGregorianCalendar getDiscoveredDatetime() {
+        return discoveredDatetime;
+    }
+
+    /**
+     * Sets the value of the discoveredDatetime property.
+     *
+     * @param value allowed object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setDiscoveredDatetime(XMLGregorianCalendar value) {
+        this.discoveredDatetime = value;
+    }
+
+    /**
+     * Gets the value of the disclosureDatetime property.
+     *
+     * @return possible object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public XMLGregorianCalendar getDisclosureDatetime() {
+        return disclosureDatetime;
+    }
+
+    /**
+     * Sets the value of the disclosureDatetime property.
+     *
+     * @param value allowed object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setDisclosureDatetime(XMLGregorianCalendar value) {
+        this.disclosureDatetime = value;
+    }
+
+    /**
+     * Gets the value of the exploitPublishDatetime property.
+     *
+     * @return possible object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public XMLGregorianCalendar getExploitPublishDatetime() {
+        return exploitPublishDatetime;
+    }
+
+    /**
+     * Sets the value of the exploitPublishDatetime property.
+     *
+     * @param value allowed object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setExploitPublishDatetime(XMLGregorianCalendar value) {
+        this.exploitPublishDatetime = value;
+    }
+
+    /**
+     * Gets the value of the publishedDatetime property.
+     *
+     * @return possible object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public XMLGregorianCalendar getPublishedDatetime() {
+        return publishedDatetime;
+    }
+
+    /**
+     * Sets the value of the publishedDatetime property.
+     *
+     * @param value allowed object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setPublishedDatetime(XMLGregorianCalendar value) {
+        this.publishedDatetime = value;
+    }
+
+    /**
+     * Gets the value of the lastModifiedDatetime property.
+     *
+     * @return possible object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public XMLGregorianCalendar getLastModifiedDatetime() {
+        return lastModifiedDatetime;
+    }
+
+    /**
+     * Sets the value of the lastModifiedDatetime property.
+     *
+     * @param value allowed object is
+     *     {@link XMLGregorianCalendar }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setLastModifiedDatetime(XMLGregorianCalendar value) {
+        this.lastModifiedDatetime = value;
+    }
+
+    /**
+     * Gets the value of the cvss property.
+     *
+     * @return possible object is
+     *     {@link CvssImpactType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public CvssImpactType getCvss() {
+        return cvss;
+    }
+
+    /**
+     * Sets the value of the cvss property.
+     *
+     * @param value allowed object is
+     *     {@link CvssImpactType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setCvss(CvssImpactType value) {
+        this.cvss = value;
+    }
+
+    /**
+     * Gets the value of the securityProtection property.
+     *
+     * @return possible object is
+     *     {@link SecurityProtectionType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public SecurityProtectionType getSecurityProtection() {
+        return securityProtection;
+    }
+
+    /**
+     * Sets the value of the securityProtection property.
+     *
+     * @param value allowed object is
+     *     {@link SecurityProtectionType }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setSecurityProtection(SecurityProtectionType value) {
+        this.securityProtection = value;
+    }
+
+    /**
+     * Gets the value of the assessmentChecks property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the assessmentChecks property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getAssessmentChecks().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link CheckReferenceType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<CheckReferenceType> getAssessmentChecks() {
+        if (assessmentChecks == null) {
+            assessmentChecks = new ArrayList<CheckReferenceType>();
+        }
+        return this.assessmentChecks;
+    }
+
+    /**
+     * Gets the value of the cwes property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the cwes property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getCwes().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link CweReferenceType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<CweReferenceType> getCwes() {
+        if (cwes == null) {
+            cwes = new ArrayList<CweReferenceType>();
+        }
+        return this.cwes;
+    }
+
+    /**
+     * Gets the value of the references property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the references property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getReferences().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link VulnerabilityReferenceType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<VulnerabilityReferenceType> getReferences() {
+        if (references == null) {
+            references = new ArrayList<VulnerabilityReferenceType>();
+        }
+        return this.references;
+    }
+
+    /**
+     * Gets the value of the fixActions property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the fixActions property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getFixActions().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link FixActionType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<FixActionType> getFixActions() {
+        if (fixActions == null) {
+            fixActions = new ArrayList<FixActionType>();
+        }
+        return this.fixActions;
+    }
+
+    /**
+     * Gets the value of the scanners property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the scanners property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getScanners().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link ToolConfigurationType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<ToolConfigurationType> getScanners() {
+        if (scanners == null) {
+            scanners = new ArrayList<ToolConfigurationType>();
+        }
+        return this.scanners;
+    }
+
+    /**
+     * Gets the value of the summary property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getSummary() {
+        return summary;
+    }
+
+    /**
+     * Sets the value of the summary property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setSummary(String value) {
+        this.summary = value;
+    }
+
+    /**
+     * Gets the value of the technicalDescriptions property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the technicalDescriptions property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getTechnicalDescriptions().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link ReferenceType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<ReferenceType> getTechnicalDescriptions() {
+        if (technicalDescriptions == null) {
+            technicalDescriptions = new ArrayList<ReferenceType>();
+        }
+        return this.technicalDescriptions;
+    }
+
+    /**
+     * Gets the value of the attackScenarios property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the attackScenarios property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getAttackScenarios().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link ReferenceType }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<ReferenceType> getAttackScenarios() {
+        if (attackScenarios == null) {
+            attackScenarios = new ArrayList<ReferenceType>();
+        }
+        return this.attackScenarios;
+    }
+
+    /**
+     * Gets the value of the id property.
+     *
+     * @return possible object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public String getId() {
+        return id;
+    }
+
+    /**
+     * Sets the value of the id property.
+     *
+     * @param value allowed object is
+     *     {@link String }
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public void setId(String value) {
+        this.id = value;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/VulnerableSoftwareType.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/VulnerableSoftwareType.java
new file mode 100644
index 000000000..504f78f3d
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/VulnerableSoftwareType.java
@@ -0,0 +1,92 @@
+package org.codesecure.dependencycheck.data.nvdcve.generated;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a>
+// Any modifications to this file will be lost upon recompilation of the source schema.
+// Generated on: 2012.10.21 at 11:58:46 AM EDT
+//
+import java.util.ArrayList;
+import java.util.List;
+import javax.annotation.Generated;
+import javax.xml.bind.annotation.XmlAccessType;
+import javax.xml.bind.annotation.XmlAccessorType;
+import javax.xml.bind.annotation.XmlElement;
+import javax.xml.bind.annotation.XmlType;
+
+/**
+ * <p>Java class for vulnerableSoftwareType complex type.
+ *
+ * <p>The following schema fragment specifies the expected content contained
+ * within this class.
+ *
+ * <pre>
+ * &lt;complexType name="vulnerableSoftwareType">
+ *   &lt;complexContent>
+ *     &lt;restriction base="{http://www.w3.org/2001/XMLSchema}anyType">
+ *       &lt;sequence>
+ *         &lt;element name="product" type="{http://cpe.mitre.org/language/2.0}namePattern" maxOccurs="unbounded"/>
+ *       &lt;/sequence>
+ *     &lt;/restriction>
+ *   &lt;/complexContent>
+ * &lt;/complexType>
+ * </pre>
+ *
+ *
+ */
+@XmlAccessorType(XmlAccessType.FIELD)
+@XmlType(name = "vulnerableSoftwareType", namespace = "http://scap.nist.gov/schema/vulnerability/0.4", propOrder = {
+    "products"
+})
+@Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+public class VulnerableSoftwareType {
+
+    @XmlElement(name = "product", required = true)
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    protected List<String> products;
+
+    /**
+     * Gets the value of the products property.
+     *
+     * <p> This accessor method returns a reference to the live list, not a
+     * snapshot. Therefore any modification you make to the returned list will
+     * be present inside the JAXB object. This is why there is not a
+     * <CODE>set</CODE> method for the products property.
+     *
+     * <p> For example, to add a new item, do as follows:
+     * <pre>
+     *    getProducts().add(newItem);
+     * </pre>
+     *
+     *
+     * <p> Objects of the following type(s) are allowed in the list
+     * {@link String }
+     *
+     *
+     */
+    @Generated(value = "com.sun.tools.internal.xjc.Driver", date = "2012-10-21T11:58:46-04:00", comments = "JAXB RI vJAXB 2.1.10 in JDK 6")
+    public List<String> getProducts() {
+        if (products == null) {
+            products = new ArrayList<String>();
+        }
+        return this.products;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/package-info.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/package-info.java
new file mode 100644
index 000000000..8dcc02cf4
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/generated/package-info.java
@@ -0,0 +1,9 @@
+//
+// This file was generated by the JavaTM Architecture for XML Binding(JAXB) Reference Implementation, vJAXB 2.1.10 in JDK 6 
+// See <a href="http://java.sun.com/xml/jaxb">http://java.sun.com/xml/jaxb</a> 
+// Any modifications to this file will be lost upon recompilation of the source schema. 
+// Generated on: 2012.10.21 at 11:58:46 AM EDT 
+//
+
+@javax.xml.bind.annotation.XmlSchema(namespace = "http://scap.nist.gov/schema/cvss-v2/0.2", elementFormDefault = javax.xml.bind.annotation.XmlNsForm.QUALIFIED)
+package org.codesecure.dependencycheck.data.nvdcve.generated;
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/package-info.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/package-info.java
new file mode 100644
index 000000000..e435b4aed
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/package-info.java
@@ -0,0 +1,12 @@
+/**
+ * <html>
+ * <head>
+ * <title>org.codesecure.dependencycheck.data.nvdcve</title>
+ * </head>
+ * <body>
+ * Contains classes used to work with the NVD CVE data.
+ * </body>
+ * </html>
+*/
+
+package org.codesecure.dependencycheck.data.nvdcve;
diff --git a/src/main/java/org/codesecure/dependencycheck/data/cve/xml/EntrySaveDelegate.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/EntrySaveDelegate.java
similarity index 50%
rename from src/main/java/org/codesecure/dependencycheck/data/cve/xml/EntrySaveDelegate.java
rename to src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/EntrySaveDelegate.java
index c5a263e88..8e53d7ecb 100644
--- a/src/main/java/org/codesecure/dependencycheck/data/cve/xml/EntrySaveDelegate.java
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/EntrySaveDelegate.java
@@ -1,31 +1,31 @@
-package org.codesecure.dependencycheck.data.cve.xml;
+package org.codesecure.dependencycheck.data.nvdcve.xml;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
 
-import org.codesecure.dependencycheck.data.cve.Entry;
 import java.io.IOException;
 import org.apache.lucene.index.CorruptIndexException;
+import org.codesecure.dependencycheck.data.nvdcve.generated.VulnerabilityType;
 
 /**
  *
- * An interface used to define the save function used when parsing the CVE XML
- * file.
+ * An interface used to define the save function used when parsing the NVD CVE
+ * XML file.
  *
  * @author Jeremy Long (jeremy.long@gmail.com)
  */
@@ -34,9 +34,9 @@ public interface EntrySaveDelegate {
     /**
      * Saves a CVE Entry into the Lucene index.
      *
-     * @param entry a CVE entry.
+     * @param vulnerability a CVE entry.
      * @throws CorruptIndexException is thrown if the index is corrupt.
      * @throws IOException is thrown if an IOException occurs.
      */
-    void saveEntry(Entry entry) throws CorruptIndexException, IOException;
+    void saveEntry(VulnerabilityType vulnerability) throws CorruptIndexException, IOException;
 }
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/Importer.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/Importer.java
new file mode 100644
index 000000000..f555e08bd
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/Importer.java
@@ -0,0 +1,106 @@
+package org.codesecure.dependencycheck.data.nvdcve.xml;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+import java.io.*;
+import java.util.logging.Level;
+import java.util.logging.Logger;
+import javax.xml.bind.JAXBContext;
+import javax.xml.bind.JAXBException;
+import javax.xml.parsers.ParserConfigurationException;
+import javax.xml.parsers.SAXParserFactory;
+import org.xml.sax.InputSource;
+import org.xml.sax.SAXException;
+import org.xml.sax.XMLReader;
+
+/**
+ * Imports a NVD CVE XML file into the Lucene NVD CVE Index.
+ *
+ * @author Jeremy Long (jeremy.long@gmail.com)
+ */
+public class Importer {
+
+    /**
+     * Private constructor for utility class.
+     */
+    private Importer() {
+    }
+
+    /**
+     * Imports the NVD CVE XML File into the Lucene Index.
+     *
+     * @param file containing the path to the NVD CVE XML file.
+     * @throws ParserConfigurationException is thrown if the parser is
+     * misconfigured.
+     * @throws FileNotFoundException is thrown when there is a
+     * FileNotFoundException.
+     * @throws IOException is thrown when there is an IOException.
+     * @throws JAXBException is thrown when there is a JAXBException.
+     * @throws SAXException is thrown when there is a SAXException.
+     */
+    public static void importXML(File file) throws FileNotFoundException, IOException, JAXBException,
+            ParserConfigurationException, SAXException {
+
+        SAXParserFactory factory = SAXParserFactory.newInstance();
+        factory.setNamespaceAware(true);
+        XMLReader reader = factory.newSAXParser().getXMLReader();
+
+        JAXBContext context = JAXBContext.newInstance("org.codesecure.dependencycheck.data.nvdcve.generated");
+        NvdCveXmlFilter filter = new NvdCveXmlFilter(context);
+
+        Indexer indexer = new Indexer();
+        indexer.openIndexWriter();
+
+        filter.registerSaveDelegate(indexer);
+
+        reader.setContentHandler(filter);
+        Reader fileReader = new FileReader(file);
+        InputSource is = new InputSource(fileReader);
+        try {
+            reader.parse(is);
+        } catch (IOException ex) {
+            Logger.getLogger(Importer.class.getName()).log(Level.SEVERE, null, ex);
+        } catch (SAXException ex) {
+            Logger.getLogger(Importer.class.getName()).log(Level.SEVERE, null, ex);
+        } finally {
+            indexer.close();
+        }
+    }
+
+    /**
+     * Imports the CPE XML File into the Lucene Index.
+     *
+     * @param path the path to the CPE XML file.
+     * @throws ParserConfigurationException is thrown if the parser is
+     * misconfigured.
+     * @throws FileNotFoundException is thrown when there is a
+     * FileNotFoundException.
+     * @throws IOException is thrown when there is an IOException.
+     * @throws JAXBException is thrown when there is a JAXBException.
+     * @throws SAXException is thrown when there is a SAXException.
+     */
+    public static void importXML(String path) throws FileNotFoundException, IOException, JAXBException,
+            ParserConfigurationException, SAXException {
+        File f = new File(path);
+        if (!f.exists()) {
+            f.mkdirs();
+        }
+        Importer.importXML(f);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/Indexer.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/Indexer.java
new file mode 100644
index 000000000..6f4a19108
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/Indexer.java
@@ -0,0 +1,148 @@
+package org.codesecure.dependencycheck.data.nvdcve.xml;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.util.logging.Level;
+import java.util.logging.Logger;
+import javax.xml.bind.JAXBContext;
+import javax.xml.bind.JAXBException;
+import javax.xml.bind.Marshaller;
+import org.apache.lucene.document.Document;
+import org.apache.lucene.document.Field;
+import org.apache.lucene.index.CorruptIndexException;
+import org.apache.lucene.index.FieldInfo.IndexOptions;
+import org.apache.lucene.index.Term;
+import org.codesecure.dependencycheck.data.lucene.LuceneUtils;
+import org.codesecure.dependencycheck.data.nvdcve.generated.VulnerabilityType;
+import org.codesecure.dependencycheck.data.nvdcve.Fields;
+import org.codesecure.dependencycheck.data.nvdcve.Index;
+import org.codesecure.dependencycheck.data.nvdcve.generated.FactRefType;
+import org.codesecure.dependencycheck.data.nvdcve.generated.LogicalTest;
+import org.codesecure.dependencycheck.data.nvdcve.generated.PlatformType;
+
+/**
+ * The Indexer is used to convert a VULNERABLE_CPE Entry, retrieved from the
+ * VULNERABLE_CPE XML file, into a Document that is stored in the Lucene index.
+ *
+ * @author Jeremy Long (jeremy.long@gmail.com)
+ */
+public class Indexer extends Index implements EntrySaveDelegate {
+
+    /**
+     * Saves an NVD CVE Entry into the Lucene index.
+     *
+     * @param vulnerability a NVD CVE vulnerability.
+     * @throws CorruptIndexException is thrown if the index is corrupt.
+     * @throws IOException is thrown if an IOException occurs.
+     */
+    public void saveEntry(VulnerabilityType vulnerability) throws CorruptIndexException, IOException {
+        try {
+            Document doc = convertEntryToDoc(vulnerability);
+
+            if (doc == null) {
+                return;
+            }
+
+            Term name = new Term(Fields.CVE_ID, LuceneUtils.escapeLuceneQuery(vulnerability.getId()));
+            indexWriter.updateDocument(name, doc);
+        } catch (JAXBException ex) {
+            Logger.getLogger(Indexer.class.getName()).log(Level.SEVERE, "Unable to add " + vulnerability.getId() + " to the Lucene index.", ex);
+        }
+    }
+
+    /**
+     * Converts a VULNERABLE_CPE vulnerability into a Lucene Document.
+     *
+     * @param vulnerability a VULNERABLE_CPE Entry.
+     * @return a Lucene Document containing a VULNERABLE_CPE Entry.
+     * @throws JAXBException is thrown when there is a JAXBException.
+     */
+    protected Document convertEntryToDoc(VulnerabilityType vulnerability) throws JAXBException {
+        boolean hasApplication = false;
+        Document doc = new Document();
+
+        if (vulnerability.getVulnerableConfigurations() != null) {
+
+            for (PlatformType pt : vulnerability.getVulnerableConfigurations()) {
+                hasApplication = addVulnerableProducts(doc, pt.getLogicalTest());
+            }
+
+        } else if (vulnerability.getVulnerableSoftwareList() != null) { //this should never be reached, but is here just in case.
+            for (String cpe : vulnerability.getVulnerableSoftwareList().getProducts()) {
+                if (cpe.startsWith("cpe:/a:")) {
+                    hasApplication = true;
+                    addVulnerableCpe(cpe, doc);
+                }
+            }
+        } else {
+            return null;
+        }
+
+        //there are no cpe:/a that are vulnerable - don't add it to the index.
+        if (!hasApplication) {
+            return null;
+        }
+
+        Field name = new Field(Fields.CVE_ID, vulnerability.getId(), Field.Store.NO, Field.Index.ANALYZED);
+        name.setIndexOptions(IndexOptions.DOCS_ONLY);
+        doc.add(name);
+
+        Field description = new Field(Fields.DESCRIPTION, vulnerability.getSummary(), Field.Store.NO, Field.Index.ANALYZED);
+        name.setIndexOptions(IndexOptions.DOCS_ONLY);
+        doc.add(description);
+
+
+        JAXBContext context = JAXBContext.newInstance("org.codesecure.dependencycheck.data.nvdcve.generated");
+
+        Marshaller m = context.createMarshaller();
+        m.setProperty(Marshaller.JAXB_FORMATTED_OUTPUT, Boolean.TRUE);
+
+        ByteArrayOutputStream out = new ByteArrayOutputStream();
+
+        m.marshal(vulnerability, out);
+
+        Field xml = new Field(Fields.XML, out.toString(), Field.Store.YES, Field.Index.NO);
+        doc.add(xml);
+
+        return doc;
+    }
+
+    private boolean addVulnerableProducts(Document doc, LogicalTest logicalTest) {
+        boolean retVal = false;
+        for (LogicalTest lt : logicalTest.getLogicalTests()) {
+            retVal = retVal || addVulnerableProducts(doc, lt);
+        }
+        for (FactRefType facts : logicalTest.getFactReves()) {
+            String cpe = facts.getName();
+            if (cpe.startsWith("cpe:/a:")) {
+                retVal = true;
+                addVulnerableCpe(cpe, doc);
+            }
+        }
+        return retVal;
+    }
+
+    private void addVulnerableCpe(String cpe, Document doc) {
+        Field vulnerable = new Field(Fields.VULNERABLE_CPE, cpe, Field.Store.NO, Field.Index.ANALYZED);
+        vulnerable.setIndexOptions(IndexOptions.DOCS_ONLY);
+        doc.add(vulnerable);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/NvdCveXmlFilter.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/NvdCveXmlFilter.java
new file mode 100644
index 000000000..662536387
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/NvdCveXmlFilter.java
@@ -0,0 +1,246 @@
+package org.codesecure.dependencycheck.data.nvdcve.xml;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+import java.io.IOException;
+import java.util.Enumeration;
+import java.util.logging.Level;
+import java.util.logging.Logger;
+import javax.xml.bind.JAXBContext;
+import javax.xml.bind.JAXBElement;
+import javax.xml.bind.JAXBException;
+import javax.xml.bind.Unmarshaller;
+import javax.xml.bind.UnmarshallerHandler;
+import org.apache.lucene.index.CorruptIndexException;
+import org.codesecure.dependencycheck.data.nvdcve.generated.VulnerabilityType;
+import org.xml.sax.Attributes;
+import org.xml.sax.Locator;
+import org.xml.sax.SAXException;
+import org.xml.sax.helpers.DefaultHandler;
+import org.xml.sax.helpers.NamespaceSupport;
+import org.xml.sax.helpers.XMLFilterImpl;
+
+/**
+ *
+ * <p>This filter uses partial-unmarshalling to unmarshall single NVD CVE
+ * entries for use with a SAX Parser.</p>
+ *
+ * <p>This code was based off of an example found on <a
+ * href="http://stackoverflow.com/questions/6484681/jaxb-partial-unmarshalling-elements-without-xmlrootelement">stackoverflow</a></p>
+ *
+ * @author Jeremy
+ */
+public class NvdCveXmlFilter extends XMLFilterImpl {
+
+    EntrySaveDelegate saveDelegate = null;
+
+    /**
+     * Register a EntrySaveDelegate object. When the last node of an entry is
+     * reached if a save delegate has been registered the save method will be
+     * invoked.
+     *
+     * @param delegate the delegate used to save an entry
+     */
+    public void registerSaveDelegate(EntrySaveDelegate delegate) {
+        this.saveDelegate = delegate;
+    }
+    /**
+     * The JAXBContext
+     */
+    private final JAXBContext context;
+
+    /**
+     * Constructs a new NvdCveXmlFilter
+     *
+     * @param context a JAXBContext
+     */
+    public NvdCveXmlFilter(JAXBContext context) {
+        this.context = context;
+    }
+    /**
+     * The locator object used for unmarshalling
+     */
+    private Locator locator = null;
+
+    /**
+     * Sets the document locator.
+     *
+     * @param loc the locator to use.
+     */
+    @Override
+    public void setDocumentLocator(Locator loc) {
+        this.locator = loc;
+        super.setDocumentLocator(loc);
+    }
+    /**
+     * Used to keep track of namespace bindings.
+     */
+    private NamespaceSupport nsSupport = new NamespaceSupport();
+
+    /**
+     * Stores the namespace prefix for use during unmarshalling.
+     *
+     * @param prefix the namespace prefix.
+     * @param uri the namespace.
+     * @throws SAXException is thrown is there is a SAXException.
+     */
+    @Override
+    public void startPrefixMapping(String prefix, String uri) throws SAXException {
+        nsSupport.pushContext();
+        nsSupport.declarePrefix(prefix, uri);
+        super.startPrefixMapping(prefix, uri);
+    }
+
+    /**
+     * Removes the namespace prefix from the local support object so that
+     * unmarshalling works correctly.
+     *
+     * @param prefix the prefix to remove.
+     * @throws SAXException is thrown is there is a SAXException.
+     */
+    @Override
+    public void endPrefixMapping(String prefix) throws SAXException {
+        nsSupport.popContext();
+        super.endPrefixMapping(prefix);
+    }
+    /**
+     * The UnmarshallerHandler.
+     */
+    private UnmarshallerHandler unmarshallerHandler;
+    /**
+     * Used to track how deep the SAX parser is in nested XML.
+     */
+    private int depth;
+
+    /**
+     * Fired when the SAX parser starts an element. This will either forward the
+     * event to the unmarshaller or create an unmarshaller if it is at the start
+     * of a new "entry".
+     *
+     * @param uri uri
+     * @param localName localName
+     * @param qName qName
+     * @param atts atts
+     * @throws SAXException is thrown if there is a SAXException.
+     */
+    @Override
+    public void startElement(String uri, String localName, String qName, Attributes atts) throws SAXException {
+
+        if (depth != 0) {
+            // we are in the middle of forwarding events.
+            // continue to do so.
+            depth += 1;
+            super.startElement(uri, localName, qName, atts);
+            return;
+        }
+
+        //old - for cve 1.2 uri.equals("http://nvd.nist.gov/feeds/cve/1.2")
+        if (uri.equals("http://scap.nist.gov/schema/feed/vulnerability/2.0") && localName.equals("entry")) {
+            Unmarshaller unmarshaller;
+            try {
+                unmarshaller = context.createUnmarshaller();
+            } catch (JAXBException e) {
+                throw new SAXException(e);
+            }
+            unmarshallerHandler = unmarshaller.getUnmarshallerHandler();
+            setContentHandler(unmarshallerHandler);
+
+            // fire SAX events to emulate the start of a new document.
+            unmarshallerHandler.startDocument();
+            unmarshallerHandler.setDocumentLocator(locator);
+
+            Enumeration e = nsSupport.getPrefixes();
+            while (e.hasMoreElements()) {
+                String prefix = (String) e.nextElement();
+                String uriToUse = nsSupport.getURI(prefix);
+
+                unmarshallerHandler.startPrefixMapping(prefix, uriToUse);
+            }
+            String defaultURI = nsSupport.getURI("");
+            if (defaultURI != null) {
+                unmarshallerHandler.startPrefixMapping("", defaultURI);
+            }
+
+            super.startElement(uri, localName, qName, atts);
+
+            // count the depth of elements and we will know when to stop.
+            depth = 1;
+        }
+    }
+
+    /**
+     * Processes the end of an element. If we are at depth 0 we unmarshall the
+     * Entry and pass it to the save delegate
+     *
+     * @param uri the uri of the current element
+     * @param localName the local name of the current element
+     * @param qName the qname of the current element
+     * @throws SAXException is thrown if there is a SAXException
+     */
+    @Override
+    public void endElement(String uri, String localName, String qName) throws SAXException {
+
+        // forward this event
+        super.endElement(uri, localName, qName);
+
+        if (depth != 0) {
+            depth -= 1;
+            if (depth == 0) {
+
+                // emulate the end of a document.
+                Enumeration e = nsSupport.getPrefixes();
+                while (e.hasMoreElements()) {
+                    String prefix = (String) e.nextElement();
+                    unmarshallerHandler.endPrefixMapping(prefix);
+                }
+                String defaultURI = nsSupport.getURI("");
+                if (defaultURI != null) {
+                    unmarshallerHandler.endPrefixMapping("");
+                }
+                unmarshallerHandler.endDocument();
+
+                // stop forwarding events by setting a dummy handler.
+                // XMLFilter doesn't accept null, so we have to give it something,
+                // hence a DefaultHandler, which does nothing.
+                setContentHandler(new DefaultHandler());
+
+                // then retrieve the fully unmarshalled object
+                try {
+                    JAXBElement<VulnerabilityType> result = (JAXBElement<VulnerabilityType>) unmarshallerHandler.getResult();
+                    VulnerabilityType entry = result.getValue();
+                    if (saveDelegate != null) {
+                        saveDelegate.saveEntry(entry);
+                    }
+                } catch (JAXBException je) { //we can continue with this exception.
+                    //TODO can I get the filename somewhere?
+                    Logger.getLogger(NvdCveXmlFilter.class.getName()).log(Level.SEVERE,
+                            "Unable to unmarshall NvdCVE (line " + locator.getLineNumber() + ").", je);
+                } catch (CorruptIndexException ex) {
+                    Logger.getLogger(NvdCveXmlFilter.class.getName()).log(Level.SEVERE, null, ex);
+                    throw new SAXException(ex);
+                } catch (IOException ex) {
+                    Logger.getLogger(NvdCveXmlFilter.class.getName()).log(Level.SEVERE, null, ex);
+                    throw new SAXException(ex);
+                } finally {
+                    unmarshallerHandler = null;
+                }
+            }
+        }
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/package-info.java b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/package-info.java
new file mode 100644
index 000000000..d0e4ee5f6
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/data/nvdcve/xml/package-info.java
@@ -0,0 +1,12 @@
+/**
+ * <html>
+ * <head>
+ * <title>org.codesecure.dependencycheck.data.nvdcve.xml</title>
+ * </head>
+ * <body>
+ * Contains classes used to parse the NVD CVE XML file.
+ * </body>
+ * </html>
+*/
+
+package org.codesecure.dependencycheck.data.nvdcve.xml;
diff --git a/src/main/java/org/codesecure/dependencycheck/dependency/Dependency.java b/src/main/java/org/codesecure/dependencycheck/dependency/Dependency.java
index 6df8792ed..1b3062572 100644
--- a/src/main/java/org/codesecure/dependencycheck/dependency/Dependency.java
+++ b/src/main/java/org/codesecure/dependencycheck/dependency/Dependency.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.dependency;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -30,10 +30,9 @@ import org.codesecure.dependencycheck.utils.FileUtils;
 
 /**
  * A program dependency. This object is one of the core components within
- * DependencyCheck. It is used to collect information about the dependency
- * in the form of evidence. The Evidence is then used to determine if there
- * are any known, published, vulnerabilities associated with the program
- * dependency.
+ * DependencyCheck. It is used to collect information about the dependency in
+ * the form of evidence. The Evidence is then used to determine if there are any
+ * known, published, vulnerabilities associated with the program dependency.
  *
  * @author Jeremy Long (jeremy.long@gmail.com)
  */
@@ -88,10 +87,12 @@ public class Dependency {
         productEvidence = new EvidenceCollection();
         versionEvidence = new EvidenceCollection();
         identifiers = new ArrayList<Identifier>();
+        vulnerabilities = new ArrayList<Vulnerability>();
     }
 
     /**
      * Constructs a new Dependency object.
+     *
      * @param file the File to create the dependency object from.
      */
     public Dependency(File file) {
@@ -123,6 +124,7 @@ public class Dependency {
 
     /**
      * Sets the actual file path of the dependency on disk.
+     *
      * @param actualFilePath the file path of the dependency.
      */
     public void setActualFilePath(String actualFilePath) {
@@ -140,6 +142,7 @@ public class Dependency {
 
     /**
      * Sets the file path of the dependency.
+     *
      * @param filePath the file path of the dependency.
      */
     public void setFilePath(String filePath) {
@@ -147,9 +150,9 @@ public class Dependency {
     }
 
     /**
-     * <p>Gets the file path of the dependency.</p>
-     * <p><b>NOTE:</b> This may not be the actual path of the file on disk. The
-     * actual path of the file on disk can be obtained via the getActualFilePath().</p>
+     * <p>Gets the file path of the dependency.</p> <p><b>NOTE:</b> This may not
+     * be the actual path of the file on disk. The actual path of the file on
+     * disk can be obtained via the getActualFilePath().</p>
      *
      * @return the file path of the dependency.
      */
@@ -230,7 +233,8 @@ public class Dependency {
     }
 
     /**
-     * Adds an entry to the list of detected Identifiers for the dependency file.
+     * Adds an entry to the list of detected Identifiers for the dependency
+     * file.
      *
      * @param type the type of identifier (such as CPE).
      * @param value the value of the identifier.
@@ -308,8 +312,10 @@ public class Dependency {
     public void setAnalysisExceptions(List<Exception> analysisExceptions) {
         this.analysisExceptions = analysisExceptions;
     }
+
     /**
      * Adds an exception to the analysis exceptions collection.
+     *
      * @param ex an exception.
      */
     public void addAnalysisException(Exception ex) {
@@ -373,12 +379,6 @@ public class Dependency {
 
         String fnd = str.toLowerCase();
 
-        //TODO add the filename is analyzed and added as evidence
-        //TODO remove special characters from filename and check this (including spaces)
-        if (this.fileName != null && this.fileName.contains(fnd)) {
-            return true;
-        }
-
         if (vendorEvidence.containsUsedString(str)) {
             return true;
         }
@@ -390,6 +390,28 @@ public class Dependency {
         }
         return false;
     }
+    /**
+     * A list of vulnerabilities for this dependency
+     */
+    private List<Vulnerability> vulnerabilities;
+
+    /**
+     * Get the list of vulnerabilities
+     *
+     * @return the list of vulnerabilities
+     */
+    public List<Vulnerability> getVulnerabilities() {
+        return vulnerabilities;
+    }
+
+    /**
+     * Set the value of vulnerabilities
+     *
+     * @param vulnerabilities new value of vulnerabilities
+     */
+    public void setVulnerabilities(List<Vulnerability> vulnerabilities) {
+        this.vulnerabilities = vulnerabilities;
+    }
 
     private void determineHashes(File file) {
         String md5 = null;
@@ -405,4 +427,13 @@ public class Dependency {
         this.setMd5sum(md5);
         this.setSha1sum(sha1);
     }
+
+    /**
+     * Adds a vulnerability to the dependency.
+     *
+     * @param vulnerability a vulnerability outlining a vulnerability.
+     */
+    public void addVulnerability(Vulnerability vulnerability) {
+        this.vulnerabilities.add(vulnerability);
+    }
 }
diff --git a/src/main/java/org/codesecure/dependencycheck/dependency/Evidence.java b/src/main/java/org/codesecure/dependencycheck/dependency/Evidence.java
index 169fd869e..e0d7ce18d 100644
--- a/src/main/java/org/codesecure/dependencycheck/dependency/Evidence.java
+++ b/src/main/java/org/codesecure/dependencycheck/dependency/Evidence.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.dependency;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -178,6 +178,7 @@ public class Evidence {
 
     /**
      * Implements the hashCode for Evidence.
+     *
      * @return hash code.
      */
     @Override
@@ -192,6 +193,7 @@ public class Evidence {
 
     /**
      * Implements equals for Evidence.
+     *
      * @param that an object to check the equality of.
      * @return whether the two objects are equal.
      */
@@ -210,7 +212,9 @@ public class Evidence {
     }
 
     /**
-     * Simple equality test for use within the equals method. This does a case insensitive compare.
+     * Simple equality test for use within the equals method. This does a case
+     * insensitive compare.
+     *
      * @param l a string to compare.
      * @param r another string to compare.
      * @return whether the two strings are the same.
diff --git a/src/main/java/org/codesecure/dependencycheck/dependency/EvidenceCollection.java b/src/main/java/org/codesecure/dependencycheck/dependency/EvidenceCollection.java
index a7128b222..13650c495 100644
--- a/src/main/java/org/codesecure/dependencycheck/dependency/EvidenceCollection.java
+++ b/src/main/java/org/codesecure/dependencycheck/dependency/EvidenceCollection.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.dependency;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -31,7 +31,8 @@ import org.codesecure.dependencycheck.utils.Filter;
 public class EvidenceCollection implements Iterable<Evidence> {
 
     /**
-     * Used to iterate over high confidence evidence contained in the collection.
+     * Used to iterate over high confidence evidence contained in the
+     * collection.
      */
     private static final Filter<Evidence> HIGH_CONFIDENCE =
             new Filter<Evidence>() {
@@ -41,7 +42,8 @@ public class EvidenceCollection implements Iterable<Evidence> {
                 }
             };
     /**
-     * Used to iterate over medium confidence evidence contained in the collection.
+     * Used to iterate over medium confidence evidence contained in the
+     * collection.
      */
     private static final Filter<Evidence> MEDIUM_CONFIDENCE =
             new Filter<Evidence>() {
@@ -61,7 +63,8 @@ public class EvidenceCollection implements Iterable<Evidence> {
                 }
             };
     /**
-     * Used to iterate over evidence that has was used (aka read) from the collection.
+     * Used to iterate over evidence that has was used (aka read) from the
+     * collection.
      */
     private static final Filter<Evidence> EVIDENCE_USED =
             new Filter<Evidence>() {
@@ -73,7 +76,9 @@ public class EvidenceCollection implements Iterable<Evidence> {
 
     /**
      * Used to iterate over evidence of the specified confidence.
-     * @param confidence the confidence level for the evidence to be iterated over.
+     *
+     * @param confidence the confidence level for the evidence to be iterated
+     * over.
      * @return Iterable<Evidence>.
      */
     public final Iterable<Evidence> iterator(Evidence.Confidence confidence) {
@@ -98,6 +103,7 @@ public class EvidenceCollection implements Iterable<Evidence> {
 
     /**
      * Adds evidence to the collection.
+     *
      * @param e Evidence.
      */
     public void addEvidence(Evidence e) {
@@ -119,16 +125,17 @@ public class EvidenceCollection implements Iterable<Evidence> {
     }
 
     /**
-     * Adds term to the weighting collection. The terms added here are used later
-     * to boost the score of other terms. This is a way of combining evidence from
-     * multiple sources to boost the confidence of the given evidence.
+     * Adds term to the weighting collection. The terms added here are used
+     * later to boost the score of other terms. This is a way of combining
+     * evidence from multiple sources to boost the confidence of the given
+     * evidence.
      *
-     * Example: The term 'Apache' is found in the manifest of a JAR and is added to the
-     * Collection. When we parse the package names within the JAR file we may add
-     * these package names to the "weighted" strings collection to boost the score
-     * in the Lucene query. That way when we construct the Lucene query we find the
-     * term Apache in the collection AND in the weighted strings; as such, we will
-     * boost the confidence of the term Apache.
+     * Example: The term 'Apache' is found in the manifest of a JAR and is added
+     * to the Collection. When we parse the package names within the JAR file we
+     * may add these package names to the "weighted" strings collection to boost
+     * the score in the Lucene query. That way when we construct the Lucene
+     * query we find the term Apache in the collection AND in the weighted
+     * strings; as such, we will boost the confidence of the term Apache.
      *
      * @param str to add to the weighting collection.
      */
@@ -148,6 +155,7 @@ public class EvidenceCollection implements Iterable<Evidence> {
 
     /**
      * Returns the set of evidence.
+     *
      * @return the set of evidence.
      */
     public Set<Evidence> getEvidence() {
@@ -156,6 +164,7 @@ public class EvidenceCollection implements Iterable<Evidence> {
 
     /**
      * Implements the iterator interface for the Evidence Collection.
+     *
      * @return an Iterator<Evidence>.
      */
     public Iterator<Evidence> iterator() {
@@ -164,6 +173,7 @@ public class EvidenceCollection implements Iterable<Evidence> {
 
     /**
      * Used to determine if a given string was used (aka read).
+     *
      * @param text the string to search for.
      * @return whether or not the string was used.
      */
@@ -184,6 +194,7 @@ public class EvidenceCollection implements Iterable<Evidence> {
     /**
      * Returns whether or not the collection contains evidence of a specified
      * Confidence.
+     *
      * @param confidence A Confidence value.
      * @return boolean.
      */
@@ -232,6 +243,7 @@ public class EvidenceCollection implements Iterable<Evidence> {
 
     /**
      * Returns a string of evidence 'values'.
+     *
      * @return a string containing the evidence.
      */
     @Override
@@ -245,6 +257,7 @@ public class EvidenceCollection implements Iterable<Evidence> {
 
     /**
      * Returns the number of elements in the EvidenceCollection.
+     *
      * @return the number of elements in the collection.
      */
     public int size() {
diff --git a/src/main/java/org/codesecure/dependencycheck/dependency/Identifier.java b/src/main/java/org/codesecure/dependencycheck/dependency/Identifier.java
index a0550e9e5..489442d3c 100644
--- a/src/main/java/org/codesecure/dependencycheck/dependency/Identifier.java
+++ b/src/main/java/org/codesecure/dependencycheck/dependency/Identifier.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.dependency;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -26,6 +26,7 @@ public class Identifier {
 
     /**
      * Constructs a new Identifier with the specified data.
+     *
      * @param type the identifier type.
      * @param value the identifier value.
      * @param title the identifier title.
@@ -37,8 +38,10 @@ public class Identifier {
         this.title = title;
         this.url = url;
     }
+
     /**
      * Constructs a new Identifier with the specified data.
+     *
      * @param type the identifier type.
      * @param value the identifier value.
      * @param title the identifier title.
@@ -159,5 +162,4 @@ public class Identifier {
     public void setDescription(String description) {
         this.description = description;
     }
-
 }
diff --git a/src/main/java/org/codesecure/dependencycheck/dependency/Reference.java b/src/main/java/org/codesecure/dependencycheck/dependency/Reference.java
new file mode 100644
index 000000000..eac2aec7c
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/dependency/Reference.java
@@ -0,0 +1,95 @@
+package org.codesecure.dependencycheck.dependency;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+/**
+ * An external reference for a vulnerability. This contains a name, URL, and a
+ * source.
+ *
+ * @author Jeremy
+ */
+public class Reference {
+
+    /**
+     * The name of the reference.
+     */
+    private String name;
+
+    /**
+     * Get the value of name
+     *
+     * @return the value of name
+     */
+    public String getName() {
+        return name;
+    }
+
+    /**
+     * Set the value of name
+     *
+     * @param name new value of name
+     */
+    public void setName(String name) {
+        this.name = name;
+    }
+    /**
+     * the url for the reference
+     */
+    private String url;
+
+    /**
+     * Get the value of url
+     *
+     * @return the value of url
+     */
+    public String getUrl() {
+        return url;
+    }
+
+    /**
+     * Set the value of url
+     *
+     * @param url new value of url
+     */
+    public void setUrl(String url) {
+        this.url = url;
+    }
+    /**
+     * the source of the reference.
+     */
+    private String source;
+
+    /**
+     * Get the value of source
+     *
+     * @return the value of source
+     */
+    public String getSource() {
+        return source;
+    }
+
+    /**
+     * Set the value of source
+     *
+     * @param source new value of source
+     */
+    public void setSource(String source) {
+        this.source = source;
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/dependency/Vulnerability.java b/src/main/java/org/codesecure/dependencycheck/dependency/Vulnerability.java
new file mode 100644
index 000000000..adc7e1f20
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/dependency/Vulnerability.java
@@ -0,0 +1,106 @@
+package org.codesecure.dependencycheck.dependency;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+import java.util.ArrayList;
+import java.util.List;
+
+/**
+ * Contains the information about a vulnerability.
+ *
+ * @author Jeremy
+ */
+public class Vulnerability {
+
+    /**
+     * The name of the vulnerability
+     */
+    private String name;
+
+    /**
+     * Get the value of name
+     *
+     * @return the value of name
+     */
+    public String getName() {
+        return name;
+    }
+
+    /**
+     * Set the value of name
+     *
+     * @param name new value of name
+     */
+    public void setName(String name) {
+        this.name = name;
+    }
+    /**
+     * the description of the vulnerability
+     */
+    private String description;
+
+    /**
+     * Get the value of description
+     *
+     * @return the value of description
+     */
+    public String getDescription() {
+        return description;
+    }
+
+    /**
+     * Set the value of description
+     *
+     * @param description new value of description
+     */
+    public void setDescription(String description) {
+        this.description = description;
+    }
+    /**
+     * References for this vulnerability
+     */
+    private List<Reference> references = new ArrayList<Reference>();
+
+    /**
+     * Get the value of references
+     *
+     * @return the value of references
+     */
+    public List<Reference> getReferences() {
+        return references;
+    }
+
+    /**
+     * Set the value of references
+     *
+     * @param references new value of references
+     */
+    public void setReferences(List<Reference> references) {
+        this.references = references;
+    }
+
+    /**
+     * Adds a reference to the references collection
+     *
+     * @param ref a reference for the vulnerability
+     */
+    public void addReference(Reference ref) {
+        this.references.add(ref);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/reporting/ReportGenerator.java b/src/main/java/org/codesecure/dependencycheck/reporting/ReportGenerator.java
index 7ad9ef58c..7de535375 100644
--- a/src/main/java/org/codesecure/dependencycheck/reporting/ReportGenerator.java
+++ b/src/main/java/org/codesecure/dependencycheck/reporting/ReportGenerator.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.reporting;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -50,7 +50,8 @@ public class ReportGenerator {
      * @param applicationName the name of the application that was scanned.
      * @param dependencies a list of dependencies to include in the report.
      * @throws IOException is thrown when the template file does not exist.
-     * @throws Exception is thrown if there is an error writting out the reports.
+     * @throws Exception is thrown if there is an error writting out the
+     * reports.
      */
     public void generateReports(String outputDir, String applicationName, List<Dependency> dependencies) throws IOException, Exception {
 
@@ -66,7 +67,9 @@ public class ReportGenerator {
     }
 
     /**
-     * much of this code is from http://stackoverflow.com/questions/2931516/loading-velocity-template-inside-a-jar-file
+     * much of this code is from
+     * http://stackoverflow.com/questions/2931516/loading-velocity-template-inside-a-jar-file
+     *
      * @param templateName the name of the template to load.
      * @param outFileName The filename and path to write the report to.
      * @param properties a map of properties to load into the velocity context.
diff --git a/src/main/java/org/codesecure/dependencycheck/utils/Checksum.java b/src/main/java/org/codesecure/dependencycheck/utils/Checksum.java
index 884e2ef43..454994474 100644
--- a/src/main/java/org/codesecure/dependencycheck/utils/Checksum.java
+++ b/src/main/java/org/codesecure/dependencycheck/utils/Checksum.java
@@ -23,14 +23,16 @@ import java.util.logging.Logger;
 public class Checksum {
 
     /**
-     * <p>Creates the cryptographic checksum of a given file using the specified alogirhtm.</p>
-     * <p>This algorithm was copied and heavily modified from Real's How To: http://www.rgagnon.com/javadetails/java-0416.html</p>
+     * <p>Creates the cryptographic checksum of a given file using the specified
+     * alogirhtm.</p> <p>This algorithm was copied and heavily modified from
+     * Real's How To: http://www.rgagnon.com/javadetails/java-0416.html</p>
      *
      * @param algorithm the algorithm to use to calculate the checksum
      * @param file the file to calculate the checksum for
      * @return the checksum
      * @throws FileNotFoundException when the file does not exist
-     * @throws NoSuchAlgorithmException when an algorithm is specified that does not exist
+     * @throws NoSuchAlgorithmException when an algorithm is specified that does
+     * not exist
      */
     public static byte[] getChecksum(String algorithm, File file) throws FileNotFoundException, NoSuchAlgorithmException {
         InputStream fis = new FileInputStream(file);
@@ -86,7 +88,8 @@ public class Checksum {
     /**
      * <p>Converts a byte array into a hex string.</p>
      *
-     * <p>This method was copied from <a href="http://www.rgagnon.com/javadetails/java-0596.html">http://www.rgagnon.com/javadetails/java-0596.html</a></p>
+     * <p>This method was copied from <a
+     * href="http://www.rgagnon.com/javadetails/java-0596.html">http://www.rgagnon.com/javadetails/java-0596.html</a></p>
      *
      * @param raw a byte array
      * @return the hex representation of the byte array
diff --git a/src/main/java/org/codesecure/dependencycheck/utils/CliParser.java b/src/main/java/org/codesecure/dependencycheck/utils/CliParser.java
index 776d1c3e4..9175f9091 100644
--- a/src/main/java/org/codesecure/dependencycheck/utils/CliParser.java
+++ b/src/main/java/org/codesecure/dependencycheck/utils/CliParser.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.utils;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -110,10 +110,12 @@ public final class CliParser {
 
     /**
      * Validates whether or not the path(s) points at a file that exists; if the
-     * path(s) does not point to an existing file a FileNotFoundException is thrown.
+     * path(s) does not point to an existing file a FileNotFoundException is
+     * thrown.
      *
      * @param paths the paths to validate if they exists
-     * @throws FileNoteFoundException is thrown if one of the paths being validated does not exist.
+     * @throws FileNoteFoundException is thrown if one of the paths being
+     * validated does not exist.
      */
     private void validatePathExists(String[] paths) throws FileNotFoundException {
         for (String path : paths) {
@@ -123,10 +125,12 @@ public final class CliParser {
 
     /**
      * Validates whether or not the path points at a file that exists; if the
-     * path does not point to an existing file a FileNotFoundException is thrown.
+     * path does not point to an existing file a FileNotFoundException is
+     * thrown.
      *
      * @param paths the paths to validate if they exists
-     * @throws FileNoteFoundException is thrown if the path being validated does not exist.
+     * @throws FileNoteFoundException is thrown if the path being validated does
+     * not exist.
      */
     private void validatePathExists(String path) throws FileNotFoundException {
         File f = new File(path);
@@ -250,7 +254,8 @@ public final class CliParser {
     }
 
     /**
-     * Retrieves the file command line parameter(s) specified for the 'cpe' argument.
+     * Retrieves the file command line parameter(s) specified for the 'cpe'
+     * argument.
      *
      * @return the file paths specified on the command line
      */
@@ -259,7 +264,8 @@ public final class CliParser {
     }
 
     /**
-     * Retrieves the file command line parameter(s) specified for the 'scan' argument.
+     * Retrieves the file command line parameter(s) specified for the 'scan'
+     * argument.
      *
      * @return the file paths specified on the command line for scan
      */
@@ -269,7 +275,9 @@ public final class CliParser {
     }
 
     /**
-     * returns the directory to write the reports to specified on the command line.
+     * returns the directory to write the reports to specified on the command
+     * line.
+     *
      * @return the path to the reports directory.
      */
     public String getReportDirectory() {
@@ -278,6 +286,7 @@ public final class CliParser {
 
     /**
      * Returns the application name specified on the command line.
+     *
      * @return the applicatoin name.
      */
     public String getApplicationName() {
@@ -287,7 +296,7 @@ public final class CliParser {
     /**
      * <p>Prints the manifest information to standard output:</p>
      * <ul><li>Implementation-Title: ${pom.name}</li>
-     *     <li>Implementation-Version: ${pom.version}</li></ul>
+     * <li>Implementation-Version: ${pom.version}</li></ul>
      */
     public void printVersionInfo() {
         String version = String.format("%s version %s",
@@ -297,8 +306,8 @@ public final class CliParser {
     }
 
     /**
-     * Checks if the auto update feature has been disabled. If it has been disabled
-     * via the command line this will return false.
+     * Checks if the auto update feature has been disabled. If it has been
+     * disabled via the command line this will return false.
      *
      * @return if auto-update is allowed.
      */
@@ -321,35 +330,43 @@ public final class CliParser {
          */
         public static final String SCAN_SHORT = "s";
         /**
-         * The long CLI argument name specifing the path to the CPE.XML file to import
+         * The long CLI argument name specifing the path to the CPE.XML file to
+         * import
          */
         public static final String CPE = "cpe";
         /**
-         * The short CLI argument name specifing the path to the CPE.XML file to import
+         * The short CLI argument name specifing the path to the CPE.XML file to
+         * import
          */
         public static final String CPE_SHORT = "c";
         /**
-         * The long CLI argument name specifing that the CPE/CVE/etc. data should not be automatically updated.
+         * The long CLI argument name specifing that the CPE/CVE/etc. data
+         * should not be automatically updated.
          */
         public static final String DISABLE_AUTO_UPDATE = "noupdate";
         /**
-         * The short CLI argument name specifing that the CPE/CVE/etc. data should not be automatically updated.
+         * The short CLI argument name specifing that the CPE/CVE/etc. data
+         * should not be automatically updated.
          */
         public static final String DISABLE_AUTO_UPDATE_SHORT = "n";
         /**
-         * The long CLI argument name specifing the directory to write the reports to.
+         * The long CLI argument name specifing the directory to write the
+         * reports to.
          */
         public static final String OUT = "out";
         /**
-         * The short CLI argument name specifing the directory to write the reports to.
+         * The short CLI argument name specifing the directory to write the
+         * reports to.
          */
         public static final String OUT_SHORT = "o";
         /**
-         * The long CLI argument name specifing the name of the application to be scanned.
+         * The long CLI argument name specifing the name of the application to
+         * be scanned.
          */
         public static final String APPNAME = "app";
         /**
-         * The short CLI argument name specifing the name of the application to be scanned.
+         * The short CLI argument name specifing the name of the application to
+         * be scanned.
          */
         public static final String APPNAME_SHORT = "a";
         /**
@@ -377,11 +394,13 @@ public final class CliParser {
          */
         public static final String ADVANCED_HELP = "advancedhelp";
         /**
-         * The short CLI argument name for setting the location of an additional properties file.
+         * The short CLI argument name for setting the location of an additional
+         * properties file.
          */
         public static final String PROP_SHORT = "p";
         /**
-         * The CLI argument name for setting the location of an additional properties file.
+         * The CLI argument name for setting the location of an additional
+         * properties file.
          */
         public static final String PROP = "propertyfile";
     }
diff --git a/src/main/java/org/codesecure/dependencycheck/utils/DownloadFailedException.java b/src/main/java/org/codesecure/dependencycheck/utils/DownloadFailedException.java
index bdb6f362e..6bc173b9f 100644
--- a/src/main/java/org/codesecure/dependencycheck/utils/DownloadFailedException.java
+++ b/src/main/java/org/codesecure/dependencycheck/utils/DownloadFailedException.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.utils;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -38,6 +38,7 @@ public class DownloadFailedException extends IOException {
 
     /**
      * Creates a new DownloadFailedException.
+     *
      * @param msg a message for the exception.
      */
     public DownloadFailedException(String msg) {
@@ -46,6 +47,7 @@ public class DownloadFailedException extends IOException {
 
     /**
      * Creates a new DownloadFailedException.
+     *
      * @param ex the cause of the download failure.
      */
     public DownloadFailedException(Throwable ex) {
@@ -54,6 +56,7 @@ public class DownloadFailedException extends IOException {
 
     /**
      * Creates a new DownloadFailedException.
+     *
      * @param msg a message for the exception.
      * @param ex the cause of the download failure.
      */
diff --git a/src/main/java/org/codesecure/dependencycheck/utils/Downloader.java b/src/main/java/org/codesecure/dependencycheck/utils/Downloader.java
index 3a984a1a5..54ef4facb 100644
--- a/src/main/java/org/codesecure/dependencycheck/utils/Downloader.java
+++ b/src/main/java/org/codesecure/dependencycheck/utils/Downloader.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.utils;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -47,9 +47,11 @@ public class Downloader {
 
     /**
      * Retrieves a file from a given URL and saves it to the outputPath.
+     *
      * @param url the URL of the file to download.
      * @param outputPath the path to the save the file to.
-     * @throws DownloadFailedException is thrown if there is an error downloading the file.
+     * @throws DownloadFailedException is thrown if there is an error
+     * downloading the file.
      */
     public static void fetchFile(URL url, String outputPath) throws DownloadFailedException {
         fetchFile(url, outputPath, false);
@@ -57,10 +59,13 @@ public class Downloader {
 
     /**
      * Retrieves a file from a given URL and saves it to the outputPath.
+     *
      * @param url the URL of the file to download.
      * @param outputPath the path to the save the file to.
-     * @param unzip true/false indicating that the file being retrieved is gzipped and if true, should be uncompressed before writting to the file.
-     * @throws DownloadFailedException is thrown if there is an error downloading the file.
+     * @param unzip true/false indicating that the file being retrieved is
+     * gzipped and if true, should be uncompressed before writting to the file.
+     * @throws DownloadFailedException is thrown if there is an error
+     * downloading the file.
      */
     public static void fetchFile(URL url, String outputPath, boolean unzip) throws DownloadFailedException {
         File f = new File(outputPath);
@@ -69,9 +74,11 @@ public class Downloader {
 
     /**
      * Retrieves a file from a given URL and saves it to the outputPath.
+     *
      * @param url the URL of the file to download.
      * @param outputPath the path to the save the file to.
-     * @throws DownloadFailedException is thrown if there is an error downloading the file.
+     * @throws DownloadFailedException is thrown if there is an error
+     * downloading the file.
      */
     public static void fetchFile(URL url, File outputPath) throws DownloadFailedException {
         fetchFile(url, outputPath, false);
@@ -79,10 +86,13 @@ public class Downloader {
 
     /**
      * Retrieves a file from a given URL and saves it to the outputPath.
+     *
      * @param url the URL of the file to download.
      * @param outputPath the path to the save the file to.
-     * @param unzip true/false indicating that the file being retrieved is gzipped and if true, should be uncompressed before writting to the file.
-     * @throws DownloadFailedException is thrown if there is an error downloading the file.
+     * @param unzip true/false indicating that the file being retrieved is
+     * gzipped and if true, should be uncompressed before writting to the file.
+     * @throws DownloadFailedException is thrown if there is an error
+     * downloading the file.
      */
     public static void fetchFile(URL url, File outputPath, boolean unzip) throws DownloadFailedException {
         HttpURLConnection conn = null;
diff --git a/src/main/java/org/codesecure/dependencycheck/utils/FileUtils.java b/src/main/java/org/codesecure/dependencycheck/utils/FileUtils.java
index 902d0a92f..b2a7545b7 100644
--- a/src/main/java/org/codesecure/dependencycheck/utils/FileUtils.java
+++ b/src/main/java/org/codesecure/dependencycheck/utils/FileUtils.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.utils;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -33,6 +33,7 @@ public class FileUtils {
 
     /**
      * Returns the (lowercase) file extension for a specified file.
+     *
      * @param fileName the file name to retrieve the file extension from.
      * @return the file extension.
      */
diff --git a/src/main/java/org/codesecure/dependencycheck/utils/Filter.java b/src/main/java/org/codesecure/dependencycheck/utils/Filter.java
index 8e08b62f6..495d52005 100644
--- a/src/main/java/org/codesecure/dependencycheck/utils/Filter.java
+++ b/src/main/java/org/codesecure/dependencycheck/utils/Filter.java
@@ -6,12 +6,12 @@ import java.util.NoSuchElementException;
 /*
  * This is an abstract filter that can be used to filter iterable list.
  *
- * This Filter class was copied from: http://erikras.com/2008/01/18/the-filter-pattern-java-conditional-abstraction-with-iterables/
+ * This Filter class was copied from:
+ * http://erikras.com/2008/01/18/the-filter-pattern-java-conditional-abstraction-with-iterables/
  *
- * Erik Rasmussen - © 2006 - 2012 All Rights Reserved.
- * @author Erik Rasmussen https://plus.google.com/115403795880834599019/?rel=author
+ * Erik Rasmussen - © 2006 - 2012 All Rights Reserved. @author Erik Rasmussen
+ * https://plus.google.com/115403795880834599019/?rel=author
  */
-
 public abstract class Filter<T> {
 
     public abstract boolean passes(T object);
diff --git a/src/main/java/org/codesecure/dependencycheck/utils/InvalidSettingException.java b/src/main/java/org/codesecure/dependencycheck/utils/InvalidSettingException.java
new file mode 100644
index 000000000..ed27520d5
--- /dev/null
+++ b/src/main/java/org/codesecure/dependencycheck/utils/InvalidSettingException.java
@@ -0,0 +1,66 @@
+package org.codesecure.dependencycheck.utils;
+/*
+ * This file is part of DependencyCheck.
+ *
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
+ *
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ *
+ * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
+ */
+
+import java.io.IOException;
+
+/**
+ * An exception used when an error occurs reading a setting.
+ *
+ * @author Jeremy Long (jeremy.long@gmail.com)
+ */
+public class InvalidSettingException extends IOException {
+
+    private static final long serialVersionUID = 1L;
+
+    /**
+     * Creates a new InvalidSettingException.
+     */
+    public InvalidSettingException() {
+        super();
+    }
+
+    /**
+     * Creates a new InvalidSettingException.
+     *
+     * @param msg a message for the exception.
+     */
+    public InvalidSettingException(String msg) {
+        super(msg);
+    }
+
+    /**
+     * Creates a new InvalidSettingException.
+     *
+     * @param ex the cause of the setting exception.
+     */
+    public InvalidSettingException(Throwable ex) {
+        super(ex);
+    }
+
+    /**
+     * Creates a new InvalidSettingException.
+     *
+     * @param msg a message for the exception.
+     * @param ex the cause of the setting exception.
+     */
+    public InvalidSettingException(String msg, Throwable ex) {
+        super(msg, ex);
+    }
+}
diff --git a/src/main/java/org/codesecure/dependencycheck/utils/Settings.java b/src/main/java/org/codesecure/dependencycheck/utils/Settings.java
index 6817dbc7d..caecabfcc 100644
--- a/src/main/java/org/codesecure/dependencycheck/utils/Settings.java
+++ b/src/main/java/org/codesecure/dependencycheck/utils/Settings.java
@@ -2,18 +2,18 @@ package org.codesecure.dependencycheck.utils;
 /*
  * This file is part of DependencyCheck.
  *
- * DependencyCheck is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * DependencyCheck is free software: you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the Free
+ * Software Foundation, either version 3 of the License, or (at your option) any
+ * later version.
  *
- * DependencyCheck is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * DependencyCheck is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
  *
- * You should have received a copy of the GNU General Public License
- * along with DependencyCheck. If not, see http://www.gnu.org/licenses/.
+ * You should have received a copy of the GNU General Public License along with
+ * DependencyCheck. If not, see http://www.gnu.org/licenses/.
  *
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
  */
@@ -39,7 +39,8 @@ public class Settings {
     public abstract class KEYS {
 
         /**
-         * The properties key for the path where the CPE Lucene Index will be stored.
+         * The properties key for the path where the CPE Lucene Index will be
+         * stored.
          */
         public static final String CPE_INDEX = "cpe";
         /**
@@ -51,15 +52,43 @@ public class Settings {
          */
         public static final String CPE_META_URL = "cpe.meta.url";
         /**
-         * The properties key for the path where the CCE Lucene Index will be stored.
+         * The properties key for the path where the CCE Lucene Index will be
+         * stored.
          */
         public static final String CVE_INDEX = "cve";
+        /**
+         * The properties key for the URL to retrieve the "meta" data from about
+         * the CVE entries.
+         */
+        public static final String CVE_META_URL = "cve.url.meta";
+        /**
+         * The properties key for the URL to retrieve the recently modified and
+         * added CVE entries (last 8 days).
+         */
+        public static final String CVE_MODIFIED_URL = "cve.url.modified";
+        /**
+         * The properties key for the URL to retrieve the recently modified and
+         * added CVE entries (last 8 days).
+         */
+        public static final String CVE_MODIFIED_VALID_FOR_DAYS = "cve.url.modified.validfordays";
+        /**
+         * The properties key for the telling us how many cvr.url.* URLs exists.
+         * This is used in combination with CVE_BASE_URL to be able to retrieve
+         * the URLs for all of the files that make up the NVD CVE listing.
+         */
+        public static final String CVE_URL_COUNT = "cve.url.count";
+        /**
+         * The properties key for the "base" property key for the CVE URLs (e.g.
+         * cve.url.1, cve.url.2, cve.url.n).
+         */
+        public static final String CVE_BASE_URL = "cve.url.";
         /**
          * The properties key for the proxy url.
          */
         public static final String PROXY_URL = "proxy.url";
         /**
-         * The properties key for the proxy port - this must be an integer value.
+         * The properties key for the proxy port - this must be an integer
+         * value.
          */
         public static final String PROXY_PORT = "proxy.port";
         /**
@@ -72,7 +101,8 @@ public class Settings {
     private Properties props = null;
 
     /**
-     * Private contructor for the Settings class. This class loads the properties files.
+     * Private constructor for the Settings class. This class loads the
+     * properties files.
      */
     private Settings() {
         InputStream in = this.getClass().getClassLoader().getResourceAsStream(PROPERTIES_FILE);
@@ -84,9 +114,9 @@ public class Settings {
         }
     }
 
-
     /**
      * Sets a property value.
+     *
      * @param key the key for the property.
      * @param value the value for the property.
      */
@@ -95,14 +125,16 @@ public class Settings {
     }
 
     /**
-     * Merges a new properties file into the current properties. This
-     * method allows for the loading of a user provided properties file.<br/><br/>
+     * Merges a new properties file into the current properties. This method
+     * allows for the loading of a user provided properties file.<br/><br/>
      * Note: even if using this method - system properties will be loaded before
      * properties loaded from files.
      *
      * @param filePath the path to the properties file to merge.
-     * @throws FileNotFoundException is thrown when the filePath points to a non-existent file.
-     * @throws IOException is thrown when there is an exception loading/merging the properties.
+     * @throws FileNotFoundException is thrown when the filePath points to a
+     * non-existent file.
+     * @throws IOException is thrown when there is an exception loading/merging
+     * the properties.
      */
     public static void mergeProperties(String filePath) throws FileNotFoundException, IOException {
         FileInputStream fis = new FileInputStream(filePath);
@@ -110,13 +142,14 @@ public class Settings {
     }
 
     /**
-     * Merges a new properties file into the current properties. This
-     * method allows for the loading of a user provided properties file.<br/><br/>
+     * Merges a new properties file into the current properties. This method
+     * allows for the loading of a user provided properties file.<br/><br/>
      * Note: even if using this method - system properties will be loaded before
      * properties loaded from files.
      *
      * @param stream an Input Stream pointing at a properties file to merge.
-     * @throws IOException is thrown when there is an exception loading/merging the properties
+     * @throws IOException is thrown when there is an exception loading/merging
+     * the properties
      */
     public static void mergeProperties(InputStream stream) throws IOException {
         INSTANCE.props.load(stream);
@@ -125,8 +158,8 @@ public class Settings {
     /**
      * Returns a value from the properties file. If the value was specified as a
      * system property or passed in via the -Dprop=value argument - this method
-     * will return the value from the system properties before the values in
-     * the contained configuration file.
+     * will return the value from the system properties before the values in the
+     * contained configuration file.
      *
      * @param key the key to lookup within the properties file.
      * @param defaultValue the default value for the requested property.
@@ -143,8 +176,8 @@ public class Settings {
     /**
      * Returns a value from the properties file. If the value was specified as a
      * system property or passed in via the -Dprop=value argument - this method
-     * will return the value from the system properties before the values in
-     * the contained configuration file.
+     * will return the value from the system properties before the values in the
+     * contained configuration file.
      *
      * @param key the key to lookup within the properties file.
      * @return the property from the properties file.
@@ -154,40 +187,65 @@ public class Settings {
     }
 
     /**
-     * Returns an int value from the properties file. If the value was specified as a
-     * system property or passed in via the -Dprop=value argument - this method
-     * will return the value from the system properties before the values in
-     * the contained configuration file.
+     * Returns an int value from the properties file. If the value was specified
+     * as a system property or passed in via the -Dprop=value argument - this
+     * method will return the value from the system properties before the values
+     * in the contained configuration file.
      *
      * @param key the key to lookup within the properties file.
      * @return the property from the properties file.
+     * @throws InvalidSettingException is thrown if there is an error retrieving
+     * the setting.
      */
-    public static int getInt(String key) {
-        return Integer.parseInt(Settings.getString(key));
-    }
-    /**
-     * Returns a long value from the properties file. If the value was specified as a
-     * system property or passed in via the -Dprop=value argument - this method
-     * will return the value from the system properties before the values in
-     * the contained configuration file.
-     *
-     * @param key the key to lookup within the properties file.
-     * @return the property from the properties file.
-     */
-    public static long getLong(String key) {
-        return Long.parseLong(Settings.getString(key));
+    public static int getInt(String key) throws InvalidSettingException {
+        int value;
+        try {
+            value = Integer.parseInt(Settings.getString(key));
+        } catch (NumberFormatException ex) {
+            throw new InvalidSettingException("Could not convert property '" + key + "' to an int.", ex);
+        }
+        return value;
     }
 
     /**
-     * Returns a boolean value from the properties file. If the value was specified as a
-     * system property or passed in via the -Dprop=value argument - this method
-     * will return the value from the system properties before the values in
-     * the contained configuration file.
+     * Returns a long value from the properties file. If the value was specified
+     * as a system property or passed in via the -Dprop=value argument - this
+     * method will return the value from the system properties before the values
+     * in the contained configuration file.
      *
      * @param key the key to lookup within the properties file.
      * @return the property from the properties file.
+     * @throws InvalidSettingException is thrown if there is an error retrieving
+     * the setting.
      */
-    public static boolean getBoolean(String key) {
-        return Boolean.parseBoolean(Settings.getString(key));
+    public static long getLong(String key) throws InvalidSettingException {
+        long value;
+        try {
+            value = Long.parseLong(Settings.getString(key));
+        } catch (NumberFormatException ex) {
+            throw new InvalidSettingException("Could not convert property '" + key + "' to an int.", ex);
+        }
+        return value;
+    }
+
+    /**
+     * Returns a boolean value from the properties file. If the value was
+     * specified as a system property or passed in via the -Dprop=value argument
+     * - this method will return the value from the system properties before the
+     * values in the contained configuration file.
+     *
+     * @param key the key to lookup within the properties file.
+     * @return the property from the properties file.
+     * @throws InvalidSettingException is thrown if there is an error retrieving
+     * the setting.
+     */
+    public static boolean getBoolean(String key) throws InvalidSettingException {
+        boolean value;
+        try {
+            value = Boolean.parseBoolean(Settings.getString(key));
+        } catch (NumberFormatException ex) {
+            throw new InvalidSettingException("Could not convert property '" + key + "' to an int.", ex);
+        }
+        return value;
     }
 }
\ No newline at end of file
diff --git a/src/main/resources/META-INF/services/org.codesecure.dependencycheck.analyzer.Analyzer b/src/main/resources/META-INF/services/org.codesecure.dependencycheck.analyzer.Analyzer
index 0301b75d5..9f3ade19a 100644
--- a/src/main/resources/META-INF/services/org.codesecure.dependencycheck.analyzer.Analyzer
+++ b/src/main/resources/META-INF/services/org.codesecure.dependencycheck.analyzer.Analyzer
@@ -1,3 +1,4 @@
 org.codesecure.dependencycheck.analyzer.JarAnalyzer
 org.codesecure.dependencycheck.analyzer.FileNameAnalyzer
-org.codesecure.dependencycheck.data.cpe.CPEAnalyzer
\ No newline at end of file
+org.codesecure.dependencycheck.data.cpe.CPEAnalyzer
+org.codesecure.dependencycheck.data.nvdcve.NvdCveAnalyzer
\ No newline at end of file
diff --git a/src/main/resources/META-INF/services/org.codesecure.dependencycheck.data.CachedWebDataSource b/src/main/resources/META-INF/services/org.codesecure.dependencycheck.data.CachedWebDataSource
new file mode 100644
index 000000000..4fcc89797
--- /dev/null
+++ b/src/main/resources/META-INF/services/org.codesecure.dependencycheck.data.CachedWebDataSource
@@ -0,0 +1,2 @@
+org.codesecure.dependencycheck.data.nvdcve.Index
+org.codesecure.dependencycheck.data.cpe.Index
\ No newline at end of file
diff --git a/src/main/resources/configuration/dependencycheck.properties b/src/main/resources/configuration/dependencycheck.properties
index b5803d44e..7d657a35e 100644
--- a/src/main/resources/configuration/dependencycheck.properties
+++ b/src/main/resources/configuration/dependencycheck.properties
@@ -1,7 +1,34 @@
 application.name=${pom.name}
 application.version=${pom.version}
 
+# the path to the lucene index to store the cpe data
 cpe=data/cpe
+# the path to the cpe xml file
 cpe.url=http://static.nvd.nist.gov/feeds/xml/cpe/dictionary/official-cpe-dictionary_v2.2.xml.gz
+# the path to the cpe meta data file.
 cpe.meta.url=http://static.nvd.nist.gov/feeds/xml/cpe/dictionary/official-cpe-dictionary_v2.2.meta
+# the path to the lucene index to store the nvd cve data
 cve=data/cve
+# the path to the nvd cve "meta" page where the timestamps for the last update files can be found.
+cve.url.meta=http://nvd.nist.gov/download.cfm
+# the path to the modified nvd cve xml file.
+cve.url.modified=http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-modified.xml
+
+# the number of days that the modified nvd cve data holds data for. We don't need
+# to update the other files if we are within this timespan. Per NIST this file
+# holds 8 days of updates, we are using 7 just to be safe.
+cve.url.modified.validfordays=7
+# the number of cve.urls
+cve.url.count=11
+# the paths to the various nvd cve files.
+cve.url.1=http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-2002.xml
+cve.url.2=http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-2003.xml
+cve.url.3=http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-2004.xml
+cve.url.4=http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-2005.xml
+cve.url.5=http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-2006.xml
+cve.url.6=http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-2007.xml
+cve.url.7=http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-2008.xml
+cve.url.8=http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-2009.xml
+cve.url.9=http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-2010.xml
+cve.url.10=http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-2011.xml
+cve.url.11=http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-2012.xml
diff --git a/src/main/resources/schema/cpe/cpe-dictionary_2.2.xsd b/src/main/resources/schema/cpe/cpe-dictionary_2.2.xsd
new file mode 100644
index 000000000..b08ed8ad5
--- /dev/null
+++ b/src/main/resources/schema/cpe/cpe-dictionary_2.2.xsd
@@ -0,0 +1,156 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema targetNamespace="http://cpe.mitre.org/dictionary/2.0" xmlns:cpe_dict="http://cpe.mitre.org/dictionary/2.0" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xml="http://www.w3.org/XML/1998/namespace" elementFormDefault="qualified" attributeFormDefault="unqualified">
+      <xsd:import namespace="http://www.w3.org/XML/1998/namespace" schemaLocation="http://www.w3.org/2001/xml.xsd"/>
+      <xsd:annotation>
+            <xsd:documentation xml:lang="en">This is an XML Schema for the CPE Dictionary. It is used to transfer a collection of official CPE Names along with any necessary supporting information (title, references, automated check, etc.).  For more information, consult the CPE Specification document.</xsd:documentation>
+            <xsd:appinfo>
+                  <schema>CPE Dictionary</schema>
+                  <author>Neal Ziring, Andrew Buttner</author>
+                  <version>2.2</version>
+                  <date>03/11/2009 09:00:00 AM</date>
+            </xsd:appinfo>
+      </xsd:annotation>
+      <!-- =============================================================================== -->
+      <!-- =============================================================================== -->
+      <!-- =============================================================================== -->
+      <xsd:element name="cpe-list" type="cpe_dict:ListType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">The cpe-list element acts as a top-level container for CPE Name items.  Each individual item must be unique.  Please refer to the description of ListType for additional information about the sturcture of this element.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:key name="itemURIKey">
+                  <xsd:selector xpath="./cpe_dict:cpe-item"/>
+                  <xsd:field xpath="@name"/>
+            </xsd:key>
+      </xsd:element>
+      <xsd:element name="cpe-item" type="cpe_dict:ItemType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">The cpe-item element denotes a single CPE Name.  Please refer to the description of ItemType for additional information about the sturcture of this element.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:unique name="titleLangKey">
+                  <xsd:selector xpath="./cpe_dict:title"/>
+                  <xsd:field xpath="@xml:lang"/>
+            </xsd:unique>
+            <xsd:unique name="notesLangKey">
+                  <xsd:selector xpath="./cpe_dict:notes"/>
+                  <xsd:field xpath="@xml:lang"/>
+            </xsd:unique>
+            <xsd:unique name="checkSystemKey">
+                  <xsd:selector xpath="./cpe_dict:check"/>
+                  <xsd:field xpath="@system"/>
+            </xsd:unique>
+      </xsd:element>
+      <!-- =============================================================================== -->
+      <!-- =============================  SUPPORTING TYPES  ============================== -->
+      <!-- =============================================================================== -->
+      <xsd:complexType name="GeneratorType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">The GeneratorType complex type defines an element that is used to hold information about when a particular document was compiled, what version of the schema was used, what tool compiled the document, and what version of that tools was used.  Additional generator information is also allowed although it is not part of the official schema. Individual organizations can place generator information that they feel are important and these will be skipped during the validation. All that this schema really cares about is that the stated generator information is there.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:sequence>
+                  <xsd:element name="product_name" type="xsd:string" minOccurs="0" maxOccurs="1">
+                        <xsd:annotation>
+                              <xsd:documentation xml:lang="en">The optional product_name element specifies the name of the application used to generate the file.</xsd:documentation>
+                        </xsd:annotation>
+                  </xsd:element>
+                  <xsd:element name="product_version" type="xsd:string" minOccurs="0" maxOccurs="1">
+                        <xsd:annotation>
+                              <xsd:documentation xml:lang="en">The optional product_version element specifies the version of the application used to generate the file.</xsd:documentation>
+                        </xsd:annotation>
+                  </xsd:element>
+                  <xsd:element name="schema_version" type="xsd:decimal" minOccurs="1" maxOccurs="1">
+                        <xsd:annotation>
+                              <xsd:documentation xml:lang="en">The required schema_version element specifies the version of the schema that the document has been written against and that should be used for validation.</xsd:documentation>
+                        </xsd:annotation>
+                  </xsd:element>
+                  <xsd:element name="timestamp" type="xsd:dateTime" minOccurs="1" maxOccurs="1">
+                        <xsd:annotation>
+                              <xsd:documentation xml:lang="en">The required timestamp element specifies when the particular document was compiled. The format for the timestamp is yyyy-mm-ddThh:mm:ss. Note that the timestamp element does not specify item in the document was created or modified but rather when the actual XML document that contains the items was created. For example, a document might pull a bunch of existing items together, each of which having been created at some point in the past. The timestamp in this case would be when this combined document was created.</xsd:documentation>
+                        </xsd:annotation>
+                  </xsd:element>
+                  <xsd:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="lax"/>
+            </xsd:sequence>
+      </xsd:complexType>
+      <xsd:complexType name="ItemType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">The ItemType complex type defines an element that represents a single CPE Name. The required name attribute is a URI which must be a unique key and should follow the URI structure outlined in the CPE Specification. The optional title element is used to provide a human-readable title for the platform. To support uses intended for multiple languages, this element supports the ‘xml:lang’ attribute.  At most one title element can appear for each language. The notes element holds optional descriptive material.  Multiple notes elements are allowed, but only one per language should be used.  Note that the language associated with the notes element applies to all child note elements.  The optional references element holds external info references.  The optional check element is used to call out an OVAL Definition that can confirm or reject an IT system as an instance of the named platform.  Additional elements not part of the CPE namespace are allowed and are just skipped by validation.  In essence, a dictionary file can contain additional information the a user can choose to use or not, but this information is not required to be used or understood.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:sequence>
+                  <xsd:element name="title" type="cpe_dict:TextType" minOccurs="1" maxOccurs="unbounded"/>
+                  <xsd:element name="notes" type="cpe_dict:NotesType" minOccurs="0" maxOccurs="unbounded"/>
+                  <xsd:element name="references" type="cpe_dict:ReferencesType" minOccurs="0" maxOccurs="1"/>
+                  <xsd:element name="check" type="cpe_dict:CheckType" minOccurs="0" maxOccurs="unbounded"/>
+                  <xsd:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="lax"/>
+            </xsd:sequence>
+            <xsd:attribute name="name" type="cpe_dict:namePattern" use="required"/>
+            <xsd:attribute name="deprecated" type="xsd:boolean" use="optional" default="false"/>
+            <xsd:attribute name="deprecated_by" type="cpe_dict:namePattern" use="optional"/>
+            <xsd:attribute name="deprecation_date" type="xsd:dateTime" use="optional"/>
+      </xsd:complexType>
+      <xsd:complexType name="ListType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">The ListType complex type defines an element that is used to hold a collection of individual items.  The required generator section provides information about when the definition file was compiled and under what version.  Additional elements not part of the CPE namespace are allowed and are just skipped by validation.  In essence, a dictionary file can contain additional information the a user can choose to use or not, but this information is not required to be used or understood.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:sequence>
+                  <xsd:element name="generator" type="cpe_dict:GeneratorType" minOccurs="0" maxOccurs="1"/>
+                  <xsd:element ref="cpe_dict:cpe-item" minOccurs="1" maxOccurs="unbounded"/>
+                  <xsd:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="lax"/>
+            </xsd:sequence>
+      </xsd:complexType>
+      <xsd:complexType name="TextType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">The TextType complex type allows the xml:lang attribute to associate a specific language with an element's string content.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:simpleContent>
+                  <xsd:extension base="xsd:string">
+                        <xsd:attribute ref="xml:lang"/>
+                  </xsd:extension>
+            </xsd:simpleContent>
+      </xsd:complexType>
+      <xsd:complexType name="NotesType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">The notesType complex type defines an element that consists of one or more child note elements.  It is assumed that each of these note elements are representative of the same language as defined by their parent.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:sequence>
+                  <xsd:element name="note" type="xsd:string" minOccurs="1" maxOccurs="unbounded"/>
+            </xsd:sequence>
+            <xsd:attribute ref="xml:lang"/>
+      </xsd:complexType>
+      <xsd:complexType name="ReferencesType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">The ReferencesType complex type defines an element used to hold a collection of individual references.  Each reference consists of a piece of text (intended to be human-readable) and a URI (intended to be a URL, and point to a real resource) and is used to point to extra descriptive material, for example a supplier's web site or platform documentation.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:sequence>
+                  <xsd:element name="reference" minOccurs="1" maxOccurs="unbounded">
+                        <xsd:complexType>
+                              <xsd:simpleContent>
+                                    <xsd:extension base="xsd:string">
+                                          <xsd:attribute name="href" type="xsd:anyURI"/>
+                                    </xsd:extension>
+                              </xsd:simpleContent>
+                        </xsd:complexType>
+                  </xsd:element>
+            </xsd:sequence>
+      </xsd:complexType>
+      <xsd:complexType name="CheckType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">The CheckType complex type is used to define an element for hold information about an individual check.  It includes a checking system specification URI, string content, and an optional external file reference. The checking system specification should be the URI for a particular version of OVAL or a related system testing language, and the content will be an identifier of a test written in that language. The external file reference could be used to point to the file in which the content test identifier is defined.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:simpleContent>
+                  <xsd:extension base="xsd:string">
+                        <xsd:attribute name="system" type="xsd:anyURI" use="required"/>
+                        <xsd:attribute name="href" type="xsd:anyURI" use="optional"/>
+                  </xsd:extension>
+            </xsd:simpleContent>
+      </xsd:complexType>
+      <!-- =============================================================================== -->
+      <!-- ================================  ID PATTERNS  ================================ -->
+      <!-- =============================================================================== -->
+      <xsd:simpleType name="namePattern">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">Define the format for acceptable CPE Names. A URN format is used with the id starting with the word cpe followed by :/ and then some number of individual  components separated by colons.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:restriction base="xsd:anyURI">
+                  <xsd:pattern value="[c][pP][eE]:/[AHOaho]?(:[A-Za-z0-9\._\-~%]*){0,6}"/>
+            </xsd:restriction>
+      </xsd:simpleType>
+</xsd:schema>
diff --git a/src/main/resources/schema/nvdcve/bindings.xml b/src/main/resources/schema/nvdcve/bindings.xml
new file mode 100644
index 000000000..6da0d77a4
--- /dev/null
+++ b/src/main/resources/schema/nvdcve/bindings.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<jxb:bindings version="2.1"
+               xmlns:jxb="http://java.sun.com/xml/ns/jaxb"
+               xmlns:xs="http://www.w3.org/2001/XMLSchema"
+               xmlns:xjc="http://java.sun.com/xml/ns/jaxb/xjc"
+               jxb:extensionBindingPrefixes="xjc">
+  <jxb:globalBindings>
+    <xjc:simple/>
+  </jxb:globalBindings>
+  <jxb:bindings schemaLocation="cpe-language_2.1.xsd">
+    <jxb:bindings node="//xs:complexType[@name='TextType']">
+      <jxb:class name="TextType1"/>
+    </jxb:bindings> 
+  </jxb:bindings>
+  <jxb:bindings schemaLocation="scap-core_0.1.xsd">
+    <jxb:bindings node="//xs:complexType[@name='textType']">
+      <jxb:class name="TextType2"/>
+    </jxb:bindings> 
+  </jxb:bindings>
+</jxb:bindings>
\ No newline at end of file
diff --git a/src/main/resources/schema/nvdcve/cce_0.1.xsd b/src/main/resources/schema/nvdcve/cce_0.1.xsd
new file mode 100644
index 000000000..dfeb61f39
--- /dev/null
+++ b/src/main/resources/schema/nvdcve/cce_0.1.xsd
@@ -0,0 +1,61 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+== Model: Version 0-3 NetD
+== Package: cce
+-->
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+  xmlns="http://scap.nist.gov/schema/cce/0.1"
+  xmlns:scap-core="http://scap.nist.gov/schema/scap-core/0.1"
+  targetNamespace="http://scap.nist.gov/schema/cce/0.1"
+  elementFormDefault="qualified" attributeFormDefault="unqualified"
+  version="0.1">
+  <xsd:annotation>
+    <xsd:documentation>CCE is at an early phase of adoption.  This schema is a work in progress and is far from
+      final.  Additional work with using CCEs in a practical setting is required.</xsd:documentation>
+  </xsd:annotation>
+  <xsd:import namespace="http://scap.nist.gov/schema/scap-core/0.1" schemaLocation="scap-core_0.1.xsd"/>
+  <!-- ================================================== -->
+  <!-- =====  Simple Type Definitions  -->
+  <!-- ================================================== -->
+  <xsd:simpleType name="cceNamePatternType">
+    <xsd:annotation>
+      <xsd:documentation>The format for a CCE name is CCE-NNNNNNNNNNN, where NNNNNNNNNNN is a sequence number.</xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="CCE-[1-9]\d{0,10}"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+  <!-- ================================================== -->
+  <!-- =====  Complex Type Definitions  -->
+  <!-- ================================================== -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  CCE  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:complexType name="cceType">
+    <xsd:sequence>
+      <xsd:element name="definition" type="xsd:string" minOccurs="0"/>
+      <xsd:element name="parameter" type="cceParameterType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="technical-mechanisms" type="xsd:string" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="references" type="scap-core:referenceType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="cceNamePatternType" use="required"/>
+  </xsd:complexType>
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  CCE_Parameter  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:complexType name="cceParameterType">
+    <xsd:sequence>
+      <xsd:element name="value" type="xsd:string" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="identifier" type="xsd:token">
+      <xsd:annotation>
+        <xsd:documentation>TODO: What does this identify?</xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="operator" type="xsd:token">
+      <xsd:annotation>
+        <xsd:documentation>TODO: should this be an enumeration?</xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+</xsd:schema>
diff --git a/src/main/resources/schema/nvdcve/cpe-language_2.1.xsd b/src/main/resources/schema/nvdcve/cpe-language_2.1.xsd
new file mode 100644
index 000000000..f29efd0eb
--- /dev/null
+++ b/src/main/resources/schema/nvdcve/cpe-language_2.1.xsd
@@ -0,0 +1,101 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema targetNamespace="http://cpe.mitre.org/language/2.0" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xml="http://www.w3.org/XML/1998/namespace" elementFormDefault="qualified" attributeFormDefault="unqualified">
+      <xsd:import namespace="http://www.w3.org/XML/1998/namespace" schemaLocation="http://www.w3.org/2001/xml.xsd"/>
+      <xsd:annotation>
+            <xsd:documentation xml:lang="en">This XML Schema defines the CPE Language. An individual CPE Name addresses a single part of an actual system. To identify more complex platform types, there needs to be a way to combine different CPE Names using logical operators. For example, there may be a need to identify a platform with a particular operating system AND a certain application. The CPE Language exists to satisfy this need, enabling the CPE Name for the operating system to be combined with the CPE Name for the application. For more information, consult the CPE Specification document.</xsd:documentation>
+            <xsd:appinfo>
+                  <schema>CPE Language</schema>
+                  <author>Neal Ziring, Andrew Buttner</author>
+                  <version>2.1</version>
+                  <date>01/31/2008 09:00:00 AM</date>
+            </xsd:appinfo>
+      </xsd:annotation>
+      <!-- =============================================================================== -->
+      <!-- =============================================================================== -->
+      <!-- =============================================================================== -->
+      <xsd:element name="platform-specification">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">This element is the root element of a CPE Language XML documents and therefore acts as a container for child platform definitions.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:complexType>
+                  <xsd:sequence>
+                        <xsd:element name="platform" type="cpe:PlatformType" minOccurs="1" maxOccurs="unbounded"/>
+                  </xsd:sequence>
+            </xsd:complexType>
+            <xsd:key name="platformKey">
+                  <xsd:selector xpath="cpe:platform"/>
+                  <xsd:field xpath="@id"/>
+            </xsd:key>
+      </xsd:element>
+      <xsd:element name="logical-test" type="cpe:LogicalTestType"/>
+      
+      <!-- =============================================================================== -->
+      <!-- ==================================  PLATFORM  ================================= -->
+      <!-- =============================================================================== -->
+      <xsd:complexType name="PlatformType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">The platform element represents the description or qualifications of a particular IT platform type. The platform is defined by the logical-test child element. The id attribute holds a locally unique name for the platform. There is no defined format for this id, it just has to be unique to the containing language document.</xsd:documentation>
+                  <xsd:documentation xml:lang="en">The optional title element may appear as a child to a platform element. It provides a human-readable title for it. To support uses intended for multiple languages, this element supports the ‘xml:lang’ attribute. At most one title element can appear for each language.</xsd:documentation>
+                  <xsd:documentation xml:lang="en">The optional remark element may appear as a child of a platform element. It provides some additional description. Zero or more remark elements may appear. To support uses intended for multiple languages, this element supports the ‘xml:lang’ attribute. There can be multiple remarks for a single language.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:sequence>
+                  <xsd:element name="title" type="cpe:TextType" minOccurs="0" maxOccurs="unbounded"/>
+                  <xsd:element name="remark" type="cpe:TextType" minOccurs="0" maxOccurs="unbounded"/>
+                  <xsd:element name="logical-test" type="cpe:LogicalTestType" minOccurs="1" maxOccurs="1"/>
+            </xsd:sequence>
+            <xsd:attribute name="id" type="xsd:anyURI" use="required"/>
+      </xsd:complexType>
+      <xsd:complexType name="LogicalTestType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">The logical-test element appears as a child of a platform element, and may also be nested to create more complex logical tests. The content consists of one or more elements: fact-ref, and logical-test children are permitted. The operator to be applied, and optional negation of the test, are given as attributes.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:sequence>
+                  <xsd:element name="logical-test" type="cpe:LogicalTestType" minOccurs="0" maxOccurs="unbounded"/>
+                  <xsd:element name="fact-ref" type="cpe:FactRefType" minOccurs="0" maxOccurs="unbounded"/>
+            </xsd:sequence>
+            <xsd:attribute name="operator" type="cpe:operatorEnumeration" use="required"/>
+            <xsd:attribute name="negate" type="xsd:boolean" use="required"/>
+      </xsd:complexType>
+      <xsd:complexType name="FactRefType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">The fact-ref element appears as a child of a logical-test element. It is simply a reference to a CPE Name that always evaluates to a Boolean result.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:attribute name="name" type="cpe:namePattern" use="required"/>
+      </xsd:complexType>
+      <!-- =============================================================================== -->
+      <!-- ===============================  ENUMERATIONS  ================================ -->
+      <!-- =============================================================================== -->
+      <xsd:simpleType name="operatorEnumeration">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">The OperatorEnumeration simple type defines acceptable operators. Each operator defines how to evaluate multiple arguments.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:restriction base="xsd:string">
+                  <xsd:enumeration value="AND"/>
+                  <xsd:enumeration value="OR"/>
+            </xsd:restriction>
+      </xsd:simpleType>
+      <!-- =============================================================================== -->
+      <!-- ==============================  SUPPORTING TYPES  ============================== -->
+      <!-- =============================================================================== -->
+      <xsd:complexType name="TextType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">This type allows the xml:lang attribute to associate a specific language with an element's string content.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:simpleContent>
+                  <xsd:extension base="xsd:string">
+                        <xsd:attribute ref="xml:lang"/>
+                  </xsd:extension>
+            </xsd:simpleContent>
+      </xsd:complexType>
+      <!-- =============================================================================== -->
+      <!-- ================================  ID PATTERNS  ================================ -->
+      <!-- =============================================================================== -->
+      <xsd:simpleType name="namePattern">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">Define the format for acceptable CPE Names. A URN format is used with the id starting with the word cpe followed by :/ and then some number of individual  components separated by colons.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:restriction base="xsd:anyURI">
+                  <xsd:pattern value="[c][pP][eE]:/[AHOaho]?(:[A-Za-z0-9\._\-~%]*){0,6}"/>
+            </xsd:restriction>
+      </xsd:simpleType>
+</xsd:schema>
diff --git a/src/main/resources/schema/nvdcve/cve_0.1.xsd b/src/main/resources/schema/nvdcve/cve_0.1.xsd
new file mode 100644
index 000000000..2dc6e6f61
--- /dev/null
+++ b/src/main/resources/schema/nvdcve/cve_0.1.xsd
@@ -0,0 +1,70 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+== Model: Version 0-3 NetD
+== Package: cve
+-->
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+  xmlns="http://scap.nist.gov/schema/cve/0.1"
+  xmlns:scap_core="http://scap.nist.gov/schema/scap-core/0.1"
+  targetNamespace="http://scap.nist.gov/schema/cve/0.1"
+  elementFormDefault="qualified" attributeFormDefault="unqualified"
+  version="0.1">
+  <xsd:import namespace="http://scap.nist.gov/schema/scap-core/0.1" schemaLocation="scap-core_0.1.xsd"/>
+  <!-- ================================================== -->
+  <!-- =====  Simple Type Definitions  -->
+  <!-- ================================================== -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  CVE_Name_Type  <<simpleType>>  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:simpleType name="cveNamePatternType">
+    <xsd:annotation>
+      <xsd:documentation>Format for CVE Names is CVE-YYYY-NNNN, where YYYY is the year of publication and NNNN is a sequence number.</xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="CVE-([1,2])\d{3}-\d{4}"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  CVE_Status  <<simpleType>>  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:simpleType name="cveStatus">
+    <xsd:annotation>
+      <xsd:documentation>Enumeration containing valid values for CVE status: Candidate, Entry, and Deprecated</xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="CANDIDATE"/>
+      <xsd:enumeration value="ENTRY"/>
+      <xsd:enumeration value="DEPRECATED"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+  <!-- ================================================== -->
+  <!-- =====  Complex Type Definitions  -->
+  <!-- ================================================== -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  CVE  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:complexType name="cveType">
+    <xsd:sequence>
+      <xsd:element name="status" type="cveStatus" minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>Status of Vulnerability -- Candidate, Entry, Deprecated</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="description" type="xsd:string" minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>Free text field to describe the vulnerability</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="references" type="scap_core:referenceType" maxOccurs="unbounded" minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>Discretionary information and links relevant to a given vulnerability referenced by the CVE</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="cveNamePatternType" use="required">
+      <xsd:annotation>
+        <xsd:documentation>CVE name in the CVE-YYYY-NNNN format</xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+</xsd:schema>
diff --git a/src/main/resources/schema/nvdcve/cvss-v2_0.2.xsd b/src/main/resources/schema/nvdcve/cvss-v2_0.2.xsd
new file mode 100644
index 000000000..6e97973de
--- /dev/null
+++ b/src/main/resources/schema/nvdcve/cvss-v2_0.2.xsd
@@ -0,0 +1,386 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+== Package: cvss-v2
+-->
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+	xmlns="http://scap.nist.gov/schema/cvss-v2/0.2"
+	targetNamespace="http://scap.nist.gov/schema/cvss-v2/0.2"
+	elementFormDefault="qualified" attributeFormDefault="unqualified"
+	version="0.2">
+	<!-- ================================================== -->
+	<!-- =====  Simple Type Definitions  -->
+	<!-- ================================================== -->
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<!--  Zero_To_Ten  <<simpleType>>  -->
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<xsd:simpleType name="zeroToTenDecimalType">
+		<xsd:annotation>
+			<xsd:documentation>Value restriction to single decimal values from 0.0 to 10.0, as used in CVSS scores</xsd:documentation>
+		</xsd:annotation>
+		<xsd:restriction base="xsd:decimal">
+			<xsd:minInclusive value="0"/>
+			<xsd:maxInclusive value="10"/>
+			<xsd:fractionDigits value="1"/>
+		</xsd:restriction>
+	</xsd:simpleType>
+
+	<!-- ================================================== -->
+	<!-- =====  Group Definitions  -->
+	<!-- ================================================== -->
+	<xsd:group name="baseVectorsGroup">
+		<xsd:sequence>
+			<xsd:element minOccurs="0" name="access-vector" type="accessVectorType"/>
+			<xsd:element minOccurs="0" name="access-complexity" type="accessComplexityType"/>
+			<xsd:element minOccurs="0" name="authentication" type="authenticationType"/>
+			<xsd:element minOccurs="0" name="confidentiality-impact" type="ciaType"/>
+			<xsd:element minOccurs="0" name="integrity-impact" type="ciaType"/>
+			<xsd:element minOccurs="0" name="availability-impact" type="ciaType"/>
+		</xsd:sequence>
+	</xsd:group>
+	<xsd:group name="environmentalVectorsGroup">
+		<xsd:sequence>
+			<xsd:element minOccurs="0" name="collateral-damage-potential" type="collateralDamagePotentialType"/>
+			<xsd:element minOccurs="0" name="target-distribution" type="targetDistributionType"/>
+			<xsd:element minOccurs="0" name="confidentiality-requirement" type="ciaRequirementType"/>
+			<xsd:element minOccurs="0" name="integrity-requirement" type="ciaRequirementType"/>
+			<xsd:element minOccurs="0" name="availability-requirement" type="ciaRequirementType"/>
+		</xsd:sequence>
+	</xsd:group>
+	<xsd:group name="temporalVectorsGroup">
+		<xsd:sequence>
+			<xsd:element minOccurs="0" name="exploitability" type="exploitabilityType"/>
+			<xsd:element minOccurs="0" name="remediation-level" type="remediationLevelType"/>
+			<xsd:element minOccurs="0" name="report-confidence" type="confidenceType"/>
+		</xsd:sequence>
+	</xsd:group>
+	<xsd:group name="baseVectorsCriteriaGroup">
+		<xsd:sequence>
+			<xsd:element minOccurs="0" name="access-vector" type="accessVectorEnumType"/>
+			<xsd:element minOccurs="0" name="access-complexity" type="accessComplexityEnumType"/>
+			<xsd:element minOccurs="0" name="authentication" type="authenticationEnumType"/>
+			<xsd:element minOccurs="0" name="confidentiality-impact" type="ciaEnumType"/>
+			<xsd:element minOccurs="0" name="integrity-impact" type="ciaEnumType"/>
+			<xsd:element minOccurs="0" name="availability-impact" type="ciaEnumType"/>
+		</xsd:sequence>
+	</xsd:group>
+	<xsd:group name="environmentalVectorsCriteriaGroup">
+		<xsd:sequence>
+			<xsd:element minOccurs="0" name="collateral-damage-potential" type="collateralDamagePotentialEnumType"/>
+			<xsd:element minOccurs="0" name="target-distribution" type="targetDistributionEnumType"/>
+			<xsd:element minOccurs="0" name="confidentiality-requirement" type="ciaRequirementEnumType"/>
+			<xsd:element minOccurs="0" name="integrity-requirement" type="ciaRequirementEnumType"/>
+			<xsd:element minOccurs="0" name="availability-requirement" type="ciaRequirementEnumType"/>
+		</xsd:sequence>
+	</xsd:group>
+	<xsd:group name="temporalVectorsCriteriaGroup">
+		<xsd:sequence>
+			<xsd:element minOccurs="0" name="exploitability" type="exploitabilityEnumType"/>
+			<xsd:element minOccurs="0" name="remediation-level" type="remediationLevelEnumType"/>
+			<xsd:element minOccurs="0" name="report-confidence" type="confidenceEnumType"/>
+		</xsd:sequence>
+	</xsd:group>
+	
+	<!-- ================================================== -->
+	<!-- =====  Complex Type Definitions  -->
+	<!-- ================================================== -->
+	<xsd:attributeGroup name="vectorAttributeGroup">
+		<xsd:attribute name="approximated" type="xsd:boolean" default="false">
+			<xsd:annotation>
+				<xsd:documentation>Indicates if the vector has been approximated as the result of an upgrade from a previous CVSS version</xsd:documentation>
+			</xsd:annotation>
+		</xsd:attribute>
+	</xsd:attributeGroup>
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<!--  HML_Enumeration  <<simpleType>>  -->
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<xsd:simpleType name="accessComplexityEnumType">
+		<xsd:restriction base="xsd:token">
+			<xsd:enumeration value="HIGH"/>
+			<xsd:enumeration value="MEDIUM"/>
+			<xsd:enumeration value="LOW"/>
+		</xsd:restriction>
+	</xsd:simpleType>
+	<xsd:complexType name="accessComplexityType">
+		<xsd:simpleContent>
+			<xsd:extension base="accessComplexityEnumType">
+				<xsd:attributeGroup ref="vectorAttributeGroup"/>
+			</xsd:extension>
+		</xsd:simpleContent>
+	</xsd:complexType>
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<!--  LAN_Enumerations  <<simpleType>>  -->
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<xsd:simpleType name="accessVectorEnumType">
+		<xsd:restriction base="xsd:token">
+			<xsd:enumeration value="LOCAL"/>
+			<xsd:enumeration value="ADJACENT_NETWORK"/>
+			<xsd:enumeration value="NETWORK"/>
+		</xsd:restriction>
+	</xsd:simpleType>
+	<xsd:complexType name="accessVectorType">
+		<xsd:simpleContent>
+			<xsd:extension base="accessVectorEnumType">
+				<xsd:attributeGroup ref="vectorAttributeGroup"/>
+			</xsd:extension>
+		</xsd:simpleContent>
+	</xsd:complexType>
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<!--  LMHN_Enumeration  <<simpleType>>  -->
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<xsd:simpleType name="ciaRequirementEnumType">
+		<xsd:restriction base="xsd:token">
+			<xsd:enumeration value="LOW"/>
+			<xsd:enumeration value="MEDIUM"/>
+			<xsd:enumeration value="HIGH"/>
+			<xsd:enumeration value="NOT_DEFINED"/>
+		</xsd:restriction>
+	</xsd:simpleType>
+	<xsd:complexType name="ciaRequirementType">
+		<xsd:simpleContent>
+			<xsd:extension base="ciaRequirementEnumType">
+				<xsd:attributeGroup ref="vectorAttributeGroup"/>
+			</xsd:extension>
+		</xsd:simpleContent>
+	</xsd:complexType>
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<!--  NLLMMHHN_Enumeration  <<simpleType>>  -->
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<xsd:simpleType name="collateralDamagePotentialEnumType">
+		<xsd:restriction base="xsd:token">
+			<xsd:enumeration value="NONE"/>
+			<xsd:enumeration value="LOW"/>
+			<xsd:enumeration value="LOW_MEDIUM"/>
+			<xsd:enumeration value="MEDIUM_HIGH"/>
+			<xsd:enumeration value="HIGH"/>
+			<xsd:enumeration value="NOT_DEFINED"/>
+		</xsd:restriction>
+	</xsd:simpleType>
+	<xsd:complexType name="collateralDamagePotentialType">
+		<xsd:simpleContent>
+			<xsd:extension base="collateralDamagePotentialEnumType">
+				<xsd:attributeGroup ref="vectorAttributeGroup"/>
+			</xsd:extension>
+		</xsd:simpleContent>
+	</xsd:complexType>
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<!--  NLMHN_Enumeration  <<simpleType>>  -->
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<xsd:simpleType name="targetDistributionEnumType">
+		<xsd:restriction base="xsd:token">
+			<xsd:enumeration value="NONE"/>
+			<xsd:enumeration value="LOW"/>
+			<xsd:enumeration value="MEDIUM"/>
+			<xsd:enumeration value="HIGH"/>
+			<xsd:enumeration value="NOT_DEFINED"/>
+		</xsd:restriction>
+	</xsd:simpleType>
+	<xsd:complexType name="targetDistributionType">
+		<xsd:simpleContent>
+			<xsd:extension base="targetDistributionEnumType">
+				<xsd:attributeGroup ref="vectorAttributeGroup"/>
+			</xsd:extension>
+		</xsd:simpleContent>
+	</xsd:complexType>
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<!--  NPC_Enumeration  <<simpleType>>  -->
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<xsd:simpleType name="ciaEnumType">
+		<xsd:restriction base="xsd:token">
+			<xsd:enumeration value="NONE"/>
+			<xsd:enumeration value="PARTIAL"/>
+			<xsd:enumeration value="COMPLETE"/>
+		</xsd:restriction>
+	</xsd:simpleType>
+	<xsd:complexType name="ciaType">
+		<xsd:simpleContent>
+			<xsd:extension base="ciaEnumType">
+				<xsd:attributeGroup ref="vectorAttributeGroup"/>
+			</xsd:extension>
+		</xsd:simpleContent>
+	</xsd:complexType>
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<!--  NSM_Enumeration  <<simpleType>>  -->
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<xsd:simpleType name="authenticationEnumType">
+		<xsd:restriction base="xsd:token">
+			<xsd:enumeration value="MULTIPLE_INSTANCES"/>
+			<xsd:enumeration value="SINGLE_INSTANCE"/>
+			<xsd:enumeration value="NONE"/>
+		</xsd:restriction>
+	</xsd:simpleType>
+	<xsd:complexType name="authenticationType">
+		<xsd:simpleContent>
+			<xsd:extension base="authenticationEnumType">
+				<xsd:attributeGroup ref="vectorAttributeGroup"/>
+			</xsd:extension>
+		</xsd:simpleContent>
+	</xsd:complexType>
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<!--  OTWU_Enumeration  <<simpleType>>  -->
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<xsd:simpleType name="remediationLevelEnumType">
+		<xsd:restriction base="xsd:token">
+			<xsd:enumeration value="OFFICIAL_FIX"/>
+			<xsd:enumeration value="TEMPORARY_FIX"/>
+			<xsd:enumeration value="WORKAROUND"/>
+			<xsd:enumeration value="UNAVAILABLE"/>
+			<xsd:enumeration value="NOT_DEFINED"/>
+		</xsd:restriction>
+	</xsd:simpleType>
+	<xsd:complexType name="remediationLevelType">
+		<xsd:simpleContent>
+			<xsd:extension base="remediationLevelEnumType">
+				<xsd:attributeGroup ref="vectorAttributeGroup"/>
+			</xsd:extension>
+		</xsd:simpleContent>
+	</xsd:complexType>
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<!--  UUCN_Enumeration  <<simpleType>>  -->
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<xsd:simpleType name="confidenceEnumType">
+		<xsd:restriction base="xsd:token">
+			<xsd:enumeration value="UNCONFIRMED"/>
+			<xsd:enumeration value="UNCORROBORATED"/>
+			<xsd:enumeration value="CONFIRMED"/>
+			<xsd:enumeration value="NOT_DEFINED"/>
+		</xsd:restriction>
+	</xsd:simpleType>
+	<xsd:complexType name="confidenceType">
+		<xsd:simpleContent>
+			<xsd:extension base="confidenceEnumType">
+				<xsd:attributeGroup ref="vectorAttributeGroup"/>
+			</xsd:extension>
+		</xsd:simpleContent>
+	</xsd:complexType>
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<!--  UPFH_Enumeration  <<simpleType>>  -->
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<xsd:simpleType name="exploitabilityEnumType">
+		<xsd:restriction base="xsd:token">
+			<xsd:enumeration value="UNPROVEN"/>
+			<xsd:enumeration value="PROOF_OF_CONCEPT"/>
+			<xsd:enumeration value="FUNCTIONAL"/>
+			<xsd:enumeration value="HIGH"/>
+			<xsd:enumeration value="NOT_DEFINED"/>
+		</xsd:restriction>
+	</xsd:simpleType>
+	<xsd:complexType name="exploitabilityType">
+		<xsd:simpleContent>
+			<xsd:extension base="exploitabilityEnumType">
+				<xsd:attributeGroup ref="vectorAttributeGroup"/>
+			</xsd:extension>
+		</xsd:simpleContent>
+	</xsd:complexType>
+
+	<xsd:complexType name="metricsType" abstract="true">
+		<xsd:annotation>
+			<xsd:documentation>Base type for metrics that defines common attributes of all metrics.</xsd:documentation>
+		</xsd:annotation>
+		<xsd:attribute name="upgraded-from-version" type="xsd:decimal">
+			<xsd:annotation>
+				<xsd:documentation>Indicates if the metrics have been upgraded from a previous version of CVSS.  If fields that were approximated will have an approximated attribute set to 'true'.</xsd:documentation>
+			</xsd:annotation>
+		</xsd:attribute>
+	</xsd:complexType>
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<!--  CVSS_V2  -->
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<xsd:complexType name="cvssType">
+		<xsd:annotation>
+			<xsd:documentation>"This schema was intentionally designed to avoid mixing classes and attributes between CVSS version 1, CVSS version 2, and future versions. Scores in the CVSS system are interdependent.  The temporal score is a multiplier of the base score.  The environmental score, in turn, is a multiplier of the temporal score.  The ability to transfer these scores independently is provided on the assumption that the user understands the business logic. For any given metric, it is preferred that the score, as a minimum is provided, however the score can be re-created from the metrics or the multiplier and any scores they are dependent on."</xsd:documentation>
+		</xsd:annotation>
+		<xsd:sequence>
+			<xsd:element minOccurs="0" maxOccurs="unbounded" name="base_metrics" type="baseMetricsType"/>
+			<xsd:element minOccurs="0" maxOccurs="unbounded" name="environmental_metrics" type="environmentalMetricsType"/>
+			<xsd:element minOccurs="0" maxOccurs="unbounded" name="temporal_metrics" type="temporalMetricsType"/>
+		</xsd:sequence>
+	</xsd:complexType>
+	
+	<xsd:complexType name="cvssImpactType">
+		<xsd:complexContent>
+			<xsd:restriction base="cvssType">
+				<xsd:sequence>
+					<xsd:element minOccurs="1" maxOccurs="1" name="base_metrics" type="baseMetricsType"/>
+					<xsd:element minOccurs="0" maxOccurs="1" name="environmental_metrics" type="environmentalMetricsType"/>
+					<xsd:element minOccurs="0" maxOccurs="1" name="temporal_metrics" type="temporalMetricsType"/>
+				</xsd:sequence>
+			</xsd:restriction>
+		</xsd:complexContent>            
+	</xsd:complexType>
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<!--  Base_Metrics  -->
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<xsd:complexType name="baseMetricsType">
+		<xsd:complexContent mixed="false">
+			<xsd:extension base="metricsType">
+				<xsd:sequence>
+					<xsd:element minOccurs="0" name="score" type="zeroToTenDecimalType">
+						<xsd:annotation>
+							<xsd:documentation>Base severity score assigned to a vulnerability by a source</xsd:documentation>
+						</xsd:annotation>
+					</xsd:element>
+					<xsd:element minOccurs="0" name="exploit-subscore" type="zeroToTenDecimalType">
+						<xsd:annotation>
+							<xsd:documentation>Base exploit sub-score assigned to a vulnerability by a source</xsd:documentation>
+						</xsd:annotation>
+					</xsd:element>
+					<xsd:element minOccurs="0" name="impact-subscore" type="zeroToTenDecimalType">
+						<xsd:annotation>
+							<xsd:documentation>Base impact sub-score assigned to a vulnerability by a source</xsd:documentation>
+						</xsd:annotation>
+					</xsd:element>
+					<xsd:group ref="baseVectorsGroup"/>
+					<xsd:element name="source" type="xsd:anyURI">
+						<xsd:annotation>
+							<xsd:documentation>Data source the vector was obtained from.  Example:  http://nvd.nist.gov or com.symantec.deepsight</xsd:documentation>
+						</xsd:annotation>
+					</xsd:element>
+					<xsd:element minOccurs="0" name="generated-on-datetime" type="xsd:dateTime"/>
+				</xsd:sequence>
+			</xsd:extension>
+		</xsd:complexContent>
+	</xsd:complexType>
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<!--  Environmental_Metrics  -->
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<xsd:complexType name="environmentalMetricsType">
+		<xsd:complexContent mixed="false">
+			<xsd:extension base="metricsType">
+				<xsd:sequence>
+					<xsd:element minOccurs="0" name="score" type="zeroToTenDecimalType"/>
+					<xsd:group ref="environmentalVectorsGroup"/>
+					<xsd:element name="source" type="xsd:anyURI">
+						<xsd:annotation>
+							<xsd:documentation>Data source the vector was obtained from.  Example:  gov.nist.nvd or com.symantec.deepsight</xsd:documentation>
+						</xsd:annotation>
+					</xsd:element>
+					<xsd:element minOccurs="0" name="generated-on-datetime" type="xsd:dateTime"/>
+				</xsd:sequence>
+			</xsd:extension>
+		</xsd:complexContent>
+	</xsd:complexType>
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<!--  Temporal_Metrics  -->
+	<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+	<xsd:complexType name="temporalMetricsType">
+		<xsd:complexContent mixed="false">
+			<xsd:extension base="metricsType">
+				<xsd:sequence>
+					<xsd:element minOccurs="0" name="score" type="zeroToTenDecimalType">
+						<xsd:annotation>
+							<xsd:documentation>The temporal score is the temporal multiplier times the base score.</xsd:documentation>
+						</xsd:annotation>
+					</xsd:element>
+					<xsd:element minOccurs="0" name="temporal-multiplier" type="xsd:decimal">
+						<xsd:annotation>
+							<xsd:documentation>The temporal multiplier is a number between zero and one.  Reference the CVSS standard for computation.</xsd:documentation>
+						</xsd:annotation>
+					</xsd:element>
+					<xsd:group ref="temporalVectorsGroup"/>
+					<xsd:element name="source" type="xsd:anyURI"/>
+					<xsd:element name="generated-on-datetime" type="xsd:dateTime"/>
+				</xsd:sequence>
+			</xsd:extension>
+		</xsd:complexContent>
+	</xsd:complexType>
+</xsd:schema>
diff --git a/src/main/resources/schema/nvdcve/generateBindings.bat b/src/main/resources/schema/nvdcve/generateBindings.bat
new file mode 100644
index 000000000..915de1bab
--- /dev/null
+++ b/src/main/resources/schema/nvdcve/generateBindings.bat
@@ -0,0 +1,18 @@
+if not "%JAVA_HOME%" == "" goto JAVA_HOME_DEFINED
+
+:NO_JAVA_HOME
+set XJC=xjc.exe
+goto LAUNCH
+
+:JAVA_HOME_DEFINED
+set XJC="%JAVA_HOME%\bin\xjc.exe"
+goto LAUNCH
+
+:LAUNCH
+%XJC% -extension -d ..\..\..\java -b "bindings.xml" -p "org.codesecure.dependencycheck.data.nvdcve.generated" -mark-generated "nvd-cve-feed_2.0.xsd"
+
+echo --------------------------------------------------------------
+echo IMPORTANT!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+echo You must add the following annotation to the VulnerabilityType
+echo @XmlRootElement(name = "vulnerabilityType", namespace = "http://scap.nist.gov/schema/vulnerability/0.4")
+echo --------------------------------------------------------------
\ No newline at end of file
diff --git a/src/main/resources/schema/nvdcve/generateBindings.sh b/src/main/resources/schema/nvdcve/generateBindings.sh
new file mode 100644
index 000000000..6e571f84f
--- /dev/null
+++ b/src/main/resources/schema/nvdcve/generateBindings.sh
@@ -0,0 +1,16 @@
+#!/bin/sh
+
+if [ -n "$JAVA_HOME" ]
+then
+    XJC="$JAVA_HOME/bin/xjc.exe"
+else
+    XJC=xjc.exe
+fi
+
+exec "$XJC" -extension -d ../../../java -b "bindings.xml" -p "org.codesecure.dependencycheck.data.nvdcve.generated" -mark-generated "nvd-cve-feed_2.0.xsd"
+
+echo '--------------------------------------------------------------'
+echo 'IMPORTANT!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!'
+echo 'You must add the following annotation to the VulnerabilityType'
+echo '@XmlRootElement(name = "vulnerabilityType", namespace = "http://scap.nist.gov/schema/vulnerability/0.4")'
+echo '--------------------------------------------------------------'
\ No newline at end of file
diff --git a/src/main/resources/schema/nvdcve/nvd-cve-feed_2.0.xsd b/src/main/resources/schema/nvdcve/nvd-cve-feed_2.0.xsd
new file mode 100644
index 000000000..1561f8fe5
--- /dev/null
+++ b/src/main/resources/schema/nvdcve/nvd-cve-feed_2.0.xsd
@@ -0,0 +1,57 @@
+<?xml version="1.0"?>
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+	xmlns="http://scap.nist.gov/schema/feed/vulnerability/2.0"
+	xmlns:vuln="http://scap.nist.gov/schema/vulnerability/0.4"
+	targetNamespace="http://scap.nist.gov/schema/feed/vulnerability/2.0"
+	elementFormDefault="qualified" attributeFormDefault="unqualified"
+	version="2.0">
+	<xsd:import namespace="http://scap.nist.gov/schema/vulnerability/0.4" schemaLocation="vulnerability_0.4.xsd"/>
+	<xsd:annotation>
+		<xsd:documentation>TODO: address distributed with for APP->OS resolution</xsd:documentation>
+		<xsd:documentation>This schema defines the structure of the National
+			Vulnerability Database XML feed files version: 1.2. The elements and
+			attribute in this document are described by xsd:annotation tags. This
+			file is kept at http://nvd.nist.gov/schema/nvdcve.xsd. The NVD XML
+			feeds are available at http://nvd.nist.gov/download.cfm.
+			
+			Release Notes:
+			Version 2.0:
+			* Redesign of the feed to integrate with the new vulnerability data
+			model schema.
+			
+			Version 1.2:
+			* CVSS version 2 scores and vectors have been added.  Please see
+			http://nvd.nist.gov/cvss.cfm?vectorinfo and
+			http://www.first.org/cvss/cvss-guide.html for more information on
+			how to interpret this data. </xsd:documentation>
+	</xsd:annotation>
+	<xsd:element name="nvd">
+		<xsd:annotation>
+			<xsd:documentation>The root element of the NVD CVE feed. Multiple "entry" child elements describe specific NVD CVE entries.</xsd:documentation>
+		</xsd:annotation>
+		<xsd:complexType>
+			<xsd:sequence>
+				<xsd:element ref="entry" minOccurs="0" maxOccurs="unbounded">
+					<xsd:annotation>
+						<xsd:documentation>A CVE entry.</xsd:documentation>
+					</xsd:annotation>
+				</xsd:element>
+			</xsd:sequence>
+			<xsd:attribute name="nvd_xml_version" type="xsd:decimal" use="required">
+				<xsd:annotation>
+					<xsd:documentation>The schema version number supported by the feed.</xsd:documentation>
+				</xsd:annotation>
+			</xsd:attribute>
+			<xsd:attribute name="pub_date" type="xsd:dateTime" use="required">
+				<xsd:annotation>
+					<xsd:documentation>The date the feed was generated.</xsd:documentation>
+				</xsd:annotation>
+			</xsd:attribute>
+		</xsd:complexType>
+	</xsd:element>
+	<xsd:element name="entry" type="vuln:vulnerabilityType">
+		<xsd:annotation>
+			<xsd:documentation>A CVE entry.</xsd:documentation>
+		</xsd:annotation>
+	</xsd:element>
+</xsd:schema>
diff --git a/src/main/resources/schema/nvdcve/patch_0.1.xsd b/src/main/resources/schema/nvdcve/patch_0.1.xsd
new file mode 100644
index 000000000..c2c94d834
--- /dev/null
+++ b/src/main/resources/schema/nvdcve/patch_0.1.xsd
@@ -0,0 +1,72 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+== Generated by hyperModel (www.XMLmodeling.com) Mon Jan 07 09:36:55 EST 2008
+== Model: MITRE CPE 2.1
+== Package: patch_2.1
+-->
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+  xmlns="http://scap.nist.gov/schema/patch/0.1"
+  xmlns:scap_core="http://scap.nist.gov/schema/scap-core/0.1"
+  targetNamespace="http://scap.nist.gov/schema/patch/0.1"
+  elementFormDefault="qualified" attributeFormDefault="unqualified"
+  version="0.1">
+  <xsd:import namespace="http://scap.nist.gov/schema/scap-core/0.1" schemaLocation="scap-core_0.1.xsd"/>
+  <!-- ================================================== -->
+  <!-- =====  Element Declarations  -->
+  <!-- ================================================== -->
+  <xsd:element name="patch" type="patchType"/>
+  <!-- ================================================== -->
+  <!-- =====  Complex Type Definitions  -->
+  <!-- ================================================== -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  patch  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:complexType name="patchType">
+    <xsd:sequence>
+      <xsd:element name="title" type="scap_core:textType" minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>Human-formatted title for the patch.  If none given, then duplicate of the name.</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="references" minOccurs="0">
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:element name="reference" type="scap_core:referenceType" maxOccurs="unbounded"/>
+          </xsd:sequence>
+        </xsd:complexType>
+      </xsd:element>
+      <xsd:element name="notes" type="scap_core:notesType" maxOccurs="unbounded" minOccurs="0"/>
+      <xsd:element name="check" type="scap_core:checkReferenceType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="supersedes" type="patchType" minOccurs="0" maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>Patches that superceded by the referenced patch.</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="superseded-by" type="patchType" minOccurs="0" maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>Patches that supersede the patch comprising the current XML document.</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="identifier" type="xsd:double" use="required">
+      <xsd:annotation>
+        <xsd:documentation>Identifier unique within the XML document for the given patch.</xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="name" type="xsd:string" use="required">
+      <xsd:annotation>
+        <xsd:documentation>Vendor supplied name for the patch.  Will use lower case and underscores for spaces, consistent with CPE naming conventions.</xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="superseded" type="xsd:boolean" use="required">
+      <xsd:annotation>
+        <xsd:documentation>Boolean value.  True of patch is superseded.  False if not.</xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="deprecated" type="xsd:boolean">
+      <xsd:annotation>
+        <xsd:documentation>Indicates that a patch should not be used -- regardless of supersession.</xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+</xsd:schema>
diff --git a/src/main/resources/schema/nvdcve/scap-core_0.1.xsd b/src/main/resources/schema/nvdcve/scap-core_0.1.xsd
new file mode 100644
index 000000000..41d1ce5f6
--- /dev/null
+++ b/src/main/resources/schema/nvdcve/scap-core_0.1.xsd
@@ -0,0 +1,139 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+== Model: MITRE CPE 2.1
+== Package: scap-core_0.1
+-->
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+      xmlns="http://scap.nist.gov/schema/scap-core/0.1"
+      xmlns:xml="http://www.w3.org/XML/1998/namespace"
+      targetNamespace="http://scap.nist.gov/schema/scap-core/0.1"
+      elementFormDefault="qualified"
+      attributeFormDefault="unqualified"
+      version="0.1">
+      <xsd:import namespace="http://www.w3.org/XML/1998/namespace" schemaLocation="http://www.w3.org/2001/xml.xsd"/>
+      <!-- ================================================== -->
+      <!-- =====  Complex Type Definitions  -->
+      <!-- ================================================== -->
+      <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+      <!--  check  <<complexType>>  -->
+      <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+      <xsd:complexType name="checkReferenceType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">Data type for the check element, a checking system specification URI, string content, and an optional external file reference. The checking system specification should be the URI for a particular version of OVAL or a related system testing language, and the content will be an identifier of a test written in that language. The external file reference could be used to point to the file in which the content test identifier is defined.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:attribute name="system" type="xsd:anyURI" use="required"/>
+            <xsd:attribute name="href" type="xsd:anyURI" use="required"/>
+            <xsd:attribute name="name" type="xsd:token" use="optional"/>
+      </xsd:complexType>
+
+      <xsd:complexType name="checkSearchType">
+            <xsd:attribute name="system" type="xsd:anyURI" use="required"/>
+            <xsd:attribute name="name" type="xsd:token" use="optional"/>
+      </xsd:complexType>
+      
+      <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+      <!--  notes  -->
+      <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+      <xsd:complexType name="notesType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">The notesType defines an element that consists of one or more child note elements. It is assumed that each of these note elements are representative of the same language as defined by their parent.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:sequence>
+                  <xsd:element maxOccurs="unbounded" name="note" type="textType"/>
+            </xsd:sequence>
+      </xsd:complexType>
+      <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+      <!--  reference  <<complexType>>  -->
+      <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+      <xsd:complexType name="referenceType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">Type for a reference in the description of a CPE item. This would normally be used to point to extra descriptive material, or the supplier's web site, or the platform documentation. It consists of a piece of text (intended to be human-readable) and a URI (intended to be a URL, and point to a real resource).</xsd:documentation>
+            </xsd:annotation>
+            <xsd:simpleContent>
+                  <xsd:extension base="textType">
+                        <xsd:attribute name="href" type="xsd:anyURI"/>
+                  </xsd:extension>
+            </xsd:simpleContent>
+      </xsd:complexType>
+      <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+      <!--  tag  -->
+      <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+      <xsd:complexType name="tagType">
+            <xsd:attribute name="name" type="xsd:token" use="required"/>
+            <xsd:attribute name="value" type="xsd:token" use="required"/>
+      </xsd:complexType>
+      <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+      <!--  text  <<complexType>>  -->
+      <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+      <xsd:complexType name="textType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">This type allows the xml:lang attribute to associate a specific language with an element's string content.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:simpleContent>
+                  <xsd:extension base="xsd:string">
+                        <xsd:attribute ref="xml:lang"/>
+                  </xsd:extension>
+            </xsd:simpleContent>
+      </xsd:complexType>
+      
+      <xsd:group name="cpeReferenceGroup">
+            <xsd:choice>
+                  <xsd:element name="cpe-name" type="cpeNamePatternType"/>
+                  <xsd:element name="cpe-searchable-name" type="cpeSearchableNamePatternType"/>
+            </xsd:choice>
+      </xsd:group>
+      
+      <xsd:complexType name="searchableCpeReferencesType">
+            <xsd:sequence>
+                  <xsd:group ref="cpeReferenceGroup" minOccurs="1" maxOccurs="unbounded"/>
+            </xsd:sequence>
+      </xsd:complexType>
+      
+      <!-- =============================================================================== -->
+      <!-- ================================  ID PATTERNS  ================================ -->
+      <!-- =============================================================================== -->
+      <xsd:simpleType name="cpeNamePatternType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">Define the format for acceptable CPE Names. An urn format is used with the id starting with the word oval followed by a unique string, followed by the three letter code 'def', and ending with an integer.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:restriction base="xsd:anyURI">
+                  <xsd:pattern value="[c][pP][eE]:/[AHOaho]?(:[A-Za-z0-9\\._\\-~]*){0,6}"/>
+            </xsd:restriction>
+      </xsd:simpleType>
+      
+      <xsd:simpleType name="cpeSearchableNamePatternType">
+            <xsd:annotation>
+                  <xsd:documentation xml:lang="en">Define the format for acceptable
+                        searchableCPE Names.  The URI escaped code '%25' may be used
+                        to represent the character '%' which will be interpreted as a
+                        wildcard.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:restriction base="xsd:anyURI">
+                  <xsd:pattern value="[c][pP][eE]:/[AHOaho]?(:[A-Za-z0-9\\._\\-~*]*){0,6}"/>
+            </xsd:restriction>
+      </xsd:simpleType>
+      
+      <xsd:simpleType name="cpeComponentPatternType">
+            <xsd:annotation>
+                  <xsd:documentation>The name pattern of a CPE component.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:restriction base="xsd:token">
+                  <xsd:pattern value="[A-Za-z0-9\._\-~]*"/>
+            </xsd:restriction>
+      </xsd:simpleType>
+
+      <xsd:simpleType name="cpePartComponentPatternType">
+            <xsd:annotation>
+                  <xsd:documentation>The name pattern of the CPE part component.</xsd:documentation>
+            </xsd:annotation>
+            <xsd:restriction base="cpeComponentPatternType">
+                  <xsd:pattern value="[hoaHOA]"/>
+            </xsd:restriction>
+      </xsd:simpleType>
+
+      <xsd:simpleType name="cweNamePatternType">
+            <xsd:restriction base="xsd:token">
+                  <xsd:pattern value="CWE-[1-9]\d{0,5}"></xsd:pattern>
+            </xsd:restriction>
+      </xsd:simpleType>
+</xsd:schema>
diff --git a/src/main/resources/schema/nvdcve/vulnerability_0.4.xsd b/src/main/resources/schema/nvdcve/vulnerability_0.4.xsd
new file mode 100644
index 000000000..48989e7cf
--- /dev/null
+++ b/src/main/resources/schema/nvdcve/vulnerability_0.4.xsd
@@ -0,0 +1,260 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+== Model: Version 0-4 NetD
+== Package: vulnerability
+-->
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+  xmlns="http://scap.nist.gov/schema/vulnerability/0.4"
+  xmlns:scap-core="http://scap.nist.gov/schema/scap-core/0.1"
+  xmlns:cve="http://scap.nist.gov/schema/cve/0.1"
+  xmlns:cce="http://scap.nist.gov/schema/cce/0.1"
+  xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/0.2"
+  xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"
+  xmlns:patch="http://scap.nist.gov/schema/patch/0.1"
+  xmlns:xml="http://www.w3.org/XML/1998/namespace"
+  targetNamespace="http://scap.nist.gov/schema/vulnerability/0.4"
+  elementFormDefault="qualified" attributeFormDefault="unqualified"
+  version="0.4">
+  <xsd:import namespace="http://scap.nist.gov/schema/scap-core/0.1" schemaLocation="scap-core_0.1.xsd"/>
+  <xsd:import namespace="http://scap.nist.gov/schema/cve/0.1" schemaLocation="cve_0.1.xsd"/>
+  <xsd:import namespace="http://scap.nist.gov/schema/cce/0.1" schemaLocation="cce_0.1.xsd"/>
+  <xsd:import namespace="http://scap.nist.gov/schema/cvss-v2/0.2" schemaLocation="cvss-v2_0.2.xsd"/>
+  <xsd:import namespace="http://cpe.mitre.org/language/2.0" schemaLocation="cpe-language_2.1.xsd"/>
+  <xsd:import namespace="http://scap.nist.gov/schema/patch/0.1" schemaLocation="patch_0.1.xsd"/>
+  <xsd:import namespace="http://www.w3.org/XML/1998/namespace" schemaLocation="http://www.w3.org/2001/xml.xsd"/>
+  <!-- ================================================== -->
+  <!-- =====  Element Declarations  -->
+  <!-- ================================================== -->
+  <xsd:element name="vulnerability" type="vulnerabilityType"/>
+  <!-- ================================================== -->
+  <!-- =====  Simple Type Definitions  -->
+  <!-- ================================================== -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  Fix_Action_Description_List  <<simpleType>>  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:simpleType name="fixActionDescriptionEnumType">
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="PATCH"/>
+      <xsd:enumeration value="SOFTWARE_UPDATE"/>
+      <xsd:enumeration value="CONFIGURATION_CHANGE"/>
+      <xsd:enumeration value="POLICY_CHANGE"/>
+      <xsd:enumeration value="EXTERNAL_MITIGATION"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  Fix_Action_Type_List  <<simpleType>>  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:simpleType name="fixActionTypeEnumType">
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="MITIGATION"/>
+      <xsd:enumeration value="REMEDIATION"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  Fix_Effectiveness_List  <<simpleType>>  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:simpleType name="fixEffectivenessEnumType">
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="PARTIAL"/>
+      <xsd:enumeration value="COMPLETE"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  Vulnerability_Reference_Category_List  <<simpleType>>  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:simpleType name="vulnerabilityReferenceCategoryEnumType">
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="PATCH"/>
+      <xsd:enumeration value="VENDOR_ADVISORY"/>
+      <xsd:enumeration value="THIRD_PARTY_ADVISORY"/>
+      <xsd:enumeration value="SIGNATURE_SOURCE"/>
+      <xsd:enumeration value="MITIGATION_PROCEDURE"/>
+      <xsd:enumeration value="TOOL_CONFIGURATION_DESCRIPTION"/>
+      <xsd:enumeration value="UNKNOWN"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  Security_Protection  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:simpleType name="securityProtectionType">
+    <xsd:annotation>
+      <xsd:documentation>The security protection type</xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="ALLOWS_ADMIN_ACCESS">
+        <xsd:annotation>
+          <xsd:documentation>gain administrative access</xsd:documentation>
+        </xsd:annotation>
+      </xsd:enumeration>
+      <xsd:enumeration value="ALLOWS_USER_ACCESS">
+        <xsd:annotation>
+          <xsd:documentation>gain user access</xsd:documentation>
+        </xsd:annotation>
+      </xsd:enumeration>
+      <xsd:enumeration value="ALLOWS_OTHER_ACCESS"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+  <!-- ================================================== -->
+  <!-- =====  Complex Type Definitions  -->
+  <!-- ================================================== -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  Associated_Exploit_Location  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:complexType name="associatedExploitLocationType">
+    <xsd:sequence>
+      <xsd:element name="physical-access" type="xsd:boolean" minOccurs="0" default="false"/>
+      <xsd:element name="voluntarily-interact" type="xsd:boolean" minOccurs="0" default="false"/>
+      <xsd:element name="dialup" type="xsd:boolean" minOccurs="0" default="false"/>
+      <xsd:element name="unknown" type="xsd:boolean" minOccurs="0" default="false"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  Fix_Action  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:complexType name="fixActionType">
+    <xsd:annotation>
+      <xsd:documentation>A single fix action should only cover a single patch application, software update, configuration change, or external fix.  Dependencies should be documented by using the "next_fix_action" element to point to a recursive list of fix actions.</xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element ref="patch:patch" minOccurs="0"/>
+      <xsd:element name="configuration-remediation" type="vulnerabilityReferenceType" minOccurs="0"/>
+      <xsd:element name="software-update" type="scap-core:cpeNamePatternType" minOccurs="0" maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>CPE name of the software update package.</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="notes" type="xsd:string" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="deprecated-by" type="scap-core:cpeNamePatternType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="next-fix-action" type="fixActionType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="fix-action-tool-configuration" type="toolConfigurationType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="applicable-configuration" type="cpe-lang:PlatformType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="effectiveness" type="fixEffectivenessEnumType" minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>States whether the fix action fully avoids the risk associated with the vulnerability or reduces risk to some extent.</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="applicable-check" type="scap-core:checkReferenceType" minOccurs="0" maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>Describes or points to the check/test (either OVAL or other) that this particular fix action addresses.  E.G. applying this fix will change the value of this test result.</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="fix_action_description" type="fixActionDescriptionEnumType" use="required"/>
+    <xsd:attribute name="fix_action_type" type="fixActionTypeEnumType" use="required"/>
+    <xsd:attribute name="id" type="xsd:token" use="required">
+      <xsd:annotation>
+        <xsd:documentation>Unique value within the source.  Will be used with the source element to serve as a global unique identifier.</xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="source" type="xsd:anyURI" use="required">
+      <xsd:annotation>
+        <xsd:documentation>Should be a URI-like -- e.g. inverted DNS address e.g mil.jtf-gno</xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  OSVDB_Extension  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:complexType name="osvdbExtensionType">
+    <xsd:sequence>
+      <xsd:element name="exploit-location" type="associatedExploitLocationType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  Tool_Configuration  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:complexType name="toolConfigurationType">
+    <xsd:sequence>
+      <xsd:element name="name" type="scap-core:cpeNamePatternType" minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>The CPE name of the scanning tool.  A value must be supplied for this element.  The CPE name can be used for a CPE from the NVD.  The CPE title attribute can be used for internal naming conventions. (or both, if possible)</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="definition" type="scap-core:checkReferenceType" minOccurs="0" maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>Defines required signature or policy definition that must be installed on the tool.</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  CWE Reference  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:complexType name="cweReferenceType">
+    <xsd:attribute name="id" type="scap-core:cweNamePatternType" use="required"/>
+  </xsd:complexType>
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  Vulnerable Software  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:complexType name="vulnerableSoftwareType">
+    <xsd:sequence>
+      <xsd:element name="product" type="cpe-lang:namePattern" minOccurs="1" maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  Vulnerability  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:complexType name="vulnerabilityType">
+    <xsd:annotation>
+      <xsd:documentation>TODO: Low priority: Add reference to notes type to allow analysts, vendor and other comments.  Add source attribute.  Maybe categorization?</xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="osvdb-ext" type="osvdbExtensionType" minOccurs="0"/>
+      <xsd:element name="vulnerable-configuration" type="cpe-lang:PlatformType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="vulnerable-software-list" type="vulnerableSoftwareType" minOccurs="0"/>
+      <xsd:choice minOccurs="0">
+        <xsd:element name="cve-id" type="cve:cveNamePatternType"/>
+        <xsd:element name="cce-id" type="cce:cceNamePatternType"/>
+      </xsd:choice>
+      <xsd:element name="discovered-datetime" type="xsd:dateTime" minOccurs="0"/>
+      <xsd:element name="disclosure-datetime" type="xsd:dateTime" minOccurs="0"/>
+      <xsd:element name="exploit-publish-datetime" type="xsd:dateTime" minOccurs="0"/>
+      <xsd:element name="published-datetime" type="xsd:dateTime" minOccurs="0"/>
+      <xsd:element name="last-modified-datetime" type="xsd:dateTime" minOccurs="0"/>
+      <xsd:element name="cvss" type="cvssv2:cvssImpactType" minOccurs="0"/>
+      <xsd:element name="security-protection" type="securityProtectionType" minOccurs="0"/>
+      <xsd:element name="assessment_check" type="scap-core:checkReferenceType" maxOccurs="unbounded" minOccurs="0"/>
+      <xsd:element name="cwe" type="cweReferenceType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="references" type="vulnerabilityReferenceType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="fix_action" type="fixActionType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="scanner" type="toolConfigurationType" minOccurs="0" maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>Denotes a scanner and required configuration that is capable of detecting the referenced vulnerability.  May also be an OVAL definition and omit scanner name.</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="summary" type="xsd:string" minOccurs="0"/>
+      <xsd:element name="technical_description" type="scap-core:referenceType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="attack_scenario" type="scap-core:referenceType" minOccurs="0" maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>This element should ultimately be held in a threat model.</xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="vulnerabilityIdType" use="required"/>
+  </xsd:complexType>
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <!--  Vulnerability_Reference  -->
+  <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
+  <xsd:complexType name="vulnerabilityReferenceType">
+    <xsd:annotation>
+      <xsd:documentation>TODO: revisit referenceType and textType</xsd:documentation>
+      <xsd:documentation>Extends the base "reference" class by adding the ability to specify which kind (within the vulnerability model) of reference it is.  See "Vulnerability_Reference_Category_List" enumeration.</xsd:documentation>
+    </xsd:annotation>
+        <xsd:sequence>
+          <xsd:element name="source" type="xsd:string" minOccurs="0">
+            <xsd:annotation>
+              <xsd:documentation>TODO: determine purpose</xsd:documentation>
+            </xsd:annotation>
+          </xsd:element>
+          <xsd:element name="reference" type="scap-core:referenceType"/>
+          <xsd:element minOccurs="0" name="notes" type="scap-core:notesType"/>
+        </xsd:sequence>
+        <xsd:attribute ref="xml:lang" use="optional" default="en"/>
+        <xsd:attribute name="reference_type" type="vulnerabilityReferenceCategoryEnumType" use="required"/>
+        <xsd:attribute name="deprecated" type="xsd:boolean"/>
+  </xsd:complexType>
+  
+  <xsd:simpleType name="vulnerabilityIdType">
+    <xsd:restriction base="xsd:token"/>
+  </xsd:simpleType>
+</xsd:schema>
diff --git a/src/main/resources/templates/HtmlReport.vsl b/src/main/resources/templates/HtmlReport.vsl
index 96e86895c..b24c3aff1 100644
--- a/src/main/resources/templates/HtmlReport.vsl
+++ b/src/main/resources/templates/HtmlReport.vsl
@@ -374,7 +374,25 @@ Copyright (c) 2012 Jeremy Long. All Rights Reserved.
                             #end
                             </ul>
                         #end
-                     </div>
+                        </div>
+                    #if($dependency.getVulnerabilities().size()>0)
+                    #set($cnt=$cnt+1)
+                    <h4 id="header$cnt" class="subsectionheader white">Published Vulnerabilities</h4>
+                    <div id="content$cnt" class="subsectioncontent standardsubsection">
+                        #foreach($vuln in $dependency.getVulnerabilities())
+                            <p><b><a target="blank" href="http://web.nvd.nist.gov/view/vuln/detail?vulnId=$esc.url($vuln.name)">$esc.html($vuln.name)</a></b></p>
+                            <p>$esc.html($vuln.description)
+                                #if ($vuln.getReferences().size()>0)
+                                    <ul>
+                                    #foreach($ref in $vuln.getReferences())
+                                        <li>$esc.html($ref.source) - <a target="blank" href="$esc.html($ref.url)">$ref.name</a></li>
+                                    #end
+                                    </ul>
+                                #end
+                             </p>
+                        #end
+                    </div>
+                    #end
                 </div>
                 #end
             </div>
diff --git a/src/test/java/org/codesecure/dependencycheck/EngineTest.java b/src/test/java/org/codesecure/dependencycheck/EngineTest.java
index 44e2c7dba..7a7f2599e 100644
--- a/src/test/java/org/codesecure/dependencycheck/EngineTest.java
+++ b/src/test/java/org/codesecure/dependencycheck/EngineTest.java
@@ -4,7 +4,6 @@
  */
 package org.codesecure.dependencycheck;
 
-import org.codesecure.dependencycheck.data.lucene.BaseIndexTestCase;
 import org.codesecure.dependencycheck.reporting.ReportGenerator;
 import org.junit.After;
 import org.junit.AfterClass;
@@ -17,10 +16,11 @@ import static org.junit.Assert.*;
  *
  * @author Jeremy Long (jeremy.long@gmail.com)
  */
-public class EngineTest extends BaseIndexTestCase {
+public class EngineTest {
 
-    public EngineTest(String testName) {
-        super(testName);
+    public EngineTest() throws Exception {
+        org.codesecure.dependencycheck.data.nvdcve.BaseIndexTestCase.ensureIndexExists();
+        org.codesecure.dependencycheck.data.cpe.BaseIndexTestCase.ensureIndexExists();
     }
 
     @BeforeClass
diff --git a/src/test/java/org/codesecure/dependencycheck/data/lucene/BaseIndexTestCase.java b/src/test/java/org/codesecure/dependencycheck/data/cpe/BaseIndexTestCase.java
similarity index 91%
rename from src/test/java/org/codesecure/dependencycheck/data/lucene/BaseIndexTestCase.java
rename to src/test/java/org/codesecure/dependencycheck/data/cpe/BaseIndexTestCase.java
index fe6b49837..2f13f5daa 100644
--- a/src/test/java/org/codesecure/dependencycheck/data/lucene/BaseIndexTestCase.java
+++ b/src/test/java/org/codesecure/dependencycheck/data/cpe/BaseIndexTestCase.java
@@ -2,7 +2,7 @@
  * To change this template, choose Tools | Templates
  * and open the template in the editor.
  */
-package org.codesecure.dependencycheck.data.lucene;
+package org.codesecure.dependencycheck.data.cpe;
 
 import java.io.BufferedInputStream;
 import java.io.BufferedOutputStream;
@@ -30,15 +30,15 @@ public abstract class BaseIndexTestCase extends TestCase {
         ensureIndexExists();        
     }
     
-    protected void ensureIndexExists() throws Exception {
-        String indexPath = Settings.getString("cpe");
+    public static void ensureIndexExists() throws Exception {
+        String indexPath = Settings.getString(Settings.KEYS.CPE_INDEX);
         java.io.File f = new File(indexPath);
         if (!f.exists()) {
             f.mkdirs();
             FileInputStream fis = null;
             ZipInputStream zin = null;
             try {
-                File path = new File(this.getClass().getClassLoader().getResource("index.cpe.zip").getPath());
+                File path = new File(BaseIndexTestCase.class.getClassLoader().getResource("index.cpe.zip").getPath());
                 fis = new FileInputStream(path);
                 zin = new ZipInputStream(new BufferedInputStream(fis));
                 ZipEntry entry;
diff --git a/src/test/java/org/codesecure/dependencycheck/data/cpe/CPEAnalyzerTest.java b/src/test/java/org/codesecure/dependencycheck/data/cpe/CPEAnalyzerTest.java
index e4929becc..c1fb3d971 100644
--- a/src/test/java/org/codesecure/dependencycheck/data/cpe/CPEAnalyzerTest.java
+++ b/src/test/java/org/codesecure/dependencycheck/data/cpe/CPEAnalyzerTest.java
@@ -11,7 +11,6 @@ import java.util.List;
 import java.util.Set;
 import org.apache.lucene.index.CorruptIndexException;
 import org.apache.lucene.queryParser.ParseException;
-import org.codesecure.dependencycheck.data.lucene.BaseIndexTestCase;
 import org.codesecure.dependencycheck.dependency.Dependency;
 import org.codesecure.dependencycheck.analyzer.JarAnalyzer;
 import org.codesecure.dependencycheck.dependency.Evidence;
diff --git a/src/test/java/org/codesecure/dependencycheck/data/cpe/EntryTest.java b/src/test/java/org/codesecure/dependencycheck/data/cpe/EntryTest.java
index 5541a230c..37e01ee7d 100644
--- a/src/test/java/org/codesecure/dependencycheck/data/cpe/EntryTest.java
+++ b/src/test/java/org/codesecure/dependencycheck/data/cpe/EntryTest.java
@@ -4,7 +4,6 @@
  */
 package org.codesecure.dependencycheck.data.cpe;
 
-import org.codesecure.dependencycheck.data.cpe.Entry;
 import junit.framework.TestCase;
 
 /**
diff --git a/src/test/java/org/codesecure/dependencycheck/data/cpe/IndexTest.java b/src/test/java/org/codesecure/dependencycheck/data/cpe/IndexIntegrationTest.java
similarity index 81%
rename from src/test/java/org/codesecure/dependencycheck/data/cpe/IndexTest.java
rename to src/test/java/org/codesecure/dependencycheck/data/cpe/IndexIntegrationTest.java
index 5a15e0746..47d0ed66e 100644
--- a/src/test/java/org/codesecure/dependencycheck/data/cpe/IndexTest.java
+++ b/src/test/java/org/codesecure/dependencycheck/data/cpe/IndexIntegrationTest.java
@@ -5,12 +5,7 @@
 package org.codesecure.dependencycheck.data.cpe;
 
 import java.io.File;
-import org.codesecure.dependencycheck.data.lucene.BaseIndexTestCase;
 import java.io.IOException;
-import java.util.logging.Level;
-import java.util.logging.Logger;
-import org.apache.lucene.analysis.Analyzer;
-import org.apache.lucene.index.CorruptIndexException;
 import org.apache.lucene.store.Directory;
 import org.junit.After;
 import org.junit.AfterClass;
@@ -23,9 +18,9 @@ import static org.junit.Assert.*;
  *
  * @author Jeremy Long (jeremy.long@gmail.com)
  */
-public class IndexTest extends BaseIndexTestCase {
+public class IndexIntegrationTest extends BaseIndexTestCase {
 
-    public IndexTest(String testCase) {
+    public IndexIntegrationTest(String testCase) {
         super(testCase);
     }
 
@@ -78,8 +73,8 @@ public class IndexTest extends BaseIndexTestCase {
      * Test of update method, of class Index.
      */
     @Test
-    public void testUpdateIndexFromWeb() throws Exception {
-        System.out.println("updateIndexFromWeb");
+    public void testUpdate() throws Exception {
+        System.out.println("update");
         Index instance = new Index();
         instance.update();
     }
@@ -91,8 +86,7 @@ public class IndexTest extends BaseIndexTestCase {
     public void testUpdateNeeded() throws Exception {
         System.out.println("updateNeeded");
         Index instance = new Index();
-        long expResult = 0L;
-        long result = instance.updateNeeded();
+        instance.updateNeeded();
         //if an exception is thrown this test fails. However, because it depends on the
         //  order of the tests what this will return I am just testing for the exception.
         //assertTrue(expResult < result);
diff --git a/src/test/java/org/codesecure/dependencycheck/data/cpe/xml/CPEHandlerTest.java b/src/test/java/org/codesecure/dependencycheck/data/cpe/xml/CPEHandlerTest.java
deleted file mode 100644
index 5561c6648..000000000
--- a/src/test/java/org/codesecure/dependencycheck/data/cpe/xml/CPEHandlerTest.java
+++ /dev/null
@@ -1,45 +0,0 @@
-/*
- * To change this template, choose Tools | Templates
- * and open the template in the editor.
- */
-package org.codesecure.dependencycheck.data.cpe.xml;
-
-import java.io.File;
-import junit.framework.TestCase;
-
-/**
- *
- * @author jeremy
- */
-public class CPEHandlerTest extends TestCase {
-    
-    public CPEHandlerTest(String testName) {
-        super(testName);
-    }
-    
-    @Override
-    protected void setUp() throws Exception {
-        super.setUp();
-    }
-    
-    @Override
-    protected void tearDown() throws Exception {
-        super.tearDown();
-    }
-
-
-    /**
-     * Test of all methods within class CPEHandler.
-     */
-    public void testHandler() throws Exception {
-        System.out.println("CPEHandler");
-        
-        File path = new File(this.getClass().getClassLoader().getResource("official-cpe-dictionary_v2.2.xml").getPath());
-        
-        
-        Importer.importXML(path.getCanonicalPath());
-       
-    }
-
-    
-}
diff --git a/src/test/java/org/codesecure/dependencycheck/data/cpe/xml/ImporterTest.java b/src/test/java/org/codesecure/dependencycheck/data/cpe/xml/ImporterTest.java
index 7a0529970..03e917bc9 100644
--- a/src/test/java/org/codesecure/dependencycheck/data/cpe/xml/ImporterTest.java
+++ b/src/test/java/org/codesecure/dependencycheck/data/cpe/xml/ImporterTest.java
@@ -32,7 +32,7 @@ public class ImporterTest extends TestCase {
 
     /**
      * Test of all methods within class CPEHandler.
-     * @throws Exception is thrown when an excpetion occurs.
+     * @throws Exception is thrown when an excretion occurs.
      */
     public void testHandler() throws Exception {
         System.out.println("importXML");
diff --git a/src/test/java/org/codesecure/dependencycheck/data/nvdcve/BaseIndexTestCase.java b/src/test/java/org/codesecure/dependencycheck/data/nvdcve/BaseIndexTestCase.java
new file mode 100644
index 000000000..3efbc6aa6
--- /dev/null
+++ b/src/test/java/org/codesecure/dependencycheck/data/nvdcve/BaseIndexTestCase.java
@@ -0,0 +1,98 @@
+/*
+ * To change this template, choose Tools | Templates
+ * and open the template in the editor.
+ */
+package org.codesecure.dependencycheck.data.nvdcve;
+
+import org.codesecure.dependencycheck.data.cpe.*;
+import java.io.BufferedInputStream;
+import java.io.BufferedOutputStream;
+import java.io.File;
+import java.io.FileInputStream;
+import java.io.FileOutputStream;
+import java.util.zip.ZipEntry;
+import java.util.zip.ZipInputStream;
+import junit.framework.TestCase;
+import org.codesecure.dependencycheck.utils.Settings;
+
+/**
+ *
+ * @author Jeremy Long (jeremy.long@gmail.com)
+ */
+public abstract class BaseIndexTestCase extends TestCase {
+    
+    public BaseIndexTestCase(String testName) {
+        super(testName);
+    }
+    
+    @Override
+    protected void setUp() throws Exception {
+        super.setUp();
+        ensureIndexExists();        
+    }
+    
+    public static void ensureIndexExists() throws Exception {
+        String indexPath = Settings.getString(Settings.KEYS.CVE_INDEX);
+        java.io.File f = new File(indexPath);
+        if (!f.exists()) {
+            f.mkdirs();
+            FileInputStream fis = null;
+            ZipInputStream zin = null;
+            try {
+                File path = new File(BaseIndexTestCase.class.getClassLoader().getResource("index.nvdcve.zip").getPath());
+                fis = new FileInputStream(path);
+                zin = new ZipInputStream(new BufferedInputStream(fis));
+                ZipEntry entry;
+                while ((entry = zin.getNextEntry()) != null) {
+                    if (entry.isDirectory()) {
+                        continue;
+                    }
+                    int BUFFER = 2048;
+                    String outputName = indexPath + File.separatorChar + entry.getName();
+                    FileOutputStream fos = null;
+                    BufferedOutputStream dest = null;
+                    try {
+                        File o = new File(outputName);
+//                        File oPath = new File(o.getParent());
+//                        if (!oPath.exists()) {
+//                            oPath.mkdir();
+//                        }
+                        o.createNewFile();
+                        fos = new FileOutputStream(o,false);
+                        dest = new BufferedOutputStream(fos, BUFFER);
+                        byte data[] = new byte[BUFFER];
+                        int count;
+                        while ((count = zin.read(data, 0, BUFFER)) != -1) {
+                           dest.write(data, 0, count);
+                        }
+                    } catch (Exception ex) { 
+                        String ignore = ex.getMessage(); 
+                    } finally {
+                        try {
+                            dest.flush();
+                            dest.close();
+                            dest = null;
+                        } catch (Throwable ex) { String ignore = ex.getMessage(); }
+                        try {
+                            fos.close();
+                            fos = null;
+                        } catch (Throwable ex) { String ignore = ex.getMessage(); }
+                    }
+                }
+            } finally {
+                try {
+                    if (zin!=null) {
+                        zin.close();
+                    }
+                    zin = null;
+                } catch (Throwable ex) { String ignore = ex.getMessage(); }
+                try {
+                    if (fis!=null) {
+                        fis.close();
+                    }
+                    fis = null;
+                } catch (Throwable ex) { String ignore = ex.getMessage(); }
+            }
+        }
+    }
+}
diff --git a/src/test/java/org/codesecure/dependencycheck/data/nvdcve/IndexIntegrationTest.java b/src/test/java/org/codesecure/dependencycheck/data/nvdcve/IndexIntegrationTest.java
new file mode 100644
index 000000000..8167fbe29
--- /dev/null
+++ b/src/test/java/org/codesecure/dependencycheck/data/nvdcve/IndexIntegrationTest.java
@@ -0,0 +1,85 @@
+/*
+ * To change this template, choose Tools | Templates
+ * and open the template in the editor.
+ */
+package org.codesecure.dependencycheck.data.nvdcve;
+
+import java.io.File;
+import java.util.Map;
+import org.apache.lucene.store.Directory;
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertTrue;
+import org.junit.*;
+
+/**
+ *
+ * @author Jeremy
+ */
+public class IndexIntegrationTest extends BaseIndexTestCase {
+    
+    public IndexIntegrationTest(String testName) {
+        super(testName);
+    }
+
+    @BeforeClass
+    public static void setUpClass() throws Exception {
+    }
+
+    @AfterClass
+    public static void tearDownClass() throws Exception {
+    }
+    
+    @Before
+    public void setUp() {
+    }
+    
+    @After
+    public void tearDown() {
+    }
+
+    /**
+     * Test of retrieveCurrentTimestampFromWeb method, of class Index.
+     */
+    @Test
+    public void testRetrieveCurrentTimestampFromWeb() throws Exception {
+        System.out.println("retrieveCurrentTimestampFromWeb");
+        Index instance = new Index();
+        Map<String, Index.NvdCveUrl> result = instance.retrieveCurrentTimestampsFromWeb();
+        assertEquals(12, result.size());        
+    }
+
+    /**
+     * Test of getDirectory method, of class Index.
+     */
+    @Test
+    public void testGetDirectory() throws Exception {
+        System.out.println("getDirectory");
+        Index instance = new Index();
+        String exp = File.separatorChar + "target" + File.separatorChar + "data" + File.separatorChar + "cve";
+        Directory result = instance.getDirectory();
+        assertTrue(result.toString().contains(exp));
+    }
+
+    /**
+     * Test of update method, of class Index.
+     */
+    @Test
+    public void testUpdate() throws Exception {
+        System.out.println("update");
+        Index instance = new Index();
+        instance.update();
+    }
+
+    /**
+     * Test of updateNeeded method, of class Index.
+     */
+    @Test
+    public void testUpdateNeeded() throws Exception {
+        System.out.println("updateNeeded");
+        Index instance = new Index();
+        instance.updateNeeded();
+        //if an exception is thrown this test fails. However, because it depends on the
+        //  order of the tests what this will return I am just testing for the exception.
+    }
+
+}
diff --git a/src/test/java/org/codesecure/dependencycheck/data/nvdcve/xml/NvdCveXmlFilterTest.java b/src/test/java/org/codesecure/dependencycheck/data/nvdcve/xml/NvdCveXmlFilterTest.java
new file mode 100644
index 000000000..de95cbb11
--- /dev/null
+++ b/src/test/java/org/codesecure/dependencycheck/data/nvdcve/xml/NvdCveXmlFilterTest.java
@@ -0,0 +1,77 @@
+/*
+ * To change this template, choose Tools | Templates
+ * and open the template in the editor.
+ */
+package org.codesecure.dependencycheck.data.nvdcve.xml;
+
+import java.io.BufferedInputStream;
+import java.io.DataInputStream;
+import java.io.File;
+import java.io.FileReader;
+import java.io.IOException;
+import java.io.InputStream;
+import java.io.Reader;
+import java.net.MalformedURLException;
+import javax.xml.bind.JAXBContext;
+import javax.xml.bind.JAXBException;
+import javax.xml.parsers.ParserConfigurationException;
+import javax.xml.parsers.SAXParserFactory;
+import org.codesecure.dependencycheck.data.nvdcve.generated.VulnerabilityType;
+import org.junit.After;
+import org.junit.AfterClass;
+import org.junit.Before;
+import org.junit.BeforeClass;
+import org.junit.Test;
+import static org.junit.Assert.*;
+import org.xml.sax.Attributes;
+import org.xml.sax.InputSource;
+import org.xml.sax.Locator;
+import org.xml.sax.SAXException;
+import org.xml.sax.XMLReader;
+
+/**
+ *
+ * @author Jeremy
+ */
+public class NvdCveXmlFilterTest {
+    
+    public NvdCveXmlFilterTest() {
+    }
+    
+    @BeforeClass
+    public static void setUpClass() {
+    }
+    
+    @AfterClass
+    public static void tearDownClass() {
+    }
+    
+    @Before
+    public void setUp() {
+    }
+    
+    @After
+    public void tearDown() {
+    }
+
+    /**
+     * Test of process method, of class NvdCveXmlFilter.
+     */
+    @Test
+    public void testFilter() throws JAXBException, SAXException, ParserConfigurationException, MalformedURLException, IOException {
+        System.out.println("filter");
+        
+        SAXParserFactory factory = SAXParserFactory.newInstance();
+        factory.setNamespaceAware(true);
+        XMLReader reader = factory.newSAXParser().getXMLReader();
+        
+        JAXBContext context = JAXBContext.newInstance("org.codesecure.dependencycheck.data.nvdcve.generated");
+        NvdCveXmlFilter filter = new NvdCveXmlFilter(context);
+
+        reader.setContentHandler(filter);
+        File file = new File(this.getClass().getClassLoader().getResource("nvdcve-2.0-2012.xml").getPath());
+        Reader fileReader = new FileReader(file);
+        InputSource is = new InputSource(fileReader);
+        reader.parse(is);
+    }
+}
diff --git a/src/test/java/org/codesecure/dependencycheck/reporting/ReportGeneratorTest.java b/src/test/java/org/codesecure/dependencycheck/reporting/ReportGeneratorTest.java
index cb1b72751..0da36f5b1 100644
--- a/src/test/java/org/codesecure/dependencycheck/reporting/ReportGeneratorTest.java
+++ b/src/test/java/org/codesecure/dependencycheck/reporting/ReportGeneratorTest.java
@@ -10,7 +10,7 @@ import java.util.ArrayList;
 import java.io.File;
 import org.codesecure.dependencycheck.dependency.Dependency;
 import java.util.HashMap;
-import org.codesecure.dependencycheck.data.lucene.BaseIndexTestCase;
+import org.codesecure.dependencycheck.data.cpe.BaseIndexTestCase;
 import java.util.Map;
 import org.codesecure.dependencycheck.dependency.Evidence.Confidence;
 import org.junit.After;
diff --git a/src/test/java/org/codesecure/dependencycheck/utils/ChecksumTest.java b/src/test/java/org/codesecure/dependencycheck/utils/ChecksumTest.java
index 608da1468..ef6b5789d 100644
--- a/src/test/java/org/codesecure/dependencycheck/utils/ChecksumTest.java
+++ b/src/test/java/org/codesecure/dependencycheck/utils/ChecksumTest.java
@@ -32,7 +32,7 @@ public class ChecksumTest extends TestCase {
 
     /**
      * Test of getChecksum method, of class Checksum.
-     * @throws Exception thrown when an excpetion occurs.
+     * @throws Exception thrown when an exception occurs.
      */
     @Test
     public void testGetChecksum() throws Exception {
diff --git a/src/test/java/org/codesecure/dependencycheck/utils/SettingsTest.java b/src/test/java/org/codesecure/dependencycheck/utils/SettingsTest.java
index e652aa1c2..4edcd7032 100644
--- a/src/test/java/org/codesecure/dependencycheck/utils/SettingsTest.java
+++ b/src/test/java/org/codesecure/dependencycheck/utils/SettingsTest.java
@@ -101,7 +101,7 @@ public class SettingsTest extends TestCase {
      * Test of getInt method, of class Settings.
      */
     @Test
-    public void testGetInt() {
+    public void testGetInt() throws InvalidSettingException {
         System.out.println("getInt");
         String key = "SomeNumber";
         int expResult = 85;
@@ -114,7 +114,7 @@ public class SettingsTest extends TestCase {
      * Test of getLong method, of class Settings.
      */
     @Test
-    public void testGetLong() {
+    public void testGetLong() throws InvalidSettingException {
         System.out.println("getLong");
         String key = "SomeNumber";
         long expResult = 300L;
@@ -127,7 +127,7 @@ public class SettingsTest extends TestCase {
      * Test of getBoolean method, of class Settings.
      */
     @Test
-    public void testGetBoolean() {
+    public void testGetBoolean() throws InvalidSettingException {
         System.out.println("getBoolean");
         String key = "SomeBoolean";
         Settings.setString(key, "false");
diff --git a/src/test/resources/nvdcve-2.0-2012.xml.REMOVED.git-id b/src/test/resources/nvdcve-2.0-2012.xml.REMOVED.git-id
new file mode 100644
index 000000000..08ab89628
--- /dev/null
+++ b/src/test/resources/nvdcve-2.0-2012.xml.REMOVED.git-id
@@ -0,0 +1 @@
+e87a8b468d0d9a139c46cc0e0b94577f7f6fb06f
\ No newline at end of file
diff --git a/src/test/resources/nvdcve-2010.xml.REMOVED.git-id b/src/test/resources/nvdcve-2010.xml.REMOVED.git-id
deleted file mode 100644
index 899b0f436..000000000
--- a/src/test/resources/nvdcve-2010.xml.REMOVED.git-id
+++ /dev/null
@@ -1 +0,0 @@
-826eb31ad4e2367a3382efe05d4524b767d4203d
\ No newline at end of file
diff --git a/src/test/resources/nvdcve-2011.xml.REMOVED.git-id b/src/test/resources/nvdcve-2011.xml.REMOVED.git-id
deleted file mode 100644
index 227f9f5ed..000000000
--- a/src/test/resources/nvdcve-2011.xml.REMOVED.git-id
+++ /dev/null
@@ -1 +0,0 @@
-0ac14732689115248018d582505f6751e62fafe8
\ No newline at end of file
diff --git a/src/test/resources/nvdcve-2012.xml b/src/test/resources/nvdcve-2012.xml
deleted file mode 100644
index 6f0ee5d1f..000000000
--- a/src/test/resources/nvdcve-2012.xml
+++ /dev/null
@@ -1,192322 +0,0 @@
-<?xml version='1.0' encoding='UTF-8'?>
-<nvd xmlns="http://nvd.nist.gov/feeds/cve/1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://nvd.nist.gov/feeds/cve/1.2 http://nvd.nist.gov/schema/nvdcve.xsd" nvd_xml_version="1.2" pub_date="2012-09-18">
-  <entry type="CVE" severity="High" seq="2012-0001" published="2012-01-10" name="CVE-2012-0001" modified="2012-01-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load structured exception handling tables, which allows context-dependent attackers to bypass the SafeSEH security feature by leveraging a Visual C++ .NET 2003 application, aka "Windows Kernel SafeSEH Bypass Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026493" source="SECTRACK">1026493</ref>
-      <ref url="http://www.securityfocus.com/bid/51296" source="BID">51296</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-001" source="MS" adv="1">MS12-001</ref>
-      <ref url="http://secunia.com/advisories/47356" source="SECUNIA">47356</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14758" source="OVAL">oval:org.mitre.oval:def:14758</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="-" edition="-" />
-        <vers num="-" edition="-:x32" />
-        <vers num="-" edition="-:x64" />
-        <vers num="-" edition="sp1" />
-        <vers num="-" edition="sp1:x64" />
-        <vers num="-" edition="sp1:x32" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:x32" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:itanium" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:professional_x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0002" published="2012-03-13" name="CVE-2012-0002" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability."</descript>
-      <descript source="nvd">Per: http://technet.microsoft.com/en-us/security/bulletin/ms12-020
-
-"By default, the Remote Desktop Protocol is not enabled on any Windows operating system. Systems that do not have RDP enabled are not at risk. Note that on Windows XP and Windows Server 2003, Remote Assistance can enable RDP."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-020" source="MS" patch="1" adv="1">MS12-020</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14623" source="OVAL">oval:org.mitre.oval:def:14623</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x86" />
-        <vers num="" edition=":x64" />
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x86" />
-        <vers num="" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:itanium" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0003" published="2012-01-10" name="CVE-2012-0003" modified="2012-01-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via a crafted MIDI file, aka "MIDI Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026492" source="SECTRACK">1026492</ref>
-      <ref url="http://www.securityfocus.com/bid/51292" source="BID">51292</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-004" source="MS">MS12-004</ref>
-      <ref url="http://secunia.com/advisories/47485" source="SECUNIA">47485</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14337" source="OVAL">oval:org.mitre.oval:def:14337</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="-" edition="-" />
-        <vers num="-" edition="-:x32" />
-        <vers num="-" edition="-:x64" />
-        <vers num="-" edition="sp1" />
-        <vers num="-" edition="sp1:x64" />
-        <vers num="-" edition="sp1:x32" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:x32" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:itanium" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:professional_x64" />
-        <vers num="" edition="sp3" />
-        <vers num="2005" edition="sp3" />
-        <vers num="2005" edition="sp3:media_center" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0004" published="2012-01-10" name="CVE-2012-0004" modified="2012-01-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, related to Quartz.dll, Qdvd.dll, closed captioning, and the Line21 DirectShow filter, aka "DirectShow Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026492" source="SECTRACK">1026492</ref>
-      <ref url="http://www.securityfocus.com/bid/51295" source="BID">51295</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-004" source="MS" adv="1">MS12-004</ref>
-      <ref url="http://secunia.com/advisories/47485" source="SECUNIA">47485</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14832" source="OVAL">oval:org.mitre.oval:def:14832</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="-" edition="-" />
-        <vers num="-" edition="-:x32" />
-        <vers num="-" edition="-:x64" />
-        <vers num="-" edition="sp1" />
-        <vers num="-" edition="sp1:x64" />
-        <vers num="-" edition="sp1:x32" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:x32" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:itanium" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-        <vers num="2005" edition="sp3" />
-        <vers num="2005" edition="sp3:media_center" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0005" published="2012-01-10" name="CVE-2012-0005" modified="2012-01-31" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean system locale is used, can access uninitialized memory during the processing of Unicode characters, which allows local users to gain privileges via a crafted application, aka "CSRSS Elevation of Privilege Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026495" source="SECTRACK">1026495</ref>
-      <ref url="http://www.securityfocus.com/bid/51270" source="BID">51270</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-003" source="MS" adv="1">MS12-003</ref>
-      <ref url="http://secunia.com/advisories/47479" source="SECUNIA">47479</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14879" source="OVAL">oval:org.mitre.oval:def:14879</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:x32" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:professional_x64" />
-        <vers num="" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0006" published="2012-03-13" name="CVE-2012-0006" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The DNS server in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 does not properly handle objects in memory during record lookup, which allows remote attackers to cause a denial of service (daemon restart) via a crafted query, aka "DNS Denial of Service Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-017" source="MS" patch="1" adv="1">MS12-017</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15098" source="OVAL">oval:org.mitre.oval:def:15098</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0007" published="2012-01-10" name="CVE-2012-0007" modified="2012-01-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML input, aka "AntiXSS Library Bypass Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026499" source="SECTRACK">1026499</ref>
-      <ref url="http://www.securityfocus.com/bid/51291" source="BID">51291</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-007" source="MS" adv="1">MS12-007</ref>
-      <ref url="http://secunia.com/advisories/47516" source="SECUNIA">47516</ref>
-      <ref url="http://secunia.com/advisories/47483" source="SECUNIA">47483</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14314" source="OVAL">oval:org.mitre.oval:def:14314</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="anti-cross_site_scripting_library">
-        <vers num="3.1" />
-        <vers num="4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0008" published="2012-03-13" name="CVE-2012-0008" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability."</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426: Untrusted Search Path'
-</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://technet.microsoft.com/en-us/security/bulletin/ms12-021
-
-'An attacker could then place a specially crafted add-in in the path used by Visual Studio. When Visual Studio is started by an administrator, the specially crafted add-in would be loaded with the same privileges as the administrator.'
-
-'The vulnerability could not be exploited remotely or by anonymous users.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-021" source="MS" patch="1" adv="1">MS12-021</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15081" source="OVAL">oval:org.mitre.oval:def:15081</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="visual_studio">
-        <vers num="2008" edition="sp1" />
-        <vers num="2010" edition="sp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0009" published="2012-01-10" name="CVE-2012-0009" modified="2012-01-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse executable file in the current working directory, as demonstrated by a directory that contains a file with an embedded packaged object, aka "Object Packager Insecure Executable Launching Vulnerability."</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://technet.microsoft.com/en-us/security/bulletin/ms12-002
-
-'The vulnerability could allow remote code execution if a user opens a legitimate file with an embedded packaged object that is located in the same network directory as a specially crafted executable file.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-002" source="MS" patch="1" adv="1">MS12-002</ref>
-      <ref url="http://www.securitytracker.com/id?1026494" source="SECTRACK">1026494</ref>
-      <ref url="http://www.securityfocus.com/bid/51297" source="BID">51297</ref>
-      <ref url="http://secunia.com/advisories/45189" source="SECUNIA">45189</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14393" source="OVAL">oval:org.mitre.oval:def:14393</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:professional_x64" />
-        <vers num="" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0010" published="2012-02-14" name="CVE-2012-0010" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 6 through 9 does not properly perform copy-and-paste operations, which allows user-assisted remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Copy and Paste Information Disclosure Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-010" source="MS" patch="1" adv="1">MS12-010</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14835" source="OVAL">oval:org.mitre.oval:def:14835</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0011" published="2012-02-14" name="CVE-2012-0011" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "HTML Layout Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-010" source="MS" patch="1" adv="1">MS12-010</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14310" source="OVAL">oval:org.mitre.oval:def:14310</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="7" />
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0012" published="2012-02-14" name="CVE-2012-0012" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows remote attackers to read data from arbitrary process-memory locations via a crafted web site, aka "Null Byte Information Disclosure Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-010" source="MS" patch="1" adv="1">MS12-010</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14870" source="OVAL">oval:org.mitre.oval:def:14870</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0013" published="2012-01-10" name="CVE-2012-0013" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted ClickOnce application in a Microsoft Office document, related to .application files, aka "Assembly Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026497" source="SECTRACK">1026497</ref>
-      <ref url="http://www.securityfocus.com/bid/51284" source="BID">51284</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-005" source="MS" adv="1">MS12-005</ref>
-      <ref url="http://secunia.com/advisories/47480" source="SECUNIA">47480</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14197" source="OVAL">oval:org.mitre.oval:def:14197</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="-" edition="-" />
-        <vers num="-" edition="-:x32" />
-        <vers num="-" edition="-:x64" />
-        <vers num="-" edition="sp1" />
-        <vers num="-" edition="sp1:x64" />
-        <vers num="-" edition="sp1:x32" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:x32" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:itanium" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:professional_x64" />
-        <vers num="" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0014" published="2012-02-14" name="CVE-2012-0014" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Unmanaged Objects Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-016" source="MS" patch="1" adv="1">MS12-016</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:13972" source="OVAL">oval:org.mitre.oval:def:13972</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name=".net_framework">
-        <vers num="2.0" edition="sp2" />
-        <vers num="3.5.1" />
-        <vers num="4.0" />
-      </prod>
-      <prod vendor="microsoft" name="silverlight">
-        <vers num="4.0.50524.00" />
-        <vers num="4.0.50826.0" />
-        <vers num="4.0.50917.0" />
-        <vers num="4.0.51204.0" />
-        <vers num="4.0.60129.0" />
-        <vers num="4.0.60310.0" />
-        <vers num="4.0.603310.0" />
-        <vers num="4.0.60531.0" />
-        <vers num="4.0.60831.0" />
-        <vers num="4.1.10111" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0015" published="2012-02-14" name="CVE-2012-0015" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Heap Corruption Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-016" source="MS" patch="1" adv="1">MS12-016</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14513" source="OVAL">oval:org.mitre.oval:def:14513</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name=".net_framework">
-        <vers num="2.0" edition="sp2" />
-        <vers num="3.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0016" published="2012-03-13" name="CVE-2012-0016" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in Microsoft Expression Design; Expression Design SP1; and Expression Design 2, 3, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .xpr or .DESIGN file, aka "Expression Design Insecure Library Loading Vulnerability."</descript>
-      <descript source="nvd">Per:  http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://technet.microsoft.com/en-us/security/bulletin/ms12-022
-
-'This is a remote code execution vulnerability.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-022" source="MS" patch="1" adv="1">MS12-022</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14973" source="OVAL">oval:org.mitre.oval:def:14973</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="expression_design">
-        <vers num="-" edition="sp1" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0017" published="2012-02-14" name="CVE-2012-0017" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in inplview.aspx Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-011" source="MS" patch="1" adv="1">MS12-011</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14637" source="OVAL">oval:org.mitre.oval:def:14637</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="sharepoint_foundation">
-        <vers num="2010" edition="sp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0018" published="2012-05-08" name="CVE-2012-0018" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD File Format Memory Corruption Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027042" source="SECTRACK">1027042</ref>
-      <ref url="http://www.securityfocus.com/bid/53328" source="BID">53328</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-031" source="MS" adv="1">MS12-031</ref>
-      <ref url="http://secunia.com/advisories/49113" source="SECUNIA">49113</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15606" source="OVAL">oval:org.mitre.oval:def:15606</ref>
-      <ref url="http://osvdb.org/81731" source="OSVDB">81731</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="visio_viewer">
-        <vers num="2010" edition="sp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0019" published="2012-02-14" name="CVE-2012-0019" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0020, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-015" source="MS" patch="1" adv="1">MS12-015</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14347" source="OVAL">oval:org.mitre.oval:def:14347</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="visio_viewer">
-        <vers num="2010" edition="sp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0020" published="2012-02-14" name="CVE-2012-0020" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-015" source="MS" patch="1" adv="1">MS12-015</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14965" source="OVAL">oval:org.mitre.oval:def:14965</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="visio_viewer">
-        <vers num="2010" edition="sp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0021" published="2012-01-27" name="CVE-2012-0021" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:N/A:P)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %{}C format string, which allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://issues.apache.org/bugzilla/show_bug.cgi?id=52256" source="CONFIRM" patch="1">https://issues.apache.org/bugzilla/show_bug.cgi?id=52256</ref>
-      <ref url="http://svn.apache.org/viewvc?view=revision&amp;revision=1227292" source="CONFIRM" patch="1">http://svn.apache.org/viewvc?view=revision&amp;revision=1227292</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=785065" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=785065</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-      <ref url="http://secunia.com/advisories/48551" source="SECUNIA">48551</ref>
-      <ref url="http://httpd.apache.org/security/vulnerabilities_22.html" source="CONFIRM" adv="1">http://httpd.apache.org/security/vulnerabilities_22.html</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">SSRT100877</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">HPSBMU02786</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="http_server">
-        <vers num="2.2.17" />
-        <vers num="2.2.18" />
-        <vers num="2.2.19" />
-        <vers num="2.2.20" />
-        <vers num="2.2.21" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0022" published="2012-01-18" name="CVE-2012-0022" modified="2012-02-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72425" source="XF">apache-tomcat-parameter-dos(72425)</ref>
-      <ref url="http://www.securityfocus.com/bid/51447" source="BID">51447</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2401" source="DEBIAN">DSA-2401</ref>
-      <ref url="http://tomcat.apache.org/security-7.html" source="CONFIRM" adv="1">http://tomcat.apache.org/security-7.html</ref>
-      <ref url="http://tomcat.apache.org/security-6.html" source="CONFIRM" adv="1">http://tomcat.apache.org/security-6.html</ref>
-      <ref url="http://tomcat.apache.org/security-5.html" source="CONFIRM" adv="1">http://tomcat.apache.org/security-5.html</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=132871655717248&amp;w=2" source="HP">HPSBUX02741</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0112.html" source="BUGTRAQ">20120117 [SECURITY] CVE-2012-0022 Apache Tomcat Denial of Service</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="tomcat">
-        <vers num="5.5.0" />
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.22" />
-        <vers num="5.5.23" />
-        <vers num="5.5.24" />
-        <vers num="5.5.25" />
-        <vers num="5.5.26" />
-        <vers num="5.5.27" />
-        <vers num="5.5.28" />
-        <vers num="5.5.29" />
-        <vers num="5.5.3" />
-        <vers num="5.5.30" />
-        <vers num="5.5.31" />
-        <vers num="5.5.32" />
-        <vers num="5.5.33" />
-        <vers num="5.5.34" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-        <vers num="6.0" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.10" />
-        <vers num="6.0.11" />
-        <vers num="6.0.12" />
-        <vers num="6.0.13" />
-        <vers num="6.0.14" />
-        <vers num="6.0.15" />
-        <vers num="6.0.16" />
-        <vers num="6.0.17" />
-        <vers num="6.0.18" />
-        <vers num="6.0.19" />
-        <vers num="6.0.2" />
-        <vers num="6.0.20" />
-        <vers num="6.0.24" />
-        <vers num="6.0.26" />
-        <vers num="6.0.27" />
-        <vers num="6.0.28" />
-        <vers num="6.0.29" />
-        <vers num="6.0.3" />
-        <vers num="6.0.30" />
-        <vers num="6.0.31" />
-        <vers num="6.0.32" />
-        <vers num="6.0.33" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="6.0.6" />
-        <vers num="6.0.7" />
-        <vers num="6.0.8" />
-        <vers num="6.0.9" />
-        <vers num="7.0.0" edition="beta" />
-        <vers num="7.0.1" />
-        <vers num="7.0.10" />
-        <vers num="7.0.11" />
-        <vers num="7.0.12" />
-        <vers num="7.0.13" />
-        <vers num="7.0.14" />
-        <vers num="7.0.15" />
-        <vers num="7.0.16" />
-        <vers num="7.0.17" />
-        <vers num="7.0.18" />
-        <vers num="7.0.19" />
-        <vers num="7.0.2" />
-        <vers num="7.0.20" />
-        <vers num="7.0.21" />
-        <vers num="7.0.22" />
-        <vers num="7.0.3" />
-        <vers num="7.0.4" />
-        <vers num="7.0.5" />
-        <vers num="7.0.6" />
-        <vers num="7.0.7" />
-        <vers num="7.0.8" />
-        <vers num="7.0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0024" published="2012-01-07" name="CVE-2012-0024" modified="2012-01-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted queries with the Recursion Desired (RD) bit set.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://samiam.org/blog/20111229.html" source="CONFIRM" patch="1">http://samiam.org/blog/20111229.html</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=771428" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=771428</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/03/6" source="MLIST">[oss-security] 20120103 CVE request: maradns hash table collision cpu dos</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/03/13" source="MLIST">[oss-security] 20120103 Re: CVE request: maradns hash table collision cpu dos</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="maradns" name="maradns">
-        <vers num="0.0.01" />
-        <vers num="0.0.02" />
-        <vers num="0.0.03" />
-        <vers num="0.0.04" />
-        <vers num="0.0.05" />
-        <vers num="0.0.06" />
-        <vers num="0.0.07" />
-        <vers num="0.0.08" />
-        <vers num="0.1.00" />
-        <vers num="0.1.01" />
-        <vers num="0.1.02" />
-        <vers num="0.1.03" />
-        <vers num="0.1.04" />
-        <vers num="0.1.05" />
-        <vers num="0.1.06" />
-        <vers num="0.1.07" />
-        <vers num="0.1.08" />
-        <vers num="0.1.09" />
-        <vers num="0.1.10" />
-        <vers num="0.1.11" />
-        <vers num="0.1.12" />
-        <vers num="0.1.13" />
-        <vers num="0.1.14" />
-        <vers num="0.1.15" />
-        <vers num="0.1.16" />
-        <vers num="0.1.17" />
-        <vers num="0.1.18" />
-        <vers num="0.1.19" />
-        <vers num="0.1.20" />
-        <vers num="0.1.21" />
-        <vers num="0.1.22" />
-        <vers num="0.1.23" />
-        <vers num="0.1.24" />
-        <vers num="0.1.25" />
-        <vers num="0.1.26" />
-        <vers num="0.1.27" />
-        <vers num="0.1.28" />
-        <vers num="0.1.29" />
-        <vers num="0.1.30" />
-        <vers num="0.1.31" />
-        <vers num="0.1.32" />
-        <vers num="0.1.33" />
-        <vers num="0.1.34" />
-        <vers num="0.1.35" />
-        <vers num="0.1.36" />
-        <vers num="0.1.37" />
-        <vers num="0.1.38" />
-        <vers num="0.1.39" />
-        <vers num="0.1.40" />
-        <vers num="0.2.00" />
-        <vers num="0.2.01" />
-        <vers num="0.2.02" />
-        <vers num="0.2.03" />
-        <vers num="0.2.04" />
-        <vers num="0.2.05" />
-        <vers num="0.2.06" />
-        <vers num="0.2.07" />
-        <vers num="0.2.08" />
-        <vers num="0.2.09" />
-        <vers num="0.2.10" />
-        <vers num="0.3.00" />
-        <vers num="0.3.01" />
-        <vers num="0.3.02" />
-        <vers num="0.3.03" />
-        <vers num="0.3.04" />
-        <vers num="0.3.05" />
-        <vers num="0.3.06" />
-        <vers num="0.4.00" />
-        <vers num="0.4.01" />
-        <vers num="0.4.02" />
-        <vers num="0.4.03" />
-        <vers num="0.4.04" />
-        <vers num="0.5.00" />
-        <vers num="0.5.01" />
-        <vers num="0.5.02" />
-        <vers num="0.5.03" />
-        <vers num="0.5.04" />
-        <vers num="0.5.05" />
-        <vers num="0.5.06" />
-        <vers num="0.5.07" />
-        <vers num="0.5.08" />
-        <vers num="0.5.09" />
-        <vers num="0.5.10" />
-        <vers num="0.5.11" />
-        <vers num="0.5.12" />
-        <vers num="0.5.13" />
-        <vers num="0.5.14" />
-        <vers num="0.5.15" />
-        <vers num="0.5.16" />
-        <vers num="0.5.17" />
-        <vers num="0.5.18" />
-        <vers num="0.5.19" />
-        <vers num="0.5.20" />
-        <vers num="0.5.21" />
-        <vers num="0.5.22" />
-        <vers num="0.5.23" />
-        <vers num="0.5.24" />
-        <vers num="0.5.25" />
-        <vers num="0.5.26" />
-        <vers num="0.5.27" />
-        <vers num="0.5.28" />
-        <vers num="0.5.29" />
-        <vers num="0.5.30" />
-        <vers num="0.5.31" />
-        <vers num="0.5.32" />
-        <vers num="0.5.33" />
-        <vers num="0.6.00" />
-        <vers num="0.6.01" />
-        <vers num="0.6.02" />
-        <vers num="0.6.03" />
-        <vers num="0.6.04" />
-        <vers num="0.6.05" />
-        <vers num="0.6.06" />
-        <vers num="0.6.07" />
-        <vers num="0.6.08" />
-        <vers num="0.6.09" />
-        <vers num="0.6.10" />
-        <vers num="0.6.11" />
-        <vers num="0.6.12" />
-        <vers num="0.6.13" />
-        <vers num="0.6.14" />
-        <vers num="0.6.15" />
-        <vers num="0.6.16" />
-        <vers num="0.6.17" />
-        <vers num="0.6.18" />
-        <vers num="0.6.19" />
-        <vers num="0.6.20" />
-        <vers num="0.6.21" />
-        <vers num="0.7.00" />
-        <vers num="0.7.01" />
-        <vers num="0.7.02" />
-        <vers num="0.7.03" />
-        <vers num="0.7.04" />
-        <vers num="0.7.05" />
-        <vers num="0.7.06" />
-        <vers num="0.7.07" />
-        <vers num="0.7.08" />
-        <vers num="0.7.09" />
-        <vers num="0.7.10" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.13" />
-        <vers num="0.7.14" />
-        <vers num="0.7.15" />
-        <vers num="0.7.16" />
-        <vers num="0.7.17" />
-        <vers num="0.7.18" />
-        <vers num="0.7.19" />
-        <vers num="0.7.20" />
-        <vers num="0.7.21" />
-        <vers num="0.7.22" />
-        <vers num="0.8.00" />
-        <vers num="0.8.01" />
-        <vers num="0.8.02" />
-        <vers num="0.8.03" />
-        <vers num="0.8.04" />
-        <vers num="0.8.05" />
-        <vers num="0.8.06" />
-        <vers num="0.8.07" />
-        <vers num="0.8.08" />
-        <vers num="0.8.09" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.12" />
-        <vers num="0.8.13" />
-        <vers num="0.8.14" />
-        <vers num="0.8.15" />
-        <vers num="0.8.16" />
-        <vers num="0.8.17" />
-        <vers num="0.8.18" />
-        <vers num="0.8.19" />
-        <vers num="0.8.20" />
-        <vers num="0.8.21" />
-        <vers num="0.8.22" />
-        <vers num="0.8.23" />
-        <vers num="0.8.24" />
-        <vers num="0.8.25" />
-        <vers num="0.8.26" />
-        <vers num="0.8.27" />
-        <vers num="0.8.28" />
-        <vers num="0.8.29" />
-        <vers num="0.8.30" />
-        <vers num="0.8.31" />
-        <vers num="0.8.32" />
-        <vers num="0.8.33" />
-        <vers num="0.8.34" />
-        <vers num="0.8.35" />
-        <vers num="0.8.99" />
-        <vers num="0.8.99a" />
-        <vers num="0.9.00" />
-        <vers num="0.9.01" />
-        <vers num="0.9.02" />
-        <vers num="0.9.03" />
-        <vers num="0.9.04" />
-        <vers num="0.9.05" />
-        <vers num="0.9.06" />
-        <vers num="0.9.07" />
-        <vers num="0.9.08" />
-        <vers num="0.9.09" />
-        <vers num="0.9.10" />
-        <vers num="0.9.11" />
-        <vers num="0.9.12" />
-        <vers num="0.9.13" />
-        <vers num="0.9.14" />
-        <vers num="0.9.15" />
-        <vers num="0.9.16" />
-        <vers num="0.9.17" />
-        <vers num="0.9.18" />
-        <vers num="0.9.19" />
-        <vers num="0.9.20" />
-        <vers num="0.9.21" />
-        <vers num="0.9.22" />
-        <vers num="0.9.23" />
-        <vers num="0.9.24" />
-        <vers num="0.9.25" />
-        <vers num="0.9.26" />
-        <vers num="0.9.27" />
-        <vers num="0.9.28" />
-        <vers num="0.9.29" />
-        <vers num="0.9.30" />
-        <vers num="0.9.31" />
-        <vers num="0.9.32" />
-        <vers num="0.9.33" />
-        <vers num="0.9.34" />
-        <vers num="0.9.35" />
-        <vers num="0.9.36" />
-        <vers num="0.9.37" />
-        <vers num="0.9.38" />
-        <vers num="0.9.39" />
-        <vers num="0.9.91" />
-        <vers num="0.9.92" />
-        <vers num="1.0.00" />
-        <vers num="1.0.01" />
-        <vers num="1.0.02" />
-        <vers num="1.0.03" />
-        <vers num="1.0.04" />
-        <vers num="1.0.05" />
-        <vers num="1.0.06" />
-        <vers num="1.0.07" />
-        <vers num="1.0.08" />
-        <vers num="1.0.09" />
-        <vers num="1.0.10" />
-        <vers num="1.0.11" />
-        <vers num="1.0.12" />
-        <vers num="1.0.13" />
-        <vers num="1.0.14" />
-        <vers num="1.0.15" />
-        <vers num="1.0.16" />
-        <vers num="1.0.17" />
-        <vers num="1.0.18" />
-        <vers num="1.0.19" />
-        <vers num="1.0.20" />
-        <vers num="1.0.21" />
-        <vers num="1.0.22" />
-        <vers num="1.0.23" />
-        <vers num="1.0.24" />
-        <vers num="1.0.25" />
-        <vers num="1.0.26" />
-        <vers num="1.0.27" />
-        <vers num="1.0.28" />
-        <vers num="1.0.29" />
-        <vers num="1.0.30" />
-        <vers num="1.0.31" />
-        <vers num="1.0.32" />
-        <vers num="1.0.33" />
-        <vers num="1.0.34" />
-        <vers num="1.0.35" />
-        <vers num="1.0.36" />
-        <vers num="1.0.37" />
-        <vers num="1.0.38" />
-        <vers num="1.0.39" />
-        <vers num="1.0.40" />
-        <vers num="1.0.41" />
-        <vers num="1.1.01" />
-        <vers num="1.1.02" />
-        <vers num="1.1.04" />
-        <vers num="1.1.05" />
-        <vers num="1.1.06" />
-        <vers num="1.1.07" />
-        <vers num="1.1.08" />
-        <vers num="1.1.09" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.20" />
-        <vers num="1.1.21" />
-        <vers num="1.1.22" />
-        <vers num="1.1.23" />
-        <vers num="1.1.24" />
-        <vers num="1.1.25" />
-        <vers num="1.1.26" />
-        <vers num="1.1.27" />
-        <vers num="1.1.28" />
-        <vers num="1.1.29" />
-        <vers num="1.1.30" />
-        <vers num="1.1.31" />
-        <vers num="1.1.32" />
-        <vers num="1.1.33" />
-        <vers num="1.1.34" />
-        <vers num="1.1.35" />
-        <vers num="1.1.36" />
-        <vers num="1.1.37" />
-        <vers num="1.1.38" />
-        <vers num="1.1.39" />
-        <vers num="1.1.40" />
-        <vers num="1.1.41" />
-        <vers num="1.1.42" />
-        <vers num="1.1.43" />
-        <vers num="1.1.44" />
-        <vers num="1.1.45" />
-        <vers num="1.1.46" />
-        <vers num="1.1.47" />
-        <vers num="1.1.48" />
-        <vers num="1.1.49" />
-        <vers num="1.1.50" />
-        <vers num="1.1.51" />
-        <vers num="1.1.52" />
-        <vers num="1.1.53" />
-        <vers num="1.1.54" />
-        <vers num="1.1.55" />
-        <vers num="1.1.56" />
-        <vers num="1.1.57" />
-        <vers num="1.1.58" />
-        <vers num="1.1.59" />
-        <vers num="1.1.60" />
-        <vers num="1.1.61" />
-        <vers num="1.1.90" />
-        <vers num="1.1.91" />
-        <vers num="1.2.12.01" />
-        <vers num="1.2.12.02" />
-        <vers num="1.2.12.03" />
-        <vers num="1.2.12.04" />
-        <vers num="1.2.12.05" />
-        <vers num="1.2.12.06" />
-        <vers num="1.2.12.07" />
-        <vers num="1.2.12.08" />
-        <vers num="1.2.12.09" />
-        <vers num="1.2.12.10" />
-        <vers num="1.3.01" />
-        <vers num="1.3.02" />
-        <vers num="1.3.03" />
-        <vers num="1.3.04" />
-        <vers num="1.3.05" />
-        <vers num="1.3.06" />
-        <vers num="1.3.07" />
-        <vers num="1.3.07.01" />
-        <vers num="1.3.07.02" />
-        <vers num="1.3.07.03" />
-        <vers num="1.3.07.04" />
-        <vers num="1.3.07.05" />
-        <vers num="1.3.07.06" />
-        <vers num="1.3.07.07" />
-        <vers num="1.3.07.08" />
-        <vers num="1.3.07.09" />
-        <vers num="1.3.07.10" />
-        <vers num="1.3.08" />
-        <vers num="1.3.09" />
-        <vers num="1.3.10" />
-        <vers num="1.3.11" />
-        <vers num="1.3.12" />
-        <vers num="1.3.13" />
-        <vers num="1.3.14" />
-        <vers num="1.4.01" />
-        <vers num="1.4.02" />
-        <vers num="1.4.03" />
-        <vers num="1.4.04" />
-        <vers num="1.4.05" />
-        <vers num="1.4.06" />
-        <vers num="1.4.07" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-0026" reject="1" published="2012-01-04" name="CVE-2012-0026" modified="2012-01-04">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-0287.  Reason: This candidate is a duplicate of CVE-2012-0287.  Notes: All CVE users should reference CVE-2012-0287 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0027" published="2012-01-05" name="CVE-2012-0027" modified="2012-07-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openssl.org/news/secadv_20120104.txt" source="CONFIRM" adv="1">http://www.openssl.org/news/secadv_20120104.txt</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:007" source="MANDRIVA">MDVSA-2012:007</ref>
-      <ref url="http://osvdb.org/78191" source="OSVDB">78191</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html" source="SUSE">openSUSE-SU-2012:0083</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">SSRT100877</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">HPSBMU02786</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openssl" name="openssl">
-        <vers num="0.9.1c" />
-        <vers num="0.9.2b" />
-        <vers num="0.9.3" />
-        <vers num="0.9.3a" />
-        <vers num="0.9.4" />
-        <vers num="0.9.5" />
-        <vers num="0.9.5a" />
-        <vers num="0.9.6" />
-        <vers num="0.9.6a" />
-        <vers num="0.9.6b" />
-        <vers num="0.9.6c" />
-        <vers num="0.9.6d" />
-        <vers num="0.9.6e" />
-        <vers num="0.9.6f" />
-        <vers num="0.9.6g" />
-        <vers num="0.9.6h" edition="bogus" />
-        <vers num="0.9.6i" />
-        <vers num="0.9.6j" />
-        <vers num="0.9.6k" />
-        <vers num="0.9.6l" />
-        <vers num="0.9.6m" />
-        <vers num="0.9.7" />
-        <vers num="0.9.7a" />
-        <vers num="0.9.7b" />
-        <vers num="0.9.7c" />
-        <vers num="0.9.7d" />
-        <vers num="0.9.7e" />
-        <vers num="0.9.7f" />
-        <vers num="0.9.7g" />
-        <vers num="0.9.7h" />
-        <vers num="0.9.7i" />
-        <vers num="0.9.7j" />
-        <vers num="0.9.7k" />
-        <vers num="0.9.7l" />
-        <vers num="0.9.7m" />
-        <vers num="0.9.8" />
-        <vers num="0.9.8a" />
-        <vers num="0.9.8b" />
-        <vers num="0.9.8c" />
-        <vers num="0.9.8d" />
-        <vers num="0.9.8e" />
-        <vers num="0.9.8f" />
-        <vers num="0.9.8g" />
-        <vers num="0.9.8h" />
-        <vers num="0.9.8i" />
-        <vers num="0.9.8j" />
-        <vers num="0.9.8k" />
-        <vers num="0.9.8l" />
-        <vers num="0.9.8m" />
-        <vers num="0.9.8n" />
-        <vers num="0.9.8o" />
-        <vers num="0.9.8p" />
-        <vers num="0.9.8q" />
-        <vers num="0.9.8r" />
-        <vers num="0.9.8s" />
-        <vers num="1.0.0" edition="beta1" />
-        <vers num="1.0.0" edition="beta2" />
-        <vers num="1.0.0" edition="beta3" />
-        <vers num="1.0.0" edition="beta4" />
-        <vers num="1.0.0" edition="beta5" />
-        <vers num="1.0.0a" />
-        <vers num="1.0.0b" />
-        <vers num="1.0.0c" />
-        <vers num="1.0.0d" />
-        <vers prev="1" num="1.0.0e" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0028" published="2012-06-21" name="CVE-2012-0028" modified="2012-06-22" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/8141c7f3e7aee618312fa1c15109e1219de784a7" source="CONFIRM" patch="1">https://github.com/torvalds/linux/commit/8141c7f3e7aee618312fa1c15109e1219de784a7</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8141c7f3e7aee618312fa1c15109e1219de784a7" source="CONFIRM" patch="1">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8141c7f3e7aee618312fa1c15109e1219de784a7</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=771764" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=771764</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/08/1" source="MLIST">[oss-security] 20120508 Re: CVE Request -- kernel: futex: clear robust_list on execve</ref>
-      <ref url="http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28" source="CONFIRM">http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="2.6.27" />
-        <vers num="2.6.27.1" />
-        <vers num="2.6.27.10" />
-        <vers num="2.6.27.11" />
-        <vers num="2.6.27.12" />
-        <vers num="2.6.27.13" />
-        <vers num="2.6.27.14" />
-        <vers num="2.6.27.15" />
-        <vers num="2.6.27.16" />
-        <vers num="2.6.27.17" />
-        <vers num="2.6.27.18" />
-        <vers num="2.6.27.19" />
-        <vers num="2.6.27.2" />
-        <vers num="2.6.27.20" />
-        <vers num="2.6.27.21" />
-        <vers num="2.6.27.22" />
-        <vers num="2.6.27.23" />
-        <vers num="2.6.27.24" />
-        <vers num="2.6.27.25" />
-        <vers num="2.6.27.26" />
-        <vers num="2.6.27.27" />
-        <vers num="2.6.27.28" />
-        <vers num="2.6.27.29" />
-        <vers num="2.6.27.3" />
-        <vers num="2.6.27.30" />
-        <vers num="2.6.27.31" />
-        <vers num="2.6.27.32" />
-        <vers num="2.6.27.33" />
-        <vers num="2.6.27.34" />
-        <vers num="2.6.27.35" />
-        <vers num="2.6.27.36" />
-        <vers num="2.6.27.37" />
-        <vers num="2.6.27.38" />
-        <vers num="2.6.27.39" />
-        <vers num="2.6.27.4" />
-        <vers num="2.6.27.40" />
-        <vers num="2.6.27.41" />
-        <vers num="2.6.27.42" />
-        <vers num="2.6.27.43" />
-        <vers num="2.6.27.44" />
-        <vers num="2.6.27.45" />
-        <vers num="2.6.27.46" />
-        <vers num="2.6.27.47" />
-        <vers num="2.6.27.48" />
-        <vers num="2.6.27.49" />
-        <vers num="2.6.27.5" />
-        <vers num="2.6.27.50" />
-        <vers num="2.6.27.51" />
-        <vers num="2.6.27.52" />
-        <vers num="2.6.27.53" />
-        <vers num="2.6.27.54" />
-        <vers num="2.6.27.55" />
-        <vers num="2.6.27.56" />
-        <vers num="2.6.27.57" />
-        <vers num="2.6.27.58" />
-        <vers num="2.6.27.59" />
-        <vers num="2.6.27.6" />
-        <vers num="2.6.27.60" />
-        <vers num="2.6.27.61" />
-        <vers prev="1" num="2.6.27.62" />
-        <vers num="2.6.27.7" />
-        <vers num="2.6.27.8" />
-        <vers num="2.6.27.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0029" published="2012-01-27" name="CVE-2012-0029" modified="2012-06-22" CVSS_version="2.0" CVSS_vector="(AV:A/AC:M/Au:S/C:C/I:C/A:C)" CVSS_score="7.4" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="4.4" CVSS_base_score="7.4">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=772075" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=772075</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72656" source="XF">qemu-processtxdesc-bo(72656)</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1339-1" source="UBUNTU">USN-1339-1</ref>
-      <ref url="http://www.securityfocus.com/bid/51642" source="BID">51642</ref>
-      <ref url="http://www.redhat.com/support/errata/RHSA-2012-0050.html" source="REDHAT">RHSA-2012:0050</ref>
-      <ref url="http://secunia.com/advisories/47992" source="SECUNIA">47992</ref>
-      <ref url="http://secunia.com/advisories/47741" source="SECUNIA" adv="1">47741</ref>
-      <ref url="http://secunia.com/advisories/47740" source="SECUNIA" adv="1">47740</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html" source="SUSE">openSUSE-SU-2012:0207</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html" source="FEDORA">FEDORA-2012-8604</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kvm_group" name="qemu-kvm">
-        <vers num="0.12" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0030" published="2012-01-13" name="CVE-2012-0030" modified="2012-01-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:P)" CVSS_score="4.9" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="6.8" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://lists.launchpad.net/openstack/msg06648.html" source="MLIST" patch="1">[openstack] 20120111 [OSSA 2012-001] Tenant bypass by authenticated users using OpenStack API (CVE-2012-0030)</ref>
-      <ref url="https://github.com/openstack/nova/commit/3d4ffb64f1e18117240c26809788528979e3bd15#diff-0" source="CONFIRM">https://github.com/openstack/nova/commit/3d4ffb64f1e18117240c26809788528979e3bd15#diff-0</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72296" source="XF">nova-security-bypass(72296)</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1326-1" source="UBUNTU">USN-1326-1</ref>
-      <ref url="http://www.securityfocus.com/bid/51370" source="BID">51370</ref>
-      <ref url="http://secunia.com/advisories/47543" source="SECUNIA" adv="1">47543</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openstack" name="essex">
-        <vers num="" />
-      </prod>
-      <prod vendor="openstack" name="nova">
-        <vers num="2011.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0031" published="2012-01-18" name="CVE-2012-0031" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="4.6" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.9" CVSS_base_score="4.6">
-    <desc>
-      <descript source="cve">scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free function.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=773744" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=773744</ref>
-      <ref url="http://www.securityfocus.com/bid/51407" source="BID">51407</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-      <ref url="http://www.halfdog.net/Security/2011/ApacheScoreboardInvalidFreeOnShutdown/" source="MISC">http://www.halfdog.net/Security/2011/ApacheScoreboardInvalidFreeOnShutdown/</ref>
-      <ref url="http://svn.apache.org/viewvc?view=revision&amp;revision=1230065" source="CONFIRM" adv="1">http://svn.apache.org/viewvc?view=revision&amp;revision=1230065</ref>
-      <ref url="http://secunia.com/advisories/48551" source="SECUNIA">48551</ref>
-      <ref url="http://secunia.com/advisories/47410" source="SECUNIA" adv="1">47410</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0128.html" source="REDHAT">RHSA-2012:0128</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.html" source="SUSE">openSUSE-SU-2012:0314</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">SSRT100877</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">HPSBMU02786</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="http_server">
-        <vers num="1.0" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.9" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.1.1" />
-        <vers num="1.3.10" />
-        <vers num="1.3.11" />
-        <vers num="1.3.12" />
-        <vers num="1.3.13" />
-        <vers num="1.3.14" />
-        <vers num="1.3.15" />
-        <vers num="1.3.16" />
-        <vers num="1.3.17" />
-        <vers num="1.3.18" />
-        <vers num="1.3.19" />
-        <vers num="1.3.2" />
-        <vers num="1.3.20" />
-        <vers num="1.3.22" />
-        <vers num="1.3.23" />
-        <vers num="1.3.24" />
-        <vers num="1.3.25" />
-        <vers num="1.3.26" />
-        <vers num="1.3.27" />
-        <vers num="1.3.28" />
-        <vers num="1.3.29" />
-        <vers num="1.3.3" />
-        <vers num="1.3.30" />
-        <vers num="1.3.31" />
-        <vers num="1.3.32" />
-        <vers num="1.3.33" />
-        <vers num="1.3.34" />
-        <vers num="1.3.35" />
-        <vers num="1.3.36" />
-        <vers num="1.3.37" />
-        <vers num="1.3.38" />
-        <vers num="1.3.39" />
-        <vers num="1.3.4" />
-        <vers num="1.3.41" />
-        <vers num="1.3.42" />
-        <vers num="1.3.5" />
-        <vers num="1.3.6" />
-        <vers num="1.3.65" />
-        <vers num="1.3.68" />
-        <vers num="1.3.7" />
-        <vers num="1.3.8" />
-        <vers num="1.3.9" />
-        <vers num="1.4.0" />
-        <vers num="1.99" />
-        <vers num="2.0" />
-        <vers num="2.0.28" edition="beta" />
-        <vers num="2.0.32" edition="beta" />
-        <vers num="2.0.34" edition="beta" />
-        <vers num="2.0.35" />
-        <vers num="2.0.36" />
-        <vers num="2.0.37" />
-        <vers num="2.0.38" />
-        <vers num="2.0.39" />
-        <vers num="2.0.40" />
-        <vers num="2.0.41" />
-        <vers num="2.0.42" />
-        <vers num="2.0.43" />
-        <vers num="2.0.44" />
-        <vers num="2.0.45" />
-        <vers num="2.0.46" />
-        <vers num="2.0.47" />
-        <vers num="2.0.48" />
-        <vers num="2.0.49" />
-        <vers num="2.0.50" />
-        <vers num="2.0.51" />
-        <vers num="2.0.52" />
-        <vers num="2.0.53" />
-        <vers num="2.0.54" />
-        <vers num="2.0.55" />
-        <vers num="2.0.56" />
-        <vers num="2.0.57" />
-        <vers num="2.0.58" />
-        <vers num="2.0.59" />
-        <vers num="2.0.60" />
-        <vers num="2.0.61" />
-        <vers num="2.0.63" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.10" />
-        <vers num="2.2.11" />
-        <vers num="2.2.12" />
-        <vers num="2.2.13" />
-        <vers num="2.2.14" />
-        <vers num="2.2.15" />
-        <vers num="2.2.16" />
-        <vers num="2.2.17" />
-        <vers num="2.2.18" />
-        <vers num="2.2.19" />
-        <vers num="2.2.2" />
-        <vers num="2.2.20" />
-        <vers prev="1" num="2.2.21" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" />
-        <vers num="2.2.6" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0035" published="2012-01-19" nvd_name="CWE-426: Untrusted Search Path" name="CVE-2012-0035" modified="2012-02-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/10/2" source="MLIST" patch="1">[oss-security] 20120109 CVE Request: CEDET/Emacs global-ede-mode file loading vulnerability</ref>
-      <ref url="http://lists.gnu.org/archive/html/emacs-devel/2012-01/msg00387.html" source="MLIST" patch="1">[emacs-devel] 20120109 Security flaw in EDE; new release plans</ref>
-      <ref url="http://sourceforge.net/mailarchive/message.php?msg_id=28657612" source="MLIST">[cedet-devel] 20120111 CEDET 1.0.1 available online</ref>
-      <ref url="http://sourceforge.net/mailarchive/message.php?msg_id=28649762" source="MLIST">[cedet-devel] 20120109 Security flaw in EDE</ref>
-      <ref url="http://secunia.com/advisories/47515" source="SECUNIA" adv="1">47515</ref>
-      <ref url="http://secunia.com/advisories/47311" source="SECUNIA" adv="1">47311</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/10/4" source="MLIST">[oss-security] 20110109 Re: Re: CVE Request: CEDET/Emacs global-ede-mode file loading vulnerability</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072288.html" source="FEDORA">FEDORA-2012-0494</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072285.html" source="FEDORA">FEDORA-2012-0462</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="eric_m_ludlam" name="cedet">
-        <vers prev="1" num="1.0" edition="beta1" />
-        <vers prev="1" num="1.0" edition="beta2" />
-        <vers prev="1" num="1.0" edition="beta3" />
-        <vers prev="1" num="1.0" edition="pre1" />
-        <vers prev="1" num="1.0" edition="pre2" />
-        <vers prev="1" num="1.0" edition="pre3" />
-        <vers prev="1" num="1.0" edition="pre4" />
-        <vers prev="1" num="1.0" edition="pre6" />
-        <vers prev="1" num="1.0" edition="pre7" />
-      </prod>
-      <prod vendor="gnu" name="emacs">
-        <vers num="20.0" />
-        <vers num="20.1" />
-        <vers num="20.2" />
-        <vers num="20.3" />
-        <vers num="20.4" />
-        <vers num="20.5" />
-        <vers num="20.6" />
-        <vers num="20.7" />
-        <vers num="21" />
-        <vers num="21.1" />
-        <vers num="21.2" />
-        <vers num="21.2.1" />
-        <vers num="21.3" />
-        <vers num="21.3.1" />
-        <vers num="21.4" />
-        <vers num="22.1" />
-        <vers num="22.2" />
-        <vers num="22.3" />
-        <vers num="23.1" />
-        <vers num="23.2" />
-        <vers prev="1" num="23.3" />
-        <vers num="23.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0036" published="2012-04-13" name="CVE-2012-0036" modified="2012-07-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the (1) IMAP, (2) POP3, or (3) SMTP protocol.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://curl.haxx.se/curl-url-sanitize.patch" source="CONFIRM" patch="1">http://curl.haxx.se/curl-url-sanitize.patch</ref>
-      <ref url="https://github.com/bagder/curl/commit/75ca568fa1c19de4c5358fed246686de8467c238" source="CONFIRM">https://github.com/bagder/curl/commit/75ca568fa1c19de4c5358fed246686de8467c238</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=773457" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=773457</ref>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE">APPLE-SA-2012-05-09-1</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">SSRT100877</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">HPSBMU02786</ref>
-      <ref url="http://curl.haxx.se/docs/adv_20120124.html" source="CONFIRM" adv="1">http://curl.haxx.se/docs/adv_20120124.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="curl" name="curl">
-        <vers num="7.20.0" />
-        <vers num="7.20.1" />
-        <vers num="7.21.0" />
-        <vers num="7.21.1" />
-        <vers num="7.21.2" />
-        <vers num="7.21.3" />
-        <vers num="7.21.4" />
-        <vers num="7.21.5" />
-        <vers num="7.21.6" />
-        <vers num="7.21.7" />
-        <vers num="7.22.0" />
-        <vers num="7.23.0" />
-        <vers num="7.23.1" />
-      </prod>
-      <prod vendor="curl" name="libcurl">
-        <vers num="7.20.0" />
-        <vers num="7.20.1" />
-        <vers num="7.21.0" />
-        <vers num="7.21.1" />
-        <vers num="7.21.2" />
-        <vers num="7.21.3" />
-        <vers num="7.21.4" />
-        <vers num="7.21.5" />
-        <vers num="7.21.6" />
-        <vers num="7.21.7" />
-        <vers num="7.22.0" />
-        <vers num="7.23.0" />
-        <vers num="7.23.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0037" published="2012-06-16" name="CVE-2012-0037" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/dajobe/raptor/commit/a676f235309a59d4aa78eeffd2574ae5d341fcb0" source="CONFIRM" patch="1">https://github.com/dajobe/raptor/commit/a676f235309a59d4aa78eeffd2574ae5d341fcb0</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74235" source="XF">openoffice-xml-info-disclosure(74235)</ref>
-      <ref url="http://www.securityfocus.com/bid/52681" source="BID">52681</ref>
-      <ref url="http://www.osvdb.org/80307" source="OSVDB">80307</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/27/4" source="MLIST">[oss-security] 20120427 Fwd: CVE-2012-0037: libraptor - XXE in RDF/XML File Interpretation  (Multiple office products affected)</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:063" source="MANDRIVA">MDVSA-2012:063</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:062" source="MANDRIVA">MDVSA-2012:062</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:061" source="MANDRIVA">MDVSA-2012:061</ref>
-      <ref url="http://www.libreoffice.org/advisories/CVE-2012-0037/" source="CONFIRM" adv="1">http://www.libreoffice.org/advisories/CVE-2012-0037/</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2438" source="DEBIAN">DSA-2438</ref>
-      <ref url="http://vsecurity.com/resources/advisory/20120324-1/" source="MISC">http://vsecurity.com/resources/advisory/20120324-1/</ref>
-      <ref url="http://secunia.com/advisories/48649" source="SECUNIA">48649</ref>
-      <ref url="http://secunia.com/advisories/48542" source="SECUNIA" adv="1">48542</ref>
-      <ref url="http://secunia.com/advisories/48529" source="SECUNIA" adv="1">48529</ref>
-      <ref url="http://secunia.com/advisories/48526" source="SECUNIA" adv="1">48526</ref>
-      <ref url="http://secunia.com/advisories/48494" source="SECUNIA">48494</ref>
-      <ref url="http://secunia.com/advisories/48493" source="SECUNIA" adv="1">48493</ref>
-      <ref url="http://secunia.com/advisories/48479" source="SECUNIA" adv="1">48479</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0411.html" source="REDHAT">RHSA-2012:0411</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0410.html" source="REDHAT">RHSA-2012:0410</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078242.html" source="FEDORA">FEDORA-2012-4663</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077708.html" source="FEDORA">FEDORA-2012-4629</ref>
-      <ref url="http://librdf.org/raptor/RELEASE.html#rel2_0_7" source="CONFIRM">http://librdf.org/raptor/RELEASE.html#rel2_0_7</ref>
-      <ref url="http://blog.documentfoundation.org/2012/03/22/tdf-announces-libreoffice-3-4-6/" source="CONFIRM">http://blog.documentfoundation.org/2012/03/22/tdf-announces-libreoffice-3-4-6/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="openoffice.org">
-        <vers num="3.3" />
-        <vers num="3.4" edition="beta" />
-      </prod>
-      <prod vendor="libreoffice" name="libreoffice">
-        <vers num="3.3.0" />
-        <vers num="3.3.1" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers num="3.3.4" />
-        <vers num="3.4.0" />
-        <vers num="3.4.1" />
-        <vers num="3.4.2" />
-        <vers num="3.4.5" />
-        <vers num="3.5" />
-      </prod>
-      <prod vendor="redland" name="libraptor">
-        <vers prev="1" num="2.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0038" published="2012-05-17" name="CVE-2012-0038" modified="2012-05-17" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Integer overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux kernel before 3.1.9 allows local users to cause a denial of service (panic) via a filesystem with a malformed ACL, leading to a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/fa8b18edd752a8b4e9d1ee2cd615b82c93cf8bba" source="CONFIRM">https://github.com/torvalds/linux/commit/fa8b18edd752a8b4e9d1ee2cd615b82c93cf8bba</ref>
-      <ref url="https://github.com/torvalds/linux/commit/093019cf1b18dd31b2c3b77acce4e000e2cbc9ce" source="CONFIRM">https://github.com/torvalds/linux/commit/093019cf1b18dd31b2c3b77acce4e000e2cbc9ce</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=773280" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=773280</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/10/11" source="MLIST">[oss-security] 20120110 Re: CVE request: kernel: xfs heap overflow</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.9" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.9</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=fa8b18edd752a8b4e9d1ee2cd615b82c93cf8bba" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=fa8b18edd752a8b4e9d1ee2cd615b82c93cf8bba</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=093019cf1b18dd31b2c3b77acce4e000e2cbc9ce" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=093019cf1b18dd31b2c3b77acce4e000e2cbc9ce</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="1.2.0" />
-        <vers num="1.3.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.15" />
-        <vers num="2.0.16" />
-        <vers num="2.0.17" />
-        <vers num="2.0.18" />
-        <vers num="2.0.19" />
-        <vers num="2.0.2" />
-        <vers num="2.0.20" />
-        <vers num="2.0.21" />
-        <vers num="2.0.22" />
-        <vers num="2.0.23" />
-        <vers num="2.0.24" />
-        <vers num="2.0.25" />
-        <vers num="2.0.26" />
-        <vers num="2.0.27" />
-        <vers num="2.0.28" />
-        <vers num="2.0.29" />
-        <vers num="2.0.3" />
-        <vers num="2.0.30" />
-        <vers num="2.0.31" />
-        <vers num="2.0.32" />
-        <vers num="2.0.33" />
-        <vers num="2.0.34" />
-        <vers num="2.0.35" />
-        <vers num="2.0.36" />
-        <vers num="2.0.37" />
-        <vers num="2.0.38" />
-        <vers num="2.0.39" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1.132" />
-        <vers num="2.1.89" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.10" />
-        <vers num="2.2.11" />
-        <vers num="2.2.12" />
-        <vers num="2.2.13" edition="pre15" />
-        <vers num="2.2.14" />
-        <vers num="2.2.15" edition="pre16" />
-        <vers num="2.2.16" edition="pre5" />
-        <vers num="2.2.16" edition="pre6" />
-        <vers num="2.2.17" edition="pre14" />
-        <vers num="2.2.18" />
-        <vers num="2.2.19" />
-        <vers num="2.2.2" />
-        <vers num="2.2.20" />
-        <vers num="2.2.21" edition="pre1" />
-        <vers num="2.2.21" edition="pre2" />
-        <vers num="2.2.21" edition="pre3" />
-        <vers num="2.2.21" edition="pre4" />
-        <vers num="2.2.21" edition="rc1" />
-        <vers num="2.2.21" edition="rc2" />
-        <vers num="2.2.21" edition="rc3" />
-        <vers num="2.2.21" edition="rc4" />
-        <vers num="2.2.22" edition="rc1" />
-        <vers num="2.2.22" edition="rc2" />
-        <vers num="2.2.22" edition="rc3" />
-        <vers num="2.2.23" edition="rc1" />
-        <vers num="2.2.23" edition="rc2" />
-        <vers num="2.2.24" edition="rc2" />
-        <vers num="2.2.24" edition="rc3" />
-        <vers num="2.2.24" edition="rc4" />
-        <vers num="2.2.24" edition="rc5" />
-        <vers num="2.2.25" />
-        <vers num="2.2.26" />
-        <vers num="2.2.27" edition="pre1" />
-        <vers num="2.2.27" edition="pre2" />
-        <vers num="2.2.27" edition="rc1" />
-        <vers num="2.2.27" edition="rc2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" edition="rc1" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.13" />
-        <vers num="2.3.14" />
-        <vers num="2.3.15" />
-        <vers num="2.3.16" />
-        <vers num="2.3.17" />
-        <vers num="2.3.18" />
-        <vers num="2.3.19" />
-        <vers num="2.3.2" />
-        <vers num="2.3.20" />
-        <vers num="2.3.21" />
-        <vers num="2.3.22" />
-        <vers num="2.3.23" />
-        <vers num="2.3.24" />
-        <vers num="2.3.25" />
-        <vers num="2.3.26" />
-        <vers num="2.3.27" />
-        <vers num="2.3.28" />
-        <vers num="2.3.29" />
-        <vers num="2.3.3" />
-        <vers num="2.3.30" />
-        <vers num="2.3.31" />
-        <vers num="2.3.32" />
-        <vers num="2.3.33" />
-        <vers num="2.3.34" />
-        <vers num="2.3.35" />
-        <vers num="2.3.36" />
-        <vers num="2.3.37" />
-        <vers num="2.3.38" />
-        <vers num="2.3.39" />
-        <vers num="2.3.4" />
-        <vers num="2.3.40" />
-        <vers num="2.3.41" />
-        <vers num="2.3.42" />
-        <vers num="2.3.43" />
-        <vers num="2.3.44" />
-        <vers num="2.3.45" />
-        <vers num="2.3.46" />
-        <vers num="2.3.47" />
-        <vers num="2.3.48" />
-        <vers num="2.3.49" />
-        <vers num="2.3.5" />
-        <vers num="2.3.50" />
-        <vers num="2.3.51" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.3.99" edition="pre1" />
-        <vers num="2.3.99" edition="pre2" />
-        <vers num="2.3.99" edition="pre3" />
-        <vers num="2.3.99" edition="pre4" />
-        <vers num="2.3.99" edition="pre5" />
-        <vers num="2.3.99" edition="pre6" />
-        <vers num="2.3.99" edition="pre7" />
-        <vers num="2.3.99" edition="pre8" />
-        <vers num="2.3.99" edition="pre9" />
-        <vers num="2.4.0" edition="test1" />
-        <vers num="2.4.0" edition="test10" />
-        <vers num="2.4.0" edition="test11" />
-        <vers num="2.4.0" edition="test12" />
-        <vers num="2.4.0" edition="test2" />
-        <vers num="2.4.0" edition="test3" />
-        <vers num="2.4.0" edition="test4" />
-        <vers num="2.4.0" edition="test5" />
-        <vers num="2.4.0" edition="test6" />
-        <vers num="2.4.0" edition="test7" />
-        <vers num="2.4.0" edition="test8" />
-        <vers num="2.4.0" edition="test9" />
-        <vers num="2.4.1" />
-        <vers num="2.4.10" />
-        <vers num="2.4.11" edition="pre3" />
-        <vers num="2.4.12" />
-        <vers num="2.4.13" />
-        <vers num="2.4.14" />
-        <vers num="2.4.15" />
-        <vers num="2.4.16" />
-        <vers num="2.4.17" />
-        <vers num="2.4.18" edition="pre1" />
-        <vers num="2.4.18" edition="pre2" />
-        <vers num="2.4.18" edition="pre3" />
-        <vers num="2.4.18" edition="pre4" />
-        <vers num="2.4.18" edition="pre5" />
-        <vers num="2.4.18" edition="pre6" />
-        <vers num="2.4.18" edition="pre7" />
-        <vers num="2.4.18" edition="pre8" />
-        <vers num="2.4.18" edition="pre9" />
-        <vers num="2.4.19" edition="pre1" />
-        <vers num="2.4.19" edition="pre2" />
-        <vers num="2.4.19" edition="pre3" />
-        <vers num="2.4.19" edition="pre4" />
-        <vers num="2.4.19" edition="pre5" />
-        <vers num="2.4.19" edition="pre6" />
-        <vers num="2.4.2" />
-        <vers num="2.4.20" />
-        <vers num="2.4.21" edition="pre1" />
-        <vers num="2.4.21" edition="pre4" />
-        <vers num="2.4.21" edition="pre7" />
-        <vers num="2.4.22" edition="pre10" />
-        <vers num="2.4.23" edition="pre9" />
-        <vers num="2.4.24" />
-        <vers num="2.4.25" />
-        <vers num="2.4.26" />
-        <vers num="2.4.27" edition="pre1" />
-        <vers num="2.4.27" edition="pre2" />
-        <vers num="2.4.27" edition="pre3" />
-        <vers num="2.4.27" edition="pre4" />
-        <vers num="2.4.27" edition="pre5" />
-        <vers num="2.4.28" />
-        <vers num="2.4.29" edition="rc1" />
-        <vers num="2.4.29" edition="rc2" />
-        <vers num="2.4.3" edition="pre3" />
-        <vers num="2.4.30" edition="rc2" />
-        <vers num="2.4.30" edition="rc3" />
-        <vers num="2.4.31" edition="pre1" />
-        <vers num="2.4.32" edition="pre1" />
-        <vers num="2.4.32" edition="pre2" />
-        <vers num="2.4.33" edition="pre1" />
-        <vers num="2.4.33.2" />
-        <vers num="2.4.33.3" />
-        <vers num="2.4.33.4" />
-        <vers num="2.4.33.5" />
-        <vers num="2.4.34" edition="rc3" />
-        <vers num="2.4.34.1" />
-        <vers num="2.4.34.2" />
-        <vers num="2.4.35" />
-        <vers num="2.4.35.2" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers num="2.4.8" />
-        <vers num="2.4.9" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.10" />
-        <vers num="2.5.11" />
-        <vers num="2.5.12" />
-        <vers num="2.5.13" />
-        <vers num="2.5.14" />
-        <vers num="2.5.15" />
-        <vers num="2.5.16" />
-        <vers num="2.5.17" />
-        <vers num="2.5.18" />
-        <vers num="2.5.19" />
-        <vers num="2.5.2" />
-        <vers num="2.5.20" />
-        <vers num="2.5.21" />
-        <vers num="2.5.22" />
-        <vers num="2.5.23" />
-        <vers num="2.5.24" />
-        <vers num="2.5.25" />
-        <vers num="2.5.26" />
-        <vers num="2.5.27" />
-        <vers num="2.5.28" />
-        <vers num="2.5.29" />
-        <vers num="2.5.3" />
-        <vers num="2.5.30" />
-        <vers num="2.5.31" />
-        <vers num="2.5.32" />
-        <vers num="2.5.33" />
-        <vers num="2.5.34" />
-        <vers num="2.5.35" />
-        <vers num="2.5.36" />
-        <vers num="2.5.37" />
-        <vers num="2.5.38" />
-        <vers num="2.5.39" />
-        <vers num="2.5.4" />
-        <vers num="2.5.40" />
-        <vers num="2.5.41" />
-        <vers num="2.5.42" />
-        <vers num="2.5.43" />
-        <vers num="2.5.44" />
-        <vers num="2.5.45" />
-        <vers num="2.5.46" />
-        <vers num="2.5.47" />
-        <vers num="2.5.48" />
-        <vers num="2.5.49" />
-        <vers num="2.5.5" />
-        <vers num="2.5.50" />
-        <vers num="2.5.51" />
-        <vers num="2.5.52" />
-        <vers num="2.5.53" />
-        <vers num="2.5.54" />
-        <vers num="2.5.55" />
-        <vers num="2.5.56" />
-        <vers num="2.5.57" />
-        <vers num="2.5.58" />
-        <vers num="2.5.59" />
-        <vers num="2.5.6" />
-        <vers num="2.5.60" />
-        <vers num="2.5.61" />
-        <vers num="2.5.62" />
-        <vers num="2.5.63" />
-        <vers num="2.5.64" />
-        <vers num="2.5.65" />
-        <vers num="2.5.66" />
-        <vers num="2.5.67" />
-        <vers num="2.5.68" />
-        <vers num="2.5.69" />
-        <vers num="2.5.7" />
-        <vers num="2.5.8" />
-        <vers num="2.5.9" />
-        <vers num="2.6.0" edition="test1" />
-        <vers num="2.6.0" edition="test10" />
-        <vers num="2.6.0" edition="test11" />
-        <vers num="2.6.0" edition="test2" />
-        <vers num="2.6.0" edition="test3" />
-        <vers num="2.6.0" edition="test4" />
-        <vers num="2.6.0" edition="test5" />
-        <vers num="2.6.0" edition="test6" />
-        <vers num="2.6.0" edition="test7" />
-        <vers num="2.6.0" edition="test8" />
-        <vers num="2.6.0" edition="test9" />
-        <vers num="2.6.1" edition="rc1" />
-        <vers num="2.6.1" edition="rc2" />
-        <vers num="2.6.1" edition="rc3" />
-        <vers num="2.6.10" edition="rc1" />
-        <vers num="2.6.10" edition="rc2" />
-        <vers num="2.6.10" edition="rc3" />
-        <vers num="2.6.11" edition="rc1" />
-        <vers num="2.6.11" edition="rc2" />
-        <vers num="2.6.11" edition="rc3" />
-        <vers num="2.6.11" edition="rc4" />
-        <vers num="2.6.11" edition="rc5" />
-        <vers num="2.6.11.1" />
-        <vers num="2.6.11.10" />
-        <vers num="2.6.11.11" />
-        <vers num="2.6.11.12" />
-        <vers num="2.6.11.2" />
-        <vers num="2.6.11.3" />
-        <vers num="2.6.11.4" />
-        <vers num="2.6.11.5" />
-        <vers num="2.6.11.6" />
-        <vers num="2.6.11.7" />
-        <vers num="2.6.11.8" />
-        <vers num="2.6.11.9" />
-        <vers num="2.6.12" edition="rc1" />
-        <vers num="2.6.12" edition="rc2" />
-        <vers num="2.6.12" edition="rc3" />
-        <vers num="2.6.12" edition="rc4" />
-        <vers num="2.6.12" edition="rc5" />
-        <vers num="2.6.12" edition="rc6" />
-        <vers num="2.6.12.1" />
-        <vers num="2.6.12.2" />
-        <vers num="2.6.12.3" />
-        <vers num="2.6.12.4" />
-        <vers num="2.6.12.5" />
-        <vers num="2.6.12.6" />
-        <vers num="2.6.13" edition="rc1" />
-        <vers num="2.6.13" edition="rc2" />
-        <vers num="2.6.13" edition="rc3" />
-        <vers num="2.6.13" edition="rc4" />
-        <vers num="2.6.13" edition="rc5" />
-        <vers num="2.6.13" edition="rc6" />
-        <vers num="2.6.13" edition="rc7" />
-        <vers num="2.6.13.1" />
-        <vers num="2.6.13.2" />
-        <vers num="2.6.13.3" />
-        <vers num="2.6.13.4" />
-        <vers num="2.6.13.5" />
-        <vers num="2.6.14" edition="rc1" />
-        <vers num="2.6.14" edition="rc2" />
-        <vers num="2.6.14" edition="rc3" />
-        <vers num="2.6.14" edition="rc4" />
-        <vers num="2.6.14" edition="rc5" />
-        <vers num="2.6.14.1" />
-        <vers num="2.6.14.2" />
-        <vers num="2.6.14.3" />
-        <vers num="2.6.14.4" />
-        <vers num="2.6.14.5" />
-        <vers num="2.6.14.6" />
-        <vers num="2.6.14.7" />
-        <vers num="2.6.15" edition="rc1" />
-        <vers num="2.6.15" edition="rc2" />
-        <vers num="2.6.15" edition="rc3" />
-        <vers num="2.6.15" edition="rc4" />
-        <vers num="2.6.15" edition="rc5" />
-        <vers num="2.6.15" edition="rc6" />
-        <vers num="2.6.15" edition="rc7" />
-        <vers num="2.6.15.1" />
-        <vers num="2.6.15.10" />
-        <vers num="2.6.15.11" />
-        <vers num="2.6.15.2" />
-        <vers num="2.6.15.3" />
-        <vers num="2.6.15.4" />
-        <vers num="2.6.15.5" />
-        <vers num="2.6.15.6" />
-        <vers num="2.6.15.7" />
-        <vers num="2.6.15.8" />
-        <vers num="2.6.15.9" />
-        <vers num="2.6.16" edition="rc1" />
-        <vers num="2.6.16" edition="rc2" />
-        <vers num="2.6.16" edition="rc3" />
-        <vers num="2.6.16" edition="rc4" />
-        <vers num="2.6.16" edition="rc5" />
-        <vers num="2.6.16" edition="rc6" />
-        <vers num="2.6.16" edition="rc7" />
-        <vers num="2.6.16.1" />
-        <vers num="2.6.16.10" />
-        <vers num="2.6.16.11" />
-        <vers num="2.6.16.12" />
-        <vers num="2.6.16.13" />
-        <vers num="2.6.16.14" />
-        <vers num="2.6.16.15" />
-        <vers num="2.6.16.16" />
-        <vers num="2.6.16.17" />
-        <vers num="2.6.16.18" />
-        <vers num="2.6.16.19" />
-        <vers num="2.6.16.2" />
-        <vers num="2.6.16.20" />
-        <vers num="2.6.16.21" />
-        <vers num="2.6.16.22" />
-        <vers num="2.6.16.23" />
-        <vers num="2.6.16.24" />
-        <vers num="2.6.16.25" />
-        <vers num="2.6.16.26" />
-        <vers num="2.6.16.27" />
-        <vers num="2.6.16.28" />
-        <vers num="2.6.16.29" />
-        <vers num="2.6.16.3" />
-        <vers num="2.6.16.30" />
-        <vers num="2.6.16.31" />
-        <vers num="2.6.16.32" />
-        <vers num="2.6.16.33" />
-        <vers num="2.6.16.34" />
-        <vers num="2.6.16.35" />
-        <vers num="2.6.16.36" />
-        <vers num="2.6.16.37" />
-        <vers num="2.6.16.38" />
-        <vers num="2.6.16.39" />
-        <vers num="2.6.16.4" />
-        <vers num="2.6.16.40" />
-        <vers num="2.6.16.41" />
-        <vers num="2.6.16.42" />
-        <vers num="2.6.16.43" />
-        <vers num="2.6.16.44" />
-        <vers num="2.6.16.45" />
-        <vers num="2.6.16.46" />
-        <vers num="2.6.16.47" />
-        <vers num="2.6.16.48" />
-        <vers num="2.6.16.49" />
-        <vers num="2.6.16.5" />
-        <vers num="2.6.16.50" />
-        <vers num="2.6.16.51" />
-        <vers num="2.6.16.52" />
-        <vers num="2.6.16.53" />
-        <vers num="2.6.16.54" />
-        <vers num="2.6.16.55" />
-        <vers num="2.6.16.56" />
-        <vers num="2.6.16.57" />
-        <vers num="2.6.16.58" />
-        <vers num="2.6.16.59" />
-        <vers num="2.6.16.6" />
-        <vers num="2.6.16.60" />
-        <vers num="2.6.16.61" />
-        <vers num="2.6.16.62" />
-        <vers num="2.6.16.7" />
-        <vers num="2.6.16.8" />
-        <vers num="2.6.16.9" />
-        <vers num="2.6.17" edition="rc1" />
-        <vers num="2.6.17" edition="rc2" />
-        <vers num="2.6.17" edition="rc3" />
-        <vers num="2.6.17" edition="rc4" />
-        <vers num="2.6.17" edition="rc5" />
-        <vers num="2.6.17" edition="rc6" />
-        <vers num="2.6.17.1" />
-        <vers num="2.6.17.10" />
-        <vers num="2.6.17.11" />
-        <vers num="2.6.17.12" />
-        <vers num="2.6.17.13" />
-        <vers num="2.6.17.14" />
-        <vers num="2.6.17.2" />
-        <vers num="2.6.17.3" />
-        <vers num="2.6.17.4" />
-        <vers num="2.6.17.5" />
-        <vers num="2.6.17.6" />
-        <vers num="2.6.17.7" />
-        <vers num="2.6.17.8" />
-        <vers num="2.6.17.9" />
-        <vers num="2.6.18" edition="rc1" />
-        <vers num="2.6.18" edition="rc2" />
-        <vers num="2.6.18" edition="rc3" />
-        <vers num="2.6.18" edition="rc4" />
-        <vers num="2.6.18" edition="rc5" />
-        <vers num="2.6.18" edition="rc6" />
-        <vers num="2.6.18" edition="rc7" />
-        <vers num="2.6.18.1" />
-        <vers num="2.6.18.2" />
-        <vers num="2.6.18.3" />
-        <vers num="2.6.18.4" />
-        <vers num="2.6.18.5" />
-        <vers num="2.6.18.6" />
-        <vers num="2.6.18.7" />
-        <vers num="2.6.18.8" />
-        <vers num="2.6.19" edition="rc1" />
-        <vers num="2.6.19" edition="rc2" />
-        <vers num="2.6.19" edition="rc3" />
-        <vers num="2.6.19" edition="rc4" />
-        <vers num="2.6.19.1" />
-        <vers num="2.6.19.2" />
-        <vers num="2.6.19.3" />
-        <vers num="2.6.19.4" />
-        <vers num="2.6.19.5" />
-        <vers num="2.6.19.6" />
-        <vers num="2.6.19.7" />
-        <vers num="2.6.2" edition="rc1" />
-        <vers num="2.6.2" edition="rc2" />
-        <vers num="2.6.2" edition="rc3" />
-        <vers num="2.6.20" edition="rc2" />
-        <vers num="2.6.20.1" />
-        <vers num="2.6.20.10" />
-        <vers num="2.6.20.11" />
-        <vers num="2.6.20.12" />
-        <vers num="2.6.20.13" />
-        <vers num="2.6.20.14" />
-        <vers num="2.6.20.15" />
-        <vers num="2.6.20.16" />
-        <vers num="2.6.20.17" />
-        <vers num="2.6.20.18" />
-        <vers num="2.6.20.19" />
-        <vers num="2.6.20.2" />
-        <vers num="2.6.20.20" />
-        <vers num="2.6.20.21" />
-        <vers num="2.6.20.3" />
-        <vers num="2.6.20.4" />
-        <vers num="2.6.20.5" />
-        <vers num="2.6.20.6" />
-        <vers num="2.6.20.7" />
-        <vers num="2.6.20.8" />
-        <vers num="2.6.20.9" />
-        <vers num="2.6.21" edition="git1" />
-        <vers num="2.6.21" edition="git2" />
-        <vers num="2.6.21" edition="git3" />
-        <vers num="2.6.21" edition="git4" />
-        <vers num="2.6.21" edition="git5" />
-        <vers num="2.6.21" edition="git6" />
-        <vers num="2.6.21" edition="git7" />
-        <vers num="2.6.21" edition="rc3" />
-        <vers num="2.6.21" edition="rc4" />
-        <vers num="2.6.21" edition="rc5" />
-        <vers num="2.6.21" edition="rc6" />
-        <vers num="2.6.21" edition="rc7" />
-        <vers num="2.6.21.1" />
-        <vers num="2.6.21.2" />
-        <vers num="2.6.21.3" />
-        <vers num="2.6.21.4" />
-        <vers num="2.6.21.5" />
-        <vers num="2.6.21.6" />
-        <vers num="2.6.21.7" />
-        <vers num="2.6.22" />
-        <vers num="2.6.22.1" />
-        <vers num="2.6.22.10" />
-        <vers num="2.6.22.11" />
-        <vers num="2.6.22.12" />
-        <vers num="2.6.22.13" />
-        <vers num="2.6.22.14" />
-        <vers num="2.6.22.15" />
-        <vers num="2.6.22.16" />
-        <vers num="2.6.22.17" />
-        <vers num="2.6.22.18" />
-        <vers num="2.6.22.19" />
-        <vers num="2.6.22.2" />
-        <vers num="2.6.22.20" />
-        <vers num="2.6.22.3" />
-        <vers num="2.6.22.4" />
-        <vers num="2.6.22.5" />
-        <vers num="2.6.22.6" />
-        <vers num="2.6.22.7" />
-        <vers num="2.6.22.8" />
-        <vers num="2.6.27.41" />
-        <vers num="2.6.27.42" />
-        <vers num="2.6.27.43" />
-        <vers num="2.6.27.44" />
-        <vers num="2.6.27.45" />
-        <vers num="2.6.27.46" />
-        <vers num="2.6.27.47" />
-        <vers num="2.6.27.48" />
-        <vers num="2.6.27.49" />
-        <vers num="2.6.27.5" />
-        <vers num="2.6.27.50" />
-        <vers num="2.6.27.51" />
-        <vers num="2.6.27.52" />
-        <vers num="2.6.27.53" />
-        <vers num="2.6.27.54" />
-        <vers num="2.6.27.55" />
-        <vers num="2.6.27.56" />
-        <vers num="2.6.27.57" />
-        <vers num="2.6.27.58" />
-        <vers num="2.6.27.59" />
-        <vers num="2.6.27.6" />
-        <vers num="2.6.27.60" />
-        <vers num="2.6.27.61" />
-        <vers num="2.6.27.62" />
-        <vers num="2.6.27.7" />
-        <vers num="2.6.27.8" />
-        <vers num="2.6.27.9" />
-        <vers num="2.6.28" />
-        <vers num="2.6.28.1" />
-        <vers num="2.6.28.10" />
-        <vers num="2.6.28.2" />
-        <vers num="2.6.28.3" />
-        <vers num="2.6.28.4" />
-        <vers num="2.6.28.5" />
-        <vers num="2.6.28.6" />
-        <vers num="2.6.28.7" />
-        <vers num="2.6.28.8" />
-        <vers num="2.6.28.9" />
-        <vers num="2.6.29" />
-        <vers num="2.6.29.1" />
-        <vers num="2.6.29.2" />
-        <vers num="2.6.29.3" />
-        <vers num="2.6.29.4" />
-        <vers num="2.6.29.5" />
-        <vers num="2.6.29.6" />
-        <vers num="2.6.3" edition="rc1" />
-        <vers num="2.6.3" edition="rc2" />
-        <vers num="2.6.3" edition="rc3" />
-        <vers num="2.6.3" edition="rc4" />
-        <vers num="2.6.32" />
-        <vers num="2.6.32.1" />
-        <vers num="2.6.32.10" />
-        <vers num="2.6.32.11" />
-        <vers num="2.6.32.12" />
-        <vers num="2.6.32.13" />
-        <vers num="2.6.32.14" />
-        <vers num="2.6.32.15" />
-        <vers num="2.6.32.16" />
-        <vers num="2.6.32.17" />
-        <vers num="2.6.32.18" />
-        <vers num="2.6.32.2" />
-        <vers num="2.6.32.28" />
-        <vers num="2.6.32.29" />
-        <vers num="2.6.32.3" />
-        <vers num="2.6.32.30" />
-        <vers num="2.6.32.31" />
-        <vers num="2.6.32.32" />
-        <vers num="2.6.32.33" />
-        <vers num="2.6.32.34" />
-        <vers num="2.6.32.35" />
-        <vers num="2.6.32.36" />
-        <vers num="2.6.32.37" />
-        <vers num="2.6.32.38" />
-        <vers num="2.6.32.39" />
-        <vers num="2.6.32.4" />
-        <vers num="2.6.32.40" />
-        <vers num="2.6.32.41" />
-        <vers num="2.6.32.42" />
-        <vers num="2.6.32.43" />
-        <vers num="2.6.32.44" />
-        <vers num="2.6.32.45" />
-        <vers num="2.6.32.46" />
-        <vers num="2.6.32.47" />
-        <vers num="2.6.32.48" />
-        <vers num="2.6.32.49" />
-        <vers num="2.6.32.5" />
-        <vers num="2.6.32.50" />
-        <vers num="2.6.32.51" />
-        <vers num="2.6.32.52" />
-        <vers num="2.6.32.53" />
-        <vers num="2.6.32.54" />
-        <vers num="2.6.32.55" />
-        <vers num="2.6.32.56" />
-        <vers num="2.6.32.57" />
-        <vers num="2.6.32.58" />
-        <vers num="2.6.32.6" />
-        <vers num="2.6.32.7" />
-        <vers num="2.6.32.8" />
-        <vers num="2.6.32.9" />
-        <vers num="2.6.33.10" />
-        <vers num="2.6.33.11" />
-        <vers num="2.6.33.12" />
-        <vers num="2.6.33.13" />
-        <vers num="2.6.33.14" />
-        <vers num="2.6.33.15" />
-        <vers num="2.6.33.16" />
-        <vers num="2.6.33.17" />
-        <vers num="2.6.33.18" />
-        <vers num="2.6.33.19" />
-        <vers num="2.6.33.20" />
-        <vers num="2.6.33.8" />
-        <vers num="2.6.33.9" />
-        <vers num="2.6.34.1" />
-        <vers num="2.6.34.10" />
-        <vers num="2.6.34.2" />
-        <vers num="2.6.34.3" />
-        <vers num="2.6.34.8" />
-        <vers num="2.6.34.9" />
-        <vers num="2.6.35.1" />
-        <vers num="2.6.35.10" />
-        <vers num="2.6.35.11" />
-        <vers num="2.6.35.12" />
-        <vers num="2.6.35.13" />
-        <vers num="2.6.37" edition="rc1" />
-        <vers num="2.6.37" edition="rc2" />
-        <vers num="2.6.37" edition="rc3" />
-        <vers num="2.6.37" edition="rc4" />
-        <vers num="2.6.37" edition="rc5" />
-        <vers num="2.6.38" edition="rc1" />
-        <vers num="2.6.38" edition="rc2" />
-        <vers num="2.6.38" edition="rc3" />
-        <vers num="2.6.38" edition="rc4" />
-        <vers num="2.6.38" edition="rc5" />
-        <vers num="2.6.38" edition="rc6" />
-        <vers num="2.6.38" edition="rc7" />
-        <vers num="2.6.38" edition="rc8" />
-        <vers num="2.6.39" edition="rc1" />
-        <vers num="2.6.39" edition="rc2" />
-        <vers num="2.6.39" edition="rc3" />
-        <vers num="2.6.39" edition="rc4" />
-        <vers num="2.6.39" edition="rc5" />
-        <vers num="2.6.39" edition="rc6" />
-        <vers num="2.6.39" edition="rc7" />
-        <vers num="2.6.4" edition="rc1" />
-        <vers num="2.6.4" edition="rc2" />
-        <vers num="2.6.4" edition="rc3" />
-        <vers num="2.6.5" edition="rc1" />
-        <vers num="2.6.5" edition="rc2" />
-        <vers num="2.6.5" edition="rc3" />
-        <vers num="2.6.6" edition="rc1" />
-        <vers num="2.6.6" edition="rc2" />
-        <vers num="2.6.6" edition="rc3" />
-        <vers num="2.6.7" edition="rc1" />
-        <vers num="2.6.7" edition="rc2" />
-        <vers num="2.6.7" edition="rc3" />
-        <vers num="2.6.8" edition="rc1" />
-        <vers num="2.6.8" edition="rc2" />
-        <vers num="2.6.8" edition="rc3" />
-        <vers num="2.6.8" edition="rc4" />
-        <vers num="2.6.8.1" />
-        <vers num="2.6.9" edition="rc1" />
-        <vers num="2.6.9" edition="rc2" />
-        <vers num="2.6.9" edition="rc3" />
-        <vers num="2.6.9" edition="rc4" />
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0" edition="rc2" />
-        <vers num="3.0" edition="rc3" />
-        <vers num="3.0" edition="rc4" />
-        <vers num="3.0" edition="rc5" />
-        <vers num="3.0" edition="rc6" />
-        <vers num="3.0" edition="rc7" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.19" />
-        <vers num="3.0.20" />
-        <vers num="3.0.21" />
-        <vers num="3.0.22" />
-        <vers num="3.0.23" />
-        <vers num="3.0.24" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers prev="1" num="3.1.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0039" published="2012-01-14" name="CVE-2012-0039" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">** DISPUTED ** GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.  NOTE: this issue may be disputed by the vendor; the existence of the g_str_hash function is not a vulnerability in the library, because callers of g_hash_table_new and g_hash_table_new_full can specify an arbitrary hash function that is appropriate for the application.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=772720" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=772720</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/10/12" source="MLIST">[oss-security] 20120110 glib2 hash dos oCert-2011-003</ref>
-      <ref url="http://mail.gnome.org/archives/gtk-devel-list/2003-May/msg00111.html" source="MLIST">[gtk-devel-list] 20030529 Algorimic Complexity Attack on GLIB 2.2.1</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655044" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655044</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnome" name="glib">
-        <vers num="1.1.12" />
-        <vers num="1.1.12-1" />
-        <vers num="1.1.15" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.10" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers num="1.2.8" />
-        <vers num="1.2.9" />
-        <vers num="1.3.10" />
-        <vers num="1.3.11" />
-        <vers num="1.3.12" />
-        <vers num="1.3.13" />
-        <vers num="1.3.14" />
-        <vers num="1.3.15" />
-        <vers num="1.3.9" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.10.0" />
-        <vers num="2.10.1" />
-        <vers num="2.10.2" />
-        <vers num="2.10.3" />
-        <vers num="2.11.0" />
-        <vers num="2.11.1" />
-        <vers num="2.11.2" />
-        <vers num="2.11.3" />
-        <vers num="2.11.4" />
-        <vers num="2.12.0" />
-        <vers num="2.12.1" />
-        <vers num="2.12.10" />
-        <vers num="2.12.11" />
-        <vers num="2.12.12" />
-        <vers num="2.12.13" />
-        <vers num="2.12.2" />
-        <vers num="2.12.3" />
-        <vers num="2.12.4" />
-        <vers num="2.12.5" />
-        <vers num="2.12.6" />
-        <vers num="2.12.7" />
-        <vers num="2.12.8" />
-        <vers num="2.12.9" />
-        <vers num="2.13.0" />
-        <vers num="2.13.1" />
-        <vers num="2.13.2" />
-        <vers num="2.13.3" />
-        <vers num="2.13.4" />
-        <vers num="2.13.5" />
-        <vers num="2.13.6" />
-        <vers num="2.13.7" />
-        <vers num="2.14.0" />
-        <vers num="2.14.1" />
-        <vers num="2.14.2" />
-        <vers num="2.14.3" />
-        <vers num="2.14.4" />
-        <vers num="2.14.5" />
-        <vers num="2.14.6" />
-        <vers num="2.15.0" />
-        <vers num="2.15.1" />
-        <vers num="2.15.2" />
-        <vers num="2.15.3" />
-        <vers num="2.15.4" />
-        <vers num="2.15.5" />
-        <vers num="2.15.6" />
-        <vers num="2.16.0" />
-        <vers num="2.16.1" />
-        <vers num="2.16.2" />
-        <vers num="2.16.3" />
-        <vers num="2.16.4" />
-        <vers num="2.16.5" />
-        <vers num="2.16.6" />
-        <vers num="2.17.0" />
-        <vers num="2.17.1" />
-        <vers num="2.17.2" />
-        <vers num="2.17.3" />
-        <vers num="2.17.4" />
-        <vers num="2.17.5" />
-        <vers num="2.17.6" />
-        <vers num="2.17.7" />
-        <vers num="2.18.0" />
-        <vers num="2.18.1" />
-        <vers num="2.18.2" />
-        <vers num="2.18.3" />
-        <vers num="2.18.4" />
-        <vers num="2.19.0" />
-        <vers num="2.19.1" />
-        <vers num="2.19.10" />
-        <vers num="2.19.2" />
-        <vers num="2.19.3" />
-        <vers num="2.19.4" />
-        <vers num="2.19.5" />
-        <vers num="2.19.6" />
-        <vers num="2.19.7" />
-        <vers num="2.19.8" />
-        <vers num="2.19.9" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.20.0" />
-        <vers num="2.20.1" />
-        <vers num="2.20.2" />
-        <vers num="2.20.3" />
-        <vers num="2.20.4" />
-        <vers num="2.20.5" />
-        <vers num="2.21.0" />
-        <vers num="2.21.1" />
-        <vers num="2.21.2" />
-        <vers num="2.21.3" />
-        <vers num="2.21.4" />
-        <vers num="2.21.5" />
-        <vers num="2.21.6" />
-        <vers num="2.22.0" />
-        <vers num="2.22.1" />
-        <vers num="2.22.2" />
-        <vers num="2.22.3" />
-        <vers num="2.22.4" />
-        <vers num="2.22.5" />
-        <vers num="2.23.0" />
-        <vers num="2.23.1" />
-        <vers num="2.23.2" />
-        <vers num="2.23.3" />
-        <vers num="2.23.4" />
-        <vers num="2.23.5" />
-        <vers num="2.23.6" />
-        <vers num="2.24.0" />
-        <vers num="2.24.1" />
-        <vers num="2.24.2" />
-        <vers num="2.25.0" />
-        <vers num="2.25.1" />
-        <vers num="2.25.10" />
-        <vers num="2.25.11" />
-        <vers num="2.25.12" />
-        <vers num="2.25.13" />
-        <vers num="2.25.14" />
-        <vers num="2.25.15" />
-        <vers num="2.25.16" />
-        <vers num="2.25.17" />
-        <vers num="2.25.2" />
-        <vers num="2.25.3" />
-        <vers num="2.25.4" />
-        <vers num="2.25.5" />
-        <vers num="2.25.6" />
-        <vers num="2.25.7" />
-        <vers num="2.25.8" />
-        <vers num="2.25.9" />
-        <vers num="2.26.0" />
-        <vers num="2.26.1" />
-        <vers num="2.27.0" />
-        <vers num="2.27.1" />
-        <vers num="2.27.2" />
-        <vers num="2.27.3" />
-        <vers num="2.27.4" />
-        <vers num="2.27.5" />
-        <vers num="2.27.90" />
-        <vers num="2.27.91" />
-        <vers num="2.27.92" />
-        <vers num="2.27.93" />
-        <vers num="2.28" />
-        <vers num="2.28.0" />
-        <vers num="2.28.1" />
-        <vers num="2.28.2" />
-        <vers num="2.28.3" />
-        <vers num="2.28.4" />
-        <vers num="2.28.5" />
-        <vers num="2.28.6" />
-        <vers num="2.28.7" />
-        <vers num="2.28.8" />
-        <vers num="2.29.10" />
-        <vers num="2.29.12" />
-        <vers num="2.29.14" />
-        <vers num="2.29.16" />
-        <vers num="2.29.18" />
-        <vers num="2.29.2" />
-        <vers num="2.29.4" />
-        <vers num="2.29.6" />
-        <vers num="2.29.8" />
-        <vers num="2.29.90" />
-        <vers num="2.29.92" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.30.0" />
-        <vers num="2.30.1" />
-        <vers num="2.30.2" />
-        <vers num="2.31.0" />
-        <vers num="2.31.2" />
-        <vers num="2.31.4" />
-        <vers num="2.31.6" />
-        <vers prev="1" num="2.31.8" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers num="2.4.8" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-        <vers num="2.5.4" />
-        <vers num="2.5.5" />
-        <vers num="2.5.6" />
-        <vers num="2.5.7" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.8.0" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" />
-        <vers num="2.8.5" />
-        <vers num="2.8.6" />
-        <vers num="2.9.0" />
-        <vers num="2.9.1" />
-        <vers num="2.9.2" />
-        <vers num="2.9.3" />
-        <vers num="2.9.4" />
-        <vers num="2.9.5" />
-        <vers num="2.9.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0040" published="2012-01-24" name="CVE-2012-0040" modified="2012-01-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in modules/core/www/no_cookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72313" source="XF">simplesamlphp-nocookie-logout-xss(72313)</ref>
-      <ref url="http://www.securityfocus.com/bid/51372" source="BID">51372</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/20/20" source="MLIST">[oss-security] 20120120 Re: CVE request: simpleSAMLphp 1.8.2 cross site scripting</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2387" source="DEBIAN" adv="1">DSA-2387</ref>
-      <ref url="http://secunia.com/advisories/47534" source="SECUNIA" adv="1">47534</ref>
-      <ref url="http://secunia.com/advisories/47491" source="SECUNIA" adv="1">47491</ref>
-      <ref url="http://osvdb.org/78254" source="OSVDB">78254</ref>
-      <ref url="http://code.google.com/p/simplesamlphp/issues/detail?id=468" source="CONFIRM">http://code.google.com/p/simplesamlphp/issues/detail?id=468</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="simplesamlphp" name="simplesamlphp">
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="1.4" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.6" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.7" />
-        <vers num="1.8" />
-        <vers prev="1" num="1.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0041" published="2012-04-11" name="CVE-2012-0041" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a capture file, as demonstrated by an airopeek file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6663" source="CONFIRM" patch="1">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6663</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40164" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40164</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-01.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-01.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/20/4" source="MLIST">[oss-security] 20120119 Re: CVE request: Wireshark multiple vulnerabilities</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/11/7" source="MLIST">[oss-security] 20120111 Re: CVE request: Wireshark multiple vulnerabilities</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15297" source="OVAL">oval:org.mitre.oval:def:15297</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0042" published="2012-04-11" name="CVE-2012-0042" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:A/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="2.9" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="5.5" CVSS_base_score="2.9">
-    <desc>
-      <descript source="cve">Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet, related to epan/to_str.c.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/476.html
-
-'CWE-476: NULL Pointer Dereference'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6634" source="CONFIRM" patch="1">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6634</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40194" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40194</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-02.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-02.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/11/7" source="MLIST">[oss-security] 20120111 Re: CVE request: Wireshark multiple vulnerabilities</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15368" source="OVAL">oval:org.mitre.oval:def:15368</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0043" published="2012-04-11" name="CVE-2012-0043" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="5.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.5" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Buffer overflow in the reassemble_message function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a series of fragmented RLC packets.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6391" source="CONFIRM" patch="1">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6391</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40266" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40266</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-03.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-03.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/11/7" source="MLIST">[oss-security] 20120111 Re: CVE request: Wireshark multiple vulnerabilities</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15324" source="OVAL">oval:org.mitre.oval:def:15324</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0044" published="2012-05-17" name="CVE-2012-0044" modified="2012-05-17" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">Integer overflow in the drm_mode_dirtyfb_ioctl function in drivers/gpu/drm/drm_crtc.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.1.5 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted ioctl call.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/a5cd335165e31db9dbab636fd29895d41da55dd2" source="CONFIRM">https://github.com/torvalds/linux/commit/a5cd335165e31db9dbab636fd29895d41da55dd2</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=772894" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=772894</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/12/1" source="MLIST">[oss-security] 20120111 Re: CVE request - kernel: drm: integer overflow in drm_mode_dirtyfb_ioctl()</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.5" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.5</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=a5cd335165e31db9dbab636fd29895d41da55dd2" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=a5cd335165e31db9dbab636fd29895d41da55dd2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="1.2.0" />
-        <vers num="1.3.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.15" />
-        <vers num="2.0.16" />
-        <vers num="2.0.17" />
-        <vers num="2.0.18" />
-        <vers num="2.0.19" />
-        <vers num="2.0.2" />
-        <vers num="2.0.20" />
-        <vers num="2.0.21" />
-        <vers num="2.0.22" />
-        <vers num="2.0.23" />
-        <vers num="2.0.24" />
-        <vers num="2.0.25" />
-        <vers num="2.0.26" />
-        <vers num="2.0.27" />
-        <vers num="2.0.28" />
-        <vers num="2.0.29" />
-        <vers num="2.0.3" />
-        <vers num="2.0.30" />
-        <vers num="2.0.31" />
-        <vers num="2.0.32" />
-        <vers num="2.0.33" />
-        <vers num="2.0.34" />
-        <vers num="2.0.35" />
-        <vers num="2.0.36" />
-        <vers num="2.0.37" />
-        <vers num="2.0.38" />
-        <vers num="2.0.39" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1.132" />
-        <vers num="2.1.89" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.10" />
-        <vers num="2.2.11" />
-        <vers num="2.2.12" />
-        <vers num="2.2.13" edition="pre15" />
-        <vers num="2.2.14" />
-        <vers num="2.2.15" edition="pre16" />
-        <vers num="2.2.16" edition="pre5" />
-        <vers num="2.2.16" edition="pre6" />
-        <vers num="2.2.17" edition="pre14" />
-        <vers num="2.2.18" />
-        <vers num="2.2.19" />
-        <vers num="2.2.2" />
-        <vers num="2.2.20" />
-        <vers num="2.2.21" edition="pre1" />
-        <vers num="2.2.21" edition="pre2" />
-        <vers num="2.2.21" edition="pre3" />
-        <vers num="2.2.21" edition="pre4" />
-        <vers num="2.2.21" edition="rc1" />
-        <vers num="2.2.21" edition="rc2" />
-        <vers num="2.2.21" edition="rc3" />
-        <vers num="2.2.21" edition="rc4" />
-        <vers num="2.2.22" edition="rc1" />
-        <vers num="2.2.22" edition="rc2" />
-        <vers num="2.2.22" edition="rc3" />
-        <vers num="2.2.23" edition="rc1" />
-        <vers num="2.2.23" edition="rc2" />
-        <vers num="2.2.24" edition="rc2" />
-        <vers num="2.2.24" edition="rc3" />
-        <vers num="2.2.24" edition="rc4" />
-        <vers num="2.2.24" edition="rc5" />
-        <vers num="2.2.25" />
-        <vers num="2.2.26" />
-        <vers num="2.2.27" edition="pre1" />
-        <vers num="2.2.27" edition="pre2" />
-        <vers num="2.2.27" edition="rc1" />
-        <vers num="2.2.27" edition="rc2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" edition="rc1" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.13" />
-        <vers num="2.3.14" />
-        <vers num="2.3.15" />
-        <vers num="2.3.16" />
-        <vers num="2.3.17" />
-        <vers num="2.3.18" />
-        <vers num="2.3.19" />
-        <vers num="2.3.2" />
-        <vers num="2.3.20" />
-        <vers num="2.3.21" />
-        <vers num="2.3.22" />
-        <vers num="2.3.23" />
-        <vers num="2.3.24" />
-        <vers num="2.3.25" />
-        <vers num="2.3.26" />
-        <vers num="2.3.27" />
-        <vers num="2.3.28" />
-        <vers num="2.3.29" />
-        <vers num="2.3.3" />
-        <vers num="2.3.30" />
-        <vers num="2.3.31" />
-        <vers num="2.3.32" />
-        <vers num="2.3.33" />
-        <vers num="2.3.34" />
-        <vers num="2.3.35" />
-        <vers num="2.3.36" />
-        <vers num="2.3.37" />
-        <vers num="2.3.38" />
-        <vers num="2.3.39" />
-        <vers num="2.3.4" />
-        <vers num="2.3.40" />
-        <vers num="2.3.41" />
-        <vers num="2.3.42" />
-        <vers num="2.3.43" />
-        <vers num="2.3.44" />
-        <vers num="2.3.45" />
-        <vers num="2.3.46" />
-        <vers num="2.3.47" />
-        <vers num="2.3.48" />
-        <vers num="2.3.49" />
-        <vers num="2.3.5" />
-        <vers num="2.3.50" />
-        <vers num="2.3.51" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.3.99" edition="pre1" />
-        <vers num="2.3.99" edition="pre2" />
-        <vers num="2.3.99" edition="pre3" />
-        <vers num="2.3.99" edition="pre4" />
-        <vers num="2.3.99" edition="pre5" />
-        <vers num="2.3.99" edition="pre6" />
-        <vers num="2.3.99" edition="pre7" />
-        <vers num="2.3.99" edition="pre8" />
-        <vers num="2.3.99" edition="pre9" />
-        <vers num="2.4.0" edition="test1" />
-        <vers num="2.4.0" edition="test10" />
-        <vers num="2.4.0" edition="test11" />
-        <vers num="2.4.0" edition="test12" />
-        <vers num="2.4.0" edition="test2" />
-        <vers num="2.4.0" edition="test3" />
-        <vers num="2.4.0" edition="test4" />
-        <vers num="2.4.0" edition="test5" />
-        <vers num="2.4.0" edition="test6" />
-        <vers num="2.4.0" edition="test7" />
-        <vers num="2.4.0" edition="test8" />
-        <vers num="2.4.0" edition="test9" />
-        <vers num="2.4.1" />
-        <vers num="2.4.10" />
-        <vers num="2.4.11" edition="pre3" />
-        <vers num="2.4.12" />
-        <vers num="2.4.13" />
-        <vers num="2.4.14" />
-        <vers num="2.4.15" />
-        <vers num="2.4.16" />
-        <vers num="2.4.17" />
-        <vers num="2.4.18" edition="pre1" />
-        <vers num="2.4.18" edition="pre2" />
-        <vers num="2.4.18" edition="pre3" />
-        <vers num="2.4.18" edition="pre4" />
-        <vers num="2.4.18" edition="pre5" />
-        <vers num="2.4.18" edition="pre6" />
-        <vers num="2.4.18" edition="pre7" />
-        <vers num="2.4.18" edition="pre8" />
-        <vers num="2.4.18" edition="pre9" />
-        <vers num="2.4.19" edition="pre1" />
-        <vers num="2.4.19" edition="pre2" />
-        <vers num="2.4.19" edition="pre3" />
-        <vers num="2.4.19" edition="pre4" />
-        <vers num="2.4.19" edition="pre5" />
-        <vers num="2.4.19" edition="pre6" />
-        <vers num="2.4.2" />
-        <vers num="2.4.20" />
-        <vers num="2.4.21" edition="pre1" />
-        <vers num="2.4.21" edition="pre4" />
-        <vers num="2.4.21" edition="pre7" />
-        <vers num="2.4.22" edition="pre10" />
-        <vers num="2.4.23" edition="pre9" />
-        <vers num="2.4.24" />
-        <vers num="2.4.25" />
-        <vers num="2.4.26" />
-        <vers num="2.4.27" edition="pre1" />
-        <vers num="2.4.27" edition="pre2" />
-        <vers num="2.4.27" edition="pre3" />
-        <vers num="2.4.27" edition="pre4" />
-        <vers num="2.4.27" edition="pre5" />
-        <vers num="2.4.28" />
-        <vers num="2.4.29" edition="rc1" />
-        <vers num="2.4.29" edition="rc2" />
-        <vers num="2.4.3" edition="pre3" />
-        <vers num="2.4.30" edition="rc2" />
-        <vers num="2.4.30" edition="rc3" />
-        <vers num="2.4.31" edition="pre1" />
-        <vers num="2.4.32" edition="pre1" />
-        <vers num="2.4.32" edition="pre2" />
-        <vers num="2.4.33" edition="pre1" />
-        <vers num="2.4.33.2" />
-        <vers num="2.4.33.3" />
-        <vers num="2.4.33.4" />
-        <vers num="2.4.33.5" />
-        <vers num="2.4.34" edition="rc3" />
-        <vers num="2.4.34.1" />
-        <vers num="2.4.34.2" />
-        <vers num="2.4.35" />
-        <vers num="2.4.35.2" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers num="2.4.8" />
-        <vers num="2.4.9" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.10" />
-        <vers num="2.5.11" />
-        <vers num="2.5.12" />
-        <vers num="2.5.13" />
-        <vers num="2.5.14" />
-        <vers num="2.5.15" />
-        <vers num="2.5.16" />
-        <vers num="2.5.17" />
-        <vers num="2.5.18" />
-        <vers num="2.5.19" />
-        <vers num="2.5.2" />
-        <vers num="2.5.20" />
-        <vers num="2.5.21" />
-        <vers num="2.5.22" />
-        <vers num="2.5.23" />
-        <vers num="2.5.24" />
-        <vers num="2.5.25" />
-        <vers num="2.5.26" />
-        <vers num="2.5.27" />
-        <vers num="2.5.28" />
-        <vers num="2.5.29" />
-        <vers num="2.5.3" />
-        <vers num="2.5.30" />
-        <vers num="2.5.31" />
-        <vers num="2.5.32" />
-        <vers num="2.5.33" />
-        <vers num="2.5.34" />
-        <vers num="2.5.35" />
-        <vers num="2.5.36" />
-        <vers num="2.5.37" />
-        <vers num="2.5.38" />
-        <vers num="2.5.39" />
-        <vers num="2.5.4" />
-        <vers num="2.5.40" />
-        <vers num="2.5.41" />
-        <vers num="2.5.42" />
-        <vers num="2.5.43" />
-        <vers num="2.5.44" />
-        <vers num="2.5.45" />
-        <vers num="2.5.46" />
-        <vers num="2.5.47" />
-        <vers num="2.5.48" />
-        <vers num="2.5.49" />
-        <vers num="2.5.5" />
-        <vers num="2.5.50" />
-        <vers num="2.5.51" />
-        <vers num="2.5.52" />
-        <vers num="2.5.53" />
-        <vers num="2.5.54" />
-        <vers num="2.5.55" />
-        <vers num="2.5.56" />
-        <vers num="2.5.57" />
-        <vers num="2.5.58" />
-        <vers num="2.5.59" />
-        <vers num="2.5.6" />
-        <vers num="2.5.60" />
-        <vers num="2.5.61" />
-        <vers num="2.5.62" />
-        <vers num="2.5.63" />
-        <vers num="2.5.64" />
-        <vers num="2.5.65" />
-        <vers num="2.5.66" />
-        <vers num="2.5.67" />
-        <vers num="2.5.68" />
-        <vers num="2.5.69" />
-        <vers num="2.5.7" />
-        <vers num="2.5.8" />
-        <vers num="2.5.9" />
-        <vers num="2.6.0" edition="test1" />
-        <vers num="2.6.0" edition="test10" />
-        <vers num="2.6.0" edition="test11" />
-        <vers num="2.6.0" edition="test2" />
-        <vers num="2.6.0" edition="test3" />
-        <vers num="2.6.0" edition="test4" />
-        <vers num="2.6.0" edition="test5" />
-        <vers num="2.6.0" edition="test6" />
-        <vers num="2.6.0" edition="test7" />
-        <vers num="2.6.0" edition="test8" />
-        <vers num="2.6.0" edition="test9" />
-        <vers num="2.6.1" edition="rc1" />
-        <vers num="2.6.1" edition="rc2" />
-        <vers num="2.6.1" edition="rc3" />
-        <vers num="2.6.10" edition="rc1" />
-        <vers num="2.6.10" edition="rc2" />
-        <vers num="2.6.10" edition="rc3" />
-        <vers num="2.6.11" edition="rc1" />
-        <vers num="2.6.11" edition="rc2" />
-        <vers num="2.6.11" edition="rc3" />
-        <vers num="2.6.11" edition="rc4" />
-        <vers num="2.6.11" edition="rc5" />
-        <vers num="2.6.11.1" />
-        <vers num="2.6.11.10" />
-        <vers num="2.6.11.11" />
-        <vers num="2.6.11.12" />
-        <vers num="2.6.11.2" />
-        <vers num="2.6.11.3" />
-        <vers num="2.6.11.4" />
-        <vers num="2.6.11.5" />
-        <vers num="2.6.11.6" />
-        <vers num="2.6.11.7" />
-        <vers num="2.6.11.8" />
-        <vers num="2.6.11.9" />
-        <vers num="2.6.12" edition="rc1" />
-        <vers num="2.6.12" edition="rc2" />
-        <vers num="2.6.12" edition="rc3" />
-        <vers num="2.6.12" edition="rc4" />
-        <vers num="2.6.12" edition="rc5" />
-        <vers num="2.6.12" edition="rc6" />
-        <vers num="2.6.12.1" />
-        <vers num="2.6.12.2" />
-        <vers num="2.6.12.3" />
-        <vers num="2.6.12.4" />
-        <vers num="2.6.12.5" />
-        <vers num="2.6.12.6" />
-        <vers num="2.6.13" edition="rc1" />
-        <vers num="2.6.13" edition="rc2" />
-        <vers num="2.6.13" edition="rc3" />
-        <vers num="2.6.13" edition="rc4" />
-        <vers num="2.6.13" edition="rc5" />
-        <vers num="2.6.13" edition="rc6" />
-        <vers num="2.6.13" edition="rc7" />
-        <vers num="2.6.13.1" />
-        <vers num="2.6.13.2" />
-        <vers num="2.6.13.3" />
-        <vers num="2.6.13.4" />
-        <vers num="2.6.13.5" />
-        <vers num="2.6.14" edition="rc1" />
-        <vers num="2.6.14" edition="rc2" />
-        <vers num="2.6.14" edition="rc3" />
-        <vers num="2.6.14" edition="rc4" />
-        <vers num="2.6.14" edition="rc5" />
-        <vers num="2.6.14.1" />
-        <vers num="2.6.14.2" />
-        <vers num="2.6.14.3" />
-        <vers num="2.6.14.4" />
-        <vers num="2.6.14.5" />
-        <vers num="2.6.14.6" />
-        <vers num="2.6.14.7" />
-        <vers num="2.6.15" edition="rc1" />
-        <vers num="2.6.15" edition="rc2" />
-        <vers num="2.6.15" edition="rc3" />
-        <vers num="2.6.15" edition="rc4" />
-        <vers num="2.6.15" edition="rc5" />
-        <vers num="2.6.15" edition="rc6" />
-        <vers num="2.6.15" edition="rc7" />
-        <vers num="2.6.15.1" />
-        <vers num="2.6.15.10" />
-        <vers num="2.6.15.11" />
-        <vers num="2.6.15.2" />
-        <vers num="2.6.15.3" />
-        <vers num="2.6.15.4" />
-        <vers num="2.6.15.5" />
-        <vers num="2.6.15.6" />
-        <vers num="2.6.15.7" />
-        <vers num="2.6.15.8" />
-        <vers num="2.6.15.9" />
-        <vers num="2.6.16" edition="rc1" />
-        <vers num="2.6.16" edition="rc2" />
-        <vers num="2.6.16" edition="rc3" />
-        <vers num="2.6.16" edition="rc4" />
-        <vers num="2.6.16" edition="rc5" />
-        <vers num="2.6.16" edition="rc6" />
-        <vers num="2.6.16" edition="rc7" />
-        <vers num="2.6.16.1" />
-        <vers num="2.6.16.10" />
-        <vers num="2.6.16.11" />
-        <vers num="2.6.16.12" />
-        <vers num="2.6.16.13" />
-        <vers num="2.6.16.14" />
-        <vers num="2.6.16.15" />
-        <vers num="2.6.16.16" />
-        <vers num="2.6.16.17" />
-        <vers num="2.6.16.18" />
-        <vers num="2.6.16.19" />
-        <vers num="2.6.16.2" />
-        <vers num="2.6.16.20" />
-        <vers num="2.6.16.21" />
-        <vers num="2.6.16.22" />
-        <vers num="2.6.16.23" />
-        <vers num="2.6.16.24" />
-        <vers num="2.6.16.25" />
-        <vers num="2.6.16.26" />
-        <vers num="2.6.16.27" />
-        <vers num="2.6.16.28" />
-        <vers num="2.6.16.29" />
-        <vers num="2.6.16.3" />
-        <vers num="2.6.16.30" />
-        <vers num="2.6.16.31" />
-        <vers num="2.6.16.32" />
-        <vers num="2.6.16.33" />
-        <vers num="2.6.16.34" />
-        <vers num="2.6.16.35" />
-        <vers num="2.6.16.36" />
-        <vers num="2.6.16.37" />
-        <vers num="2.6.16.38" />
-        <vers num="2.6.16.39" />
-        <vers num="2.6.16.4" />
-        <vers num="2.6.16.40" />
-        <vers num="2.6.16.41" />
-        <vers num="2.6.16.42" />
-        <vers num="2.6.16.43" />
-        <vers num="2.6.16.44" />
-        <vers num="2.6.16.45" />
-        <vers num="2.6.16.46" />
-        <vers num="2.6.16.47" />
-        <vers num="2.6.16.48" />
-        <vers num="2.6.16.49" />
-        <vers num="2.6.16.5" />
-        <vers num="2.6.16.50" />
-        <vers num="2.6.16.51" />
-        <vers num="2.6.16.52" />
-        <vers num="2.6.16.53" />
-        <vers num="2.6.16.54" />
-        <vers num="2.6.16.55" />
-        <vers num="2.6.16.56" />
-        <vers num="2.6.16.57" />
-        <vers num="2.6.16.58" />
-        <vers num="2.6.16.59" />
-        <vers num="2.6.16.6" />
-        <vers num="2.6.16.60" />
-        <vers num="2.6.16.61" />
-        <vers num="2.6.16.62" />
-        <vers num="2.6.16.7" />
-        <vers num="2.6.16.8" />
-        <vers num="2.6.16.9" />
-        <vers num="2.6.17" edition="rc1" />
-        <vers num="2.6.17" edition="rc2" />
-        <vers num="2.6.17" edition="rc3" />
-        <vers num="2.6.17" edition="rc4" />
-        <vers num="2.6.17" edition="rc5" />
-        <vers num="2.6.17" edition="rc6" />
-        <vers num="2.6.17.1" />
-        <vers num="2.6.17.10" />
-        <vers num="2.6.17.11" />
-        <vers num="2.6.17.12" />
-        <vers num="2.6.17.13" />
-        <vers num="2.6.17.14" />
-        <vers num="2.6.17.2" />
-        <vers num="2.6.17.3" />
-        <vers num="2.6.17.4" />
-        <vers num="2.6.17.5" />
-        <vers num="2.6.17.6" />
-        <vers num="2.6.17.7" />
-        <vers num="2.6.17.8" />
-        <vers num="2.6.17.9" />
-        <vers num="2.6.18" edition="rc1" />
-        <vers num="2.6.18" edition="rc2" />
-        <vers num="2.6.18" edition="rc3" />
-        <vers num="2.6.18" edition="rc4" />
-        <vers num="2.6.18" edition="rc5" />
-        <vers num="2.6.18" edition="rc6" />
-        <vers num="2.6.18" edition="rc7" />
-        <vers num="2.6.18.1" />
-        <vers num="2.6.18.2" />
-        <vers num="2.6.18.3" />
-        <vers num="2.6.18.4" />
-        <vers num="2.6.18.5" />
-        <vers num="2.6.18.6" />
-        <vers num="2.6.18.7" />
-        <vers num="2.6.18.8" />
-        <vers num="2.6.19" edition="rc1" />
-        <vers num="2.6.19" edition="rc2" />
-        <vers num="2.6.19" edition="rc3" />
-        <vers num="2.6.19" edition="rc4" />
-        <vers num="2.6.19.1" />
-        <vers num="2.6.19.2" />
-        <vers num="2.6.19.3" />
-        <vers num="2.6.19.4" />
-        <vers num="2.6.19.5" />
-        <vers num="2.6.19.6" />
-        <vers num="2.6.19.7" />
-        <vers num="2.6.2" edition="rc1" />
-        <vers num="2.6.2" edition="rc2" />
-        <vers num="2.6.2" edition="rc3" />
-        <vers num="2.6.20" edition="rc2" />
-        <vers num="2.6.20.1" />
-        <vers num="2.6.20.10" />
-        <vers num="2.6.20.11" />
-        <vers num="2.6.20.12" />
-        <vers num="2.6.20.13" />
-        <vers num="2.6.20.14" />
-        <vers num="2.6.20.15" />
-        <vers num="2.6.20.16" />
-        <vers num="2.6.20.17" />
-        <vers num="2.6.20.18" />
-        <vers num="2.6.20.19" />
-        <vers num="2.6.20.2" />
-        <vers num="2.6.20.20" />
-        <vers num="2.6.20.21" />
-        <vers num="2.6.20.3" />
-        <vers num="2.6.20.4" />
-        <vers num="2.6.20.5" />
-        <vers num="2.6.20.6" />
-        <vers num="2.6.20.7" />
-        <vers num="2.6.20.8" />
-        <vers num="2.6.20.9" />
-        <vers num="2.6.21" edition="git1" />
-        <vers num="2.6.21" edition="git2" />
-        <vers num="2.6.21" edition="git3" />
-        <vers num="2.6.21" edition="git4" />
-        <vers num="2.6.21" edition="git5" />
-        <vers num="2.6.21" edition="git6" />
-        <vers num="2.6.21" edition="git7" />
-        <vers num="2.6.21" edition="rc3" />
-        <vers num="2.6.21" edition="rc4" />
-        <vers num="2.6.21" edition="rc5" />
-        <vers num="2.6.21" edition="rc6" />
-        <vers num="2.6.21" edition="rc7" />
-        <vers num="2.6.21.1" />
-        <vers num="2.6.21.2" />
-        <vers num="2.6.21.3" />
-        <vers num="2.6.21.4" />
-        <vers num="2.6.21.5" />
-        <vers num="2.6.21.6" />
-        <vers num="2.6.21.7" />
-        <vers num="2.6.22" />
-        <vers num="2.6.22.1" />
-        <vers num="2.6.22.10" />
-        <vers num="2.6.22.11" />
-        <vers num="2.6.22.12" />
-        <vers num="2.6.22.13" />
-        <vers num="2.6.22.14" />
-        <vers num="2.6.22.15" />
-        <vers num="2.6.22.16" />
-        <vers num="2.6.22.17" />
-        <vers num="2.6.22.18" />
-        <vers num="2.6.22.19" />
-        <vers num="2.6.22.2" />
-        <vers num="2.6.22.20" />
-        <vers num="2.6.22.3" />
-        <vers num="2.6.22.4" />
-        <vers num="2.6.22.5" />
-        <vers num="2.6.22.6" />
-        <vers num="2.6.22.7" />
-        <vers num="2.6.22.8" />
-        <vers num="2.6.27.41" />
-        <vers num="2.6.27.42" />
-        <vers num="2.6.27.43" />
-        <vers num="2.6.27.44" />
-        <vers num="2.6.27.45" />
-        <vers num="2.6.27.46" />
-        <vers num="2.6.27.47" />
-        <vers num="2.6.27.48" />
-        <vers num="2.6.27.49" />
-        <vers num="2.6.27.5" />
-        <vers num="2.6.27.50" />
-        <vers num="2.6.27.51" />
-        <vers num="2.6.27.52" />
-        <vers num="2.6.27.53" />
-        <vers num="2.6.27.54" />
-        <vers num="2.6.27.55" />
-        <vers num="2.6.27.56" />
-        <vers num="2.6.27.57" />
-        <vers num="2.6.27.58" />
-        <vers num="2.6.27.59" />
-        <vers num="2.6.27.6" />
-        <vers num="2.6.27.60" />
-        <vers num="2.6.27.61" />
-        <vers num="2.6.27.62" />
-        <vers num="2.6.27.7" />
-        <vers num="2.6.27.8" />
-        <vers num="2.6.27.9" />
-        <vers num="2.6.28" />
-        <vers num="2.6.28.1" />
-        <vers num="2.6.28.10" />
-        <vers num="2.6.28.2" />
-        <vers num="2.6.28.3" />
-        <vers num="2.6.28.4" />
-        <vers num="2.6.28.5" />
-        <vers num="2.6.28.6" />
-        <vers num="2.6.28.7" />
-        <vers num="2.6.28.8" />
-        <vers num="2.6.28.9" />
-        <vers num="2.6.29" />
-        <vers num="2.6.29.1" />
-        <vers num="2.6.29.2" />
-        <vers num="2.6.29.3" />
-        <vers num="2.6.29.4" />
-        <vers num="2.6.29.5" />
-        <vers num="2.6.29.6" />
-        <vers num="2.6.3" edition="rc1" />
-        <vers num="2.6.3" edition="rc2" />
-        <vers num="2.6.3" edition="rc3" />
-        <vers num="2.6.3" edition="rc4" />
-        <vers num="2.6.32" />
-        <vers num="2.6.32.1" />
-        <vers num="2.6.32.10" />
-        <vers num="2.6.32.11" />
-        <vers num="2.6.32.12" />
-        <vers num="2.6.32.13" />
-        <vers num="2.6.32.14" />
-        <vers num="2.6.32.15" />
-        <vers num="2.6.32.16" />
-        <vers num="2.6.32.17" />
-        <vers num="2.6.32.18" />
-        <vers num="2.6.32.2" />
-        <vers num="2.6.32.28" />
-        <vers num="2.6.32.29" />
-        <vers num="2.6.32.3" />
-        <vers num="2.6.32.30" />
-        <vers num="2.6.32.31" />
-        <vers num="2.6.32.32" />
-        <vers num="2.6.32.33" />
-        <vers num="2.6.32.34" />
-        <vers num="2.6.32.35" />
-        <vers num="2.6.32.36" />
-        <vers num="2.6.32.37" />
-        <vers num="2.6.32.38" />
-        <vers num="2.6.32.39" />
-        <vers num="2.6.32.4" />
-        <vers num="2.6.32.40" />
-        <vers num="2.6.32.41" />
-        <vers num="2.6.32.42" />
-        <vers num="2.6.32.43" />
-        <vers num="2.6.32.44" />
-        <vers num="2.6.32.45" />
-        <vers num="2.6.32.46" />
-        <vers num="2.6.32.47" />
-        <vers num="2.6.32.48" />
-        <vers num="2.6.32.49" />
-        <vers num="2.6.32.5" />
-        <vers num="2.6.32.50" />
-        <vers num="2.6.32.51" />
-        <vers num="2.6.32.52" />
-        <vers num="2.6.32.53" />
-        <vers num="2.6.32.54" />
-        <vers num="2.6.32.55" />
-        <vers num="2.6.32.56" />
-        <vers num="2.6.32.57" />
-        <vers num="2.6.32.58" />
-        <vers num="2.6.32.6" />
-        <vers num="2.6.32.7" />
-        <vers num="2.6.32.8" />
-        <vers num="2.6.32.9" />
-        <vers num="2.6.33.10" />
-        <vers num="2.6.33.11" />
-        <vers num="2.6.33.12" />
-        <vers num="2.6.33.13" />
-        <vers num="2.6.33.14" />
-        <vers num="2.6.33.15" />
-        <vers num="2.6.33.16" />
-        <vers num="2.6.33.17" />
-        <vers num="2.6.33.18" />
-        <vers num="2.6.33.19" />
-        <vers num="2.6.33.20" />
-        <vers num="2.6.33.8" />
-        <vers num="2.6.33.9" />
-        <vers num="2.6.34.1" />
-        <vers num="2.6.34.10" />
-        <vers num="2.6.34.2" />
-        <vers num="2.6.34.3" />
-        <vers num="2.6.34.8" />
-        <vers num="2.6.34.9" />
-        <vers num="2.6.35.1" />
-        <vers num="2.6.35.10" />
-        <vers num="2.6.35.11" />
-        <vers num="2.6.35.12" />
-        <vers num="2.6.35.13" />
-        <vers num="2.6.37" edition="rc1" />
-        <vers num="2.6.37" edition="rc2" />
-        <vers num="2.6.37" edition="rc3" />
-        <vers num="2.6.37" edition="rc4" />
-        <vers num="2.6.37" edition="rc5" />
-        <vers num="2.6.38" edition="rc1" />
-        <vers num="2.6.38" edition="rc2" />
-        <vers num="2.6.38" edition="rc3" />
-        <vers num="2.6.38" edition="rc4" />
-        <vers num="2.6.38" edition="rc5" />
-        <vers num="2.6.38" edition="rc6" />
-        <vers num="2.6.38" edition="rc7" />
-        <vers num="2.6.38" edition="rc8" />
-        <vers num="2.6.39" edition="rc1" />
-        <vers num="2.6.39" edition="rc2" />
-        <vers num="2.6.39" edition="rc3" />
-        <vers num="2.6.39" edition="rc4" />
-        <vers num="2.6.39" edition="rc5" />
-        <vers num="2.6.39" edition="rc6" />
-        <vers num="2.6.39" edition="rc7" />
-        <vers num="2.6.4" edition="rc1" />
-        <vers num="2.6.4" edition="rc2" />
-        <vers num="2.6.4" edition="rc3" />
-        <vers num="2.6.5" edition="rc1" />
-        <vers num="2.6.5" edition="rc2" />
-        <vers num="2.6.5" edition="rc3" />
-        <vers num="2.6.6" edition="rc1" />
-        <vers num="2.6.6" edition="rc2" />
-        <vers num="2.6.6" edition="rc3" />
-        <vers num="2.6.7" edition="rc1" />
-        <vers num="2.6.7" edition="rc2" />
-        <vers num="2.6.7" edition="rc3" />
-        <vers num="2.6.8" edition="rc1" />
-        <vers num="2.6.8" edition="rc2" />
-        <vers num="2.6.8" edition="rc3" />
-        <vers num="2.6.8" edition="rc4" />
-        <vers num="2.6.8.1" />
-        <vers num="2.6.9" edition="rc1" />
-        <vers num="2.6.9" edition="rc2" />
-        <vers num="2.6.9" edition="rc3" />
-        <vers num="2.6.9" edition="rc4" />
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0" edition="rc2" />
-        <vers num="3.0" edition="rc3" />
-        <vers num="3.0" edition="rc4" />
-        <vers num="3.0" edition="rc5" />
-        <vers num="3.0" edition="rc6" />
-        <vers num="3.0" edition="rc7" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.19" />
-        <vers num="3.0.20" />
-        <vers num="3.0.21" />
-        <vers num="3.0.22" />
-        <vers num="3.0.23" />
-        <vers num="3.0.24" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers prev="1" num="3.1.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0045" published="2012-07-03" name="CVE-2012-0045" modified="2012-07-03" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:N/I:N/A:C)" CVSS_score="4.7" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.4" CVSS_base_score="4.7">
-    <desc>
-      <descript source="cve">The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka syscall) opcode, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application, as demonstrated by an NASM file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/c2226fc9e87ba3da060e47333657cd6616652b84" source="CONFIRM" patch="1">https://github.com/torvalds/linux/commit/c2226fc9e87ba3da060e47333657cd6616652b84</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=773370" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=773370</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/12/2" source="MLIST">[oss-security] 20120111 Re: CVE request -- kernel: kvm: syscall instruction induced guest panic</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.14" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.14</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c2226fc9e87ba3da060e47333657cd6616652b84" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c2226fc9e87ba3da060e47333657cd6616652b84</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0" edition="rc2" />
-        <vers num="3.0" edition="rc3" />
-        <vers num="3.0" edition="rc4" />
-        <vers num="3.0" edition="rc5" />
-        <vers num="3.0" edition="rc6" />
-        <vers num="3.0" edition="rc7" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.19" />
-        <vers num="3.0.2" />
-        <vers num="3.0.20" />
-        <vers num="3.0.21" />
-        <vers num="3.0.22" />
-        <vers num="3.0.23" />
-        <vers num="3.0.24" />
-        <vers num="3.0.25" />
-        <vers num="3.0.26" />
-        <vers num="3.0.27" />
-        <vers num="3.0.28" />
-        <vers num="3.0.29" />
-        <vers num="3.0.3" />
-        <vers num="3.0.30" />
-        <vers num="3.0.31" />
-        <vers num="3.0.32" />
-        <vers num="3.0.33" />
-        <vers num="3.0.34" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" edition="rc1" />
-        <vers num="3.1" edition="rc2" />
-        <vers num="3.1" edition="rc3" />
-        <vers num="3.1" edition="rc4" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="3.2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.10" />
-        <vers num="3.2.11" />
-        <vers num="3.2.12" />
-        <vers prev="1" num="3.2.13" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" />
-        <vers num="3.2.8" />
-        <vers num="3.2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0047" published="2012-03-23" name="CVE-2012-0047" modified="2012-03-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the wicket:pageMapName parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://wicket.apache.org/2012/03/22/wicket-cve-2012-0047.html" source="CONFIRM" adv="1">http://wicket.apache.org/2012/03/22/wicket-cve-2012-0047.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="wicket">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.15" />
-        <vers num="1.4.16" />
-        <vers num="1.4.17" />
-        <vers num="1.4.18" />
-        <vers num="1.4.19" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0048" published="2012-08-25" name="CVE-2012-0048" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service (game pause) by connecting to the server and not finishing the (1) authorization phase or (2) map download, aka a "slow read" attack.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://vcs.openttd.org/svn/changeset/23764" source="CONFIRM" patch="1">http://vcs.openttd.org/svn/changeset/23764</ref>
-      <ref url="http://www.tt-forums.net/viewtopic.php?f=33&amp;t=58073&amp;hilit=pause#p989303" source="MISC">http://www.tt-forums.net/viewtopic.php?f=33&amp;t=58073&amp;hilit=pause#p989303</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/13/8" source="MLIST">[oss-security] 20120113 Re: CVE request for OpenTTD</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/07/2" source="MLIST">[oss-security] 20120107 CVE request for OpenTTD</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2524" source="DEBIAN">DSA-2524</ref>
-      <ref url="http://security.openttd.org/en/CVE-2012-0049" source="CONFIRM" adv="1">http://security.openttd.org/en/CVE-2012-0049</ref>
-      <ref url="http://secunia.com/advisories/50137" source="SECUNIA" adv="1">50137</ref>
-      <ref url="http://bugs.openttd.org/task/4955" source="CONFIRM" adv="1">http://bugs.openttd.org/task/4955</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openttd" name="openttd">
-        <vers num="0.3.5" />
-        <vers num="0.3.6" />
-        <vers num="0.3.7" />
-        <vers num="0.4.0" />
-        <vers num="0.4.0.1" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" edition="rc1" />
-        <vers num="0.4.8" edition="rc2" />
-        <vers num="0.5.0" edition="rc1" />
-        <vers num="0.5.0" edition="rc2" />
-        <vers num="0.5.0" edition="rc3" />
-        <vers num="0.5.0" edition="rc4" />
-        <vers num="0.5.0" edition="rc5" />
-        <vers num="0.5.1" edition="rc1" />
-        <vers num="0.5.1" edition="rc2" />
-        <vers num="0.5.1" edition="rc3" />
-        <vers num="0.5.2" edition="rc1" />
-        <vers num="0.5.3" edition="rc1" />
-        <vers num="0.5.3" edition="rc2" />
-        <vers num="0.5.3" edition="rc3" />
-        <vers num="0.6.0" edition="beta1" />
-        <vers num="0.6.0" edition="beta2" />
-        <vers num="0.6.0" edition="beta3" />
-        <vers num="0.6.0" edition="beta4" />
-        <vers num="0.6.0" edition="beta5" />
-        <vers num="0.6.0" edition="rc1" />
-        <vers num="0.6.1" edition="rc1" />
-        <vers num="0.6.1" edition="rc2" />
-        <vers num="0.6.2" edition="rc1" />
-        <vers num="0.6.2" edition="rc2" />
-        <vers num="0.6.2-rc1" />
-        <vers num="0.6.2-rc2" />
-        <vers num="0.6.3" edition="rc1" />
-        <vers num="0.7.0" edition="beta1" />
-        <vers num="0.7.0" edition="beta2" />
-        <vers num="0.7.0" edition="rc1" />
-        <vers num="0.7.0" edition="rc2" />
-        <vers num="0.7.1" edition="rc1" />
-        <vers num="0.7.1" edition="rc2" />
-        <vers num="0.7.1" edition="rc3" />
-        <vers num="0.7.2" edition="rc1" />
-        <vers num="0.7.2" edition="rc2" />
-        <vers num="0.7.3" edition="rc1" />
-        <vers num="0.7.3" edition="rc2" />
-        <vers num="0.7.4" edition="rc1" />
-        <vers num="0.7.5" edition="rc1" />
-        <vers num="1.0.0" edition="beta1" />
-        <vers num="1.0.0" edition="beta2" />
-        <vers num="1.0.0" edition="beta3" />
-        <vers num="1.0.0" edition="beta4" />
-        <vers num="1.0.0" edition="rc1" />
-        <vers num="1.0.0" edition="rc2" />
-        <vers num="1.0.0" edition="rc3" />
-        <vers num="1.0.1" edition="rc1" />
-        <vers num="1.0.1" edition="rc2" />
-        <vers num="1.0.2" edition="rc1" />
-        <vers num="1.0.3" edition="rc1" />
-        <vers num="1.0.4" edition="rc1" />
-        <vers num="1.0.5" edition="rc1" />
-        <vers num="1.0.5" edition="rc2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0050" published="2012-01-19" name="CVE-2012-0050" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service via unspecified vectors.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026548" source="SECTRACK">1026548</ref>
-      <ref url="http://www.securityfocus.com/bid/51563" source="BID">51563</ref>
-      <ref url="http://www.openssl.org/news/secadv_20120118.txt" source="CONFIRM" adv="1">http://www.openssl.org/news/secadv_20120118.txt</ref>
-      <ref url="http://secunia.com/advisories/48528" source="SECUNIA">48528</ref>
-      <ref url="http://secunia.com/advisories/47755" source="SECUNIA">47755</ref>
-      <ref url="http://secunia.com/advisories/47677" source="SECUNIA">47677</ref>
-      <ref url="http://secunia.com/advisories/47631" source="SECUNIA">47631</ref>
-      <ref url="http://osvdb.org/78320" source="OSVDB">78320</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134039053214295&amp;w=2" source="HP">HPSBOV02793</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134039053214295&amp;w=2" source="HP">SSRT100891</ref>
-      <ref url="http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03169289" source="HP">SSRT100747</ref>
-      <ref url="http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03169289" source="HP">HPSBUX02737</ref>
-      <ref url="http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc" source="CONFIRM">http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openssl" name="openssl">
-        <vers num="0.9.8s" />
-        <vers num="1.0.0f" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0053" published="2012-01-27" name="CVE-2012-0053" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://svn.apache.org/viewvc?view=revision&amp;revision=1235454" source="CONFIRM" patch="1">http://svn.apache.org/viewvc?view=revision&amp;revision=1235454</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=785069" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=785069</ref>
-      <ref url="http://www.securityfocus.com/bid/51706" source="BID">51706</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-      <ref url="http://secunia.com/advisories/48551" source="SECUNIA">48551</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0128.html" source="REDHAT">RHSA-2012:0128</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.html" source="SUSE">openSUSE-SU-2012:0314</ref>
-      <ref url="http://httpd.apache.org/security/vulnerabilities_22.html" source="CONFIRM" adv="1">http://httpd.apache.org/security/vulnerabilities_22.html</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">SSRT100877</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">HPSBMU02786</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="http_server">
-        <vers num="2.2" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.10" />
-        <vers num="2.2.11" />
-        <vers num="2.2.12" />
-        <vers num="2.2.13" />
-        <vers num="2.2.14" />
-        <vers num="2.2.15" />
-        <vers num="2.2.16" />
-        <vers num="2.2.17" />
-        <vers num="2.2.18" />
-        <vers num="2.2.19" />
-        <vers num="2.2.2" />
-        <vers num="2.2.20" />
-        <vers num="2.2.21" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" />
-        <vers num="2.2.6" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0054" published="2012-03-19" name="CVE-2012-0054" modified="2012-08-03" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:N/I:P/A:P)" CVSS_score="3.3" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.4" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files, as demonstrated using Admin/changes.dat.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.osvdb.org/78472" source="OSVDB">78472</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/17/7" source="MLIST">[oss-security] 20120117 CVE-request: golismero symlink vulnerability</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/17/10" source="MLIST">[oss-security] 20120117 Re: CVE-request: golismero symlink vulnerability</ref>
-      <ref url="http://code.google.com/p/golismero/source/detail?r=2b3bb43d68676efd687361f7de29380189031ab8" source="MISC">http://code.google.com/p/golismero/source/detail?r=2b3bb43d68676efd687361f7de29380189031ab8</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="golismero" name="golismero">
-        <vers num="0.6.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0056" published="2012-01-27" name="CVE-2012-0056" modified="2012-03-22" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">The mem_write function in Linux kernel 2.6.39 and other versions, when ASLR is disabled, does not properly check permissions when writing to /proc/&lt;pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=782642" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=782642</ref>
-      <ref url="http://www.securityfocus.com/bid/51625" source="BID">51625</ref>
-      <ref url="http://www.redhat.com/support/errata/RHSA-2012-0061.html" source="REDHAT">RHSA-2012:0061</ref>
-      <ref url="http://www.redhat.com/support/errata/RHSA-2012-0052.html" source="REDHAT">RHSA-2012:0052</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/22/4" source="MLIST">[oss-security] 20120122 Re: CVE request: kernel: proc: clean up and fix /proc/&lt;pid>/mem handling</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/19/4" source="MLIST">[oss-security] 20120119 Re: CVE request: kernel: proc: clean up and fix /proc/&lt;pid>/mem handling</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/18/2" source="MLIST">[oss-security] 20120117 Re: CVE request: kernel: proc: clean up and fix /proc/&lt;pid>/mem handling</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/18/1" source="MLIST">[oss-security] 20120118 CVE request: kernel: proc: clean up and fix /proc/&lt;pid>/mem handling</ref>
-      <ref url="http://ubuntu.com/usn/usn-1336-1" source="UBUNTU">USN-1336-1</ref>
-      <ref url="http://secunia.com/advisories/47708" source="SECUNIA" adv="1">47708</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=e268337dfe26dfc7efd422a804dbb27977a3cccc" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=e268337dfe26dfc7efd422a804dbb27977a3cccc</ref>
-      <ref url="http://blog.zx2c4.com/749" source="MISC">http://blog.zx2c4.com/749</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="2.6.39" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0057" published="2012-02-01" name="CVE-2012-0057" modified="2012-07-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugs.php.net/bug.php?id=54446" source="CONFIRM" patch="1" adv="1">https://bugs.php.net/bug.php?id=54446</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72908" source="XF">php-libxslt-security-bypass(72908)</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2399" source="DEBIAN">DSA-2399</ref>
-      <ref url="http://secunia.com/advisories/48668" source="SECUNIA">48668</ref>
-      <ref url="http://php.net/ChangeLog-5.php#5.3.9" source="CONFIRM">http://php.net/ChangeLog-5.php#5.3.9</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/18/3" source="MLIST">[oss-security] 20120117 Re: CVE affected for PHP 5.3.9 ?</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/15/2" source="MLIST">[oss-security] 20120114 Re: CVE affected for PHP 5.3.9 ?</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/15/10" source="MLIST">[oss-security] 20120115 Re: CVE affected for PHP 5.3.9 ?</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/15/1" source="MLIST">[oss-security] 20120115 Re: CVE affected for PHP 5.3.9 ?</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/14/3" source="MLIST">[oss-security] 20120114 Re: CVE affected for PHP 5.3.9 ?</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/14/2" source="MLIST">[oss-security] 20120114 Re: CVE affected for PHP 5.3.9 ?</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/14/1" source="MLIST">[oss-security] 20120113 Re: CVE affected for PHP 5.3.9 ?</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/13/7" source="MLIST">[oss-security] 20120113 Re: CVE affected for PHP 5.3.9 ?</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/13/6" source="MLIST">[oss-security] 20120113 Re: CVE affected for PHP 5.3.9 ?</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/13/5" source="MLIST">[oss-security] 20120113 Re: CVE affected for PHP 5.3.9 ?</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/13/4" source="MLIST">[oss-security] 20120113 CVE affected for PHP 5.3.9 ?</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/13/10" source="MLIST">[oss-security] 20120113 Re: CVE affected for PHP 5.3.9 ?</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html" source="SUSE">openSUSE-SU-2012:0426</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">SSRT100877</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">HPSBMU02786</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="5.0.0" edition="beta1" />
-        <vers num="5.0.0" edition="beta2" />
-        <vers num="5.0.0" edition="beta3" />
-        <vers num="5.0.0" edition="beta4" />
-        <vers num="5.0.0" edition="rc1" />
-        <vers num="5.0.0" edition="rc2" />
-        <vers num="5.0.0" edition="rc3" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.1.0" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers num="5.2.0" />
-        <vers num="5.2.1" />
-        <vers num="5.2.10" />
-        <vers num="5.2.11" />
-        <vers num="5.2.12" />
-        <vers num="5.2.13" />
-        <vers num="5.2.14" />
-        <vers num="5.2.15" />
-        <vers num="5.2.16" />
-        <vers num="5.2.17" />
-        <vers num="5.2.2" />
-        <vers num="5.2.3" />
-        <vers num="5.2.4" />
-        <vers num="5.2.5" />
-        <vers num="5.2.6" />
-        <vers num="5.2.7" />
-        <vers num="5.2.8" />
-        <vers num="5.2.9" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers prev="1" num="5.3.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0058" published="2012-05-17" name="CVE-2012-0058" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">The kiocb_batch_free function in fs/aio.c in the Linux kernel before 3.2.2 allows local users to cause a denial of service (OOPS) via vectors that trigger incorrect iocb management.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/802f43594d6e4d2ac61086d239153c17873a0428" source="CONFIRM">https://github.com/torvalds/linux/commit/802f43594d6e4d2ac61086d239153c17873a0428</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=782696" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=782696</ref>
-      <ref url="http://www.securitytracker.com/id?1027085" source="SECTRACK">1027085</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/18/7" source="MLIST">[oss-security] 20120117 Re: CVE request: kernel: Unused iocbs in a batch should not be accounted as active</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="1.2.0" />
-        <vers num="1.3.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.15" />
-        <vers num="2.0.16" />
-        <vers num="2.0.17" />
-        <vers num="2.0.18" />
-        <vers num="2.0.19" />
-        <vers num="2.0.2" />
-        <vers num="2.0.20" />
-        <vers num="2.0.21" />
-        <vers num="2.0.22" />
-        <vers num="2.0.23" />
-        <vers num="2.0.24" />
-        <vers num="2.0.25" />
-        <vers num="2.0.26" />
-        <vers num="2.0.27" />
-        <vers num="2.0.28" />
-        <vers num="2.0.29" />
-        <vers num="2.0.3" />
-        <vers num="2.0.30" />
-        <vers num="2.0.31" />
-        <vers num="2.0.32" />
-        <vers num="2.0.33" />
-        <vers num="2.0.34" />
-        <vers num="2.0.35" />
-        <vers num="2.0.36" />
-        <vers num="2.0.37" />
-        <vers num="2.0.38" />
-        <vers num="2.0.39" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1.132" />
-        <vers num="2.1.89" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.10" />
-        <vers num="2.2.11" />
-        <vers num="2.2.12" />
-        <vers num="2.2.13" edition="pre15" />
-        <vers num="2.2.14" />
-        <vers num="2.2.15" edition="pre16" />
-        <vers num="2.2.16" edition="pre5" />
-        <vers num="2.2.16" edition="pre6" />
-        <vers num="2.2.17" edition="pre14" />
-        <vers num="2.2.18" />
-        <vers num="2.2.19" />
-        <vers num="2.2.2" />
-        <vers num="2.2.20" />
-        <vers num="2.2.21" edition="pre1" />
-        <vers num="2.2.21" edition="pre2" />
-        <vers num="2.2.21" edition="pre3" />
-        <vers num="2.2.21" edition="pre4" />
-        <vers num="2.2.21" edition="rc1" />
-        <vers num="2.2.21" edition="rc2" />
-        <vers num="2.2.21" edition="rc3" />
-        <vers num="2.2.21" edition="rc4" />
-        <vers num="2.2.22" edition="rc1" />
-        <vers num="2.2.22" edition="rc2" />
-        <vers num="2.2.22" edition="rc3" />
-        <vers num="2.2.23" edition="rc1" />
-        <vers num="2.2.23" edition="rc2" />
-        <vers num="2.2.24" edition="rc2" />
-        <vers num="2.2.24" edition="rc3" />
-        <vers num="2.2.24" edition="rc4" />
-        <vers num="2.2.24" edition="rc5" />
-        <vers num="2.2.25" />
-        <vers num="2.2.26" />
-        <vers num="2.2.27" edition="pre1" />
-        <vers num="2.2.27" edition="pre2" />
-        <vers num="2.2.27" edition="rc1" />
-        <vers num="2.2.27" edition="rc2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" edition="rc1" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.13" />
-        <vers num="2.3.14" />
-        <vers num="2.3.15" />
-        <vers num="2.3.16" />
-        <vers num="2.3.17" />
-        <vers num="2.3.18" />
-        <vers num="2.3.19" />
-        <vers num="2.3.2" />
-        <vers num="2.3.20" />
-        <vers num="2.3.21" />
-        <vers num="2.3.22" />
-        <vers num="2.3.23" />
-        <vers num="2.3.24" />
-        <vers num="2.3.25" />
-        <vers num="2.3.26" />
-        <vers num="2.3.27" />
-        <vers num="2.3.28" />
-        <vers num="2.3.29" />
-        <vers num="2.3.3" />
-        <vers num="2.3.30" />
-        <vers num="2.3.31" />
-        <vers num="2.3.32" />
-        <vers num="2.3.33" />
-        <vers num="2.3.34" />
-        <vers num="2.3.35" />
-        <vers num="2.3.36" />
-        <vers num="2.3.37" />
-        <vers num="2.3.38" />
-        <vers num="2.3.39" />
-        <vers num="2.3.4" />
-        <vers num="2.3.40" />
-        <vers num="2.3.41" />
-        <vers num="2.3.42" />
-        <vers num="2.3.43" />
-        <vers num="2.3.44" />
-        <vers num="2.3.45" />
-        <vers num="2.3.46" />
-        <vers num="2.3.47" />
-        <vers num="2.3.48" />
-        <vers num="2.3.49" />
-        <vers num="2.3.5" />
-        <vers num="2.3.50" />
-        <vers num="2.3.51" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.3.99" edition="pre1" />
-        <vers num="2.3.99" edition="pre2" />
-        <vers num="2.3.99" edition="pre3" />
-        <vers num="2.3.99" edition="pre4" />
-        <vers num="2.3.99" edition="pre5" />
-        <vers num="2.3.99" edition="pre6" />
-        <vers num="2.3.99" edition="pre7" />
-        <vers num="2.3.99" edition="pre8" />
-        <vers num="2.3.99" edition="pre9" />
-        <vers num="2.4.0" edition="test1" />
-        <vers num="2.4.0" edition="test10" />
-        <vers num="2.4.0" edition="test11" />
-        <vers num="2.4.0" edition="test12" />
-        <vers num="2.4.0" edition="test2" />
-        <vers num="2.4.0" edition="test3" />
-        <vers num="2.4.0" edition="test4" />
-        <vers num="2.4.0" edition="test5" />
-        <vers num="2.4.0" edition="test6" />
-        <vers num="2.4.0" edition="test7" />
-        <vers num="2.4.0" edition="test8" />
-        <vers num="2.4.0" edition="test9" />
-        <vers num="2.4.1" />
-        <vers num="2.4.10" />
-        <vers num="2.4.11" edition="pre3" />
-        <vers num="2.4.12" />
-        <vers num="2.4.13" />
-        <vers num="2.4.14" />
-        <vers num="2.4.15" />
-        <vers num="2.4.16" />
-        <vers num="2.4.17" />
-        <vers num="2.4.18" edition="pre1" />
-        <vers num="2.4.18" edition="pre2" />
-        <vers num="2.4.18" edition="pre3" />
-        <vers num="2.4.18" edition="pre4" />
-        <vers num="2.4.18" edition="pre5" />
-        <vers num="2.4.18" edition="pre6" />
-        <vers num="2.4.18" edition="pre7" />
-        <vers num="2.4.18" edition="pre8" />
-        <vers num="2.4.18" edition="pre9" />
-        <vers num="2.4.19" edition="pre1" />
-        <vers num="2.4.19" edition="pre2" />
-        <vers num="2.4.19" edition="pre3" />
-        <vers num="2.4.19" edition="pre4" />
-        <vers num="2.4.19" edition="pre5" />
-        <vers num="2.4.19" edition="pre6" />
-        <vers num="2.4.2" />
-        <vers num="2.4.20" />
-        <vers num="2.4.21" edition="pre1" />
-        <vers num="2.4.21" edition="pre4" />
-        <vers num="2.4.21" edition="pre7" />
-        <vers num="2.4.22" edition="pre10" />
-        <vers num="2.4.23" edition="pre9" />
-        <vers num="2.4.24" />
-        <vers num="2.4.25" />
-        <vers num="2.4.26" />
-        <vers num="2.4.27" edition="pre1" />
-        <vers num="2.4.27" edition="pre2" />
-        <vers num="2.4.27" edition="pre3" />
-        <vers num="2.4.27" edition="pre4" />
-        <vers num="2.4.27" edition="pre5" />
-        <vers num="2.4.28" />
-        <vers num="2.4.29" edition="rc1" />
-        <vers num="2.4.29" edition="rc2" />
-        <vers num="2.4.3" edition="pre3" />
-        <vers num="2.4.30" edition="rc2" />
-        <vers num="2.4.30" edition="rc3" />
-        <vers num="2.4.31" edition="pre1" />
-        <vers num="2.4.32" edition="pre1" />
-        <vers num="2.4.32" edition="pre2" />
-        <vers num="2.4.33" edition="pre1" />
-        <vers num="2.4.33.2" />
-        <vers num="2.4.33.3" />
-        <vers num="2.4.33.4" />
-        <vers num="2.4.33.5" />
-        <vers num="2.4.34" edition="rc3" />
-        <vers num="2.4.34.1" />
-        <vers num="2.4.34.2" />
-        <vers num="2.4.35" />
-        <vers num="2.4.35.2" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers num="2.4.8" />
-        <vers num="2.4.9" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.10" />
-        <vers num="2.5.11" />
-        <vers num="2.5.12" />
-        <vers num="2.5.13" />
-        <vers num="2.5.14" />
-        <vers num="2.5.15" />
-        <vers num="2.5.16" />
-        <vers num="2.5.17" />
-        <vers num="2.5.18" />
-        <vers num="2.5.19" />
-        <vers num="2.5.2" />
-        <vers num="2.5.20" />
-        <vers num="2.5.21" />
-        <vers num="2.5.22" />
-        <vers num="2.5.23" />
-        <vers num="2.5.24" />
-        <vers num="2.5.25" />
-        <vers num="2.5.26" />
-        <vers num="2.5.27" />
-        <vers num="2.5.28" />
-        <vers num="2.5.29" />
-        <vers num="2.5.3" />
-        <vers num="2.5.30" />
-        <vers num="2.5.31" />
-        <vers num="2.5.32" />
-        <vers num="2.5.33" />
-        <vers num="2.5.34" />
-        <vers num="2.5.35" />
-        <vers num="2.5.36" />
-        <vers num="2.5.37" />
-        <vers num="2.5.38" />
-        <vers num="2.5.39" />
-        <vers num="2.5.4" />
-        <vers num="2.5.40" />
-        <vers num="2.5.41" />
-        <vers num="2.5.42" />
-        <vers num="2.5.43" />
-        <vers num="2.5.44" />
-        <vers num="2.5.45" />
-        <vers num="2.5.46" />
-        <vers num="2.5.47" />
-        <vers num="2.5.48" />
-        <vers num="2.5.49" />
-        <vers num="2.5.5" />
-        <vers num="2.5.50" />
-        <vers num="2.5.51" />
-        <vers num="2.5.52" />
-        <vers num="2.5.53" />
-        <vers num="2.5.54" />
-        <vers num="2.5.55" />
-        <vers num="2.5.56" />
-        <vers num="2.5.57" />
-        <vers num="2.5.58" />
-        <vers num="2.5.59" />
-        <vers num="2.5.6" />
-        <vers num="2.5.60" />
-        <vers num="2.5.61" />
-        <vers num="2.5.62" />
-        <vers num="2.5.63" />
-        <vers num="2.5.64" />
-        <vers num="2.5.65" />
-        <vers num="2.5.66" />
-        <vers num="2.5.67" />
-        <vers num="2.5.68" />
-        <vers num="2.5.69" />
-        <vers num="2.5.7" />
-        <vers num="2.5.8" />
-        <vers num="2.5.9" />
-        <vers num="2.6.0" edition="test1" />
-        <vers num="2.6.0" edition="test10" />
-        <vers num="2.6.0" edition="test11" />
-        <vers num="2.6.0" edition="test2" />
-        <vers num="2.6.0" edition="test3" />
-        <vers num="2.6.0" edition="test4" />
-        <vers num="2.6.0" edition="test5" />
-        <vers num="2.6.0" edition="test6" />
-        <vers num="2.6.0" edition="test7" />
-        <vers num="2.6.0" edition="test8" />
-        <vers num="2.6.0" edition="test9" />
-        <vers num="2.6.1" edition="rc1" />
-        <vers num="2.6.1" edition="rc2" />
-        <vers num="2.6.1" edition="rc3" />
-        <vers num="2.6.10" edition="rc1" />
-        <vers num="2.6.10" edition="rc2" />
-        <vers num="2.6.10" edition="rc3" />
-        <vers num="2.6.11" edition="rc1" />
-        <vers num="2.6.11" edition="rc2" />
-        <vers num="2.6.11" edition="rc3" />
-        <vers num="2.6.11" edition="rc4" />
-        <vers num="2.6.11" edition="rc5" />
-        <vers num="2.6.11.1" />
-        <vers num="2.6.11.10" />
-        <vers num="2.6.11.11" />
-        <vers num="2.6.11.12" />
-        <vers num="2.6.11.2" />
-        <vers num="2.6.11.3" />
-        <vers num="2.6.11.4" />
-        <vers num="2.6.11.5" />
-        <vers num="2.6.11.6" />
-        <vers num="2.6.11.7" />
-        <vers num="2.6.11.8" />
-        <vers num="2.6.11.9" />
-        <vers num="2.6.12" edition="rc1" />
-        <vers num="2.6.12" edition="rc2" />
-        <vers num="2.6.12" edition="rc3" />
-        <vers num="2.6.12" edition="rc4" />
-        <vers num="2.6.12" edition="rc5" />
-        <vers num="2.6.12" edition="rc6" />
-        <vers num="2.6.12.1" />
-        <vers num="2.6.12.2" />
-        <vers num="2.6.12.3" />
-        <vers num="2.6.12.4" />
-        <vers num="2.6.12.5" />
-        <vers num="2.6.12.6" />
-        <vers num="2.6.13" edition="rc1" />
-        <vers num="2.6.13" edition="rc2" />
-        <vers num="2.6.13" edition="rc3" />
-        <vers num="2.6.13" edition="rc4" />
-        <vers num="2.6.13" edition="rc5" />
-        <vers num="2.6.13" edition="rc6" />
-        <vers num="2.6.13" edition="rc7" />
-        <vers num="2.6.13.1" />
-        <vers num="2.6.13.2" />
-        <vers num="2.6.13.3" />
-        <vers num="2.6.13.4" />
-        <vers num="2.6.13.5" />
-        <vers num="2.6.14" edition="rc1" />
-        <vers num="2.6.14" edition="rc2" />
-        <vers num="2.6.14" edition="rc3" />
-        <vers num="2.6.14" edition="rc4" />
-        <vers num="2.6.14" edition="rc5" />
-        <vers num="2.6.14.1" />
-        <vers num="2.6.14.2" />
-        <vers num="2.6.14.3" />
-        <vers num="2.6.14.4" />
-        <vers num="2.6.14.5" />
-        <vers num="2.6.14.6" />
-        <vers num="2.6.14.7" />
-        <vers num="2.6.15" edition="rc1" />
-        <vers num="2.6.15" edition="rc2" />
-        <vers num="2.6.15" edition="rc3" />
-        <vers num="2.6.15" edition="rc4" />
-        <vers num="2.6.15" edition="rc5" />
-        <vers num="2.6.15" edition="rc6" />
-        <vers num="2.6.15" edition="rc7" />
-        <vers num="2.6.15.1" />
-        <vers num="2.6.15.10" />
-        <vers num="2.6.15.11" />
-        <vers num="2.6.15.2" />
-        <vers num="2.6.15.3" />
-        <vers num="2.6.15.4" />
-        <vers num="2.6.15.5" />
-        <vers num="2.6.15.6" />
-        <vers num="2.6.15.7" />
-        <vers num="2.6.15.8" />
-        <vers num="2.6.15.9" />
-        <vers num="2.6.16" edition="rc1" />
-        <vers num="2.6.16" edition="rc2" />
-        <vers num="2.6.16" edition="rc3" />
-        <vers num="2.6.16" edition="rc4" />
-        <vers num="2.6.16" edition="rc5" />
-        <vers num="2.6.16" edition="rc6" />
-        <vers num="2.6.16" edition="rc7" />
-        <vers num="2.6.16.1" />
-        <vers num="2.6.16.10" />
-        <vers num="2.6.16.11" />
-        <vers num="2.6.16.12" />
-        <vers num="2.6.16.13" />
-        <vers num="2.6.16.14" />
-        <vers num="2.6.16.15" />
-        <vers num="2.6.16.16" />
-        <vers num="2.6.16.17" />
-        <vers num="2.6.16.18" />
-        <vers num="2.6.16.19" />
-        <vers num="2.6.16.2" />
-        <vers num="2.6.16.20" />
-        <vers num="2.6.16.21" />
-        <vers num="2.6.16.22" />
-        <vers num="2.6.16.23" />
-        <vers num="2.6.16.24" />
-        <vers num="2.6.16.25" />
-        <vers num="2.6.16.26" />
-        <vers num="2.6.16.27" />
-        <vers num="2.6.16.28" />
-        <vers num="2.6.16.29" />
-        <vers num="2.6.16.3" />
-        <vers num="2.6.16.30" />
-        <vers num="2.6.16.31" />
-        <vers num="2.6.16.32" />
-        <vers num="2.6.16.33" />
-        <vers num="2.6.16.34" />
-        <vers num="2.6.16.35" />
-        <vers num="2.6.16.36" />
-        <vers num="2.6.16.37" />
-        <vers num="2.6.16.38" />
-        <vers num="2.6.16.39" />
-        <vers num="2.6.16.4" />
-        <vers num="2.6.16.40" />
-        <vers num="2.6.16.41" />
-        <vers num="2.6.16.42" />
-        <vers num="2.6.16.43" />
-        <vers num="2.6.16.44" />
-        <vers num="2.6.16.45" />
-        <vers num="2.6.16.46" />
-        <vers num="2.6.16.47" />
-        <vers num="2.6.16.48" />
-        <vers num="2.6.16.49" />
-        <vers num="2.6.16.5" />
-        <vers num="2.6.16.50" />
-        <vers num="2.6.16.51" />
-        <vers num="2.6.16.52" />
-        <vers num="2.6.16.53" />
-        <vers num="2.6.16.54" />
-        <vers num="2.6.16.55" />
-        <vers num="2.6.16.56" />
-        <vers num="2.6.16.57" />
-        <vers num="2.6.16.58" />
-        <vers num="2.6.16.59" />
-        <vers num="2.6.16.6" />
-        <vers num="2.6.16.60" />
-        <vers num="2.6.16.61" />
-        <vers num="2.6.16.62" />
-        <vers num="2.6.16.7" />
-        <vers num="2.6.16.8" />
-        <vers num="2.6.16.9" />
-        <vers num="2.6.17" edition="rc1" />
-        <vers num="2.6.17" edition="rc2" />
-        <vers num="2.6.17" edition="rc3" />
-        <vers num="2.6.17" edition="rc4" />
-        <vers num="2.6.17" edition="rc5" />
-        <vers num="2.6.17" edition="rc6" />
-        <vers num="2.6.17.1" />
-        <vers num="2.6.17.10" />
-        <vers num="2.6.17.11" />
-        <vers num="2.6.17.12" />
-        <vers num="2.6.17.13" />
-        <vers num="2.6.17.14" />
-        <vers num="2.6.17.2" />
-        <vers num="2.6.17.3" />
-        <vers num="2.6.17.4" />
-        <vers num="2.6.17.5" />
-        <vers num="2.6.17.6" />
-        <vers num="2.6.17.7" />
-        <vers num="2.6.17.8" />
-        <vers num="2.6.17.9" />
-        <vers num="2.6.18" edition="rc1" />
-        <vers num="2.6.18" edition="rc2" />
-        <vers num="2.6.18" edition="rc3" />
-        <vers num="2.6.18" edition="rc4" />
-        <vers num="2.6.18" edition="rc5" />
-        <vers num="2.6.18" edition="rc6" />
-        <vers num="2.6.18" edition="rc7" />
-        <vers num="2.6.18.1" />
-        <vers num="2.6.18.2" />
-        <vers num="2.6.18.3" />
-        <vers num="2.6.18.4" />
-        <vers num="2.6.18.5" />
-        <vers num="2.6.18.6" />
-        <vers num="2.6.18.7" />
-        <vers num="2.6.18.8" />
-        <vers num="2.6.19" edition="rc1" />
-        <vers num="2.6.19" edition="rc2" />
-        <vers num="2.6.19" edition="rc3" />
-        <vers num="2.6.19" edition="rc4" />
-        <vers num="2.6.19.1" />
-        <vers num="2.6.19.2" />
-        <vers num="2.6.19.3" />
-        <vers num="2.6.19.4" />
-        <vers num="2.6.19.5" />
-        <vers num="2.6.19.6" />
-        <vers num="2.6.19.7" />
-        <vers num="2.6.2" edition="rc1" />
-        <vers num="2.6.2" edition="rc2" />
-        <vers num="2.6.2" edition="rc3" />
-        <vers num="2.6.20" edition="rc2" />
-        <vers num="2.6.20.1" />
-        <vers num="2.6.20.10" />
-        <vers num="2.6.20.11" />
-        <vers num="2.6.20.12" />
-        <vers num="2.6.20.13" />
-        <vers num="2.6.20.14" />
-        <vers num="2.6.20.15" />
-        <vers num="2.6.20.16" />
-        <vers num="2.6.20.17" />
-        <vers num="2.6.20.18" />
-        <vers num="2.6.20.19" />
-        <vers num="2.6.20.2" />
-        <vers num="2.6.20.20" />
-        <vers num="2.6.20.21" />
-        <vers num="2.6.20.3" />
-        <vers num="2.6.20.4" />
-        <vers num="2.6.20.5" />
-        <vers num="2.6.20.6" />
-        <vers num="2.6.20.7" />
-        <vers num="2.6.20.8" />
-        <vers num="2.6.20.9" />
-        <vers num="2.6.21" edition="git1" />
-        <vers num="2.6.21" edition="git2" />
-        <vers num="2.6.21" edition="git3" />
-        <vers num="2.6.21" edition="git4" />
-        <vers num="2.6.21" edition="git5" />
-        <vers num="2.6.21" edition="git6" />
-        <vers num="2.6.21" edition="git7" />
-        <vers num="2.6.21" edition="rc3" />
-        <vers num="2.6.21" edition="rc4" />
-        <vers num="2.6.21" edition="rc5" />
-        <vers num="2.6.21" edition="rc6" />
-        <vers num="2.6.21" edition="rc7" />
-        <vers num="2.6.21.1" />
-        <vers num="2.6.21.2" />
-        <vers num="2.6.21.3" />
-        <vers num="2.6.21.4" />
-        <vers num="2.6.21.5" />
-        <vers num="2.6.21.6" />
-        <vers num="2.6.21.7" />
-        <vers num="2.6.22" />
-        <vers num="2.6.22.1" />
-        <vers num="2.6.22.10" />
-        <vers num="2.6.22.11" />
-        <vers num="2.6.22.12" />
-        <vers num="2.6.22.13" />
-        <vers num="2.6.22.14" />
-        <vers num="2.6.22.15" />
-        <vers num="2.6.22.16" />
-        <vers num="2.6.22.17" />
-        <vers num="2.6.22.18" />
-        <vers num="2.6.22.19" />
-        <vers num="2.6.22.2" />
-        <vers num="2.6.22.20" />
-        <vers num="2.6.22.3" />
-        <vers num="2.6.22.4" />
-        <vers num="2.6.22.5" />
-        <vers num="2.6.22.6" />
-        <vers num="2.6.22.7" />
-        <vers num="2.6.22.8" />
-        <vers num="2.6.27.41" />
-        <vers num="2.6.27.42" />
-        <vers num="2.6.27.43" />
-        <vers num="2.6.27.44" />
-        <vers num="2.6.27.45" />
-        <vers num="2.6.27.46" />
-        <vers num="2.6.27.47" />
-        <vers num="2.6.27.48" />
-        <vers num="2.6.27.49" />
-        <vers num="2.6.27.5" />
-        <vers num="2.6.27.50" />
-        <vers num="2.6.27.51" />
-        <vers num="2.6.27.52" />
-        <vers num="2.6.27.53" />
-        <vers num="2.6.27.54" />
-        <vers num="2.6.27.55" />
-        <vers num="2.6.27.56" />
-        <vers num="2.6.27.57" />
-        <vers num="2.6.27.58" />
-        <vers num="2.6.27.59" />
-        <vers num="2.6.27.6" />
-        <vers num="2.6.27.60" />
-        <vers num="2.6.27.61" />
-        <vers num="2.6.27.62" />
-        <vers num="2.6.27.7" />
-        <vers num="2.6.27.8" />
-        <vers num="2.6.27.9" />
-        <vers num="2.6.28" />
-        <vers num="2.6.28.1" />
-        <vers num="2.6.28.10" />
-        <vers num="2.6.28.2" />
-        <vers num="2.6.28.3" />
-        <vers num="2.6.28.4" />
-        <vers num="2.6.28.5" />
-        <vers num="2.6.28.6" />
-        <vers num="2.6.28.7" />
-        <vers num="2.6.28.8" />
-        <vers num="2.6.28.9" />
-        <vers num="2.6.29" />
-        <vers num="2.6.29.1" />
-        <vers num="2.6.29.2" />
-        <vers num="2.6.29.3" />
-        <vers num="2.6.29.4" />
-        <vers num="2.6.29.5" />
-        <vers num="2.6.29.6" />
-        <vers num="2.6.3" edition="rc1" />
-        <vers num="2.6.3" edition="rc2" />
-        <vers num="2.6.3" edition="rc3" />
-        <vers num="2.6.3" edition="rc4" />
-        <vers num="2.6.32" />
-        <vers num="2.6.32.1" />
-        <vers num="2.6.32.10" />
-        <vers num="2.6.32.11" />
-        <vers num="2.6.32.12" />
-        <vers num="2.6.32.13" />
-        <vers num="2.6.32.14" />
-        <vers num="2.6.32.15" />
-        <vers num="2.6.32.16" />
-        <vers num="2.6.32.17" />
-        <vers num="2.6.32.18" />
-        <vers num="2.6.32.2" />
-        <vers num="2.6.32.28" />
-        <vers num="2.6.32.29" />
-        <vers num="2.6.32.3" />
-        <vers num="2.6.32.30" />
-        <vers num="2.6.32.31" />
-        <vers num="2.6.32.32" />
-        <vers num="2.6.32.33" />
-        <vers num="2.6.32.34" />
-        <vers num="2.6.32.35" />
-        <vers num="2.6.32.36" />
-        <vers num="2.6.32.37" />
-        <vers num="2.6.32.38" />
-        <vers num="2.6.32.39" />
-        <vers num="2.6.32.4" />
-        <vers num="2.6.32.40" />
-        <vers num="2.6.32.41" />
-        <vers num="2.6.32.42" />
-        <vers num="2.6.32.43" />
-        <vers num="2.6.32.44" />
-        <vers num="2.6.32.45" />
-        <vers num="2.6.32.46" />
-        <vers num="2.6.32.47" />
-        <vers num="2.6.32.48" />
-        <vers num="2.6.32.49" />
-        <vers num="2.6.32.5" />
-        <vers num="2.6.32.50" />
-        <vers num="2.6.32.51" />
-        <vers num="2.6.32.52" />
-        <vers num="2.6.32.53" />
-        <vers num="2.6.32.54" />
-        <vers num="2.6.32.55" />
-        <vers num="2.6.32.56" />
-        <vers num="2.6.32.57" />
-        <vers num="2.6.32.58" />
-        <vers num="2.6.32.6" />
-        <vers num="2.6.32.7" />
-        <vers num="2.6.32.8" />
-        <vers num="2.6.32.9" />
-        <vers num="2.6.33.10" />
-        <vers num="2.6.33.11" />
-        <vers num="2.6.33.12" />
-        <vers num="2.6.33.13" />
-        <vers num="2.6.33.14" />
-        <vers num="2.6.33.15" />
-        <vers num="2.6.33.16" />
-        <vers num="2.6.33.17" />
-        <vers num="2.6.33.18" />
-        <vers num="2.6.33.19" />
-        <vers num="2.6.33.20" />
-        <vers num="2.6.33.8" />
-        <vers num="2.6.33.9" />
-        <vers num="2.6.34.1" />
-        <vers num="2.6.34.10" />
-        <vers num="2.6.34.2" />
-        <vers num="2.6.34.3" />
-        <vers num="2.6.34.8" />
-        <vers num="2.6.34.9" />
-        <vers num="2.6.35.1" />
-        <vers num="2.6.35.10" />
-        <vers num="2.6.35.11" />
-        <vers num="2.6.35.12" />
-        <vers num="2.6.35.13" />
-        <vers num="2.6.37" edition="rc1" />
-        <vers num="2.6.37" edition="rc2" />
-        <vers num="2.6.37" edition="rc3" />
-        <vers num="2.6.37" edition="rc4" />
-        <vers num="2.6.37" edition="rc5" />
-        <vers num="2.6.38" edition="rc1" />
-        <vers num="2.6.38" edition="rc2" />
-        <vers num="2.6.38" edition="rc3" />
-        <vers num="2.6.38" edition="rc4" />
-        <vers num="2.6.38" edition="rc5" />
-        <vers num="2.6.38" edition="rc6" />
-        <vers num="2.6.38" edition="rc7" />
-        <vers num="2.6.38" edition="rc8" />
-        <vers num="2.6.39" edition="rc1" />
-        <vers num="2.6.39" edition="rc2" />
-        <vers num="2.6.39" edition="rc3" />
-        <vers num="2.6.39" edition="rc4" />
-        <vers num="2.6.39" edition="rc5" />
-        <vers num="2.6.39" edition="rc6" />
-        <vers num="2.6.39" edition="rc7" />
-        <vers num="2.6.4" edition="rc1" />
-        <vers num="2.6.4" edition="rc2" />
-        <vers num="2.6.4" edition="rc3" />
-        <vers num="2.6.5" edition="rc1" />
-        <vers num="2.6.5" edition="rc2" />
-        <vers num="2.6.5" edition="rc3" />
-        <vers num="2.6.6" edition="rc1" />
-        <vers num="2.6.6" edition="rc2" />
-        <vers num="2.6.6" edition="rc3" />
-        <vers num="2.6.7" edition="rc1" />
-        <vers num="2.6.7" edition="rc2" />
-        <vers num="2.6.7" edition="rc3" />
-        <vers num="2.6.8" edition="rc1" />
-        <vers num="2.6.8" edition="rc2" />
-        <vers num="2.6.8" edition="rc3" />
-        <vers num="2.6.8" edition="rc4" />
-        <vers num="2.6.8.1" />
-        <vers num="2.6.9" edition="rc1" />
-        <vers num="2.6.9" edition="rc2" />
-        <vers num="2.6.9" edition="rc3" />
-        <vers num="2.6.9" edition="rc4" />
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0" edition="rc2" />
-        <vers num="3.0" edition="rc3" />
-        <vers num="3.0" edition="rc4" />
-        <vers num="3.0" edition="rc5" />
-        <vers num="3.0" edition="rc6" />
-        <vers num="3.0" edition="rc7" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.19" />
-        <vers num="3.0.20" />
-        <vers num="3.0.21" />
-        <vers num="3.0.22" />
-        <vers num="3.0.23" />
-        <vers num="3.0.24" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.2" edition="rc2" />
-        <vers num="3.2" edition="rc3" />
-        <vers num="3.2" edition="rc4" />
-        <vers num="3.2" edition="rc5" />
-        <vers num="3.2" edition="rc6" />
-        <vers num="3.2" edition="rc7" />
-        <vers prev="1" num="3.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0060" published="2012-06-04" name="CVE-2012-0060" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/14441362" source="SUSE">openSUSE-SU-2012:0589</ref>
-      <ref url="https://hermes.opensuse.org/messages/14440932" source="SUSE">openSUSE-SU-2012:0588</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=744858" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=744858</ref>
-      <ref url="http://www.securityfocus.com/bid/52865" source="BID">52865</ref>
-      <ref url="http://www.osvdb.org/81010" source="OSVDB">81010</ref>
-      <ref url="http://secunia.com/advisories/49110" source="SECUNIA" adv="1">49110</ref>
-      <ref url="http://secunia.com/advisories/48716" source="SECUNIA" adv="1">48716</ref>
-      <ref url="http://secunia.com/advisories/48651" source="SECUNIA" adv="1">48651</ref>
-      <ref url="http://rpm.org/wiki/Releases/4.9.1.3" source="CONFIRM">http://rpm.org/wiki/Releases/4.9.1.3</ref>
-      <ref url="http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=f23998251992b8ae25faf5113c42fee2c49c7f29" source="CONFIRM">http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=f23998251992b8ae25faf5113c42fee2c49c7f29</ref>
-      <ref url="http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=e4eab2bc6d07cfd33f740071de7ddbb2fe2f4190" source="CONFIRM">http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=e4eab2bc6d07cfd33f740071de7ddbb2fe2f4190</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0451.html" source="REDHAT">RHSA-2012:0451</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html" source="FEDORA">FEDORA-2012-5421</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html" source="FEDORA">FEDORA-2012-5420</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html" source="FEDORA">FEDORA-2012-5298</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rpm" name="rpm">
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="1.3.1" />
-        <vers num="1.4" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.4.2/a" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.10" />
-        <vers num="2.2.11" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.3.10" />
-        <vers num="2.2.3.11" />
-        <vers num="2.2.4" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.1" />
-        <vers num="2.4.11" />
-        <vers num="2.4.12" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.8" />
-        <vers num="2.4.9" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-        <vers num="2.5.4" />
-        <vers num="2.5.5" />
-        <vers num="2.5.6" />
-        <vers num="2.6.7" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="4.0." />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.1" />
-        <vers num="4.3.3" />
-        <vers num="4.4.2.1" />
-        <vers num="4.4.2.2" />
-        <vers num="4.4.2.3" />
-        <vers num="4.5.90" />
-        <vers num="4.6.0" edition="rc1" />
-        <vers num="4.6.0" edition="rc2" />
-        <vers num="4.6.0" edition="rc3" />
-        <vers num="4.6.0" edition="rc4" />
-        <vers num="4.6.1" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.8.1" />
-        <vers num="4.9.0" edition="alpha" />
-        <vers num="4.9.0" edition="beta1" />
-        <vers num="4.9.0" edition="rc1" />
-        <vers num="4.9.1" />
-        <vers num="4.9.1.1" />
-        <vers prev="1" num="4.9.1.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0061" published="2012-06-04" name="CVE-2012-0061" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=858a328cd0f7d4bcd8500c78faaf00e4f8033df6" source="CONFIRM" patch="1">http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=858a328cd0f7d4bcd8500c78faaf00e4f8033df6</ref>
-      <ref url="http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=472e569562d4c90d7a298080e0052856aa7fa86b" source="CONFIRM" patch="1">http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=472e569562d4c90d7a298080e0052856aa7fa86b</ref>
-      <ref url="https://hermes.opensuse.org/messages/14441362" source="SUSE">openSUSE-SU-2012:0589</ref>
-      <ref url="https://hermes.opensuse.org/messages/14440932" source="SUSE">openSUSE-SU-2012:0588</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=798585" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=798585</ref>
-      <ref url="http://www.securityfocus.com/bid/52865" source="BID">52865</ref>
-      <ref url="http://www.osvdb.org/81010" source="OSVDB">81010</ref>
-      <ref url="http://secunia.com/advisories/49110" source="SECUNIA" adv="1">49110</ref>
-      <ref url="http://secunia.com/advisories/48716" source="SECUNIA" adv="1">48716</ref>
-      <ref url="http://secunia.com/advisories/48651" source="SECUNIA" adv="1">48651</ref>
-      <ref url="http://rpm.org/wiki/Releases/4.9.1.3" source="CONFIRM">http://rpm.org/wiki/Releases/4.9.1.3</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0451.html" source="REDHAT">RHSA-2012:0451</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html" source="FEDORA">FEDORA-2012-5421</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html" source="FEDORA">FEDORA-2012-5420</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html" source="FEDORA">FEDORA-2012-5298</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rpm" name="rpm">
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="1.3.1" />
-        <vers num="1.4" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.4.2/a" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.10" />
-        <vers num="2.2.11" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.3.10" />
-        <vers num="2.2.3.11" />
-        <vers num="2.2.4" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.1" />
-        <vers num="2.4.11" />
-        <vers num="2.4.12" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.8" />
-        <vers num="2.4.9" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-        <vers num="2.5.4" />
-        <vers num="2.5.5" />
-        <vers num="2.5.6" />
-        <vers num="2.6.7" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="4.0." />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.1" />
-        <vers num="4.3.3" />
-        <vers num="4.4.2.1" />
-        <vers num="4.4.2.2" />
-        <vers num="4.4.2.3" />
-        <vers num="4.5.90" />
-        <vers num="4.6.0" edition="rc1" />
-        <vers num="4.6.0" edition="rc2" />
-        <vers num="4.6.0" edition="rc3" />
-        <vers num="4.6.0" edition="rc4" />
-        <vers num="4.6.1" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.8.1" />
-        <vers num="4.9.0" edition="alpha" />
-        <vers num="4.9.0" edition="beta1" />
-        <vers num="4.9.0" edition="rc1" />
-        <vers num="4.9.1" />
-        <vers num="4.9.1.1" />
-        <vers prev="1" num="4.9.1.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0066" published="2012-04-11" name="CVE-2012-0066" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a (1) Accellent 5Views (aka .5vw) file, (2) I4B trace file, or (3) NETMON 2 capture file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/20/4" source="MLIST" patch="1">[oss-security] 20120119 Re: CVE request: Wireshark multiple vulnerabilities</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40166" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40166</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40165" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40165</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6669" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6669</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6667" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6667</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6666" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6666</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-01.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-01.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/11/7" source="MLIST">[oss-security] 20120111 Re: CVE request: Wireshark multiple vulnerabilities</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15111" source="OVAL">oval:org.mitre.oval:def:15111</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0067" published="2012-04-11" name="CVE-2012-0067" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in an AIX iptrace file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6668" source="CONFIRM" patch="1">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6668</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40167" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40167</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-01.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-01.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/20/4" source="MLIST">[oss-security] 20120119 Re: CVE request: Wireshark multiple vulnerabilities</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/11/7" source="MLIST">[oss-security] 20120111 Re: CVE request: Wireshark multiple vulnerabilities</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15192" source="OVAL">oval:org.mitre.oval:def:15192</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0068" published="2012-04-11" name="CVE-2012-0068" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The lanalyzer_read function in wiretap/lanalyzer.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a Novell catpure file containing a record that is too small.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6670" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6670</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-01.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-01.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/20/4" source="MLIST">[oss-security] 20120119 Re: CVE request: Wireshark multiple vulnerabilities</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/11/7" source="MLIST">[oss-security] 20120111 Re: CVE request: Wireshark multiple vulnerabilities</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15379" source="OVAL">oval:org.mitre.oval:def:15379</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40169" source="CONFIRM">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40169</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0069" published="2012-01-24" name="CVE-2012-0069" modified="2012-01-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72449" source="XF">batavi-ajax-sql-injection(72449)</ref>
-      <ref url="http://www.securityfocus.com/bid/51547" source="BID">51547</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/20/6" source="MLIST">[oss-security] 20120119 Re: CVE request - Batavi 1.2.1 Fixes Blind SQL Injection</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/18/9" source="MLIST">[oss-security] 20120118 CVE request - Batavi 1.2.1 Fixes Blind SQL Injection vulnerability in boxToReload parameter of ajax.php</ref>
-      <ref url="http://voxel.dl.sourceforge.net/project/batavi/README.txt" source="CONFIRM">http://voxel.dl.sourceforge.net/project/batavi/README.txt</ref>
-      <ref url="http://secunia.com/advisories/47582" source="SECUNIA" adv="1">47582</ref>
-      <ref url="http://osvdb.org/78362" source="OSVDB">78362</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="batavi" name="batavi">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.4" />
-        <vers prev="1" num="1.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0072" published="2012-01-18" name="CVE-2012-0072" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Listener component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2 allows remote attackers to affect availability via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72469" source="XF">databaseserver-listener-dos(72469)</ref>
-      <ref url="http://www.securitytracker.com/id?1026527" source="SECTRACK">1026527</ref>
-      <ref url="http://www.securityfocus.com/bid/51458" source="BID">51458</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78419" source="OSVDB">78419</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="10.1.0.5" />
-        <vers num="10.2.0.3" />
-        <vers num="10.2.0.4" />
-        <vers num="10.2.0.5" />
-        <vers num="11.1.0.7" />
-        <vers num="11.2.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0073" published="2012-01-18" name="CVE-2012-0073" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Forms component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72478" source="XF">ebusiness-forms-cve20120073(72478)</ref>
-      <ref url="http://www.securityfocus.com/bid/51473" source="BID">51473</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78439" source="OSVDB">78439</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="e-business_suite">
-        <vers num="11.5.10.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0074" published="2012-01-18" name="CVE-2012-0074" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect integrity via unknown vectors related to Sales.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72482" source="XF">peoplesoft-enterprisecrm-cve20120074(72482)</ref>
-      <ref url="http://www.securityfocus.com/bid/51472" source="BID">51472</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://secunia.com/advisories/47621" source="SECUNIA">47621</ref>
-      <ref url="http://osvdb.org/78441" source="OSVDB">78441</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="8.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0075" published="2012-01-18" name="CVE-2012-0075" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:M/C:N/I:P/A:N)" CVSS_score="1.7" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.2" CVSS_base_score="1.7">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect integrity via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72539" source="XF">mysql-server-cve20120075(72539)</ref>
-      <ref url="http://www.securityfocus.com/bid/51526" source="BID">51526</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78374" source="OSVDB">78374</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.0" />
-        <vers num="5.0.0" edition="alpha" />
-        <vers num="5.0.0.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.10" />
-        <vers num="5.0.10a" />
-        <vers num="5.0.11" />
-        <vers num="5.0.12" />
-        <vers num="5.0.13" />
-        <vers num="5.0.14" />
-        <vers num="5.0.15" />
-        <vers num="5.0.15a" />
-        <vers num="5.0.16" />
-        <vers num="5.0.16a" />
-        <vers num="5.0.17" />
-        <vers num="5.0.17a" />
-        <vers num="5.0.18" />
-        <vers num="5.0.19" />
-        <vers num="5.0.1a" />
-        <vers num="5.0.2" />
-        <vers num="5.0.20" />
-        <vers num="5.0.20a" />
-        <vers num="5.0.21" />
-        <vers num="5.0.22" />
-        <vers num="5.0.22.1.0.1" />
-        <vers num="5.0.23" />
-        <vers num="5.0.24" />
-        <vers num="5.0.24a" />
-        <vers num="5.0.25" />
-        <vers num="5.0.26" />
-        <vers num="5.0.27" />
-        <vers num="5.0.3" edition="beta" />
-        <vers num="5.0.30" edition="sp1" />
-        <vers num="5.0.32" />
-        <vers num="5.0.33" />
-        <vers num="5.0.36" />
-        <vers num="5.0.37" />
-        <vers num="5.0.38" />
-        <vers num="5.0.3a" />
-        <vers num="5.0.4" />
-        <vers num="5.0.41" />
-        <vers num="5.0.42" />
-        <vers num="5.0.44" />
-        <vers num="5.0.45" edition="b" />
-        <vers num="5.0.45b" />
-        <vers num="5.0.4a" />
-        <vers num="5.0.5" />
-        <vers num="5.0.5.0.21" />
-        <vers num="5.0.50" />
-        <vers num="5.0.51" />
-        <vers num="5.0.51a" />
-        <vers num="5.0.51b" />
-        <vers num="5.0.52" />
-        <vers num="5.0.54" />
-        <vers num="5.0.56" />
-        <vers num="5.0.6" />
-        <vers num="5.0.60" />
-        <vers num="5.0.66" />
-        <vers num="5.0.67" />
-        <vers num="5.0.7" />
-        <vers num="5.0.75" />
-        <vers num="5.0.77" />
-        <vers num="5.0.8" />
-        <vers num="5.0.81" />
-        <vers num="5.0.82" />
-        <vers num="5.0.83" />
-        <vers num="5.0.84" />
-        <vers num="5.0.85" />
-        <vers num="5.0.86" />
-        <vers num="5.0.87" />
-        <vers num="5.0.88" />
-        <vers num="5.0.89" />
-        <vers num="5.0.9" />
-        <vers num="5.0.90" />
-        <vers num="5.0.91" />
-        <vers num="5.0.92" />
-        <vers num="5.0.93" />
-        <vers num="5.0.94" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0076" published="2012-01-18" name="CVE-2012-0076" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to ePerformance.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72484" source="XF">peoplesoft-enthcm-info-disc(72484)</ref>
-      <ref url="http://www.securityfocus.com/bid/51474" source="BID">51474</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78395" source="OSVDB">78395</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="9.0" />
-        <vers num="9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0077" published="2012-01-18" name="CVE-2012-0077" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote authenticated users to affect integrity, related to WLS-Console.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72477" source="XF">fusionmiddleware-weblogic-cve20120077(72477)</ref>
-      <ref url="http://www.securityfocus.com/bid/51460" source="BID">51460</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78401" source="OSVDB">78401</ref>
-      <ref url="http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000007.html" source="JVNDB">JVNDB-2012-000007</ref>
-      <ref url="http://jvn.jp/en/jp/JVN54779201/index.html" source="JVN">JVN#54779201</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="10.0.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="9.2.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0078" published="2012-01-18" name="CVE-2012-0078" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.2 and 12.1.3 allows remote authenticated users to affect confidentiality, related to REST Services (Menu, LOV).</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72479" source="XF">ebusiness-aol-info-disc(72479)</ref>
-      <ref url="http://www.securityfocus.com/bid/51477" source="BID">51477</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://secunia.com/advisories/47628" source="SECUNIA">47628</ref>
-      <ref url="http://osvdb.org/78399" source="OSVDB">78399</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="e-business_suite">
-        <vers num="12.1.2" />
-        <vers num="12.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0079" published="2012-01-18" name="CVE-2012-0079" modified="2012-03-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle OpenSSO 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Administration.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72501" source="XF">sun-opensso-cve20120079(72501)</ref>
-      <ref url="http://www.securitytracker.com/id?1026536" source="SECTRACK">1026536</ref>
-      <ref url="http://www.securityfocus.com/bid/51492" source="BID">51492</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://secunia.com/advisories/46646" source="SECUNIA" adv="1">46646</ref>
-      <ref url="http://osvdb.org/78412" source="OSVDB">78412</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="opensso">
-        <vers num="7.1" />
-        <vers num="8.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0080" published="2012-01-18" name="CVE-2012-0080" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:N)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Management.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72481" source="XF">peoplesoft-enterprisehcm-cve20120080(72481)</ref>
-      <ref url="http://www.securityfocus.com/bid/51466" source="BID">51466</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0081" published="2012-01-18" name="CVE-2012-0081" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="3.7" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="1.9" CVSS_base_score="3.7">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.1.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Administration.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72503" source="XF">sun-glassfishenterpriseserver-cve20120081(72503)</ref>
-      <ref url="http://www.securityfocus.com/bid/51485" source="BID">51485</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78415" source="OSVDB">78415</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="glassfish_server">
-        <vers num="3.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0082" published="2012-01-18" name="CVE-2012-0082" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:P)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity and availability via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72468" source="XF">databaseserver-corerdbms-cve20120082(72468)</ref>
-      <ref url="http://www.securitytracker.com/id?1026527" source="SECTRACK">1026527</ref>
-      <ref url="http://www.securityfocus.com/bid/51453" source="BID">51453</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="10.1.0.5" />
-        <vers num="10.2.0.3" />
-        <vers num="10.2.0.4" />
-        <vers num="10.2.0.5" />
-        <vers num="11.1.0.7" />
-        <vers num="11.2.0.2" />
-        <vers num="11.2.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0083" published="2012-01-18" name="CVE-2012-0083" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Search.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72470" source="XF">fusionmiddleware-webcenter-cve20120083(72470)</ref>
-      <ref url="http://www.securityfocus.com/bid/51451" source="BID">51451</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="10.1.3.5.1" />
-        <vers num="11.1.1.3.0" />
-        <vers num="11.1.1.4.0" />
-        <vers num="11.1.1.5.0" />
-        <vers num="7.5.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0084" published="2012-01-18" name="CVE-2012-0084" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect integrity via unknown vectors related to Content Server.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72476" source="XF">fusionmiddleware-webcenter-cve20120084(72476)</ref>
-      <ref url="http://www.securityfocus.com/bid/51454" source="BID">51454</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="10.1.3.5.1" />
-        <vers num="11.1.1.3.0" />
-        <vers num="11.1.1.4.0" />
-        <vers num="11.1.1.5.0" />
-        <vers num="7.5.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0085" published="2012-01-18" name="CVE-2012-0085" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2 and 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72475" source="XF">fusionmiddleware-webcenter-cve20120085(72475)</ref>
-      <ref url="http://www.securityfocus.com/bid/51457" source="BID">51457</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="10.1.3.5.1" />
-        <vers num="7.5.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0087" published="2012-01-18" name="CVE-2012-0087" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0101 and CVE-2012-0102.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72519" source="XF">mysql-serveruns-dos(72519)</ref>
-      <ref url="http://www.securityfocus.com/bid/51509" source="BID">51509</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78377" source="OSVDB">78377</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.0" />
-        <vers num="5.0.0" edition="alpha" />
-        <vers num="5.0.0.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.10" />
-        <vers num="5.0.10a" />
-        <vers num="5.0.11" />
-        <vers num="5.0.12" />
-        <vers num="5.0.13" />
-        <vers num="5.0.14" />
-        <vers num="5.0.15" />
-        <vers num="5.0.15a" />
-        <vers num="5.0.16" />
-        <vers num="5.0.16a" />
-        <vers num="5.0.17" />
-        <vers num="5.0.17a" />
-        <vers num="5.0.18" />
-        <vers num="5.0.19" />
-        <vers num="5.0.1a" />
-        <vers num="5.0.2" />
-        <vers num="5.0.20" />
-        <vers num="5.0.20a" />
-        <vers num="5.0.21" />
-        <vers num="5.0.22" />
-        <vers num="5.0.22.1.0.1" />
-        <vers num="5.0.23" />
-        <vers num="5.0.24" />
-        <vers num="5.0.24a" />
-        <vers num="5.0.25" />
-        <vers num="5.0.26" />
-        <vers num="5.0.27" />
-        <vers num="5.0.3" edition="beta" />
-        <vers num="5.0.30" edition="sp1" />
-        <vers num="5.0.32" />
-        <vers num="5.0.33" />
-        <vers num="5.0.36" />
-        <vers num="5.0.37" />
-        <vers num="5.0.38" />
-        <vers num="5.0.3a" />
-        <vers num="5.0.4" />
-        <vers num="5.0.41" />
-        <vers num="5.0.42" />
-        <vers num="5.0.44" />
-        <vers num="5.0.45" edition="b" />
-        <vers num="5.0.45b" />
-        <vers num="5.0.4a" />
-        <vers num="5.0.5" />
-        <vers num="5.0.5.0.21" />
-        <vers num="5.0.50" />
-        <vers num="5.0.51" />
-        <vers num="5.0.51a" />
-        <vers num="5.0.51b" />
-        <vers num="5.0.52" />
-        <vers num="5.0.54" />
-        <vers num="5.0.56" />
-        <vers num="5.0.6" />
-        <vers num="5.0.60" />
-        <vers num="5.0.66" />
-        <vers num="5.0.67" />
-        <vers num="5.0.7" />
-        <vers num="5.0.75" />
-        <vers num="5.0.77" />
-        <vers num="5.0.8" />
-        <vers num="5.0.81" />
-        <vers num="5.0.82" />
-        <vers num="5.0.83" />
-        <vers num="5.0.84" />
-        <vers num="5.0.85" />
-        <vers num="5.0.86" />
-        <vers num="5.0.87" />
-        <vers num="5.0.88" />
-        <vers num="5.0.89" />
-        <vers num="5.0.9" />
-        <vers num="5.0.90" />
-        <vers num="5.0.91" />
-        <vers num="5.0.92" />
-        <vers num="5.0.93" />
-        <vers num="5.0.94" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0088" published="2012-01-18" name="CVE-2012-0088" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Benefits Administration.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72483" source="XF">peoplesoft-enterprisehcm-info-disc(72483)</ref>
-      <ref url="http://www.securityfocus.com/bid/51480" source="BID">51480</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78397" source="OSVDB">78397</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="8.9" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0089" published="2012-01-18" name="CVE-2012-0089" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to ePerformance.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72485" source="XF">peoplesoft-enterhcm-info-disc(72485)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0091" published="2012-01-18" name="CVE-2012-0091" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:A/AC:H/Au:M/C:N/I:P/A:P)" CVSS_score="2.7" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="2.0" CVSS_base_score="2.7">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52.05 allows remote authenticated users to affect integrity and availability via unknown vectors related to Upgrade Change Assistance.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72486" source="XF">peoplesoft-eptools-cve20120091(72486)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78402" source="OSVDB">78402</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="8.52.05" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0094" published="2012-01-18" name="CVE-2012-0094" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows remote attackers to affect availability, related to TCP/IP.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72495" source="XF">sun-solaris-dos(72495)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78420" source="OSVDB">78420</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-        <vers num="5.11" edition="" />
-        <vers num="5.11" edition=":express" />
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0096" published="2012-01-18" name="CVE-2012-0096" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Network.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72498" source="XF">sun-solarisunspec-dos(72498)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78422" source="OSVDB">78422</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-        <vers num="5.11" edition="" />
-        <vers num="5.11" edition=":express" />
-        <vers num="5.8" />
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0097" published="2012-01-18" name="CVE-2012-0097" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect confidentiality via unknown vectors related to ksh93 Shell.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72509" source="XF">sun-solaris-info-disc(72509)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78426" source="OSVDB">78426</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.11" edition="" />
-        <vers num="5.11" edition=":express" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0098" published="2012-01-18" name="CVE-2012-0098" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="1.9" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.4" CVSS_base_score="1.9">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72510" source="XF">sun-solarisunknown-dos(72510)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78427" source="OSVDB">78427</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-        <vers num="5.11" edition="" />
-        <vers num="5.11" edition=":express" />
-        <vers num="5.8" />
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0099" published="2012-01-18" name="CVE-2012-0099" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:N/A:P)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to sshd.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72506" source="XF">sun-solarisunsp-dos(72506)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78425" source="OSVDB">78425</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-        <vers num="5.11" edition="" />
-        <vers num="5.11" edition=":express" />
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0100" published="2012-01-18" name="CVE-2012-0100" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="6.8" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.1" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kerberos.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72496" source="XF">sun-solaris-cve20120100(72496)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78421" source="OSVDB">78421</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-        <vers num="5.11" edition="" />
-        <vers num="5.11" edition=":express" />
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0101" published="2012-01-18" name="CVE-2012-0101" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0087 and CVE-2012-0102.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72520" source="XF">mysql-serveruns1-dos(72520)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78378" source="OSVDB">78378</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.0" />
-        <vers num="5.0.0" edition="alpha" />
-        <vers num="5.0.0.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.10" />
-        <vers num="5.0.10a" />
-        <vers num="5.0.11" />
-        <vers num="5.0.12" />
-        <vers num="5.0.13" />
-        <vers num="5.0.14" />
-        <vers num="5.0.15" />
-        <vers num="5.0.15a" />
-        <vers num="5.0.16" />
-        <vers num="5.0.16a" />
-        <vers num="5.0.17" />
-        <vers num="5.0.17a" />
-        <vers num="5.0.18" />
-        <vers num="5.0.19" />
-        <vers num="5.0.1a" />
-        <vers num="5.0.2" />
-        <vers num="5.0.20" />
-        <vers num="5.0.20a" />
-        <vers num="5.0.21" />
-        <vers num="5.0.22" />
-        <vers num="5.0.22.1.0.1" />
-        <vers num="5.0.23" />
-        <vers num="5.0.24" />
-        <vers num="5.0.24a" />
-        <vers num="5.0.25" />
-        <vers num="5.0.26" />
-        <vers num="5.0.27" />
-        <vers num="5.0.3" edition="beta" />
-        <vers num="5.0.30" edition="sp1" />
-        <vers num="5.0.32" />
-        <vers num="5.0.33" />
-        <vers num="5.0.36" />
-        <vers num="5.0.37" />
-        <vers num="5.0.38" />
-        <vers num="5.0.3a" />
-        <vers num="5.0.4" />
-        <vers num="5.0.41" />
-        <vers num="5.0.42" />
-        <vers num="5.0.44" />
-        <vers num="5.0.45" edition="b" />
-        <vers num="5.0.45b" />
-        <vers num="5.0.4a" />
-        <vers num="5.0.5" />
-        <vers num="5.0.5.0.21" />
-        <vers num="5.0.50" />
-        <vers num="5.0.51" />
-        <vers num="5.0.51a" />
-        <vers num="5.0.51b" />
-        <vers num="5.0.52" />
-        <vers num="5.0.54" />
-        <vers num="5.0.56" />
-        <vers num="5.0.6" />
-        <vers num="5.0.60" />
-        <vers num="5.0.66" />
-        <vers num="5.0.67" />
-        <vers num="5.0.7" />
-        <vers num="5.0.75" />
-        <vers num="5.0.77" />
-        <vers num="5.0.8" />
-        <vers num="5.0.81" />
-        <vers num="5.0.82" />
-        <vers num="5.0.83" />
-        <vers num="5.0.84" />
-        <vers num="5.0.85" />
-        <vers num="5.0.86" />
-        <vers num="5.0.87" />
-        <vers num="5.0.88" />
-        <vers num="5.0.89" />
-        <vers num="5.0.9" />
-        <vers num="5.0.90" />
-        <vers num="5.0.91" />
-        <vers num="5.0.92" />
-        <vers num="5.0.93" />
-        <vers num="5.0.94" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0102" published="2012-01-18" name="CVE-2012-0102" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0087 and CVE-2012-0101.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72521" source="XF">mysql-serveruns2-dos(72521)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78379" source="OSVDB">78379</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.0" />
-        <vers num="5.0.0" edition="alpha" />
-        <vers num="5.0.0.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.10" />
-        <vers num="5.0.10a" />
-        <vers num="5.0.11" />
-        <vers num="5.0.12" />
-        <vers num="5.0.13" />
-        <vers num="5.0.14" />
-        <vers num="5.0.15" />
-        <vers num="5.0.15a" />
-        <vers num="5.0.16" />
-        <vers num="5.0.16a" />
-        <vers num="5.0.17" />
-        <vers num="5.0.17a" />
-        <vers num="5.0.18" />
-        <vers num="5.0.19" />
-        <vers num="5.0.1a" />
-        <vers num="5.0.2" />
-        <vers num="5.0.20" />
-        <vers num="5.0.20a" />
-        <vers num="5.0.21" />
-        <vers num="5.0.22" />
-        <vers num="5.0.22.1.0.1" />
-        <vers num="5.0.23" />
-        <vers num="5.0.24" />
-        <vers num="5.0.24a" />
-        <vers num="5.0.25" />
-        <vers num="5.0.26" />
-        <vers num="5.0.27" />
-        <vers num="5.0.3" edition="beta" />
-        <vers num="5.0.30" edition="sp1" />
-        <vers num="5.0.32" />
-        <vers num="5.0.33" />
-        <vers num="5.0.36" />
-        <vers num="5.0.37" />
-        <vers num="5.0.38" />
-        <vers num="5.0.3a" />
-        <vers num="5.0.4" />
-        <vers num="5.0.41" />
-        <vers num="5.0.42" />
-        <vers num="5.0.44" />
-        <vers num="5.0.45" edition="b" />
-        <vers num="5.0.45b" />
-        <vers num="5.0.4a" />
-        <vers num="5.0.5" />
-        <vers num="5.0.5.0.21" />
-        <vers num="5.0.50" />
-        <vers num="5.0.51" />
-        <vers num="5.0.51a" />
-        <vers num="5.0.51b" />
-        <vers num="5.0.52" />
-        <vers num="5.0.54" />
-        <vers num="5.0.56" />
-        <vers num="5.0.6" />
-        <vers num="5.0.60" />
-        <vers num="5.0.66" />
-        <vers num="5.0.67" />
-        <vers num="5.0.7" />
-        <vers num="5.0.75" />
-        <vers num="5.0.77" />
-        <vers num="5.0.8" />
-        <vers num="5.0.81" />
-        <vers num="5.0.82" />
-        <vers num="5.0.83" />
-        <vers num="5.0.84" />
-        <vers num="5.0.85" />
-        <vers num="5.0.86" />
-        <vers num="5.0.87" />
-        <vers num="5.0.88" />
-        <vers num="5.0.89" />
-        <vers num="5.0.9" />
-        <vers num="5.0.90" />
-        <vers num="5.0.91" />
-        <vers num="5.0.92" />
-        <vers num="5.0.93" />
-        <vers num="5.0.94" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0103" published="2012-01-18" name="CVE-2012-0103" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to Kernel.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72499" source="XF">sun-solarisunspecified-dos(72499)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78423" source="OSVDB">78423</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.11" edition="" />
-        <vers num="5.11" edition=":express" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0104" published="2012-01-18" name="CVE-2012-0104" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote attackers to affect availability via unknown vectors related to Web Container.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72497" source="XF">sun-glassfishenterpriseserver-dos(72497)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78417" source="OSVDB">78417</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="glassfish_server">
-        <vers num="3.0.1" />
-        <vers num="3.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0105" published="2012-01-18" name="CVE-2012-0105" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="3.7" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="1.9" CVSS_base_score="3.7">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization 4.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Guest Additions.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72511" source="XF">virtualization-vmvirtualbox-cve20120105(72511)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-01.xml" source="GENTOO">GLSA-201204-01</ref>
-      <ref url="http://osvdb.org/78442" source="OSVDB">78442</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="virtualization">
-        <vers num="4.1" />
-      </prod>
-      <prod vendor="oracle" name="vm_virtualbox">
-        <vers num="4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0109" published="2012-01-18" name="CVE-2012-0109" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:P)" CVSS_score="3.6" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.9" CVSS_base_score="3.6">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect confidentiality and availability, related to TCP/IP.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72504" source="XF">sun-solaris-cve20120109(72504)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78424" source="OSVDB">78424</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-        <vers num="5.11" edition="" />
-        <vers num="5.11" edition=":express" />
-        <vers num="5.8" />
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0110" published="2012-01-18" name="CVE-2012-0110" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="4.4" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.4" CVSS_base_score="4.4">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect confidentiality, integrity, and availability, related to Outside In Image Export SDK.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51452" source="BID">51452</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.5.0" />
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0111" published="2012-01-18" name="CVE-2012-0111" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="3.6" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.9" CVSS_base_score="3.6">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization 4.1 allows local users to affect confidentiality and integrity via unknown vectors related to Shared Folders.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-01.xml" source="GENTOO">GLSA-201204-01</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="virtualization">
-        <vers num="4.1" />
-      </prod>
-      <prod vendor="oracle" name="vm_virtualbox">
-        <vers num="4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0112" published="2012-01-18" name="CVE-2012-0112" modified="2012-02-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:P)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0113" published="2012-01-18" name="CVE-2012-0113" modified="2012-02-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:P)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0118.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0114" published="2012-01-18" name="CVE-2012-0114" modified="2012-01-19" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:S/C:P/I:P/A:N)" CVSS_score="3.0" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="2.7" CVSS_base_score="3.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows local users to affect confidentiality and integrity via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.0" />
-        <vers num="5.0.0" edition="alpha" />
-        <vers num="5.0.0.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.10" />
-        <vers num="5.0.10a" />
-        <vers num="5.0.11" />
-        <vers num="5.0.12" />
-        <vers num="5.0.13" />
-        <vers num="5.0.14" />
-        <vers num="5.0.15" />
-        <vers num="5.0.15a" />
-        <vers num="5.0.16" />
-        <vers num="5.0.16a" />
-        <vers num="5.0.17" />
-        <vers num="5.0.17a" />
-        <vers num="5.0.18" />
-        <vers num="5.0.19" />
-        <vers num="5.0.1a" />
-        <vers num="5.0.2" />
-        <vers num="5.0.20" />
-        <vers num="5.0.20a" />
-        <vers num="5.0.21" />
-        <vers num="5.0.22" />
-        <vers num="5.0.22.1.0.1" />
-        <vers num="5.0.23" />
-        <vers num="5.0.24" />
-        <vers num="5.0.24a" />
-        <vers num="5.0.25" />
-        <vers num="5.0.26" />
-        <vers num="5.0.27" />
-        <vers num="5.0.3" edition="beta" />
-        <vers num="5.0.30" edition="sp1" />
-        <vers num="5.0.32" />
-        <vers num="5.0.33" />
-        <vers num="5.0.36" />
-        <vers num="5.0.37" />
-        <vers num="5.0.38" />
-        <vers num="5.0.3a" />
-        <vers num="5.0.4" />
-        <vers num="5.0.41" />
-        <vers num="5.0.42" />
-        <vers num="5.0.44" />
-        <vers num="5.0.45" edition="b" />
-        <vers num="5.0.45b" />
-        <vers num="5.0.4a" />
-        <vers num="5.0.5" />
-        <vers num="5.0.5.0.21" />
-        <vers num="5.0.50" />
-        <vers num="5.0.51" />
-        <vers num="5.0.51a" />
-        <vers num="5.0.51b" />
-        <vers num="5.0.52" />
-        <vers num="5.0.54" />
-        <vers num="5.0.56" />
-        <vers num="5.0.6" />
-        <vers num="5.0.60" />
-        <vers num="5.0.66" />
-        <vers num="5.0.67" />
-        <vers num="5.0.7" />
-        <vers num="5.0.75" />
-        <vers num="5.0.77" />
-        <vers num="5.0.8" />
-        <vers num="5.0.81" />
-        <vers num="5.0.82" />
-        <vers num="5.0.83" />
-        <vers num="5.0.84" />
-        <vers num="5.0.85" />
-        <vers num="5.0.86" />
-        <vers num="5.0.87" />
-        <vers num="5.0.88" />
-        <vers num="5.0.89" />
-        <vers num="5.0.9" />
-        <vers num="5.0.90" />
-        <vers num="5.0.91" />
-        <vers num="5.0.92" />
-        <vers num="5.0.93" />
-        <vers num="5.0.94" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0115" published="2012-01-18" name="CVE-2012-0115" modified="2012-01-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0119, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0116" published="2012-01-18" name="CVE-2012-0116" modified="2012-01-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:N)" CVSS_score="4.9" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="6.8" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0117" published="2012-01-18" name="CVE-2012-0117" modified="2012-01-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:P)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0118" published="2012-01-18" name="CVE-2012-0118" modified="2012-01-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:N/A:P)" CVSS_score="4.9" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="6.8" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0113.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0119" published="2012-01-18" name="CVE-2012-0119" modified="2012-01-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0120" published="2012-01-18" name="CVE-2012-0120" modified="2012-01-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0485, and CVE-2012-0492.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0121" published="2012-03-13" name="CVE-2012-0121" modified="2012-03-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1392.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/521944" source="HP">HPSBMU02746</ref>
-      <ref url="http://www.securityfocus.com/archive/1/521944" source="HP">SSRT100781</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="data_protector_express">
-        <vers num="5.0" />
-        <vers num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0122" published="2012-03-13" name="CVE-2012-0122" modified="2012-03-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1393.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/521944" source="HP">HPSBMU02746</ref>
-      <ref url="http://www.securityfocus.com/archive/1/521944" source="HP">SSRT100781</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="data_protector_express">
-        <vers num="5.0" />
-        <vers num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0123" published="2012-03-13" name="CVE-2012-0123" modified="2012-03-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1498.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/521944" source="HP">SSRT100781</ref>
-      <ref url="http://www.securityfocus.com/archive/1/521944" source="HP">HPSBMU02746</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="data_protector_express">
-        <vers num="5.0" />
-        <vers num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0124" published="2012-03-13" name="CVE-2012-0124" modified="2012-04-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/521944" source="HP">SSRT100781</ref>
-      <ref url="http://www.securityfocus.com/archive/1/521944" source="HP">HPSBMU02746</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="data_protector_express">
-        <vers num="5.0" />
-        <vers num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0125" published="2012-03-28" name="CVE-2012-0125" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="3.3" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.4" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.31 allows local users to obtain access to diagnostic information via unknown vectors, a related issue to CVE-2012-0126.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74391" source="XF">hpux-wbem-sec-bypass(74391)</ref>
-      <ref url="http://www.securityfocus.com/bid/52733" source="BID">52733</ref>
-      <ref url="http://secunia.com/advisories/48593" source="SECUNIA">48593</ref>
-      <ref url="http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03221589" source="HP" adv="1">HPSBUX02755</ref>
-      <ref url="http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03221589" source="HP" adv="1">SSRT100667</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="hp-ux">
-        <vers num="11.31" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0126" published="2012-03-28" name="CVE-2012-0126" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.11 and 11.23 allows remote attackers to obtain access to diagnostic information via unknown vectors, a related issue to CVE-2012-0125.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74390" source="XF">hpux-wbem-security-bypass(74390)</ref>
-      <ref url="http://www.securityfocus.com/bid/52734" source="BID">52734</ref>
-      <ref url="http://secunia.com/advisories/48593" source="SECUNIA">48593</ref>
-      <ref url="http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03221589" source="HP" adv="1">HPSBUX02755</ref>
-      <ref url="http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03221589" source="HP" adv="1">SSRT100667</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="hp-ux">
-        <vers num="11.11" />
-        <vers num="11.23" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0127" published="2012-03-31" name="CVE-2012-0127" modified="2012-04-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in HP Performance Manager 9.00 allows remote attackers to execute arbitrary code via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522101" source="HP">HPSBMU02756</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522101" source="HP">SSRT100596</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="performance_manager">
-        <vers num="9.00" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0128" published="2012-04-05" name="CVE-2012-0128" modified="2012-04-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">HP Onboard Administrator (OA) before 3.50 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522176" source="HP">SSRT100817</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522176" source="HP">HPSBMU02759</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="onboard_administrator">
-        <vers num="1.00" />
-        <vers num="1.01" />
-        <vers num="1.10" />
-        <vers num="1.11" />
-        <vers num="1.12" />
-        <vers num="1.20" />
-        <vers num="1.30" />
-        <vers num="2.01" />
-        <vers num="2.02" edition="a" />
-        <vers num="2.04" />
-        <vers num="2.10" />
-        <vers num="2.11" />
-        <vers num="2.12" />
-        <vers num="2.13" />
-        <vers num="2.20" />
-        <vers num="2.21" />
-        <vers num="2.25" />
-        <vers num="2.31" />
-        <vers num="2.32" />
-        <vers num="2.41" />
-        <vers num="2.50" />
-        <vers num="2.51" />
-        <vers num="2.52" />
-        <vers num="2.60" />
-        <vers num="3.00" />
-        <vers num="3.10" />
-        <vers num="3.11" />
-        <vers num="3.20" edition="a" />
-        <vers num="3.21" />
-        <vers num="3.30" />
-        <vers num="3.31" />
-        <vers prev="1" num="3.32" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0129" published="2012-04-05" name="CVE-2012-0129" modified="2012-04-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="7.6" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="4.9" CVSS_base_score="7.6">
-    <desc>
-      <descript source="cve">HP Onboard Administrator (OA) before 3.50 allows remote attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522176" source="HP">HPSBMU02759</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522176" source="HP">SSRT100817</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="onboard_administrator">
-        <vers num="1.00" />
-        <vers num="1.01" />
-        <vers num="1.10" />
-        <vers num="1.11" />
-        <vers num="1.12" />
-        <vers num="1.20" />
-        <vers num="1.30" />
-        <vers num="2.01" />
-        <vers num="2.02" edition="a" />
-        <vers num="2.04" />
-        <vers num="2.10" />
-        <vers num="2.11" />
-        <vers num="2.12" />
-        <vers num="2.13" />
-        <vers num="2.20" />
-        <vers num="2.21" />
-        <vers num="2.25" />
-        <vers num="2.31" />
-        <vers num="2.32" />
-        <vers num="2.41" />
-        <vers num="2.50" />
-        <vers num="2.51" />
-        <vers num="2.52" />
-        <vers num="2.60" />
-        <vers num="3.00" />
-        <vers num="3.10" />
-        <vers num="3.11" />
-        <vers num="3.20" edition="a" />
-        <vers num="3.21" />
-        <vers num="3.30" />
-        <vers num="3.31" />
-        <vers prev="1" num="3.32" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0130" published="2012-04-05" name="CVE-2012-0130" modified="2012-04-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">HP Onboard Administrator (OA) before 3.50 allows remote attackers to obtain sensitive information via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522176" source="HP">HPSBMU02759</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522176" source="HP">SSRT100817</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="onboard_administrator">
-        <vers num="1.00" />
-        <vers num="1.01" />
-        <vers num="1.10" />
-        <vers num="1.11" />
-        <vers num="1.12" />
-        <vers num="1.20" />
-        <vers num="1.30" />
-        <vers num="2.01" />
-        <vers num="2.02" edition="a" />
-        <vers num="2.04" />
-        <vers num="2.10" />
-        <vers num="2.11" />
-        <vers num="2.12" />
-        <vers num="2.13" />
-        <vers num="2.20" />
-        <vers num="2.21" />
-        <vers num="2.25" />
-        <vers num="2.31" />
-        <vers num="2.32" />
-        <vers num="2.41" />
-        <vers num="2.50" />
-        <vers num="2.51" />
-        <vers num="2.52" />
-        <vers num="2.60" />
-        <vers num="3.00" />
-        <vers num="3.10" />
-        <vers num="3.11" />
-        <vers num="3.20" edition="a" />
-        <vers num="3.21" />
-        <vers num="3.30" />
-        <vers num="3.31" />
-        <vers prev="1" num="3.32" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0131" published="2012-04-05" name="CVE-2012-0131" modified="2012-04-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Distributed Computing Environment (DCE) 1.8 and 1.9 on HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03261413" source="HP" adv="1">SSRT100774</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03261413" source="HP" adv="1">HPSBUX02758</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="distributed_computing_environment">
-        <vers num="1.8" />
-        <vers num="1.9" />
-      </prod>
-      <prod vendor="hp" name="hp-ux">
-        <vers num="b.11.11" />
-        <vers num="b.11.23" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0132" published="2012-04-05" name="CVE-2012-0132" modified="2012-04-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 9.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522204" source="HP">HPSBMU02749</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522204" source="HP">SSRT100793</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="business_availability_center">
-        <vers num="9.01" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0133" published="2012-04-12" name="CVE-2012-0133" modified="2012-04-12" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="3.7" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="1.9" CVSS_base_score="3.7">
-    <desc>
-      <descript source="cve">HP ProCurve 5400 zl switches with certain serial numbers include a compact flash card that contains an unspecified virus, which might allow user-assisted remote attackers to execute arbitrary code on a PC by leveraging manual transfer of this card.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522288" source="HP">HPSBPV02754</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522288" source="HP">SSRT100803</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="procurve_switch_5400zl">
-        <vers num="" />
-      </prod>
-      <prod vendor="hp" name="procurve_switch_5400zl_management_module">
-        <vers num="id116as04p" />
-        <vers num="id116as0hr" />
-        <vers num="id117as00h" />
-        <vers num="id126as0fb" />
-      </prod>
-      <prod vendor="hp" name="procurve_switch_5406-44g-poe+-4sfpzl">
-        <vers num="-" />
-      </prod>
-      <prod vendor="hp" name="procurve_switch_5406-48gzl">
-        <vers num="-" />
-      </prod>
-      <prod vendor="hp" name="procurve_switch_5406zl-44g-poe+/2xg_sfp+_v2">
-        <vers num="-" />
-      </prod>
-      <prod vendor="hp" name="procurve_switch_5406zl-44g-poe+/4g_sfp+_v2">
-        <vers num="-" />
-      </prod>
-      <prod vendor="hp" name="procurve_switch_5412-92g-poe+-4sfpzl">
-        <vers num="-" />
-      </prod>
-      <prod vendor="hp" name="procurve_switch_5412-96gzl">
-        <vers num="-" />
-      </prod>
-      <prod vendor="hp" name="procurve_switch_5412zl-92g-poe+/4g_sfp+_v2">
-        <vers num="-" />
-      </prod>
-      <prod vendor="hp" name="procurve_switch_5412zl-92gg-poe+/2xg_sfp+_v2">
-        <vers num="-" />
-      </prod>
-      <prod vendor="hp" name="procurve_switch_chassis_e5406zl">
-        <vers num="-" />
-      </prod>
-      <prod vendor="hp" name="procurve_switch_chassis_e5412zl">
-        <vers num="-" />
-      </prod>
-      <prod vendor="hp" name="procurve_switch_e5406zl">
-        <vers num="-" />
-      </prod>
-      <prod vendor="hp" name="procurve_switch_e5412zl">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0134" published="2012-04-19" name="CVE-2012-0134" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in HP OpenVMS 7.3-2 on the Alpha platform, 8.3 and 8.4 on the Alpha and IA64 platforms, and 8.3-1h1 on the IA64 platform allows local users to cause a denial of service via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026935" source="SECTRACK">1026935</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522386" source="HP">SSRT100828</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522386" source="HP">HPSBOV02765</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="openvms">
-        <vers num="8.3-1h1" edition="" />
-        <vers num="8.3-1h1" edition=":ia64" />
-      </prod>
-      <prod vendor="hp" name="openvms">
-        <vers num="7.3-2" edition="" />
-        <vers num="7.3-2" edition=":alpha" />
-        <vers num="8.3" edition="" />
-        <vers num="8.3" edition=":alpha" />
-        <vers num="8.3" edition=":ia64" />
-        <vers num="8.4" edition="" />
-        <vers num="8.4" edition=":alpha" />
-        <vers num="8.4" edition=":ia64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0135" published="2012-04-18" name="CVE-2012-0135" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:P)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows remote authenticated users to cause a denial of service via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026925" source="SECTRACK">1026925</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522374" source="HP">SSRT100827</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522374" source="HP">HPSBMU02764</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="system_management_homepage">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.1.104" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.106" />
-        <vers num="2.1" />
-        <vers num="2.1.0-103" />
-        <vers num="2.1.0-103(a)" />
-        <vers num="2.1.0-109" />
-        <vers num="2.1.0-118" />
-        <vers num="2.1.0.121" />
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.10-186" />
-        <vers num="2.1.10.186" edition="b" />
-        <vers num="2.1.10.186" edition="c" />
-        <vers num="2.1.11" />
-        <vers num="2.1.11-197" />
-        <vers num="2.1.11.197" edition="a" />
-        <vers num="2.1.12-118" />
-        <vers num="2.1.12-200" />
-        <vers num="2.1.12.201" />
-        <vers num="2.1.14.20" />
-        <vers num="2.1.15-210" />
-        <vers num="2.1.15.210" />
-        <vers num="2.1.2" />
-        <vers num="2.1.2-127" />
-        <vers num="2.1.2.127" />
-        <vers num="2.1.3" />
-        <vers num="2.1.3.132" />
-        <vers num="2.1.4" />
-        <vers num="2.1.4-143" />
-        <vers num="2.1.4.143" />
-        <vers num="2.1.5" />
-        <vers num="2.1.5-146" />
-        <vers num="2.1.5.146" edition="b" />
-        <vers num="2.1.6" />
-        <vers num="2.1.6-156" />
-        <vers num="2.1.6.156" />
-        <vers num="2.1.7" />
-        <vers num="2.1.7-168" />
-        <vers num="2.1.7.168" />
-        <vers num="2.1.8" />
-        <vers num="2.1.8-177" />
-        <vers num="2.1.8.179" />
-        <vers num="2.1.9" />
-        <vers num="2.1.9-178" />
-        <vers num="2.2.6" />
-        <vers num="2.2.8" />
-        <vers num="3.0.0-68" />
-        <vers num="3.0.0.64" />
-        <vers num="3.0.1-73" />
-        <vers num="3.0.1.73" />
-        <vers num="3.0.2-77" />
-        <vers num="3.0.2.77" edition="b" />
-        <vers num="6.0" />
-        <vers num="6.0.0-95" />
-        <vers num="6.0.0.96" />
-        <vers num="6.1" />
-        <vers prev="1" num="6.1.0-103" />
-        <vers num="6.1.0.102" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0136" published="2012-02-14" name="CVE-2012-0136" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0137, and CVE-2012-0138.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-015" source="MS" patch="1" adv="1">MS12-015</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14924" source="OVAL">oval:org.mitre.oval:def:14924</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="visio_viewer">
-        <vers num="2010" edition="sp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0137" published="2012-02-14" name="CVE-2012-0137" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0138.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-015" source="MS" patch="1" adv="1">MS12-015</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14602" source="OVAL">oval:org.mitre.oval:def:14602</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="visio_viewer">
-        <vers num="2010" edition="sp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0138" published="2012-02-14" name="CVE-2012-0138" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0137.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-015" source="MS" patch="1" adv="1">MS12-015</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14811" source="OVAL">oval:org.mitre.oval:def:14811</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="visio_viewer">
-        <vers num="2010" edition="sp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0141" published="2012-05-08" name="CVE-2012-0141" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel File Format Memory Corruption Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-030" source="MS" patch="1" adv="1">MS12-030</ref>
-      <ref url="http://www.securitytracker.com/id?1027041" source="SECTRACK">1027041</ref>
-      <ref url="http://www.securityfocus.com/bid/53342" source="BID">53342</ref>
-      <ref url="http://secunia.com/advisories/49112" source="SECUNIA" adv="1">49112</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15152" source="OVAL">oval:org.mitre.oval:def:15152</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="excel">
-        <vers num="2003" edition="sp3" />
-        <vers num="2007" edition="sp2" />
-        <vers num="2007" edition="sp3" />
-        <vers num="2010" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="excel_viewer">
-        <vers num="" />
-      </prod>
-      <prod vendor="microsoft" name="office">
-        <vers num="2011" edition="" />
-        <vers num="2011" edition=":mac" />
-      </prod>
-      <prod vendor="microsoft" name="office_compatibility_pack">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0142" published="2012-05-08" name="CVE-2012-0142" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel File Format Memory Corruption in OBJECTLINK Record Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027041" source="SECTRACK">1027041</ref>
-      <ref url="http://www.securityfocus.com/bid/53373" source="BID">53373</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-030" source="MS" adv="1">MS12-030</ref>
-      <ref url="http://secunia.com/advisories/49112" source="SECUNIA">49112</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15543" source="OVAL">oval:org.mitre.oval:def:15543</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="excel">
-        <vers num="2003" edition="sp3" />
-        <vers num="2007" edition="sp2" />
-        <vers num="2007" edition="sp3" />
-        <vers num="2010" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="excel_viewer">
-        <vers num="" />
-      </prod>
-      <prod vendor="microsoft" name="office">
-        <vers num="2008" edition="" />
-        <vers num="2008" edition=":mac" />
-      </prod>
-      <prod vendor="microsoft" name="office_compatibility_pack">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0143" published="2012-05-08" name="CVE-2012-0143" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Memory Corruption Using Various Modified Bytes Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027041" source="SECTRACK">1027041</ref>
-      <ref url="http://www.securityfocus.com/bid/53374" source="BID">53374</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-030" source="MS" adv="1">MS12-030</ref>
-      <ref url="http://secunia.com/advisories/49112" source="SECUNIA">49112</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15064" source="OVAL">oval:org.mitre.oval:def:15064</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="excel">
-        <vers num="2003" edition="sp3" />
-      </prod>
-      <prod vendor="microsoft" name="office">
-        <vers num="2008" edition="" />
-        <vers num="2008" edition=":mac" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0144" published="2012-02-14" name="CVE-2012-0144" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-011" source="MS" patch="1" adv="1">MS12-011</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14386" source="OVAL">oval:org.mitre.oval:def:14386</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="sharepoint_foundation">
-        <vers num="2010" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="sharepoint_server">
-        <vers num="2010" edition="sp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0145" published="2012-02-14" name="CVE-2012-0145" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-011" source="MS" patch="1" adv="1">MS12-011</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14826" source="OVAL">oval:org.mitre.oval:def:14826</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="sharepoint_foundation">
-        <vers num="2010" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="sharepoint_server">
-        <vers num="2010" edition="sp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0146" published="2012-04-10" name="CVE-2012-0146" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "UAG Blind HTTP Redirect Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-026" source="MS" patch="1" adv="1">MS12-026</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15476" source="OVAL">oval:org.mitre.oval:def:15476</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="forefront_unified_access_gateway">
-        <vers num="2010" edition="sp1" />
-        <vers num="2010" edition="sp1_update1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0147" published="2012-04-10" name="CVE-2012-0147" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka "Unfiltered Access to UAG Default Website Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-026" source="MS" patch="1" adv="1">MS12-026</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15557" source="OVAL">oval:org.mitre.oval:def:15557</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="forefront_unified_access_gateway">
-        <vers num="2010" edition="sp1" />
-        <vers num="2010" edition="sp1_update1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0148" published="2012-02-14" name="CVE-2012-0148" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "AfdPoll Elevation of Privilege Vulnerability."</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://technet.microsoft.com/en-us/security/bulletin/ms12-009
-
-'This vulnerability is not exploitable on 32-bit editions of Microsoft Windows.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-009" source="MS" patch="1" adv="1">MS12-009</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14852" source="OVAL">oval:org.mitre.oval:def:14852</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x64" />
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0149" published="2012-02-14" name="CVE-2012-0149" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">afd.sys in the Ancillary Function Driver in Microsoft Windows Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-009" source="MS" patch="1" adv="1">MS12-009</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14958" source="OVAL">oval:org.mitre.oval:def:14958</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0150" published="2012-02-14" name="CVE-2012-0150" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in msvcrt.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, aka "Msvcrt.dll Buffer Overflow Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-013" source="MS" patch="1" adv="1">MS12-013</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14631" source="OVAL">oval:org.mitre.oval:def:14631</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x86" />
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x86" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0151" published="2012-04-10" name="CVE-2012-0151" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute arbitrary code via a modified file with additional content, aka "WinVerifyTrust Signature Validation Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-024" source="MS" patch="1" adv="1">MS12-024</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15594" source="OVAL">oval:org.mitre.oval:def:15594</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x86" />
-        <vers num="" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0152" published="2012-03-13" name="CVE-2012-0152" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (application hang) via a series of crafted packets, aka "Terminal Server Denial of Service Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-020" source="MS" patch="1" adv="1">MS12-020</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14626" source="OVAL">oval:org.mitre.oval:def:14626</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x64" />
-        <vers num="" edition=":x86" />
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x86" />
-        <vers num="" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0154" published="2012-02-14" name="CVE-2012-0154" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers keyboard layout errors, aka "Keyboard Layout Use After Free Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-008" source="MS" patch="1" adv="1">MS12-008</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14928" source="OVAL">oval:org.mitre.oval:def:14928</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x86" />
-        <vers num="" edition=":x64" />
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x86" />
-        <vers num="-" edition="sp1" />
-        <vers num="-" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0155" published="2012-02-14" name="CVE-2012-0155" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-010" source="MS" patch="1" adv="1">MS12-010</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14781" source="OVAL">oval:org.mitre.oval:def:14781</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0156" published="2012-03-13" name="CVE-2012-0156" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">DirectWrite in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly render Unicode characters, which allows remote attackers to cause a denial of service (application hang) via a (1) instant message or (2) web site, aka "DirectWrite Application Denial of Service Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-019" source="MS" patch="1" adv="1">MS12-019</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14807" source="OVAL">oval:org.mitre.oval:def:14807</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x64" />
-        <vers num="" edition=":x86" />
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x86" />
-        <vers num="" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0157" published="2012-03-13" name="CVE-2012-0157" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle window messaging, which allows local users to gain privileges via a crafted application that calls the PostMessage function, aka "PostMessage Function Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-018" source="MS" patch="1" adv="1">MS12-018</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14217" source="OVAL">oval:org.mitre.oval:def:14217</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x86" />
-        <vers num="" edition=":x64" />
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x86" />
-        <vers num="" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:itanium" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0158" published="2012-04-10" name="CVE-2012-0158" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components SP3; SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2; BizTalk Server 2002 SP1; Commerce Server 2002 SP4, 2007 SP2, and 2009 Gold and R2; Visual FoxPro 8.0 SP1 and 9.0 SP2; and Visual Basic 6.0 Runtime allow remote attackers to execute arbitrary code via a crafted (a) web site, (b) Office document, or (c) .rtf file that triggers "system state" corruption, as exploited in the wild in April 2012, aka "MSCOMCTL.OCX RCE Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-027" source="MS" patch="1" adv="1">MS12-027</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15462" source="OVAL">oval:org.mitre.oval:def:15462</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="biztalk_server">
-        <vers num="2002" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="commerce_server">
-        <vers num="2002" edition="sp4" />
-        <vers num="2007" edition="sp2" />
-        <vers num="2009" edition="r2" />
-      </prod>
-      <prod vendor="microsoft" name="office">
-        <vers num="2003" edition="sp3" />
-        <vers num="2007" edition="sp2" />
-        <vers num="2007" edition="sp3" />
-        <vers num="2010" edition="" />
-        <vers num="2010" edition=":x86" />
-        <vers num="2010" edition="sp1" />
-        <vers num="2010" edition="sp1:x86" />
-      </prod>
-      <prod vendor="microsoft" name="office_web_components">
-        <vers num="2003" edition="sp3" />
-      </prod>
-      <prod vendor="microsoft" name="sql_server">
-        <vers num="2000" edition="sp4" />
-        <vers num="2000" edition="sp4:analysis_services" />
-        <vers num="2005" edition="sp4" />
-        <vers num="2005" edition="sp4:express_advanced_services" />
-        <vers num="2005" edition="sp4:x64" />
-        <vers num="2005" edition="sp4:x86" />
-        <vers num="2005" edition="sp4:itanium" />
-        <vers num="2008" edition="r2" />
-        <vers num="2008" edition="r2:itanium" />
-        <vers num="2008" edition="r2:x64" />
-        <vers num="2008" edition="r2:x86" />
-        <vers num="2008" edition="sp2" />
-        <vers num="2008" edition="sp2:itanium" />
-        <vers num="2008" edition="sp2:x64" />
-        <vers num="2008" edition="sp2:x86" />
-        <vers num="2008" edition="sp3" />
-        <vers num="2008" edition="sp3:x64" />
-        <vers num="2008" edition="sp3:itanium" />
-        <vers num="2008" edition="sp3:x86" />
-      </prod>
-      <prod vendor="microsoft" name="visual_basic">
-        <vers num="6.0" edition="" />
-        <vers num="6.0" edition=":runtime_extended_files" />
-      </prod>
-      <prod vendor="microsoft" name="visual_foxpro">
-        <vers num="8.0" edition="sp1" />
-        <vers num="9.0" edition="sp2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0159" published="2012-05-08" name="CVE-2012-0159" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview; Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Silverlight 4 before 4.1.10329; and Silverlight 5 before 5.1.10411 allow remote attackers to execute arbitrary code via a crafted TrueType font (TTF) file, aka "TrueType Font Parsing Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027039" source="SECTRACK">1027039</ref>
-      <ref url="http://www.securityfocus.com/bid/53335" source="BID">53335</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-039" source="MS">MS12-039</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-034" source="MS" adv="1">MS12-034</ref>
-      <ref url="http://secunia.com/advisories/49122" source="SECUNIA">49122</ref>
-      <ref url="http://secunia.com/advisories/49121" source="SECUNIA">49121</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15667" source="OVAL">oval:org.mitre.oval:def:15667</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15388" source="OVAL">oval:org.mitre.oval:def:15388</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="office">
-        <vers num="2003" edition="sp3" />
-        <vers num="2007" edition="sp2" />
-        <vers num="2007" edition="sp3" />
-        <vers num="2010" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="silverlight">
-        <vers num="4.0.50401.0" />
-        <vers num="4.0.50524.00" />
-        <vers num="4.0.50826.0" />
-        <vers num="4.0.50917.0" />
-        <vers num="4.0.51204.0" />
-        <vers num="4.0.60129.0" />
-        <vers num="4.0.60310.0" />
-        <vers num="4.0.60531.0" />
-        <vers num="4.0.60831.0" />
-        <vers num="4.1.10111.0" />
-        <vers num="5.0.60401.0" />
-        <vers num="5.0.60818.0" edition="rc" />
-        <vers num="5.0.61118.0" />
-      </prod>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="-" edition="sp1" />
-        <vers num="-" edition="sp1:x86" />
-        <vers num="-" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_8">
-        <vers num="consumer_preview" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="r2" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="-" edition="sp2" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0160" published="2012-05-08" name="CVE-2012-0160" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Serialization Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-035" source="MS" patch="1" adv="1">MS12-035</ref>
-      <ref url="http://www.securitytracker.com/id?1027036" source="SECTRACK">1027036</ref>
-      <ref url="http://www.securityfocus.com/bid/53356" source="BID">53356</ref>
-      <ref url="http://secunia.com/advisories/49117" source="SECUNIA" adv="1">49117</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15554" source="OVAL">oval:org.mitre.oval:def:15554</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name=".net_framework">
-        <vers num="1.0" edition="sp3" />
-        <vers num="1.1" edition="sp1" />
-        <vers num="2.0" edition="sp2" />
-        <vers num="3.0" edition="sp2" />
-        <vers num="3.5" edition="sp1" />
-        <vers num="3.5.1" />
-        <vers num="4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0161" published="2012-05-08" name="CVE-2012-0161" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Serialization Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027036" source="SECTRACK">1027036</ref>
-      <ref url="http://www.securityfocus.com/bid/53357" source="BID">53357</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-035" source="MS" adv="1">MS12-035</ref>
-      <ref url="http://secunia.com/advisories/49117" source="SECUNIA">49117</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14951" source="OVAL">oval:org.mitre.oval:def:14951</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name=".net_framework">
-        <vers num="1.0" edition="sp3" />
-        <vers num="1.1" edition="sp1" />
-        <vers num="2.0" edition="sp2" />
-        <vers num="3.0" edition="sp2" />
-        <vers num="3.5" edition="sp1" />
-        <vers num="3.5.1" />
-        <vers num="4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0162" published="2012-05-08" name="CVE-2012-0162" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft .NET Framework 4 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Buffer Allocation Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53358" source="BID">53358</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-034" source="MS" adv="1">MS12-034</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14655" source="OVAL">oval:org.mitre.oval:def:14655</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name=".net_framework">
-        <vers num="4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0163" published="2012-04-10" name="CVE-2012-0163" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Parameter Validation Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-025" source="MS" patch="1" adv="1">MS12-025</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15495" source="OVAL">oval:org.mitre.oval:def:15495</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name=".net_framework">
-        <vers num="1.0" edition="sp3" />
-        <vers num="1.1" edition="sp1" />
-        <vers num="2.0" edition="sp2" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="4.0" />
-        <vers num="4.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0164" published="2012-05-08" name="CVE-2012-0164" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Microsoft .NET Framework 4 does not properly compare index values, which allows remote attackers to cause a denial of service (application hang) via crafted requests to a Windows Presentation Foundation (WPF) application, aka ".NET Framework Index Comparison Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53363" source="BID">53363</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-034" source="MS" adv="1">MS12-034</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15580" source="OVAL">oval:org.mitre.oval:def:15580</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name=".net_framework">
-        <vers num="4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0165" published="2012-05-08" name="CVE-2012-0165" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, aka "GDI+ Record Type Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027038" source="SECTRACK">1027038</ref>
-      <ref url="http://www.securityfocus.com/bid/53347" source="BID">53347</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-034" source="MS" adv="1">MS12-034</ref>
-      <ref url="http://secunia.com/advisories/49121" source="SECUNIA">49121</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15621" source="OVAL">oval:org.mitre.oval:def:15621</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="office">
-        <vers num="2003" edition="sp3" />
-        <vers num="2007" edition="sp2" />
-        <vers num="2007" edition="sp3" />
-        <vers num="2010" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="-" edition="sp2" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="-" edition="sp2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0167" published="2012-05-08" name="CVE-2012-0167" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted EMF image in an Office document, aka "GDI+ Heap Overflow Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027038" source="SECTRACK">1027038</ref>
-      <ref url="http://www.securityfocus.com/bid/53351" source="BID">53351</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-034" source="MS" adv="1">MS12-034</ref>
-      <ref url="http://secunia.com/advisories/49121" source="SECUNIA">49121</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15628" source="OVAL">oval:org.mitre.oval:def:15628</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="office">
-        <vers num="2003" edition="sp3" />
-        <vers num="2007" edition="sp2" />
-        <vers num="2007" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0168" published="2012-04-10" name="CVE-2012-0168" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="7.6" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="4.9" CVSS_base_score="7.6">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 6 through 9 allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document that is not properly handled during a "Print table of links" print operation, aka "Print Feature Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-023" source="MS" patch="1" adv="1">MS12-023</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15577" source="OVAL">oval:org.mitre.oval:def:15577</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0169" published="2012-04-10" name="CVE-2012-0169" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "JScript9 Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-023" source="MS" patch="1" adv="1">MS12-023</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15611" source="OVAL">oval:org.mitre.oval:def:15611</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0170" published="2012-04-10" name="CVE-2012-0170" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnReadyStateChange Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-023" source="MS" patch="1" adv="1">MS12-023</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15573" source="OVAL">oval:org.mitre.oval:def:15573</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="6" />
-        <vers num="7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0171" published="2012-04-10" name="CVE-2012-0171" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "SelectAll Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-023" source="MS" patch="1" adv="1">MS12-023</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15313" source="OVAL">oval:org.mitre.oval:def:15313</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0172" published="2012-04-10" name="CVE-2012-0172" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Style Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-023" source="MS" patch="1" adv="1">MS12-023</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15550" source="OVAL">oval:org.mitre.oval:def:15550</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0173" published="2012-06-12" name="CVE-2012-0173" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability," a different vulnerability than CVE-2012-0002.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-036" source="MS" patch="1" adv="1">MS12-036</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15116" source="OVAL">oval:org.mitre.oval:def:15116</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x86" />
-        <vers num="" edition=":x64" />
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x86" />
-        <vers num="" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:itanium" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0174" published="2012-05-08" name="CVE-2012-0174" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="1.7" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.1" CVSS_base_score="1.7">
-    <desc>
-      <descript source="cve">Windows Firewall in tcpip.sys in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly enforce firewall rules for outbound broadcast packets, which allows remote attackers to obtain potentially sensitive information by observing broadcast traffic on a local network, aka "Windows Firewall Bypass Vulnerability."</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per http://technet.microsoft.com/en-us/security/bulletin/ms12-032 "An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability." "In order to use this vulnerability, an attacker would first have to gain access to the local subnet of the target computer. An attacker could then use another vulnerability to acquire information about the target system or execute code on the target system."</impact>
-    </impacts>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027044" source="SECTRACK">1027044</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-032" source="MS" adv="1">MS12-032</ref>
-      <ref url="http://secunia.com/advisories/49114" source="SECUNIA">49114</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15160" source="OVAL">oval:org.mitre.oval:def:15160</ref>
-      <ref url="http://osvdb.org/81730" source="OSVDB">81730</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="-" edition="sp1" />
-        <vers num="-" edition="sp1:x64" />
-        <vers num="-" edition="sp1:x86" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="-" edition="sp2" />
-        <vers num="r2" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="-" edition="sp2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0175" published="2012-07-10" name="CVE-2012-0175" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted name for a (1) file or (2) directory, aka "Command Injection Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-048" source="MS" adv="1">MS12-048</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14897" source="OVAL">oval:org.mitre.oval:def:14897</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_2003_server">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x86" />
-        <vers num="-" edition="-" />
-        <vers num="-" edition="-:x86" />
-        <vers num="-" edition="-:x64" />
-        <vers num="-" edition="sp1" />
-        <vers num="-" edition="sp1:x86" />
-        <vers num="-" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="r2" />
-        <vers num="" edition="r2:x64" />
-        <vers num="" edition="r2:itanium" />
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0176" published="2012-05-08" name="CVE-2012-0176" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Double free vulnerability in Microsoft Silverlight 4 before 4.1.10329 on Windows allows remote attackers to execute arbitrary code via vectors involving crafted XAML glyphs, aka "Silverlight Double-Free Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027040" source="SECTRACK">1027040</ref>
-      <ref url="http://www.securityfocus.com/bid/53360" source="BID">53360</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-034" source="MS" adv="1">MS12-034</ref>
-      <ref url="http://secunia.com/advisories/49122" source="SECUNIA">49122</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15574" source="OVAL">oval:org.mitre.oval:def:15574</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="silverlight">
-        <vers num="4.0.50401.0" />
-        <vers num="4.0.50524.00" />
-        <vers num="4.0.50826.0" />
-        <vers num="4.0.50917.0" />
-        <vers num="4.0.51204.0" />
-        <vers num="4.0.60129.0" />
-        <vers num="4.0.60310.0" />
-        <vers num="4.0.603310.0" />
-        <vers num="4.0.60531.0" />
-        <vers num="4.0.60831.0" />
-        <vers num="4.1.10111" />
-        <vers num="4.1.10111.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0177" published="2012-04-10" name="CVE-2012-0177" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the Office Works File Converter in Microsoft Office 2007 SP2, Works 9, and Works 6-9 File Converter allows remote attackers to execute arbitrary code via a crafted Works (aka .wps) file, aka "Office WPS Converter Heap Overflow Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-028" source="MS" patch="1" adv="1">MS12-028</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15598" source="OVAL">oval:org.mitre.oval:def:15598</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="office">
-        <vers num="2007" edition="sp2" />
-      </prod>
-      <prod vendor="microsoft" name="works">
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="microsoft" name="works_6-9_file_converter">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0178" published="2012-05-08" name="CVE-2012-0178" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="6.8" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.1" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Race condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that makes multiple simultaneous Plug and Play (PnP) Configuration Manager function calls, aka "Plug and Play (PnP) Configuration Manager Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-033" source="MS" adv="1">MS12-033</ref>
-      <ref url="http://secunia.com/advisories/49115" source="SECUNIA">49115</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15229" source="OVAL">oval:org.mitre.oval:def:15229</ref>
-      <ref url="http://osvdb.org/81735" source="OSVDB">81735</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x64" />
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x64" />
-        <vers num="-" edition="-" />
-        <vers num="-" edition="-:x32" />
-        <vers num="-" edition="-:x64" />
-        <vers num="-" edition="sp1" />
-        <vers num="-" edition="sp1:x64" />
-        <vers num="-" edition="sp1:x32" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x32" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition="-" />
-        <vers num="r2" edition="-:itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="sp2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0179" published="2012-05-08" name="CVE-2012-0179" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="6.8" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.1" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Double free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that binds an IPv6 address to a local interface, aka "TCP/IP Double Free Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027044" source="SECTRACK">1027044</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-032" source="MS" adv="1">MS12-032</ref>
-      <ref url="http://secunia.com/advisories/49114" source="SECUNIA">49114</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14908" source="OVAL">oval:org.mitre.oval:def:14908</ref>
-      <ref url="http://osvdb.org/81729" source="OSVDB">81729</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x86" />
-        <vers num="" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="r2" edition="sp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0180" published="2012-05-08" name="CVE-2012-0180" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode for (1) windows and (2) messages, which allows local users to gain privileges via a crafted application, aka "Windows and Messages Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027039" source="SECTRACK">1027039</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-034" source="MS" adv="1">MS12-034</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15466" source="OVAL">oval:org.mitre.oval:def:15466</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x86" />
-        <vers num="" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0181" published="2012-05-08" name="CVE-2012-0181" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly manage Keyboard Layout files, which allows local users to gain privileges via a crafted application, aka "Keyboard Layout File Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027039" source="SECTRACK">1027039</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-034" source="MS" adv="1">MS12-034</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15355" source="OVAL">oval:org.mitre.oval:def:15355</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x86" />
-        <vers num="" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="-" edition="sp2" />
-        <vers num="r2" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0183" published="2012-05-08" name="CVE-2012-0183" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "RTF Mismatch Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-029" source="MS" patch="1" adv="1">MS12-029</ref>
-      <ref url="http://www.securitytracker.com/id?1027035" source="SECTRACK">1027035</ref>
-      <ref url="http://www.securityfocus.com/bid/53344" source="BID">53344</ref>
-      <ref url="http://secunia.com/advisories/49111" source="SECUNIA">49111</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15327" source="OVAL">oval:org.mitre.oval:def:15327</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="office">
-        <vers num="2008" edition="" />
-        <vers num="2008" edition=":mac" />
-      </prod>
-      <prod vendor="microsoft" name="office_compatibility_pack">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp3" />
-      </prod>
-      <prod vendor="microsoft" name="word">
-        <vers num="2003" edition="sp3" />
-        <vers num="2007" edition="sp2" />
-        <vers num="2007" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0184" published="2012-05-08" name="CVE-2012-0184" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SXLI Record Memory Corruption Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027041" source="SECTRACK">1027041</ref>
-      <ref url="http://www.securityfocus.com/bid/53375" source="BID">53375</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-030" source="MS" adv="1">MS12-030</ref>
-      <ref url="http://secunia.com/advisories/49112" source="SECUNIA">49112</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14789" source="OVAL">oval:org.mitre.oval:def:14789</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="excel">
-        <vers num="2003" edition="sp3" />
-        <vers num="2007" edition="sp2" />
-        <vers num="2007" edition="sp3" />
-        <vers num="2010" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="excel_viewer">
-        <vers num="" />
-      </prod>
-      <prod vendor="microsoft" name="office">
-        <vers num="2008" />
-        <vers num="2011" edition="" />
-        <vers num="2011" edition=":mac" />
-      </prod>
-      <prod vendor="microsoft" name="office_compatibility_pack">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0185" published="2012-05-08" name="CVE-2012-0185" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening, aka "Excel MergeCells Record Heap Overflow Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027041" source="SECTRACK">1027041</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-030" source="MS" adv="1">MS12-030</ref>
-      <ref url="http://secunia.com/advisories/49112" source="SECUNIA">49112</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14738" source="OVAL">oval:org.mitre.oval:def:14738</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="excel">
-        <vers num="2007" edition="sp2" />
-        <vers num="2007" edition="sp3" />
-        <vers num="2010" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="excel_viewer">
-        <vers num="" />
-      </prod>
-      <prod vendor="microsoft" name="office_compatibility_pack">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0186" published="2012-06-22" name="CVE-2012-0186" modified="2012-06-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in the Eclipse Help component in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows remote attackers to discover the locations of files via a crafted URL.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72096" source="XF">lotusexpeditor-ehelp-dir-traversal(72096)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21575642" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21575642</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="lotus_expeditor">
-        <vers num="6.1" />
-        <vers num="6.1.1" />
-        <vers num="6.2" />
-        <vers num="6.2.1" />
-        <vers num="6.2.2" />
-        <vers num="6.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0187" published="2012-06-22" name="CVE-2012-0187" modified="2012-06-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows local users to gain privileges via a Trojan horse DLL in the current working directory.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72097" source="XF">lotusexpeditor-dll-code-execution(72097)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21575642" source="CONFIRM">http://www.ibm.com/support/docview.wss?uid=swg21575642</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="lotus_expeditor">
-        <vers num="6.1" />
-        <vers num="6.1.1" />
-        <vers num="6.2" />
-        <vers num="6.2.1" />
-        <vers num="6.2.2" />
-        <vers num="6.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0188" published="2012-01-18" name="CVE-2012-0188" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72118" source="XF">spss-mraboutb-activex-code-execution(72118)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21577956" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg21577956</ref>
-      <ref url="http://secunia.com/advisories/47565" source="SECUNIA" adv="1">47565</ref>
-      <ref url="http://osvdb.org/78329" source="OSVDB">78329</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="spss_data_collection">
-        <vers num="5.6" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-      </prod>
-      <prod vendor="ibm" name="spss_dimensions">
-        <vers num="5.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0189" published="2012-01-18" name="CVE-2012-0189" modified="2012-01-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in the (1) PrintFile and (2) SaveDoc methods in the VsVIEW6 ActiveX control in VsVIEW6.ocx in IBM SPSS SamplePower 3.0 allow remote attackers to execute arbitrary code via a crafted HTML document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72119" source="XF">spss-vsview6-activex-code-execution(72119)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21577951" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21577951</ref>
-      <ref url="http://secunia.com/advisories/47605" source="SECUNIA" adv="1">47605</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="spss_samplepower">
-        <vers num="3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0190" published="2012-01-18" name="CVE-2012-0190" modified="2012-01-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Render method in the ExportHTML.ocx ActiveX control in ExportHTML.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.6, 6.0, and 6.0.1 allows remote attackers to execute arbitrary code via a crafted HTML document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72121" source="XF">spss-wxporthtml-activex-code-execution(72121)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21577956" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg21577956</ref>
-      <ref url="http://secunia.com/advisories/47565" source="SECUNIA" adv="1">47565</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="spss_data_collection">
-        <vers num="5.6" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-      </prod>
-      <prod vendor="ibm" name="spss_dimensions">
-        <vers num="5.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0191" published="2012-06-22" name="CVE-2012-0191" modified="2012-06-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not properly perform access control for requests, which allows remote attackers to spoof a localhost request origin via crafted headers.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72156" source="XF">lotusexpeditor-acm-security-bypass(72156)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21575642" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21575642</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="lotus_expeditor">
-        <vers num="6.1" />
-        <vers num="6.1.1" />
-        <vers num="6.2" />
-        <vers num="6.2.1" />
-        <vers num="6.2.2" />
-        <vers num="6.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0192" published="2012-01-23" name="CVE-2012-0192" modified="2012-01-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded (1) JPEG or (2) PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a .doc file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72424" source="XF">lotus-symphony-vclmi-bo(72424)</ref>
-      <ref url="http://www.securityfocus.com/bid/51591" source="BID">51591</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21578684" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg21578684</ref>
-      <ref url="http://secunia.com/advisories/47245" source="SECUNIA" adv="1">47245</ref>
-      <ref url="http://osvdb.org/78345" source="OSVDB">78345</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="lotus_symphony">
-        <vers num="1.3" />
-        <vers num="3.0.0.1" />
-        <vers num="3.0.0.2" />
-        <vers prev="1" num="3.0.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0193" published="2012-01-19" name="CVE-2012-0193" modified="2012-01-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">IBM WebSphere Application Server (WAS) 6.0 through 6.0.2.43, 6.1 before 6.1.0.43, 7.0 before 7.0.0.23, and 8.0 before 8.0.0.3 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg24031821" source="CONFIRM" patch="1" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg24031821</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21577532" source="CONFIRM" patch="1" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg21577532</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1PM53930" source="AIXAPAR">PM53930</ref>
-      <ref url="http://osvdb.org/78321" source="OSVDB">78321</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="websphere_application_server">
-        <vers num="6.0.0.0" />
-        <vers num="6.0.0.2" />
-        <vers num="6.0.0.3" />
-        <vers num="6.0.1.0" />
-        <vers num="6.0.1.11" />
-        <vers num="6.0.1.12" />
-        <vers num="6.0.2.0" />
-        <vers num="6.0.2.1" />
-        <vers num="6.0.2.11" />
-        <vers num="6.0.2.13" />
-        <vers num="6.0.2.15" />
-        <vers num="6.0.2.17" />
-        <vers num="6.0.2.19" />
-        <vers num="6.0.2.2" />
-        <vers num="6.0.2.21" />
-        <vers num="6.0.2.23" />
-        <vers num="6.0.2.25" />
-        <vers num="6.0.2.27" />
-        <vers num="6.0.2.29" />
-        <vers num="6.0.2.3" />
-        <vers num="6.0.2.31" />
-        <vers num="6.0.2.33" />
-        <vers num="6.0.2.35" />
-        <vers num="6.0.2.37" />
-        <vers num="6.0.2.4" />
-        <vers num="6.0.2.43" />
-        <vers num="6.0.2.5" />
-        <vers num="6.0.2.6" />
-        <vers num="6.0.2.7" />
-        <vers num="6.0.2.8" />
-        <vers num="6.0.2.9" />
-        <vers num="6.1.0.0" />
-        <vers num="6.1.0.1" />
-        <vers num="6.1.0.11" />
-        <vers num="6.1.0.13" />
-        <vers num="6.1.0.14" />
-        <vers num="6.1.0.15" />
-        <vers num="6.1.0.17" />
-        <vers num="6.1.0.19" />
-        <vers num="6.1.0.21" />
-        <vers num="6.1.0.23" />
-        <vers num="6.1.0.25" />
-        <vers num="6.1.0.27" />
-        <vers num="6.1.0.3" />
-        <vers num="6.1.0.33" />
-        <vers num="6.1.0.35" />
-        <vers num="6.1.0.37" />
-        <vers num="6.1.0.39" />
-        <vers num="6.1.0.41" />
-        <vers num="6.1.0.5" />
-        <vers num="6.1.0.7" />
-        <vers num="6.1.0.9" />
-        <vers num="7.0.0.1" />
-        <vers num="7.0.0.11" />
-        <vers num="7.0.0.13" />
-        <vers num="7.0.0.15" />
-        <vers num="7.0.0.17" />
-        <vers num="7.0.0.19" />
-        <vers num="7.0.0.2" />
-        <vers num="7.0.0.21" />
-        <vers num="7.0.0.3" />
-        <vers num="7.0.0.5" />
-        <vers num="7.0.0.7" />
-        <vers num="7.0.0.9" />
-        <vers num="8.0.0.0" />
-        <vers num="8.0.0.1" />
-        <vers num="8.0.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0194" published="2012-02-06" name="CVE-2012-0194" modified="2012-02-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:C)" CVSS_score="7.1" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="8.6" CVSS_base_score="7.1">
-    <desc>
-      <descript source="cve">The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is enabled, allows remote attackers to cause a denial of service (assertion failure and panic) via an unspecified series of packets.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://aix.software.ibm.com/aix/efixes/security/large_send_advisory.asc" source="CONFIRM" patch="1" adv="1">http://aix.software.ibm.com/aix/efixes/security/large_send_advisory.asc</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72562" source="XF">aix-tcpstack-dos(72562)</ref>
-      <ref url="http://www.securityfocus.com/bid/51864" source="BID">51864</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV14211" source="AIXAPAR">IV14211</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV14210" source="AIXAPAR">IV14210</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV14209" source="AIXAPAR">IV14209</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV13827" source="AIXAPAR">IV13827</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV13820" source="AIXAPAR">IV13820</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV13751" source="AIXAPAR">IV13751</ref>
-      <ref url="http://securitytracker.com/id?1026640" source="SECTRACK">1026640</ref>
-      <ref url="http://secunia.com/advisories/47865" source="SECUNIA" adv="1">47865</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="aix">
-        <vers num="5.3" />
-        <vers num="6.1" />
-        <vers num="7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0195" published="2012-03-12" name="CVE-2012-0195" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Start Center Layout and Configuration component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 allows remote attackers to inject arbitrary web script or HTML via the display name.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72612" source="XF">mam-sclc-xss(72612)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21584666" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21584666</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IV09198" source="AIXAPAR">IV09198</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="maximo_asset_management">
-        <vers num="6.2" />
-        <vers num="7.1" />
-        <vers num="7.5" />
-      </prod>
-      <prod vendor="ibm" name="maximo_asset_management_essentials">
-        <vers num="6.2" />
-        <vers num="7.1" />
-        <vers num="7.5" />
-      </prod>
-      <prod vendor="ibm" name="maximo_service_desk">
-        <vers num="6.2" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_asset_management_for_it">
-        <vers num="6.2" />
-        <vers num="7.1" />
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_change_and_configuration_management_database">
-        <vers num="6.2" />
-        <vers num="7.1" />
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="ibm" name="trivoli_service_request_manager">
-        <vers num="7.1" />
-        <vers num="7.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0198" published="2012-03-05" name="CVE-2012-0198" modified="2012-03-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73033" source="XF">tpme-isigisigctl1-bo(73033)</ref>
-      <ref url="http://www.zerodayinitiative.com/advisories/ZDI-12-040/" source="MISC">http://www.zerodayinitiative.com/advisories/ZDI-12-040/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="tivoli_provisioning_manager_express_for_software_distribution">
-        <vers num="4.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0199" published="2012-03-05" name="CVE-2012-0199" modified="2012-03-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allow remote attackers to execute arbitrary SQL commands via (1) a SOAP message to the Printer.getPrinterAgentKey function in the SoapServlet servlet, (2) the User.updateUserValue function in the register.do servlet, (3) the User.isExistingUser function in the logon.do servlet, (4) the Asset.getHWKey function in the CallHomeExec servlet, (5) the Asset.getMimeType function in the getAttachment (aka GetAttachmentServlet) servlet, (6) the addAsset.do servlet, or (7) a crafted EG2 file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73034" source="XF">tpme-multiple-sql-injection(73034)</ref>
-      <ref url="http://www.zerodayinitiative.com/advisories/ZDI-12-040/" source="MISC">http://www.zerodayinitiative.com/advisories/ZDI-12-040/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="tivoli_provisioning_manager_express_for_software_distribution">
-        <vers num="4.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0200" published="2012-02-21" name="CVE-2012-0200" modified="2012-02-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">The server in IBM solidDB 6.5 before Interim Fix 6 does not properly initialize data structures, which allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a redundant WHERE condition.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73126" source="XF">soliddb-redundant-where-dos(73126)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg27021052" source="CONFIRM">http://www.ibm.com/support/docview.wss?uid=swg27021052</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC81244" source="AIXAPAR" adv="1">IC81244</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="soliddb">
-        <vers num="6.5.0.0" />
-        <vers num="6.5.0.1" />
-        <vers num="6.5.0.2" />
-        <vers num="6.5.0.3" />
-        <vers num="6.5.0.4" />
-        <vers num="6.5.0.5" />
-        <vers num="6.5.0.6" />
-        <vers num="6.5.0.7" />
-        <vers prev="1" num="6.5.0.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0201" published="2012-03-02" name="CVE-2012-0201" modified="2012-03-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote attackers to execute arbitrary code via a long profile string in a WorkStation (aka .ws) file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73127" source="XF">pcom-pcspref-bo(73127)</ref>
-      <ref url="http://www.stratsec.net/Research/Advisories/IBM-Personal-Communications-I-Series-Access-WorkSt" source="MISC">http://www.stratsec.net/Research/Advisories/IBM-Personal-Communications-I-Series-Access-WorkSt</ref>
-      <ref url="http://www.metasploit.com/modules/exploit/windows/fileformat/ibm_pcm_ws" source="MISC">http://www.metasploit.com/modules/exploit/windows/fileformat/ibm_pcm_ws</ref>
-      <ref url="http://www.exploit-db.com/exploits/18539/" source="EXPLOIT-DB">18539</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21586166" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg21586166</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC81539" source="AIXAPAR">IC81539</ref>
-      <ref url="http://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/fileformat/ibm_pcm_ws.rb" source="MISC">http://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/fileformat/ibm_pcm_ws.rb</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="personal_communications">
-        <vers num="5.9.7.0" />
-        <vers num="5.9.7.1" />
-        <vers num="6.0.3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0202" published="2012-05-04" name="CVE-2012-0202" modified="2012-05-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted data.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73182" source="XF">cognos-tm1admsd-bo(73182)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg24032166" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg24032166</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg24032165" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg24032165</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg24032164" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg24032164</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21590314" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg21590314</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="cognos_tm1">
-        <vers num="9.4.1" />
-        <vers num="9.4.1.3" />
-        <vers num="9.5.1" />
-        <vers num="9.5.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0206" published="2012-02-17" name="CVE-2012-0206" modified="2012-02-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">common_startup.cc in PowerDNS (aka pdns) Authoritative Server before 2.9.22.5 and 3.x before 3.0.1 allows remote attackers to cause a denial of service (packet loop) via a crafted UDP DNS response.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://doc.powerdns.com/powerdns-advisory-2012-01.html" source="CONFIRM" patch="1" adv="1">http://doc.powerdns.com/powerdns-advisory-2012-01.html</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=772570" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=772570</ref>
-      <ref url="http://doc.powerdns.com/changelog.html" source="CONFIRM">http://doc.powerdns.com/changelog.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="powerdns" name="powerdns">
-        <vers num="1.99.1" />
-        <vers num="1.99.10" />
-        <vers num="1.99.11" />
-        <vers num="1.99.12" />
-        <vers num="1.99.2" />
-        <vers num="1.99.3" />
-        <vers num="1.99.4" />
-        <vers num="1.99.5" />
-        <vers num="1.99.6" />
-        <vers num="1.99.7" />
-        <vers num="1.99.8" />
-        <vers num="1.99.9" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.1" />
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.4" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.7" />
-        <vers num="2.7.1" />
-        <vers num="2.8" />
-        <vers num="2.9" />
-        <vers num="2.9.1" />
-        <vers num="2.9.10" />
-        <vers num="2.9.11" />
-        <vers num="2.9.12" />
-        <vers num="2.9.13" />
-        <vers num="2.9.14" />
-        <vers num="2.9.15" />
-        <vers num="2.9.16" />
-        <vers num="2.9.17" />
-        <vers num="2.9.18" />
-        <vers num="2.9.19" />
-        <vers num="2.9.2" />
-        <vers num="2.9.20" />
-        <vers num="2.9.21" />
-        <vers num="2.9.21.1" />
-        <vers num="2.9.21.2" />
-        <vers prev="1" num="2.9.22" />
-        <vers num="2.9.3a" />
-        <vers num="2.9.4" />
-        <vers num="2.9.5" />
-        <vers num="2.9.6" />
-        <vers num="2.9.7" />
-        <vers num="2.9.8" />
-        <vers num="3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0207" published="2012-05-17" name="CVE-2012-0207" modified="2012-05-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP packets.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/a8c1f65c79cbbb2f7da782d4c9d15639a9b94b27" source="CONFIRM">https://github.com/torvalds/linux/commit/a8c1f65c79cbbb2f7da782d4c9d15639a9b94b27</ref>
-      <ref url="https://github.com/torvalds/linux/commit/25c413ad0029ea86008234be28aee33456e53e5b" source="CONFIRM">https://github.com/torvalds/linux/commit/25c413ad0029ea86008234be28aee33456e53e5b</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=772867" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=772867</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/10/5" source="MLIST">[oss-security] 20120110 CVE-2012-0207 kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.1" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.1</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=a8c1f65c79cbbb2f7da782d4c9d15639a9b94b27" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=a8c1f65c79cbbb2f7da782d4c9d15639a9b94b27</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654876" source="CONFIRM">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654876</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="1.2.0" />
-        <vers num="1.3.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.15" />
-        <vers num="2.0.16" />
-        <vers num="2.0.17" />
-        <vers num="2.0.18" />
-        <vers num="2.0.19" />
-        <vers num="2.0.2" />
-        <vers num="2.0.20" />
-        <vers num="2.0.21" />
-        <vers num="2.0.22" />
-        <vers num="2.0.23" />
-        <vers num="2.0.24" />
-        <vers num="2.0.25" />
-        <vers num="2.0.26" />
-        <vers num="2.0.27" />
-        <vers num="2.0.28" />
-        <vers num="2.0.29" />
-        <vers num="2.0.3" />
-        <vers num="2.0.30" />
-        <vers num="2.0.31" />
-        <vers num="2.0.32" />
-        <vers num="2.0.33" />
-        <vers num="2.0.34" />
-        <vers num="2.0.35" />
-        <vers num="2.0.36" />
-        <vers num="2.0.37" />
-        <vers num="2.0.38" />
-        <vers num="2.0.39" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1.132" />
-        <vers num="2.1.89" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.10" />
-        <vers num="2.2.11" />
-        <vers num="2.2.12" />
-        <vers num="2.2.13" edition="pre15" />
-        <vers num="2.2.14" />
-        <vers num="2.2.15" edition="pre16" />
-        <vers num="2.2.16" edition="pre5" />
-        <vers num="2.2.16" edition="pre6" />
-        <vers num="2.2.17" edition="pre14" />
-        <vers num="2.2.18" />
-        <vers num="2.2.19" />
-        <vers num="2.2.2" />
-        <vers num="2.2.20" />
-        <vers num="2.2.21" edition="pre1" />
-        <vers num="2.2.21" edition="pre2" />
-        <vers num="2.2.21" edition="pre3" />
-        <vers num="2.2.21" edition="pre4" />
-        <vers num="2.2.21" edition="rc1" />
-        <vers num="2.2.21" edition="rc2" />
-        <vers num="2.2.21" edition="rc3" />
-        <vers num="2.2.21" edition="rc4" />
-        <vers num="2.2.22" edition="rc1" />
-        <vers num="2.2.22" edition="rc2" />
-        <vers num="2.2.22" edition="rc3" />
-        <vers num="2.2.23" edition="rc1" />
-        <vers num="2.2.23" edition="rc2" />
-        <vers num="2.2.24" edition="rc2" />
-        <vers num="2.2.24" edition="rc3" />
-        <vers num="2.2.24" edition="rc4" />
-        <vers num="2.2.24" edition="rc5" />
-        <vers num="2.2.25" />
-        <vers num="2.2.26" />
-        <vers num="2.2.27" edition="pre1" />
-        <vers num="2.2.27" edition="pre2" />
-        <vers num="2.2.27" edition="rc1" />
-        <vers num="2.2.27" edition="rc2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" edition="rc1" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.13" />
-        <vers num="2.3.14" />
-        <vers num="2.3.15" />
-        <vers num="2.3.16" />
-        <vers num="2.3.17" />
-        <vers num="2.3.18" />
-        <vers num="2.3.19" />
-        <vers num="2.3.2" />
-        <vers num="2.3.20" />
-        <vers num="2.3.21" />
-        <vers num="2.3.22" />
-        <vers num="2.3.23" />
-        <vers num="2.3.24" />
-        <vers num="2.3.25" />
-        <vers num="2.3.26" />
-        <vers num="2.3.27" />
-        <vers num="2.3.28" />
-        <vers num="2.3.29" />
-        <vers num="2.3.3" />
-        <vers num="2.3.30" />
-        <vers num="2.3.31" />
-        <vers num="2.3.32" />
-        <vers num="2.3.33" />
-        <vers num="2.3.34" />
-        <vers num="2.3.35" />
-        <vers num="2.3.36" />
-        <vers num="2.3.37" />
-        <vers num="2.3.38" />
-        <vers num="2.3.39" />
-        <vers num="2.3.4" />
-        <vers num="2.3.40" />
-        <vers num="2.3.41" />
-        <vers num="2.3.42" />
-        <vers num="2.3.43" />
-        <vers num="2.3.44" />
-        <vers num="2.3.45" />
-        <vers num="2.3.46" />
-        <vers num="2.3.47" />
-        <vers num="2.3.48" />
-        <vers num="2.3.49" />
-        <vers num="2.3.5" />
-        <vers num="2.3.50" />
-        <vers num="2.3.51" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.3.99" edition="pre1" />
-        <vers num="2.3.99" edition="pre2" />
-        <vers num="2.3.99" edition="pre3" />
-        <vers num="2.3.99" edition="pre4" />
-        <vers num="2.3.99" edition="pre5" />
-        <vers num="2.3.99" edition="pre6" />
-        <vers num="2.3.99" edition="pre7" />
-        <vers num="2.3.99" edition="pre8" />
-        <vers num="2.3.99" edition="pre9" />
-        <vers num="2.4.0" edition="test1" />
-        <vers num="2.4.0" edition="test10" />
-        <vers num="2.4.0" edition="test11" />
-        <vers num="2.4.0" edition="test12" />
-        <vers num="2.4.0" edition="test2" />
-        <vers num="2.4.0" edition="test3" />
-        <vers num="2.4.0" edition="test4" />
-        <vers num="2.4.0" edition="test5" />
-        <vers num="2.4.0" edition="test6" />
-        <vers num="2.4.0" edition="test7" />
-        <vers num="2.4.0" edition="test8" />
-        <vers num="2.4.0" edition="test9" />
-        <vers num="2.4.1" />
-        <vers num="2.4.10" />
-        <vers num="2.4.11" edition="pre3" />
-        <vers num="2.4.12" />
-        <vers num="2.4.13" />
-        <vers num="2.4.14" />
-        <vers num="2.4.15" />
-        <vers num="2.4.16" />
-        <vers num="2.4.17" />
-        <vers num="2.4.18" edition="pre1" />
-        <vers num="2.4.18" edition="pre2" />
-        <vers num="2.4.18" edition="pre3" />
-        <vers num="2.4.18" edition="pre4" />
-        <vers num="2.4.18" edition="pre5" />
-        <vers num="2.4.18" edition="pre6" />
-        <vers num="2.4.18" edition="pre7" />
-        <vers num="2.4.18" edition="pre8" />
-        <vers num="2.4.18" edition="pre9" />
-        <vers num="2.4.19" edition="pre1" />
-        <vers num="2.4.19" edition="pre2" />
-        <vers num="2.4.19" edition="pre3" />
-        <vers num="2.4.19" edition="pre4" />
-        <vers num="2.4.19" edition="pre5" />
-        <vers num="2.4.19" edition="pre6" />
-        <vers num="2.4.2" />
-        <vers num="2.4.20" />
-        <vers num="2.4.21" edition="pre1" />
-        <vers num="2.4.21" edition="pre4" />
-        <vers num="2.4.21" edition="pre7" />
-        <vers num="2.4.22" edition="pre10" />
-        <vers num="2.4.23" edition="pre9" />
-        <vers num="2.4.24" />
-        <vers num="2.4.25" />
-        <vers num="2.4.26" />
-        <vers num="2.4.27" edition="pre1" />
-        <vers num="2.4.27" edition="pre2" />
-        <vers num="2.4.27" edition="pre3" />
-        <vers num="2.4.27" edition="pre4" />
-        <vers num="2.4.27" edition="pre5" />
-        <vers num="2.4.28" />
-        <vers num="2.4.29" edition="rc1" />
-        <vers num="2.4.29" edition="rc2" />
-        <vers num="2.4.3" edition="pre3" />
-        <vers num="2.4.30" edition="rc2" />
-        <vers num="2.4.30" edition="rc3" />
-        <vers num="2.4.31" edition="pre1" />
-        <vers num="2.4.32" edition="pre1" />
-        <vers num="2.4.32" edition="pre2" />
-        <vers num="2.4.33" edition="pre1" />
-        <vers num="2.4.33.2" />
-        <vers num="2.4.33.3" />
-        <vers num="2.4.33.4" />
-        <vers num="2.4.33.5" />
-        <vers num="2.4.34" edition="rc3" />
-        <vers num="2.4.34.1" />
-        <vers num="2.4.34.2" />
-        <vers num="2.4.35" />
-        <vers num="2.4.35.2" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers num="2.4.8" />
-        <vers num="2.4.9" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.10" />
-        <vers num="2.5.11" />
-        <vers num="2.5.12" />
-        <vers num="2.5.13" />
-        <vers num="2.5.14" />
-        <vers num="2.5.15" />
-        <vers num="2.5.16" />
-        <vers num="2.5.17" />
-        <vers num="2.5.18" />
-        <vers num="2.5.19" />
-        <vers num="2.5.2" />
-        <vers num="2.5.20" />
-        <vers num="2.5.21" />
-        <vers num="2.5.22" />
-        <vers num="2.5.23" />
-        <vers num="2.5.24" />
-        <vers num="2.5.25" />
-        <vers num="2.5.26" />
-        <vers num="2.5.27" />
-        <vers num="2.5.28" />
-        <vers num="2.5.29" />
-        <vers num="2.5.3" />
-        <vers num="2.5.30" />
-        <vers num="2.5.31" />
-        <vers num="2.5.32" />
-        <vers num="2.5.33" />
-        <vers num="2.5.34" />
-        <vers num="2.5.35" />
-        <vers num="2.5.36" />
-        <vers num="2.5.37" />
-        <vers num="2.5.38" />
-        <vers num="2.5.39" />
-        <vers num="2.5.4" />
-        <vers num="2.5.40" />
-        <vers num="2.5.41" />
-        <vers num="2.5.42" />
-        <vers num="2.5.43" />
-        <vers num="2.5.44" />
-        <vers num="2.5.45" />
-        <vers num="2.5.46" />
-        <vers num="2.5.47" />
-        <vers num="2.5.48" />
-        <vers num="2.5.49" />
-        <vers num="2.5.5" />
-        <vers num="2.5.50" />
-        <vers num="2.5.51" />
-        <vers num="2.5.52" />
-        <vers num="2.5.53" />
-        <vers num="2.5.54" />
-        <vers num="2.5.55" />
-        <vers num="2.5.56" />
-        <vers num="2.5.57" />
-        <vers num="2.5.58" />
-        <vers num="2.5.59" />
-        <vers num="2.5.6" />
-        <vers num="2.5.60" />
-        <vers num="2.5.61" />
-        <vers num="2.5.62" />
-        <vers num="2.5.63" />
-        <vers num="2.5.64" />
-        <vers num="2.5.65" />
-        <vers num="2.5.66" />
-        <vers num="2.5.67" />
-        <vers num="2.5.68" />
-        <vers num="2.5.69" />
-        <vers num="2.5.7" />
-        <vers num="2.5.8" />
-        <vers num="2.5.9" />
-        <vers num="2.6.0" edition="test1" />
-        <vers num="2.6.0" edition="test10" />
-        <vers num="2.6.0" edition="test11" />
-        <vers num="2.6.0" edition="test2" />
-        <vers num="2.6.0" edition="test3" />
-        <vers num="2.6.0" edition="test4" />
-        <vers num="2.6.0" edition="test5" />
-        <vers num="2.6.0" edition="test6" />
-        <vers num="2.6.0" edition="test7" />
-        <vers num="2.6.0" edition="test8" />
-        <vers num="2.6.0" edition="test9" />
-        <vers num="2.6.1" edition="rc1" />
-        <vers num="2.6.1" edition="rc2" />
-        <vers num="2.6.1" edition="rc3" />
-        <vers num="2.6.10" edition="rc1" />
-        <vers num="2.6.10" edition="rc2" />
-        <vers num="2.6.10" edition="rc3" />
-        <vers num="2.6.11" edition="rc1" />
-        <vers num="2.6.11" edition="rc2" />
-        <vers num="2.6.11" edition="rc3" />
-        <vers num="2.6.11" edition="rc4" />
-        <vers num="2.6.11" edition="rc5" />
-        <vers num="2.6.11.1" />
-        <vers num="2.6.11.10" />
-        <vers num="2.6.11.11" />
-        <vers num="2.6.11.12" />
-        <vers num="2.6.11.2" />
-        <vers num="2.6.11.3" />
-        <vers num="2.6.11.4" />
-        <vers num="2.6.11.5" />
-        <vers num="2.6.11.6" />
-        <vers num="2.6.11.7" />
-        <vers num="2.6.11.8" />
-        <vers num="2.6.11.9" />
-        <vers num="2.6.12" edition="rc1" />
-        <vers num="2.6.12" edition="rc2" />
-        <vers num="2.6.12" edition="rc3" />
-        <vers num="2.6.12" edition="rc4" />
-        <vers num="2.6.12" edition="rc5" />
-        <vers num="2.6.12" edition="rc6" />
-        <vers num="2.6.12.1" />
-        <vers num="2.6.12.2" />
-        <vers num="2.6.12.3" />
-        <vers num="2.6.12.4" />
-        <vers num="2.6.12.5" />
-        <vers num="2.6.12.6" />
-        <vers num="2.6.13" edition="rc1" />
-        <vers num="2.6.13" edition="rc2" />
-        <vers num="2.6.13" edition="rc3" />
-        <vers num="2.6.13" edition="rc4" />
-        <vers num="2.6.13" edition="rc5" />
-        <vers num="2.6.13" edition="rc6" />
-        <vers num="2.6.13" edition="rc7" />
-        <vers num="2.6.13.1" />
-        <vers num="2.6.13.2" />
-        <vers num="2.6.13.3" />
-        <vers num="2.6.13.4" />
-        <vers num="2.6.13.5" />
-        <vers num="2.6.14" edition="rc1" />
-        <vers num="2.6.14" edition="rc2" />
-        <vers num="2.6.14" edition="rc3" />
-        <vers num="2.6.14" edition="rc4" />
-        <vers num="2.6.14" edition="rc5" />
-        <vers num="2.6.14.1" />
-        <vers num="2.6.14.2" />
-        <vers num="2.6.14.3" />
-        <vers num="2.6.14.4" />
-        <vers num="2.6.14.5" />
-        <vers num="2.6.14.6" />
-        <vers num="2.6.14.7" />
-        <vers num="2.6.15" edition="rc1" />
-        <vers num="2.6.15" edition="rc2" />
-        <vers num="2.6.15" edition="rc3" />
-        <vers num="2.6.15" edition="rc4" />
-        <vers num="2.6.15" edition="rc5" />
-        <vers num="2.6.15" edition="rc6" />
-        <vers num="2.6.15" edition="rc7" />
-        <vers num="2.6.15.1" />
-        <vers num="2.6.15.10" />
-        <vers num="2.6.15.11" />
-        <vers num="2.6.15.2" />
-        <vers num="2.6.15.3" />
-        <vers num="2.6.15.4" />
-        <vers num="2.6.15.5" />
-        <vers num="2.6.15.6" />
-        <vers num="2.6.15.7" />
-        <vers num="2.6.15.8" />
-        <vers num="2.6.15.9" />
-        <vers num="2.6.16" edition="rc1" />
-        <vers num="2.6.16" edition="rc2" />
-        <vers num="2.6.16" edition="rc3" />
-        <vers num="2.6.16" edition="rc4" />
-        <vers num="2.6.16" edition="rc5" />
-        <vers num="2.6.16" edition="rc6" />
-        <vers num="2.6.16" edition="rc7" />
-        <vers num="2.6.16.1" />
-        <vers num="2.6.16.10" />
-        <vers num="2.6.16.11" />
-        <vers num="2.6.16.12" />
-        <vers num="2.6.16.13" />
-        <vers num="2.6.16.14" />
-        <vers num="2.6.16.15" />
-        <vers num="2.6.16.16" />
-        <vers num="2.6.16.17" />
-        <vers num="2.6.16.18" />
-        <vers num="2.6.16.19" />
-        <vers num="2.6.16.2" />
-        <vers num="2.6.16.20" />
-        <vers num="2.6.16.21" />
-        <vers num="2.6.16.22" />
-        <vers num="2.6.16.23" />
-        <vers num="2.6.16.24" />
-        <vers num="2.6.16.25" />
-        <vers num="2.6.16.26" />
-        <vers num="2.6.16.27" />
-        <vers num="2.6.16.28" />
-        <vers num="2.6.16.29" />
-        <vers num="2.6.16.3" />
-        <vers num="2.6.16.30" />
-        <vers num="2.6.16.31" />
-        <vers num="2.6.16.32" />
-        <vers num="2.6.16.33" />
-        <vers num="2.6.16.34" />
-        <vers num="2.6.16.35" />
-        <vers num="2.6.16.36" />
-        <vers num="2.6.16.37" />
-        <vers num="2.6.16.38" />
-        <vers num="2.6.16.39" />
-        <vers num="2.6.16.4" />
-        <vers num="2.6.16.40" />
-        <vers num="2.6.16.41" />
-        <vers num="2.6.16.42" />
-        <vers num="2.6.16.43" />
-        <vers num="2.6.16.44" />
-        <vers num="2.6.16.45" />
-        <vers num="2.6.16.46" />
-        <vers num="2.6.16.47" />
-        <vers num="2.6.16.48" />
-        <vers num="2.6.16.49" />
-        <vers num="2.6.16.5" />
-        <vers num="2.6.16.50" />
-        <vers num="2.6.16.51" />
-        <vers num="2.6.16.52" />
-        <vers num="2.6.16.53" />
-        <vers num="2.6.16.54" />
-        <vers num="2.6.16.55" />
-        <vers num="2.6.16.56" />
-        <vers num="2.6.16.57" />
-        <vers num="2.6.16.58" />
-        <vers num="2.6.16.59" />
-        <vers num="2.6.16.6" />
-        <vers num="2.6.16.60" />
-        <vers num="2.6.16.61" />
-        <vers num="2.6.16.62" />
-        <vers num="2.6.16.7" />
-        <vers num="2.6.16.8" />
-        <vers num="2.6.16.9" />
-        <vers num="2.6.17" edition="rc1" />
-        <vers num="2.6.17" edition="rc2" />
-        <vers num="2.6.17" edition="rc3" />
-        <vers num="2.6.17" edition="rc4" />
-        <vers num="2.6.17" edition="rc5" />
-        <vers num="2.6.17" edition="rc6" />
-        <vers num="2.6.17.1" />
-        <vers num="2.6.17.10" />
-        <vers num="2.6.17.11" />
-        <vers num="2.6.17.12" />
-        <vers num="2.6.17.13" />
-        <vers num="2.6.17.14" />
-        <vers num="2.6.17.2" />
-        <vers num="2.6.17.3" />
-        <vers num="2.6.17.4" />
-        <vers num="2.6.17.5" />
-        <vers num="2.6.17.6" />
-        <vers num="2.6.17.7" />
-        <vers num="2.6.17.8" />
-        <vers num="2.6.17.9" />
-        <vers num="2.6.18" edition="rc1" />
-        <vers num="2.6.18" edition="rc2" />
-        <vers num="2.6.18" edition="rc3" />
-        <vers num="2.6.18" edition="rc4" />
-        <vers num="2.6.18" edition="rc5" />
-        <vers num="2.6.18" edition="rc6" />
-        <vers num="2.6.18" edition="rc7" />
-        <vers num="2.6.18.1" />
-        <vers num="2.6.18.2" />
-        <vers num="2.6.18.3" />
-        <vers num="2.6.18.4" />
-        <vers num="2.6.18.5" />
-        <vers num="2.6.18.6" />
-        <vers num="2.6.18.7" />
-        <vers num="2.6.18.8" />
-        <vers num="2.6.19" edition="rc1" />
-        <vers num="2.6.19" edition="rc2" />
-        <vers num="2.6.19" edition="rc3" />
-        <vers num="2.6.19" edition="rc4" />
-        <vers num="2.6.19.1" />
-        <vers num="2.6.19.2" />
-        <vers num="2.6.19.3" />
-        <vers num="2.6.19.4" />
-        <vers num="2.6.19.5" />
-        <vers num="2.6.19.6" />
-        <vers num="2.6.19.7" />
-        <vers num="2.6.2" edition="rc1" />
-        <vers num="2.6.2" edition="rc2" />
-        <vers num="2.6.2" edition="rc3" />
-        <vers num="2.6.20" edition="rc2" />
-        <vers num="2.6.20.1" />
-        <vers num="2.6.20.10" />
-        <vers num="2.6.20.11" />
-        <vers num="2.6.20.12" />
-        <vers num="2.6.20.13" />
-        <vers num="2.6.20.14" />
-        <vers num="2.6.20.15" />
-        <vers num="2.6.20.16" />
-        <vers num="2.6.20.17" />
-        <vers num="2.6.20.18" />
-        <vers num="2.6.20.19" />
-        <vers num="2.6.20.2" />
-        <vers num="2.6.20.20" />
-        <vers num="2.6.20.21" />
-        <vers num="2.6.20.3" />
-        <vers num="2.6.20.4" />
-        <vers num="2.6.20.5" />
-        <vers num="2.6.20.6" />
-        <vers num="2.6.20.7" />
-        <vers num="2.6.20.8" />
-        <vers num="2.6.20.9" />
-        <vers num="2.6.21" edition="git1" />
-        <vers num="2.6.21" edition="git2" />
-        <vers num="2.6.21" edition="git3" />
-        <vers num="2.6.21" edition="git4" />
-        <vers num="2.6.21" edition="git5" />
-        <vers num="2.6.21" edition="git6" />
-        <vers num="2.6.21" edition="git7" />
-        <vers num="2.6.21" edition="rc3" />
-        <vers num="2.6.21" edition="rc4" />
-        <vers num="2.6.21" edition="rc5" />
-        <vers num="2.6.21" edition="rc6" />
-        <vers num="2.6.21" edition="rc7" />
-        <vers num="2.6.21.1" />
-        <vers num="2.6.21.2" />
-        <vers num="2.6.21.3" />
-        <vers num="2.6.21.4" />
-        <vers num="2.6.21.5" />
-        <vers num="2.6.21.6" />
-        <vers num="2.6.21.7" />
-        <vers num="2.6.22" />
-        <vers num="2.6.22.1" />
-        <vers num="2.6.22.10" />
-        <vers num="2.6.22.11" />
-        <vers num="2.6.22.12" />
-        <vers num="2.6.22.13" />
-        <vers num="2.6.22.14" />
-        <vers num="2.6.22.15" />
-        <vers num="2.6.22.16" />
-        <vers num="2.6.22.17" />
-        <vers num="2.6.22.18" />
-        <vers num="2.6.22.19" />
-        <vers num="2.6.22.2" />
-        <vers num="2.6.22.20" />
-        <vers num="2.6.22.3" />
-        <vers num="2.6.22.4" />
-        <vers num="2.6.22.5" />
-        <vers num="2.6.22.6" />
-        <vers num="2.6.22.7" />
-        <vers num="2.6.22.8" />
-        <vers num="2.6.27.41" />
-        <vers num="2.6.27.42" />
-        <vers num="2.6.27.43" />
-        <vers num="2.6.27.44" />
-        <vers num="2.6.27.45" />
-        <vers num="2.6.27.46" />
-        <vers num="2.6.27.47" />
-        <vers num="2.6.27.48" />
-        <vers num="2.6.27.49" />
-        <vers num="2.6.27.5" />
-        <vers num="2.6.27.50" />
-        <vers num="2.6.27.51" />
-        <vers num="2.6.27.52" />
-        <vers num="2.6.27.53" />
-        <vers num="2.6.27.54" />
-        <vers num="2.6.27.55" />
-        <vers num="2.6.27.56" />
-        <vers num="2.6.27.57" />
-        <vers num="2.6.27.58" />
-        <vers num="2.6.27.59" />
-        <vers num="2.6.27.6" />
-        <vers num="2.6.27.60" />
-        <vers num="2.6.27.61" />
-        <vers num="2.6.27.62" />
-        <vers num="2.6.27.7" />
-        <vers num="2.6.27.8" />
-        <vers num="2.6.27.9" />
-        <vers num="2.6.28" />
-        <vers num="2.6.28.1" />
-        <vers num="2.6.28.10" />
-        <vers num="2.6.28.2" />
-        <vers num="2.6.28.3" />
-        <vers num="2.6.28.4" />
-        <vers num="2.6.28.5" />
-        <vers num="2.6.28.6" />
-        <vers num="2.6.28.7" />
-        <vers num="2.6.28.8" />
-        <vers num="2.6.28.9" />
-        <vers num="2.6.29" />
-        <vers num="2.6.29.1" />
-        <vers num="2.6.29.2" />
-        <vers num="2.6.29.3" />
-        <vers num="2.6.29.4" />
-        <vers num="2.6.29.5" />
-        <vers num="2.6.29.6" />
-        <vers num="2.6.3" edition="rc1" />
-        <vers num="2.6.3" edition="rc2" />
-        <vers num="2.6.3" edition="rc3" />
-        <vers num="2.6.3" edition="rc4" />
-        <vers num="2.6.32" />
-        <vers num="2.6.32.1" />
-        <vers num="2.6.32.10" />
-        <vers num="2.6.32.11" />
-        <vers num="2.6.32.12" />
-        <vers num="2.6.32.13" />
-        <vers num="2.6.32.14" />
-        <vers num="2.6.32.15" />
-        <vers num="2.6.32.16" />
-        <vers num="2.6.32.17" />
-        <vers num="2.6.32.18" />
-        <vers num="2.6.32.2" />
-        <vers num="2.6.32.28" />
-        <vers num="2.6.32.29" />
-        <vers num="2.6.32.3" />
-        <vers num="2.6.32.30" />
-        <vers num="2.6.32.31" />
-        <vers num="2.6.32.32" />
-        <vers num="2.6.32.33" />
-        <vers num="2.6.32.34" />
-        <vers num="2.6.32.35" />
-        <vers num="2.6.32.36" />
-        <vers num="2.6.32.37" />
-        <vers num="2.6.32.38" />
-        <vers num="2.6.32.39" />
-        <vers num="2.6.32.4" />
-        <vers num="2.6.32.40" />
-        <vers num="2.6.32.41" />
-        <vers num="2.6.32.42" />
-        <vers num="2.6.32.43" />
-        <vers num="2.6.32.44" />
-        <vers num="2.6.32.45" />
-        <vers num="2.6.32.46" />
-        <vers num="2.6.32.47" />
-        <vers num="2.6.32.48" />
-        <vers num="2.6.32.49" />
-        <vers num="2.6.32.5" />
-        <vers num="2.6.32.50" />
-        <vers num="2.6.32.51" />
-        <vers num="2.6.32.52" />
-        <vers num="2.6.32.53" />
-        <vers num="2.6.32.54" />
-        <vers num="2.6.32.55" />
-        <vers num="2.6.32.56" />
-        <vers num="2.6.32.57" />
-        <vers num="2.6.32.58" />
-        <vers num="2.6.32.6" />
-        <vers num="2.6.32.7" />
-        <vers num="2.6.32.8" />
-        <vers num="2.6.32.9" />
-        <vers num="2.6.33.10" />
-        <vers num="2.6.33.11" />
-        <vers num="2.6.33.12" />
-        <vers num="2.6.33.13" />
-        <vers num="2.6.33.14" />
-        <vers num="2.6.33.15" />
-        <vers num="2.6.33.16" />
-        <vers num="2.6.33.17" />
-        <vers num="2.6.33.18" />
-        <vers num="2.6.33.19" />
-        <vers num="2.6.33.20" />
-        <vers num="2.6.33.8" />
-        <vers num="2.6.33.9" />
-        <vers num="2.6.34.1" />
-        <vers num="2.6.34.10" />
-        <vers num="2.6.34.2" />
-        <vers num="2.6.34.3" />
-        <vers num="2.6.34.8" />
-        <vers num="2.6.34.9" />
-        <vers num="2.6.35.1" />
-        <vers num="2.6.35.10" />
-        <vers num="2.6.35.11" />
-        <vers num="2.6.35.12" />
-        <vers num="2.6.35.13" />
-        <vers num="2.6.37" edition="rc1" />
-        <vers num="2.6.37" edition="rc2" />
-        <vers num="2.6.37" edition="rc3" />
-        <vers num="2.6.37" edition="rc4" />
-        <vers num="2.6.37" edition="rc5" />
-        <vers num="2.6.38" edition="rc1" />
-        <vers num="2.6.38" edition="rc2" />
-        <vers num="2.6.38" edition="rc3" />
-        <vers num="2.6.38" edition="rc4" />
-        <vers num="2.6.38" edition="rc5" />
-        <vers num="2.6.38" edition="rc6" />
-        <vers num="2.6.38" edition="rc7" />
-        <vers num="2.6.38" edition="rc8" />
-        <vers num="2.6.39" edition="rc1" />
-        <vers num="2.6.39" edition="rc2" />
-        <vers num="2.6.39" edition="rc3" />
-        <vers num="2.6.39" edition="rc4" />
-        <vers num="2.6.39" edition="rc5" />
-        <vers num="2.6.39" edition="rc6" />
-        <vers num="2.6.39" edition="rc7" />
-        <vers num="2.6.4" edition="rc1" />
-        <vers num="2.6.4" edition="rc2" />
-        <vers num="2.6.4" edition="rc3" />
-        <vers num="2.6.5" edition="rc1" />
-        <vers num="2.6.5" edition="rc2" />
-        <vers num="2.6.5" edition="rc3" />
-        <vers num="2.6.6" edition="rc1" />
-        <vers num="2.6.6" edition="rc2" />
-        <vers num="2.6.6" edition="rc3" />
-        <vers num="2.6.7" edition="rc1" />
-        <vers num="2.6.7" edition="rc2" />
-        <vers num="2.6.7" edition="rc3" />
-        <vers num="2.6.8" edition="rc1" />
-        <vers num="2.6.8" edition="rc2" />
-        <vers num="2.6.8" edition="rc3" />
-        <vers num="2.6.8" edition="rc4" />
-        <vers num="2.6.8.1" />
-        <vers num="2.6.9" edition="rc1" />
-        <vers num="2.6.9" edition="rc2" />
-        <vers num="2.6.9" edition="rc3" />
-        <vers num="2.6.9" edition="rc4" />
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0" edition="rc2" />
-        <vers num="3.0" edition="rc3" />
-        <vers num="3.0" edition="rc4" />
-        <vers num="3.0" edition="rc5" />
-        <vers num="3.0" edition="rc6" />
-        <vers num="3.0" edition="rc7" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.19" />
-        <vers num="3.0.20" />
-        <vers num="3.0.21" />
-        <vers num="3.0.22" />
-        <vers num="3.0.23" />
-        <vers num="3.0.24" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers prev="1" num="3.2" edition="rc2" />
-        <vers prev="1" num="3.2" edition="rc3" />
-        <vers prev="1" num="3.2" edition="rc4" />
-        <vers prev="1" num="3.2" edition="rc5" />
-        <vers prev="1" num="3.2" edition="rc6" />
-        <vers prev="1" num="3.2" edition="rc7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0208" published="2012-05-03" name="CVE-2012-0208" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to qrsh.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026950" source="SECTRACK">1026950</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="sun_products_suite">
-        <vers num="6.1" />
-        <vers num="6.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0210" published="2012-06-15" name="CVE-2012-0210" modified="2012-06-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arbitrary code via the file name in a (1) .dsc or (2) .changes file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git;a=commitdiff;h=797ddc961532eb0aeb46153e3f28c8e9ea0500d2" source="CONFIRM" patch="1">http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git;a=commitdiff;h=797ddc961532eb0aeb46153e3f28c8e9ea0500d2</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73215" source="XF">devscripts-dsc-code-execution(73215)</ref>
-      <ref url="http://www.securityfocus.com/bid/52029" source="BID">52029</ref>
-      <ref url="http://www.osvdb.org/79319" source="OSVDB">79319</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2409" source="DEBIAN">DSA-2409</ref>
-      <ref url="http://ubuntu.com/usn/usn-1366-1" source="UBUNTU" adv="1">USN-1366-1</ref>
-      <ref url="http://secunia.com/advisories/48039" source="SECUNIA" adv="1">48039</ref>
-      <ref url="http://secunia.com/advisories/47955" source="SECUNIA" adv="1">47955</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="devscripts_devel_team" name="devscripts">
-        <vers num="2.10.0" />
-        <vers num="2.10.1" />
-        <vers num="2.10.10" />
-        <vers num="2.10.11" />
-        <vers num="2.10.12" />
-        <vers num="2.10.13" />
-        <vers num="2.10.14" />
-        <vers num="2.10.15" />
-        <vers num="2.10.16" />
-        <vers num="2.10.17" />
-        <vers num="2.10.18" />
-        <vers num="2.10.18.1" />
-        <vers num="2.10.19" />
-        <vers num="2.10.20" />
-        <vers num="2.10.21" />
-        <vers num="2.10.22" />
-        <vers num="2.10.23" />
-        <vers num="2.10.24" />
-        <vers num="2.10.25" />
-        <vers num="2.10.26" />
-        <vers num="2.10.27" />
-        <vers num="2.10.28" />
-        <vers num="2.10.29" />
-        <vers num="2.10.3" />
-        <vers num="2.10.30" />
-        <vers num="2.10.31" />
-        <vers num="2.10.32" />
-        <vers num="2.10.33" />
-        <vers num="2.10.34" />
-        <vers num="2.10.35" />
-        <vers num="2.10.36" />
-        <vers num="2.10.38" />
-        <vers num="2.10.39" />
-        <vers num="2.10.40" />
-        <vers num="2.10.41" />
-        <vers num="2.10.42" />
-        <vers num="2.10.43" />
-        <vers num="2.10.44" />
-        <vers num="2.10.45" />
-        <vers num="2.10.46" />
-        <vers num="2.10.47" />
-        <vers num="2.10.48" />
-        <vers num="2.10.49" />
-        <vers num="2.10.50" />
-        <vers num="2.10.51" />
-        <vers num="2.10.52" />
-        <vers num="2.10.53" />
-        <vers num="2.10.54" />
-        <vers num="2.10.55" />
-        <vers num="2.10.56" />
-        <vers num="2.10.57" />
-        <vers num="2.10.58" />
-        <vers num="2.10.59" />
-        <vers num="2.10.6" />
-        <vers num="2.10.60" />
-        <vers num="2.10.61" />
-        <vers num="2.10.62" />
-        <vers num="2.10.63" />
-        <vers num="2.10.64" />
-        <vers num="2.10.65.1" />
-        <vers num="2.10.66" />
-        <vers num="2.10.67" />
-        <vers num="2.10.68" />
-        <vers num="2.10.7" />
-        <vers num="2.10.8" />
-        <vers num="2.10.9" />
-        <vers num="2.11.0" />
-        <vers num="2.11.1" />
-        <vers num="2.11.2" />
-        <vers num="2.11.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0211" published="2012-06-15" name="CVE-2012-0211" modified="2012-06-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball of a source package.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git;a=commitdiff;h=87f88232eb643f0c118c6ba38db8e966915b450f" source="CONFIRM" patch="1">http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git;a=commitdiff;h=87f88232eb643f0c118c6ba38db8e966915b450f</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73216" source="XF">devscripts-commands-code-execution(73216)</ref>
-      <ref url="http://www.securityfocus.com/bid/52029" source="BID">52029</ref>
-      <ref url="http://www.osvdb.org/79320" source="OSVDB">79320</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2409" source="DEBIAN">DSA-2409</ref>
-      <ref url="http://ubuntu.com/usn/usn-1366-1" source="UBUNTU">USN-1366-1</ref>
-      <ref url="http://secunia.com/advisories/48039" source="SECUNIA" adv="1">48039</ref>
-      <ref url="http://secunia.com/advisories/47955" source="SECUNIA" adv="1">47955</ref>
-      <ref url="http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git;a=commitdiff;h=9cbe605d3eab4f9e67525f69b676c55b273b7a03" source="CONFIRM">http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git;a=commitdiff;h=9cbe605d3eab4f9e67525f69b676c55b273b7a03</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="devscripts_devel_team" name="devscripts">
-        <vers num="2.10.0" />
-        <vers num="2.10.1" />
-        <vers num="2.10.10" />
-        <vers num="2.10.11" />
-        <vers num="2.10.12" />
-        <vers num="2.10.13" />
-        <vers num="2.10.14" />
-        <vers num="2.10.15" />
-        <vers num="2.10.16" />
-        <vers num="2.10.17" />
-        <vers num="2.10.18" />
-        <vers num="2.10.18.1" />
-        <vers num="2.10.19" />
-        <vers num="2.10.20" />
-        <vers num="2.10.21" />
-        <vers num="2.10.22" />
-        <vers num="2.10.23" />
-        <vers num="2.10.24" />
-        <vers num="2.10.25" />
-        <vers num="2.10.26" />
-        <vers num="2.10.27" />
-        <vers num="2.10.28" />
-        <vers num="2.10.29" />
-        <vers num="2.10.3" />
-        <vers num="2.10.30" />
-        <vers num="2.10.31" />
-        <vers num="2.10.32" />
-        <vers num="2.10.33" />
-        <vers num="2.10.34" />
-        <vers num="2.10.35" />
-        <vers num="2.10.36" />
-        <vers num="2.10.38" />
-        <vers num="2.10.39" />
-        <vers num="2.10.40" />
-        <vers num="2.10.41" />
-        <vers num="2.10.42" />
-        <vers num="2.10.43" />
-        <vers num="2.10.44" />
-        <vers num="2.10.45" />
-        <vers num="2.10.46" />
-        <vers num="2.10.47" />
-        <vers num="2.10.48" />
-        <vers num="2.10.49" />
-        <vers num="2.10.50" />
-        <vers num="2.10.51" />
-        <vers num="2.10.52" />
-        <vers num="2.10.53" />
-        <vers num="2.10.54" />
-        <vers num="2.10.55" />
-        <vers num="2.10.56" />
-        <vers num="2.10.57" />
-        <vers num="2.10.58" />
-        <vers num="2.10.59" />
-        <vers num="2.10.6" />
-        <vers num="2.10.60" />
-        <vers num="2.10.61" />
-        <vers num="2.10.62" />
-        <vers num="2.10.63" />
-        <vers num="2.10.64" />
-        <vers num="2.10.65.1" />
-        <vers num="2.10.66" />
-        <vers num="2.10.67" />
-        <vers num="2.10.68" />
-        <vers num="2.10.7" />
-        <vers num="2.10.8" />
-        <vers num="2.10.9" />
-        <vers num="2.11.0" />
-        <vers num="2.11.1" />
-        <vers num="2.11.2" />
-        <vers num="2.11.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0212" published="2012-06-15" name="CVE-2012-0212" modified="2012-06-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73217" source="XF">devscripts-debdiff-code-execution(73217)</ref>
-      <ref url="http://www.securityfocus.com/bid/52029" source="BID">52029</ref>
-      <ref url="http://www.osvdb.org/79322" source="OSVDB">79322</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2409" source="DEBIAN">DSA-2409</ref>
-      <ref url="http://ubuntu.com/usn/usn-1366-1" source="UBUNTU">USN-1366-1</ref>
-      <ref url="http://secunia.com/advisories/48039" source="SECUNIA" adv="1">48039</ref>
-      <ref url="http://secunia.com/advisories/47955" source="SECUNIA" adv="1">47955</ref>
-      <ref url="http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git;a=commitdiff;h=9cbe605d3eab4f9e67525f69b676c55b273b7a03" source="CONFIRM">http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git;a=commitdiff;h=9cbe605d3eab4f9e67525f69b676c55b273b7a03</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="devscripts_devel_team" name="devscripts">
-        <vers num="2.10.0" />
-        <vers num="2.10.1" />
-        <vers num="2.10.10" />
-        <vers num="2.10.11" />
-        <vers num="2.10.12" />
-        <vers num="2.10.13" />
-        <vers num="2.10.14" />
-        <vers num="2.10.15" />
-        <vers num="2.10.16" />
-        <vers num="2.10.17" />
-        <vers num="2.10.18" />
-        <vers num="2.10.18.1" />
-        <vers num="2.10.19" />
-        <vers num="2.10.20" />
-        <vers num="2.10.21" />
-        <vers num="2.10.22" />
-        <vers num="2.10.23" />
-        <vers num="2.10.24" />
-        <vers num="2.10.25" />
-        <vers num="2.10.26" />
-        <vers num="2.10.27" />
-        <vers num="2.10.28" />
-        <vers num="2.10.29" />
-        <vers num="2.10.3" />
-        <vers num="2.10.30" />
-        <vers num="2.10.31" />
-        <vers num="2.10.32" />
-        <vers num="2.10.33" />
-        <vers num="2.10.34" />
-        <vers num="2.10.35" />
-        <vers num="2.10.36" />
-        <vers num="2.10.38" />
-        <vers num="2.10.39" />
-        <vers num="2.10.40" />
-        <vers num="2.10.41" />
-        <vers num="2.10.42" />
-        <vers num="2.10.43" />
-        <vers num="2.10.44" />
-        <vers num="2.10.45" />
-        <vers num="2.10.46" />
-        <vers num="2.10.47" />
-        <vers num="2.10.48" />
-        <vers num="2.10.49" />
-        <vers num="2.10.50" />
-        <vers num="2.10.51" />
-        <vers num="2.10.52" />
-        <vers num="2.10.53" />
-        <vers num="2.10.54" />
-        <vers num="2.10.55" />
-        <vers num="2.10.56" />
-        <vers num="2.10.57" />
-        <vers num="2.10.58" />
-        <vers num="2.10.59" />
-        <vers num="2.10.6" />
-        <vers num="2.10.60" />
-        <vers num="2.10.61" />
-        <vers num="2.10.62" />
-        <vers num="2.10.63" />
-        <vers num="2.10.64" />
-        <vers num="2.10.65.1" />
-        <vers num="2.10.66" />
-        <vers num="2.10.67" />
-        <vers num="2.10.68" />
-        <vers num="2.10.7" />
-        <vers num="2.10.8" />
-        <vers num="2.10.9" />
-        <vers num="2.11.0" />
-        <vers num="2.11.1" />
-        <vers num="2.11.2" />
-        <vers num="2.11.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0213" published="2012-08-07" name="CVE-2012-0213" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=799078" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=799078</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2468" source="DEBIAN">DSA-2468</ref>
-      <ref url="http://secunia.com/advisories/49040" source="SECUNIA" adv="1">49040</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-August/084609.html" source="FEDORA">FEDORA-2012-10835</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="poi">
-        <vers num="0.1" />
-        <vers num="0.10.0" />
-        <vers num="0.11.0" />
-        <vers num="0.12.0" />
-        <vers num="0.13.0" />
-        <vers num="0.14.0" />
-        <vers num="0.2" />
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="0.6" />
-        <vers num="0.7" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.0" />
-        <vers num="1.10" edition="dev" />
-        <vers num="1.2.0" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.7" edition="dev" />
-        <vers num="1.8" edition="dev" />
-        <vers num="2.0" edition="pre1" />
-        <vers num="2.0" edition="pre2" />
-        <vers num="2.0" edition="pre3" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="3.0" edition="alpha1" />
-        <vers num="3.0" edition="alpha2" />
-        <vers num="3.0" edition="alpha3" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" edition="beta1" />
-        <vers num="3.0.2" edition="beta2" />
-        <vers num="3.1" edition="beta1" />
-        <vers num="3.1" edition="beta2" />
-        <vers num="3.2" />
-        <vers num="3.5" edition="beta1" />
-        <vers num="3.5" edition="beta2" />
-        <vers num="3.5" edition="beta3" />
-        <vers num="3.5" edition="beta4" />
-        <vers num="3.5" edition="beta5" />
-        <vers num="3.5" edition="beta6" />
-        <vers num="3.6" />
-        <vers num="3.7" edition="beta1" />
-        <vers num="3.7" edition="beta2" />
-        <vers num="3.7" edition="beta3" />
-        <vers prev="1" num="3.8" edition="beta1" />
-        <vers prev="1" num="3.8" edition="beta2" />
-        <vers prev="1" num="3.8" edition="beta3" />
-        <vers prev="1" num="3.8" edition="beta4" />
-        <vers prev="1" num="3.8" edition="beta5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0215" published="2012-07-12" name="CVE-2012-0215" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:P)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">model/modelstorage.py in the Tryton application framework (trytond) before 2.4.0 for Python does not properly restrict access to the Many2Many field in the relation model, which allows remote authenticated users to modify the privileges of arbitrary users via a (1) create, (2) write, (3) delete, or (4) copy rpc call.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://hg.tryton.org/trytond/rev/8e64d52ecea4" source="CONFIRM" patch="1">http://hg.tryton.org/trytond/rev/8e64d52ecea4</ref>
-      <ref url="https://bugs.tryton.org/issue2476" source="CONFIRM">https://bugs.tryton.org/issue2476</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2444" source="DEBIAN">DSA-2444</ref>
-      <ref url="http://news.tryton.org/2012/03/security-releases-for-all-supported.html" source="CONFIRM" adv="1">http://news.tryton.org/2012/03/security-releases-for-all-supported.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tryton" name="trytond">
-        <vers num="1.4.13" />
-        <vers num="1.6.8" />
-        <vers num="1.8.7" />
-        <vers num="2.0.5" />
-        <vers prev="1" num="2.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0216" published="2012-04-22" name="CVE-2012-0216" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="4.4" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.4" CVSS_base_score="4.4">
-    <desc>
-      <descript source="cve">The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when mod_php or mod_rivet is used, provides example scripts under the doc/ URI, which might allow local users to conduct cross-site scripting (XSS) attacks, gain privileges, or obtain sensitive information via vectors involving localhost HTTP requests to the Apache HTTP Server.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75211" source="XF">gnulinux-apache2-xss(75211)</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2452" source="DEBIAN">DSA-2452</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="debian" name="apache2">
-        <vers prev="1" num="2.2.16-6" edition="squeeze6" />
-        <vers prev="1" num="2.2.22-1" edition="wheezy" />
-        <vers prev="1" num="2.22-3" edition="sid" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0217" published="2012-06-12" name="CVE-2012-0217" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; and Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1, when running on an Intel processor, incorrectly uses the sysret path in cases where a certain address is not a canonical address, which allows local users to gain privileges via a crafted application.  NOTE: this description clearly does not belong in CVE, because a single entry cannot be about independent codebases; however, there was some value in preserving the original mapping of the multi-codebase coordinated-disclosure effort to a single identifier.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://technet.microsoft.com/en-us/security/bulletin/ms12-042
-
-'This vulnerability only affects Intel x64-based versions of Windows 7 and Windows Server 2008 R2.  Systems with AMD or ARM-based CPUs are not affected by this vulnerability.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/649219" source="CERT-VN">VU#649219</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-042" source="MS" patch="1" adv="1">MS12-042</ref>
-      <ref url="https://www.illumos.org/issues/2873" source="CONFIRM">https://www.illumos.org/issues/2873</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=813428" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=813428</ref>
-      <ref url="http://wiki.smartos.org/display/DOC/SmartOS+Change+Log#SmartOSChangeLog-June14%2C2012" source="CONFIRM">http://wiki.smartos.org/display/DOC/SmartOS+Change+Log#SmartOSChangeLog-June14%2C2012</ref>
-      <ref url="http://support.citrix.com/article/CTX133161" source="CONFIRM">http://support.citrix.com/article/CTX133161</ref>
-      <ref url="http://smartos.org/2012/06/15/smartos-news-3/" source="CONFIRM">http://smartos.org/2012/06/15/smartos-news-3/</ref>
-      <ref url="http://security.freebsd.org/advisories/FreeBSD-SA-12:04.sysret.asc" source="FREEBSD">FreeBSD-SA-12:04</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15596" source="OVAL">oval:org.mitre.oval:def:15596</ref>
-      <ref url="http://lists.xen.org/archives/html/xen-devel/2012-06/msg01072.html" source="MLIST">[xen-devel] 20120619 Security vulnerability process, and CVE-2012-0217</ref>
-      <ref url="http://lists.xen.org/archives/html/xen-announce/2012-06/msg00001.html" source="MLIST">[xen-announce] 20120612 Xen Security Advisory 7 (CVE-2012-0217) - PV privilege escalation</ref>
-      <ref url="http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2012-003.txt.asc" source="NETBSD">NetBSD-SA2012-003</ref>
-      <ref url="http://blog.xen.org/index.php/2012/06/13/the-intel-sysret-privilege-escalation/" source="CONFIRM">http://blog.xen.org/index.php/2012/06/13/the-intel-sysret-privilege-escalation/</ref>
-      <ref url="http://blog.illumos.org/2012/06/14/illumos-vulnerability-patched/" source="CONFIRM">http://blog.illumos.org/2012/06/14/illumos-vulnerability-patched/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x64" />
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0219" published="2012-06-21" name="CVE-2012-0219" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="6.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="1.9" CVSS_base_score="6.2">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the xioscan_readline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.0-b1 through 2.0.0-b4 allows local users to execute arbitrary code via the READLINE address.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.dest-unreach.org/socat/contrib/socat-secadv3.html" source="CONFIRM" patch="1" adv="1">http://www.dest-unreach.org/socat/contrib/socat-secadv3.html</ref>
-      <ref url="http://www.securitytracker.com/id?1027064" source="SECTRACK">1027064</ref>
-      <ref url="http://www.osvdb.org/81969" source="OSVDB">81969</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/14/2" source="MLIST">[oss-security] 20120514 socat security advisory</ref>
-      <ref url="http://www.lwn.net/Articles/504742/" source="SUSE">openSUSE-SU-2012:0809</ref>
-      <ref url="http://secunia.com/advisories/49746" source="SECUNIA">49746</ref>
-      <ref url="http://secunia.com/advisories/49105" source="SECUNIA" adv="1">49105</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081882.html" source="FEDORA">FEDORA-2012-8328</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081619.html" source="FEDORA">FEDORA-2012-8274</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dest-unreach" name="socat">
-        <vers num="1.4.0.0" />
-        <vers num="1.4.0.1" />
-        <vers num="1.4.0.2" />
-        <vers num="1.4.0.3" />
-        <vers num="1.4.1.0" />
-        <vers num="1.4.2.0" />
-        <vers num="1.4.3.1" />
-        <vers num="1.5.0.0" />
-        <vers num="1.6.0.0" />
-        <vers num="1.6.0.1" />
-        <vers num="1.7.0.0" />
-        <vers num="1.7.0.1" />
-        <vers num="1.7.1.0" />
-        <vers num="1.7.1.1" />
-        <vers num="1.7.1.2" />
-        <vers num="1.7.1.3" />
-        <vers num="1.7.2.0" />
-        <vers num="2.0.0" edition="b1" />
-        <vers num="2.0.0" edition="b2" />
-        <vers num="2.0.0" edition="b3" />
-        <vers num="2.0.0" edition="b4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0220" published="2012-05-29" name="CVE-2012-0220" modified="2012-05-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the (1) author or (2) authorurl meta tags.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75702" source="XF">ikiwiki-unspecified-xss(75702)</ref>
-      <ref url="http://www.securityfocus.com/bid/53599" source="BID">53599</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2474" source="DEBIAN">DSA-2474</ref>
-      <ref url="http://source.ikiwiki.branchable.com/?p=source.git;a=commitdiff;h=fbfcea89f8e06426c73ab8ea369ca4cdc566db6f" source="CONFIRM">http://source.ikiwiki.branchable.com/?p=source.git;a=commitdiff;h=fbfcea89f8e06426c73ab8ea369ca4cdc566db6f</ref>
-      <ref url="http://secunia.com/advisories/49232" source="SECUNIA" adv="1">49232</ref>
-      <ref url="http://secunia.com/advisories/49199" source="SECUNIA" adv="1">49199</ref>
-      <ref url="http://osvdb.org/81995" source="OSVDB">81995</ref>
-      <ref url="http://ikiwiki.info/news/version_3.20120516/" source="CONFIRM">http://ikiwiki.info/news/version_3.20120516/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ikiwiki" name="ikiwiki">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.1.47" />
-        <vers num="1.10" />
-        <vers num="1.11" />
-        <vers num="1.12" />
-        <vers num="1.13" />
-        <vers num="1.14" />
-        <vers num="1.15" />
-        <vers num="1.16" />
-        <vers num="1.17" />
-        <vers num="1.18" />
-        <vers num="1.19" />
-        <vers num="1.2" />
-        <vers num="1.20" />
-        <vers num="1.21" />
-        <vers num="1.22" />
-        <vers num="1.23" />
-        <vers num="1.24" />
-        <vers num="1.25" />
-        <vers num="1.26" />
-        <vers num="1.27" />
-        <vers num="1.28" />
-        <vers num="1.29" />
-        <vers num="1.3" />
-        <vers num="1.30" />
-        <vers num="1.31" />
-        <vers num="1.32" />
-        <vers num="1.33.3" />
-        <vers num="1.34" />
-        <vers num="1.34.1" />
-        <vers num="1.34.2" />
-        <vers num="1.35" />
-        <vers num="1.36" />
-        <vers num="1.37" />
-        <vers num="1.38" />
-        <vers num="1.39" />
-        <vers num="1.4" />
-        <vers num="1.40" />
-        <vers num="1.41" />
-        <vers num="1.42" />
-        <vers num="1.43" />
-        <vers num="1.44" />
-        <vers num="1.45" />
-        <vers num="1.46" />
-        <vers num="1.47" />
-        <vers num="1.48" />
-        <vers num="1.49" />
-        <vers num="1.5" />
-        <vers num="1.50" />
-        <vers num="1.51" />
-        <vers num="1.6" />
-        <vers num="1.7" />
-        <vers num="1.8" />
-        <vers num="1.9" />
-        <vers num="2.0" />
-        <vers num="2.00" />
-        <vers num="2.1" />
-        <vers num="2.10" />
-        <vers num="2.11" />
-        <vers num="2.12" />
-        <vers num="2.13" />
-        <vers num="2.14" />
-        <vers num="2.15" />
-        <vers num="2.16" />
-        <vers num="2.17" />
-        <vers num="2.18" />
-        <vers num="2.19" />
-        <vers num="2.2" />
-        <vers num="2.20" />
-        <vers num="2.3" />
-        <vers num="2.30" />
-        <vers num="2.31" />
-        <vers num="2.31.1" />
-        <vers num="2.31.2" />
-        <vers num="2.31.3" />
-        <vers num="2.4" />
-        <vers num="2.40" />
-        <vers num="2.41" />
-        <vers num="2.42" />
-        <vers num="2.43" />
-        <vers num="2.44" />
-        <vers num="2.45" />
-        <vers num="2.46" />
-        <vers num="2.47" />
-        <vers num="2.48" />
-        <vers num="2.49" />
-        <vers num="2.5" />
-        <vers num="2.50" />
-        <vers num="2.51" />
-        <vers num="2.52" />
-        <vers num="2.53" />
-        <vers num="2.54" />
-        <vers num="2.55" />
-        <vers num="2.56" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.60" />
-        <vers num="2.61" />
-        <vers num="2.62" />
-        <vers num="2.62.1" />
-        <vers num="2.63" />
-        <vers num="2.64" />
-        <vers num="2.65" />
-        <vers num="2.66" />
-        <vers num="2.67" />
-        <vers num="2.68" />
-        <vers num="2.69" />
-        <vers num="2.7" />
-        <vers num="2.70" />
-        <vers num="2.71" />
-        <vers num="2.72" />
-        <vers num="2.8" />
-        <vers num="2.9" />
-        <vers num="3.0" />
-        <vers num="3.00" />
-        <vers num="3.01" />
-        <vers num="3.02" />
-        <vers num="3.03" />
-        <vers num="3.04" />
-        <vers num="3.05" />
-        <vers num="3.06" />
-        <vers num="3.07" />
-        <vers num="3.08" />
-        <vers num="3.09" />
-        <vers num="3.10" />
-        <vers num="3.11" />
-        <vers num="3.12" />
-        <vers num="3.13" />
-        <vers num="3.14" />
-        <vers num="3.141" />
-        <vers num="3.1415" />
-        <vers num="3.14159" />
-        <vers num="3.141592" />
-        <vers num="3.1415926" />
-        <vers num="3.14159265" />
-        <vers num="3.20091009" />
-        <vers num="3.20091017" />
-        <vers num="3.20091022" />
-        <vers num="3.20091023" />
-        <vers num="3.20091031" />
-        <vers num="3.20091113" />
-        <vers num="3.20091202" />
-        <vers num="3.20091218" />
-        <vers num="3.20100102.3" />
-        <vers num="3.20100122" />
-        <vers num="3.20100212" />
-        <vers num="3.20100302" />
-        <vers num="3.20100312" />
-        <vers num="3.20100403" />
-        <vers num="3.20100427" />
-        <vers num="3.20100501" />
-        <vers num="3.20100504" />
-        <vers num="3.20100515" />
-        <vers num="3.20100518" />
-        <vers num="3.20100518.2" />
-        <vers num="3.20100610" />
-        <vers num="3.20100623" />
-        <vers num="3.20100722" />
-        <vers num="3.20100804" />
-        <vers num="3.20100815" />
-        <vers num="3.20100831" />
-        <vers num="3.20100926" />
-        <vers num="3.20101019" />
-        <vers num="3.20101023" />
-        <vers num="3.20101112" />
-        <vers num="3.20101129" />
-        <vers num="3.20101201" />
-        <vers num="3.20101231" />
-        <vers num="3.20110105" />
-        <vers num="3.20110123" />
-        <vers num="3.20110124" />
-        <vers num="3.20110225" />
-        <vers num="3.20110321" />
-        <vers num="3.20120115" />
-        <vers num="3.20120202" />
-        <vers num="3.20120203" />
-        <vers prev="1" num="3.20120419" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0221" published="2012-04-02" name="CVE-2012-0221" modified="2012-04-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service (service outage) via a crafted packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-088-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-088-01.pdf</ref>
-      <ref url="http://rockwellautomation.custhelp.com/app/answers/detail/a_id/469937" source="MISC">http://rockwellautomation.custhelp.com/app/answers/detail/a_id/469937</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rockwellautomation" name="factorytalk">
-        <vers num="cpr9" />
-        <vers num="cpr9_sr5" />
-      </prod>
-      <prod vendor="rockwellautomation" name="rslogix_5000">
-        <vers num="17" />
-        <vers num="18" />
-        <vers num="19" />
-        <vers num="20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0222" published="2012-04-02" name="CVE-2012-0222" modified="2012-04-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-088-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-088-01.pdf</ref>
-      <ref url="http://rockwellautomation.custhelp.com/app/answers/detail/a_id/469937" source="MISC">http://rockwellautomation.custhelp.com/app/answers/detail/a_id/469937</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rockwellautomation" name="factorytalk">
-        <vers num="cpr9" />
-        <vers num="cpr9_sr5" />
-      </prod>
-      <prod vendor="rockwellautomation" name="rslogix_5000">
-        <vers num="17" />
-        <vers num="18" />
-        <vers num="19" />
-        <vers num="20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0223" published="2012-02-22" nvd_name="CWE-426: Untrusted Search Path" name="CVE-2012-0223" modified="2012-02-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in 7-Technologies (7T) TERMIS 2.10 and earlier allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2012-0224.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html 
-
-'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.us-cert.gov/control_systems/pdf/ICSA-12-025-02A.pdf
-
-'This vulnerability may be exploitable from a remote machine.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-025-02A.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-025-02A.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="7t" name="termis">
-        <vers num="2.0" />
-        <vers prev="1" num="2.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0224" published="2012-02-21" nvd_name="CWE-426: Untrusted Search Path" name="CVE-2012-0224" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in 7-Technologies (7T) AQUIS 1.5 and earlier allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2012-0223.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.us-cert.gov/control_systems/pdf/ICSA-12-025-02.pdf
-
-'This vulnerability may be exploitable from a remote machine'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-025-01.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-025-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="7t" name="aquis">
-        <vers prev="1" num="1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0225" published="2012-04-02" name="CVE-2012-0225" modified="2012-04-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-062-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-062-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="invensys" name="wonderware_information_server">
-        <vers num="4.0" edition="sp1" />
-        <vers num="4.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0226" published="2012-04-02" name="CVE-2012-0226" modified="2012-04-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-062-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-062-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="invensys" name="wonderware_information_server">
-        <vers num="4.0" edition="sp1" />
-        <vers num="4.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0228" published="2012-04-02" name="CVE-2012-0228" modified="2012-04-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Invensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client controls, which allows remote attackers to bypass intended access restrictions via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-062-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-062-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="invensys" name="wonderware_information_server">
-        <vers num="4.0" edition="sp1" />
-        <vers num="4.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0229" published="2012-03-15" name="CVE-2012-0229" modified="2012-03-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The Data Archiver service in GE Intelligent Platforms Proficy Historian 4.5 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted session on TCP port 14000 to (1) ihDataArchiver.exe or (2) ihDataArchiver_x64.exe.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-01.pdf</ref>
-      <ref url="http://support.ge-ip.com/support/index?page=kbchannel&amp;id=S:KB14767" source="MISC" adv="1">http://support.ge-ip.com/support/index?page=kbchannel&amp;id=S:KB14767</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ge" name="intelligent_platforms_proficy_historian">
-        <vers num="1.0" />
-        <vers num="2.0" edition="beta" />
-        <vers num="3.0" />
-        <vers num="3.1" />
-        <vers num="3.5" />
-        <vers num="4.0" />
-        <vers prev="1" num="4.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0230" published="2012-03-15" name="CVE-2012-0230" modified="2012-03-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">PRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TCP session on port 12299.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-02.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-02.pdf</ref>
-      <ref url="http://support.ge-ip.com/support/index?page=kbchannel&amp;id=S:KB14766" source="MISC" adv="1">http://support.ge-ip.com/support/index?page=kbchannel&amp;id=S:KB14766</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ge" name="intelligent_platforms_proficy_plant_applications">
-        <vers num="215.8" />
-        <vers num="4.2.2" />
-        <vers num="4.2.3" />
-        <vers num="4.3.1" />
-        <vers num="4.4.1" />
-        <vers prev="1" num="5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0231" published="2012-03-15" name="CVE-2012-0231" modified="2012-03-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">PRLicenseMgr.exe in the Proficy Server License Manager in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TCP session on port 12401.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-02.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-02.pdf</ref>
-      <ref url="http://support.ge-ip.com/support/index?page=kbchannel&amp;id=S:KB14766" source="MISC" adv="1">http://support.ge-ip.com/support/index?page=kbchannel&amp;id=S:KB14766</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ge" name="intelligent_platforms_proficy_plant_applications">
-        <vers num="215.8" />
-        <vers num="4.2.2" />
-        <vers num="4.2.3" />
-        <vers num="4.3.1" />
-        <vers num="4.4.1" />
-        <vers prev="1" num="5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0232" published="2012-03-15" name="CVE-2012-0232" modified="2012-03-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6, 3.0, 3.0 SP1, and 3.5 allows remote attackers to modify the configuration via crafted strings.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-03.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-03.pdf</ref>
-      <ref url="http://support.ge-ip.com/support/index?page=kbchannel&amp;id=S:KB14768" source="MISC" adv="1">http://support.ge-ip.com/support/index?page=kbchannel&amp;id=S:KB14768</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ge" name="intelligent_platforms_proficy_real-time_information_porta">
-        <vers num="2.6l" />
-        <vers num="3.0" edition="sp1" />
-        <vers num="3.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0233" published="2012-02-21" name="CVE-2012-0233" modified="2012-02-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject arbitrary web script or HTML via a malformed URL.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="advantech" name="advantech_webaccess">
-        <vers num="5.0" />
-        <vers prev="1" num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0234" published="2012-02-21" name="CVE-2012-0234" modified="2012-02-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL commands via a malformed URL.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="advantech" name="advantech_webaccess">
-        <vers num="5.0" />
-        <vers prev="1" num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0235" published="2012-02-21" name="CVE-2012-0235" modified="2012-02-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="advantech" name="advantech_webaccess">
-        <vers num="5.0" />
-        <vers prev="1" num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0236" published="2012-02-21" name="CVE-2012-0236" modified="2012-02-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Advantech/BroadWin WebAccess 7.0 and earlier allows remote attackers to obtain sensitive information via a direct request to a URL.  NOTE: the vendor reportedly "does not consider it to be a security risk."</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="advantech" name="advantech_webaccess">
-        <vers num="5.0" />
-        <vers prev="1" num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0237" published="2012-02-21" name="CVE-2012-0237" modified="2012-02-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Advantech/BroadWin WebAccess before 7.0 allows remote attackers to (1) enable date and time syncing or (2) disable date and time syncing via a crafted URL.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="advantech" name="advantech_webaccess">
-        <vers num="5.0" />
-        <vers prev="1" num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0238" published="2012-02-21" name="CVE-2012-0238" modified="2012-02-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in opcImg.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="advantech" name="advantech_webaccess">
-        <vers num="5.0" />
-        <vers prev="1" num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0239" published="2012-02-21" name="CVE-2012-0239" modified="2012-02-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">uaddUpAdmin.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remote attackers to modify an administrative password via a password-change request.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="advantech" name="advantech_webaccess">
-        <vers num="5.0" />
-        <vers prev="1" num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0240" published="2012-02-21" name="CVE-2012-0240" modified="2012-02-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">GbScriptAddUp.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remote attackers to execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="advantech" name="advantech_webaccess">
-        <vers num="5.0" />
-        <vers prev="1" num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0241" published="2012-02-21" name="CVE-2012-0241" modified="2012-02-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Advantech/BroadWin WebAccess before 7.0 allows remote attackers to cause a denial of service (memory corruption) via a modified stream identifier to a function.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="advantech" name="advantech_webaccess">
-        <vers num="5.0" />
-        <vers prev="1" num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0242" published="2012-02-21" name="CVE-2012-0242" modified="2012-02-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via format string specifiers in a message string.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="advantech" name="advantech_webaccess">
-        <vers num="5.0" />
-        <vers prev="1" num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0243" published="2012-02-21" name="CVE-2012-0243" modified="2012-02-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Buffer overflow in an ActiveX control in bwocxrun.ocx in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code by leveraging the ability to write arbitrary content to any pathname.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="advantech" name="advantech_webaccess">
-        <vers num="5.0" />
-        <vers prev="1" num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0244" published="2012-02-21" name="CVE-2012-0244" modified="2012-02-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in Advantech/BroadWin WebAccess before 7.0 allow remote attackers to execute arbitrary SQL commands via crafted string input.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="advantech" name="advantech_webaccess">
-        <vers num="5.0" />
-        <vers prev="1" num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0245" published="2012-03-09" name="CVE-2012-0245" modified="2012-03-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple stack-based buffer overflows in RobNetScanHost.exe in ABB Robot Communications Runtime before 5.14.02, as used in ABB Interlink Module, IRC5 OPC Server, PC SDK, PickMaster 3 and 5, RobView 5, RobotStudio, WebWare SDK, and WebWare Server, allow remote attackers to execute arbitrary code via a crafted (1) 0xA or (2) 0xE Netscan packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-059-01.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-059-01.pdf</ref>
-      <ref url="http://www05.abb.com/global/scot/scot348.nsf/veritydisplay/f261be074480dc24c12579a00049ecd5/$file/si10227a1%20vulnerability%20security%20advisory.pdf" source="CONFIRM" patch="1" adv="1">http://www05.abb.com/global/scot/scot348.nsf/veritydisplay/f261be074480dc24c12579a00049ecd5/$file/si10227a1%20vulnerability%20security%20advisory.pdf</ref>
-      <ref url="http://www.zerodayinitiative.com/advisories/ZDI-12-033/" source="MISC">http://www.zerodayinitiative.com/advisories/ZDI-12-033/</ref>
-      <ref url="http://secunia.com/advisories/48090" source="SECUNIA" adv="1">48090</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="abb" name="interlink_module">
-        <vers num="-" />
-      </prod>
-      <prod vendor="abb" name="irc5_opc_server">
-        <vers num="-" />
-      </prod>
-      <prod vendor="abb" name="pc_sdk">
-        <vers num="-" />
-      </prod>
-      <prod vendor="abb" name="pickmaster_3">
-        <vers num="-" />
-      </prod>
-      <prod vendor="abb" name="pickmaster_5">
-        <vers num="-" />
-      </prod>
-      <prod vendor="abb" name="robot_communications_runtime">
-        <vers prev="1" num="5.14.01" />
-      </prod>
-      <prod vendor="abb" name="robotstudio">
-        <vers num="-" />
-      </prod>
-      <prod vendor="abb" name="robview_5">
-        <vers num="-" />
-      </prod>
-      <prod vendor="abb" name="webware_sdk">
-        <vers num="-" />
-      </prod>
-      <prod vendor="abb" name="webware_server">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0246" published="2012-04-02" name="CVE-2012-0246" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in an unspecified ActiveX control in Ecava IntegraXor before 3.71.4200 allows remote attackers to execute arbitrary code via vectors involving an HTML document on the server.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-083-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-083-01.pdf</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74388" source="XF">integraxor-activex-directory-traversal(74388)</ref>
-      <ref url="http://osvdb.org/80650" source="OSVDB">80650</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ecava" name="integraxor">
-        <vers num="3.5.3900.10" />
-        <vers num="3.5.3900.5" />
-        <vers num="3.6.4000.0" />
-        <vers num="3.60" />
-        <vers prev="1" num="3.60.4061" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0247" published="2012-06-05" name="CVE-2012-0247" modified="2012-06-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&amp;t=20286" source="CONFIRM" patch="1">http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&amp;t=20286</ref>
-      <ref url="http://www.osvdb.org/79003" source="OSVDB">79003</ref>
-      <ref url="http://www.gentoo.org/security/en/glsa/glsa-201203-09.xml" source="GENTOO">GLSA-201203-09</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2427" source="DEBIAN">DSA-2427</ref>
-      <ref url="http://www.cert.fi/en/reports/2012/vulnerability595210.html" source="MISC">http://www.cert.fi/en/reports/2012/vulnerability595210.html</ref>
-      <ref url="http://ubuntu.com/usn/usn-1435-1" source="UBUNTU">USN-1435-1</ref>
-      <ref url="http://secunia.com/advisories/49068" source="SECUNIA" adv="1">49068</ref>
-      <ref url="http://secunia.com/advisories/49063" source="SECUNIA" adv="1">49063</ref>
-      <ref url="http://secunia.com/advisories/49043" source="SECUNIA" adv="1">49043</ref>
-      <ref url="http://secunia.com/advisories/48259" source="SECUNIA" adv="1">48259</ref>
-      <ref url="http://secunia.com/advisories/48247" source="SECUNIA" adv="1">48247</ref>
-      <ref url="http://secunia.com/advisories/47926" source="SECUNIA" adv="1">47926</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0545.html" source="REDHAT">RHSA-2012:0545</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0544.html" source="REDHAT">RHSA-2012:0544</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="imagemagick" name="imagemagick">
-        <vers num="4.2.7" />
-        <vers num="4.2.9" />
-        <vers num="5.2" />
-        <vers num="5.2.0" />
-        <vers num="5.2.4.3" />
-        <vers num="5.2.6" />
-        <vers num="5.3" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers num="5.3.8" />
-        <vers num="5.3.8.2" />
-        <vers num="5.3.9" />
-        <vers num="5.4" />
-        <vers num="5.4.0.5" />
-        <vers num="5.4.1.2" />
-        <vers num="5.4.2.3" />
-        <vers num="5.4.3" />
-        <vers num="5.4.3.11" />
-        <vers num="5.4.4.5" />
-        <vers num="5.4.5.1" />
-        <vers num="5.4.6.3" />
-        <vers num="5.4.7" />
-        <vers num="5.4.7.4" />
-        <vers num="5.4.8" />
-        <vers num="5.4.8.3" />
-        <vers num="5.4.9.1" />
-        <vers num="5.5" />
-        <vers num="5.5.1.4" />
-        <vers num="5.5.2.5" />
-        <vers num="5.5.3.2" />
-        <vers num="5.5.3.2.1.2.0" />
-        <vers num="5.5.4" />
-        <vers num="5.5.4.4" />
-        <vers num="5.5.5.3" />
-        <vers num="5.5.6" />
-        <vers num="5.5.6.0_2003-04-09" />
-        <vers num="5.5.6.0_20030409" />
-        <vers num="5.5.7" />
-        <vers num="5.5.7.15" />
-        <vers num="5.5.7.31" />
-        <vers num="5.5.7.35" />
-        <vers num="5.5.7q16" />
-        <vers num="5.5.7q8" />
-        <vers num="6.0" />
-        <vers num="6.0.0.7" />
-        <vers num="6.0.1" />
-        <vers num="6.0.1.4" />
-        <vers num="6.0.2" />
-        <vers num="6.0.2.5" />
-        <vers num="6.0.2.7" />
-        <vers num="6.0.3" />
-        <vers num="6.0.3.5" />
-        <vers num="6.0.4" />
-        <vers num="6.0.4.4" />
-        <vers num="6.0.5" />
-        <vers num="6.0.5.3" />
-        <vers num="6.0.6" />
-        <vers num="6.0.6.1" />
-        <vers num="6.0.6.2" />
-        <vers num="6.0.7" />
-        <vers num="6.0.7.3" />
-        <vers num="6.0.8" />
-        <vers num="6.0.8.3" />
-        <vers num="6.1" />
-        <vers num="6.1.0.9" />
-        <vers num="6.1.1" />
-        <vers num="6.1.1.6" />
-        <vers num="6.1.2" />
-        <vers num="6.1.2.7" />
-        <vers num="6.1.3" />
-        <vers num="6.1.3.7" />
-        <vers num="6.1.4" />
-        <vers num="6.1.4.5" />
-        <vers num="6.1.5" />
-        <vers num="6.1.5.8" />
-        <vers num="6.1.6" />
-        <vers num="6.1.6.9" />
-        <vers num="6.1.7" />
-        <vers num="6.1.7.5" />
-        <vers num="6.1.8" />
-        <vers num="6.1.8.7" />
-        <vers num="6.1.9.4" />
-        <vers num="6.2" />
-        <vers num="6.2.0.3" />
-        <vers num="6.2.0.4" />
-        <vers num="6.2.0.7" />
-        <vers num="6.2.0.8" />
-        <vers num="6.2.1" />
-        <vers num="6.2.1.7" />
-        <vers num="6.2.2" />
-        <vers num="6.2.2.5" />
-        <vers num="6.2.3" />
-        <vers num="6.2.3.4" />
-        <vers num="6.2.3.6" />
-        <vers num="6.2.4" />
-        <vers num="6.2.4.3" />
-        <vers num="6.2.4.5" />
-        <vers num="6.2.5" />
-        <vers num="6.2.6" />
-        <vers num="6.2.7" />
-        <vers num="6.2.8" />
-        <vers num="6.2.8.0" />
-        <vers num="6.2.8.1" />
-        <vers num="6.2.8.2" />
-        <vers num="6.2.8.3" />
-        <vers num="6.2.9" />
-        <vers num="6.2.9.2" />
-        <vers num="6.3.0.0" />
-        <vers num="6.3.0.1" />
-        <vers num="6.3.0.2" />
-        <vers num="6.3.0.3" />
-        <vers num="6.3.0.4" />
-        <vers num="6.3.0.5" />
-        <vers num="6.3.0.7" />
-        <vers num="6.3.0.8" />
-        <vers num="6.3.1" />
-        <vers num="6.3.1-6" />
-        <vers num="6.3.1-7" />
-        <vers num="6.3.1.0" />
-        <vers num="6.3.1.1" />
-        <vers num="6.3.1.2." />
-        <vers num="6.3.1.3" />
-        <vers num="6.3.1.4" />
-        <vers num="6.3.1.5" />
-        <vers num="6.3.1.6" />
-        <vers num="6.3.1.7" />
-        <vers num="6.3.2" />
-        <vers num="6.3.2-1" />
-        <vers num="6.3.2-2" />
-        <vers num="6.3.2-3" />
-        <vers num="6.3.2-4" />
-        <vers num="6.3.2-5" />
-        <vers num="6.3.2-6" />
-        <vers num="6.3.2-7" />
-        <vers num="6.3.2-8" />
-        <vers num="6.3.2.0" />
-        <vers num="6.3.2.1" />
-        <vers num="6.3.2.2" />
-        <vers num="6.3.2.3" />
-        <vers num="6.3.2.4" />
-        <vers num="6.3.2.5" />
-        <vers num="6.3.2.6" />
-        <vers num="6.3.2.7" />
-        <vers num="6.3.2.8" />
-        <vers num="6.3.3" />
-        <vers num="6.3.3-1" />
-        <vers num="6.3.3-2" />
-        <vers num="6.3.3-3" />
-        <vers num="6.3.3-4" />
-        <vers num="6.3.3-5" />
-        <vers num="6.3.3-6" />
-        <vers num="6.3.3-7" />
-        <vers num="6.3.3-8" />
-        <vers num="6.3.3-9" />
-        <vers num="6.3.3.0" />
-        <vers num="6.3.3.1" />
-        <vers num="6.3.3.2" />
-        <vers num="6.3.3.3" />
-        <vers num="6.3.3.4" />
-        <vers num="6.3.3_3" />
-        <vers num="6.3.3_5" />
-        <vers num="6.3.3_6" />
-        <vers num="6.3.4" />
-        <vers num="6.3.4-1" />
-        <vers num="6.3.4-10" />
-        <vers num="6.3.4-2" />
-        <vers num="6.3.4-3" />
-        <vers num="6.3.4-4" />
-        <vers num="6.3.4-5" />
-        <vers num="6.3.4-6" />
-        <vers num="6.3.4-8" />
-        <vers num="6.3.4-9" />
-        <vers num="6.3.5" />
-        <vers num="6.3.5-10" />
-        <vers num="6.3.5-4" />
-        <vers num="6.3.5-5" />
-        <vers num="6.3.5-6" />
-        <vers num="6.3.5-7" />
-        <vers num="6.3.5-9" />
-        <vers num="6.3.6" />
-        <vers num="6.3.6-1" />
-        <vers num="6.3.6-10" />
-        <vers num="6.3.6-2" />
-        <vers num="6.3.6-3" />
-        <vers num="6.3.6-4" />
-        <vers num="6.3.6-5" />
-        <vers num="6.3.6-6" />
-        <vers num="6.3.6-7" />
-        <vers num="6.3.6-8" />
-        <vers num="6.3.6-9" />
-        <vers num="6.3.7" />
-        <vers num="6.3.7-1" />
-        <vers num="6.3.7-10" />
-        <vers num="6.3.7-2" />
-        <vers num="6.3.7-3" />
-        <vers num="6.3.7-4" />
-        <vers num="6.3.7-5" />
-        <vers num="6.3.7-7" />
-        <vers num="6.3.7-9" />
-        <vers num="6.3.8" />
-        <vers num="6.3.8-1" />
-        <vers num="6.3.8-10" />
-        <vers num="6.3.8-2" />
-        <vers num="6.3.8-3" />
-        <vers num="6.3.8-5" />
-        <vers num="6.3.8-6" />
-        <vers num="6.3.8-7" />
-        <vers num="6.3.8-9" />
-        <vers num="6.3.9" />
-        <vers num="6.3.9-1" />
-        <vers num="6.3.9-10" />
-        <vers num="6.3.9-2" />
-        <vers num="6.3.9-4" />
-        <vers num="6.3.9-5" />
-        <vers num="6.3.9-6" />
-        <vers num="6.3.9-7" />
-        <vers num="6.3.9-8" />
-        <vers num="6.3.9-9" />
-        <vers num="6.4.0" />
-        <vers num="6.4.0-1" />
-        <vers num="6.4.0-10" />
-        <vers num="6.4.0-11" />
-        <vers num="6.4.0-4" />
-        <vers num="6.4.0-5" />
-        <vers num="6.4.0-6" />
-        <vers num="6.4.0-7" />
-        <vers num="6.4.0-8" />
-        <vers num="6.4.1" />
-        <vers num="6.4.1-1" />
-        <vers num="6.4.1-2" />
-        <vers num="6.4.1-3" />
-        <vers num="6.4.1-4" />
-        <vers num="6.4.1-5" />
-        <vers num="6.4.1-6" />
-        <vers num="6.4.1-7" />
-        <vers num="6.4.1-8" />
-        <vers num="6.4.1-9" />
-        <vers num="6.4.2" />
-        <vers num="6.4.2-1" />
-        <vers num="6.4.2-10" />
-        <vers num="6.4.2-2" />
-        <vers num="6.4.2-4" />
-        <vers num="6.4.2-5" />
-        <vers num="6.4.2-6" />
-        <vers num="6.4.2-7" />
-        <vers num="6.4.2-8" />
-        <vers num="6.4.2-9" />
-        <vers num="6.4.3" />
-        <vers num="6.4.3-1" />
-        <vers num="6.4.3-10" />
-        <vers num="6.4.3-2" />
-        <vers num="6.4.3-3" />
-        <vers num="6.4.3-5" />
-        <vers num="6.4.3-6" />
-        <vers num="6.4.3-7" />
-        <vers num="6.4.3-8" />
-        <vers num="6.4.4" />
-        <vers num="6.4.4-1" />
-        <vers num="6.4.4-3" />
-        <vers num="6.4.4-5" />
-        <vers num="6.4.4-7" />
-        <vers num="6.4.4-8" />
-        <vers num="6.4.5" />
-        <vers num="6.4.5-1" />
-        <vers num="6.4.5-2" />
-        <vers num="6.4.5-3" />
-        <vers num="6.4.5-4" />
-        <vers num="6.4.5-6" />
-        <vers num="6.4.5-7" />
-        <vers num="6.4.5-9" />
-        <vers num="6.4.6" />
-        <vers num="6.4.6-1" />
-        <vers num="6.4.6-2" />
-        <vers num="6.4.6-3" />
-        <vers num="6.4.6-4" />
-        <vers num="6.4.6-5" />
-        <vers num="6.4.6-6" />
-        <vers num="6.4.6-8" />
-        <vers num="6.4.6-9" />
-        <vers num="6.4.7-1" />
-        <vers num="6.4.7-10" />
-        <vers num="6.4.7-2" />
-        <vers num="6.4.7-3" />
-        <vers num="6.4.7-4" />
-        <vers num="6.4.7-5" />
-        <vers num="6.4.7-6" />
-        <vers num="6.4.7-7" />
-        <vers num="6.4.7-8" />
-        <vers num="6.4.7-9" />
-        <vers num="6.4.8" />
-        <vers num="6.4.8-1" />
-        <vers num="6.4.8-10" />
-        <vers num="6.4.8-2" />
-        <vers num="6.4.8-3" />
-        <vers num="6.4.8-4" />
-        <vers num="6.4.8-5" />
-        <vers num="6.4.8-6" />
-        <vers num="6.4.8-7" />
-        <vers num="6.4.8-8" />
-        <vers num="6.4.8-9" />
-        <vers num="6.4.9" />
-        <vers num="6.4.9-10" />
-        <vers num="6.4.9-2" />
-        <vers num="6.4.9-3" />
-        <vers num="6.4.9-5" />
-        <vers num="6.4.9-7" />
-        <vers num="6.4.9-8" />
-        <vers num="6.4.9-9" />
-        <vers num="6.5.0" />
-        <vers num="6.5.0-1" />
-        <vers num="6.5.0-10" />
-        <vers num="6.5.0-2" />
-        <vers num="6.5.0-3" />
-        <vers num="6.5.0-4" />
-        <vers num="6.5.0-5" />
-        <vers num="6.5.0-6" />
-        <vers num="6.5.0-7" />
-        <vers num="6.5.0-8" />
-        <vers num="6.5.0-9" />
-        <vers num="6.5.1" />
-        <vers num="6.5.1-1" />
-        <vers num="6.5.1-10" />
-        <vers num="6.5.1-2" />
-        <vers num="6.5.1-3" />
-        <vers num="6.5.1-4" />
-        <vers num="6.5.1-5" />
-        <vers num="6.5.1-6" />
-        <vers num="6.5.1-7" />
-        <vers num="6.5.1-9" />
-        <vers num="6.5.2" />
-        <vers num="6.5.2-1" />
-        <vers num="6.5.2-10" />
-        <vers num="6.5.2-2" />
-        <vers num="6.5.2-3" />
-        <vers num="6.5.2-4" />
-        <vers num="6.5.2-5" />
-        <vers num="6.5.2-6" />
-        <vers num="6.5.2-7" />
-        <vers num="6.5.2-8" />
-        <vers num="6.5.2-9" />
-        <vers num="6.5.3" />
-        <vers num="6.5.3-1" />
-        <vers num="6.5.3-10" />
-        <vers num="6.5.3-3" />
-        <vers num="6.5.3-4" />
-        <vers num="6.5.3-5" />
-        <vers num="6.5.3-6" />
-        <vers num="6.5.3-7" />
-        <vers num="6.5.3-8" />
-        <vers num="6.5.4" />
-        <vers num="6.5.4-1" />
-        <vers num="6.5.4-10" />
-        <vers num="6.5.4-2" />
-        <vers num="6.5.4-3" />
-        <vers num="6.5.4-4" />
-        <vers num="6.5.4-5" />
-        <vers num="6.5.4-6" />
-        <vers num="6.5.4-7" />
-        <vers num="6.5.4-8" />
-        <vers num="6.5.4-9" />
-        <vers num="6.5.5" />
-        <vers num="6.5.5-1" />
-        <vers num="6.5.5-10" />
-        <vers num="6.5.5-2" />
-        <vers num="6.5.5-3" />
-        <vers num="6.5.5-4" />
-        <vers num="6.5.5-5" />
-        <vers num="6.5.5-6" />
-        <vers num="6.5.5-7" />
-        <vers num="6.5.5-8" />
-        <vers num="6.5.5-9" />
-        <vers num="6.5.6" />
-        <vers num="6.5.6-10" />
-        <vers num="6.5.6-2" />
-        <vers num="6.5.6-3" />
-        <vers num="6.5.6-4" />
-        <vers num="6.5.6-5" />
-        <vers num="6.5.6-6" />
-        <vers num="6.5.6-7" />
-        <vers num="6.5.6-8" />
-        <vers num="6.5.6-9" />
-        <vers num="6.5.7" />
-        <vers num="6.5.7-1" />
-        <vers num="6.5.7-2" />
-        <vers num="6.5.7-3" />
-        <vers num="6.5.7-4" />
-        <vers num="6.5.7-5" />
-        <vers num="6.5.7-6" />
-        <vers num="6.5.7-7" />
-        <vers num="6.5.7-8" />
-        <vers num="6.5.7-9" />
-        <vers num="6.5.8" />
-        <vers num="6.5.8-1" />
-        <vers num="6.5.8-2" />
-        <vers num="6.5.8-3" />
-        <vers num="6.5.8-4" />
-        <vers num="6.5.8-5" />
-        <vers num="6.5.8-6" />
-        <vers num="6.5.8-7" />
-        <vers num="6.5.8-8" />
-        <vers num="6.5.8-9" />
-        <vers num="6.5.9" />
-        <vers num="6.5.9-1" />
-        <vers num="6.5.9-10" />
-        <vers num="6.5.9-2" />
-        <vers num="6.5.9-3" />
-        <vers num="6.5.9-4" />
-        <vers num="6.5.9-5" />
-        <vers num="6.5.9-6" />
-        <vers num="6.5.9-7" />
-        <vers num="6.5.9-8" />
-        <vers num="6.6.0" />
-        <vers num="6.6.0-1" />
-        <vers num="6.6.0-10" />
-        <vers num="6.6.0-2" />
-        <vers num="6.6.0-4" />
-        <vers num="6.6.0-5" />
-        <vers num="6.6.0-6" />
-        <vers num="6.6.0-7" />
-        <vers num="6.6.0-8" />
-        <vers num="6.6.0-9" />
-        <vers num="6.6.1" />
-        <vers num="6.6.1-1" />
-        <vers num="6.6.1-10" />
-        <vers num="6.6.1-2" />
-        <vers num="6.6.1-3" />
-        <vers num="6.6.1-4" />
-        <vers num="6.6.1-5" />
-        <vers num="6.6.1-6" />
-        <vers num="6.6.1-7" />
-        <vers num="6.6.1-8" />
-        <vers num="6.6.1-9" />
-        <vers num="6.6.2" />
-        <vers num="6.6.2-1" />
-        <vers num="6.6.2-10" />
-        <vers num="6.6.2-2" />
-        <vers num="6.6.2-3" />
-        <vers num="6.6.2-4" />
-        <vers num="6.6.2-5" />
-        <vers num="6.6.2-6" />
-        <vers num="6.6.2-7" />
-        <vers num="6.6.2-8" />
-        <vers num="6.6.2-9" />
-        <vers num="6.6.3" />
-        <vers num="6.6.3-1" />
-        <vers num="6.6.3-10" />
-        <vers num="6.6.3-2" />
-        <vers num="6.6.3-3" />
-        <vers num="6.6.3-4" />
-        <vers num="6.6.3-5" />
-        <vers num="6.6.3-6" />
-        <vers num="6.6.3-7" />
-        <vers num="6.6.4" />
-        <vers num="6.6.4-1" />
-        <vers num="6.6.4-10" />
-        <vers num="6.6.4-2" />
-        <vers num="6.6.4-4" />
-        <vers num="6.6.4-5" />
-        <vers num="6.6.4-6" />
-        <vers num="6.6.4-7" />
-        <vers num="6.6.4-8" />
-        <vers num="6.6.4-9" />
-        <vers num="6.6.5" />
-        <vers num="6.6.5-1" />
-        <vers num="6.6.5-10" />
-        <vers num="6.6.5-2" />
-        <vers num="6.6.5-3" />
-        <vers num="6.6.5-4" />
-        <vers num="6.6.5-5" />
-        <vers num="6.6.5-6" />
-        <vers num="6.6.5-7" />
-        <vers num="6.6.5-8" />
-        <vers num="6.6.5-9" />
-        <vers num="6.6.6-0" />
-        <vers num="6.6.6-1" />
-        <vers num="6.6.6-10" />
-        <vers num="6.6.6-2" />
-        <vers num="6.6.6-3" />
-        <vers num="6.6.6-4" />
-        <vers num="6.6.6-5" />
-        <vers num="6.6.6-6" />
-        <vers num="6.6.6-7" />
-        <vers num="6.6.6-8" />
-        <vers num="6.6.6-9" />
-        <vers num="6.6.7-0" />
-        <vers num="6.6.7-1" />
-        <vers num="6.6.7-10" />
-        <vers num="6.6.7-2" />
-        <vers num="6.6.7-3" />
-        <vers num="6.6.7-4" />
-        <vers num="6.6.7-5" />
-        <vers num="6.6.7-6" />
-        <vers num="6.6.7-7" />
-        <vers num="6.6.7-8" />
-        <vers num="6.6.7-9" />
-        <vers num="6.6.8-0" />
-        <vers num="6.6.9-0" />
-        <vers num="6.6.9-1" />
-        <vers num="6.6.9-10" />
-        <vers num="6.6.9-2" />
-        <vers num="6.6.9-3" />
-        <vers num="6.6.9-4" />
-        <vers num="6.6.9-5" />
-        <vers num="6.6.9-6" />
-        <vers num="6.6.9-7" />
-        <vers num="6.6.9-8" />
-        <vers num="6.6.9-9" />
-        <vers num="6.7.0-0" />
-        <vers num="6.7.0-1" />
-        <vers num="6.7.0-10" />
-        <vers num="6.7.0-2" />
-        <vers num="6.7.0-3" />
-        <vers num="6.7.0-4" />
-        <vers num="6.7.0-5" />
-        <vers num="6.7.0-6" />
-        <vers num="6.7.0-7" />
-        <vers num="6.7.0-8" />
-        <vers num="6.7.0-9" />
-        <vers num="6.7.1-0" />
-        <vers num="6.7.1-1" />
-        <vers num="6.7.1-10" />
-        <vers num="6.7.1-2" />
-        <vers num="6.7.1-3" />
-        <vers num="6.7.1-4" />
-        <vers num="6.7.1-5" />
-        <vers num="6.7.1-6" />
-        <vers num="6.7.1-7" />
-        <vers num="6.7.1-8" />
-        <vers num="6.7.1-9" />
-        <vers num="6.7.2-0" />
-        <vers num="6.7.2-1" />
-        <vers num="6.7.2-10" />
-        <vers num="6.7.2-2" />
-        <vers num="6.7.2-3" />
-        <vers num="6.7.2-4" />
-        <vers num="6.7.2-5" />
-        <vers num="6.7.2-6" />
-        <vers num="6.7.2-7" />
-        <vers num="6.7.2-8" />
-        <vers num="6.7.2-9" />
-        <vers num="6.7.3-0" />
-        <vers num="6.7.3-1" />
-        <vers num="6.7.3-10" />
-        <vers num="6.7.3-2" />
-        <vers num="6.7.3-3" />
-        <vers num="6.7.3-4" />
-        <vers num="6.7.3-5" />
-        <vers num="6.7.3-6" />
-        <vers num="6.7.3-7" />
-        <vers num="6.7.3-8" />
-        <vers num="6.7.3-9" />
-        <vers num="6.7.4-0" />
-        <vers num="6.7.4-1" />
-        <vers num="6.7.4-10" />
-        <vers num="6.7.4-2" />
-        <vers num="6.7.4-3" />
-        <vers num="6.7.4-4" />
-        <vers num="6.7.4-5" />
-        <vers num="6.7.4-6" />
-        <vers num="6.7.4-7" />
-        <vers num="6.7.4-8" />
-        <vers num="6.7.4-9" />
-        <vers num="6.7.5-0" />
-        <vers num="6.7.5-1" />
-        <vers num="6.7.5-2" />
-        <vers num="6.7.5-3" />
-        <vers num="6.7.5-4" />
-        <vers num="6.7.5-5" />
-        <vers num="6.7.5-6" />
-        <vers prev="1" num="6.7.5-7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0248" published="2012-06-05" name="CVE-2012-0248" modified="2012-06-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51957" source="BID">51957</ref>
-      <ref url="http://www.osvdb.org/79003" source="OSVDB">79003</ref>
-      <ref url="http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&amp;t=20286" source="CONFIRM" adv="1">http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&amp;t=20286</ref>
-      <ref url="http://www.gentoo.org/security/en/glsa/glsa-201203-09.xml" source="GENTOO">GLSA-201203-09</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2427" source="DEBIAN">DSA-2427</ref>
-      <ref url="http://www.cert.fi/en/reports/2012/vulnerability595210.html" source="MISC">http://www.cert.fi/en/reports/2012/vulnerability595210.html</ref>
-      <ref url="http://ubuntu.com/usn/usn-1435-1" source="UBUNTU">USN-1435-1</ref>
-      <ref url="http://secunia.com/advisories/49068" source="SECUNIA" adv="1">49068</ref>
-      <ref url="http://secunia.com/advisories/49063" source="SECUNIA" adv="1">49063</ref>
-      <ref url="http://secunia.com/advisories/49043" source="SECUNIA" adv="1">49043</ref>
-      <ref url="http://secunia.com/advisories/48259" source="SECUNIA" adv="1">48259</ref>
-      <ref url="http://secunia.com/advisories/48247" source="SECUNIA" adv="1">48247</ref>
-      <ref url="http://secunia.com/advisories/47926" source="SECUNIA" adv="1">47926</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0545.html" source="REDHAT">RHSA-2012:0545</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0544.html" source="REDHAT">RHSA-2012:0544</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="imagemagick" name="imagemagick">
-        <vers num="4.2.7" />
-        <vers num="4.2.9" />
-        <vers num="5.2" />
-        <vers num="5.2.0" />
-        <vers num="5.2.4.3" />
-        <vers num="5.2.6" />
-        <vers num="5.3" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers num="5.3.8" />
-        <vers num="5.3.8.2" />
-        <vers num="5.3.9" />
-        <vers num="5.4" />
-        <vers num="5.4.0.5" />
-        <vers num="5.4.1.2" />
-        <vers num="5.4.2.3" />
-        <vers num="5.4.3" />
-        <vers num="5.4.3.11" />
-        <vers num="5.4.4.5" />
-        <vers num="5.4.5.1" />
-        <vers num="5.4.6.3" />
-        <vers num="5.4.7" />
-        <vers num="5.4.7.4" />
-        <vers num="5.4.8" />
-        <vers num="5.4.8.3" />
-        <vers num="5.4.9.1" />
-        <vers num="5.5" />
-        <vers num="5.5.1.4" />
-        <vers num="5.5.2.5" />
-        <vers num="5.5.3.2" />
-        <vers num="5.5.3.2.1.2.0" />
-        <vers num="5.5.4" />
-        <vers num="5.5.4.4" />
-        <vers num="5.5.5.3" />
-        <vers num="5.5.6" />
-        <vers num="5.5.6.0_2003-04-09" />
-        <vers num="5.5.6.0_20030409" />
-        <vers num="5.5.7" />
-        <vers num="5.5.7.15" />
-        <vers num="5.5.7.31" />
-        <vers num="5.5.7.35" />
-        <vers num="5.5.7q16" />
-        <vers num="5.5.7q8" />
-        <vers num="6.0" />
-        <vers num="6.0.0.7" />
-        <vers num="6.0.1" />
-        <vers num="6.0.1.4" />
-        <vers num="6.0.2" />
-        <vers num="6.0.2.5" />
-        <vers num="6.0.2.7" />
-        <vers num="6.0.3" />
-        <vers num="6.0.3.5" />
-        <vers num="6.0.4" />
-        <vers num="6.0.4.4" />
-        <vers num="6.0.5" />
-        <vers num="6.0.5.3" />
-        <vers num="6.0.6" />
-        <vers num="6.0.6.1" />
-        <vers num="6.0.6.2" />
-        <vers num="6.0.7" />
-        <vers num="6.0.7.3" />
-        <vers num="6.0.8" />
-        <vers num="6.0.8.3" />
-        <vers num="6.1" />
-        <vers num="6.1.0.9" />
-        <vers num="6.1.1" />
-        <vers num="6.1.1.6" />
-        <vers num="6.1.2" />
-        <vers num="6.1.2.7" />
-        <vers num="6.1.3" />
-        <vers num="6.1.3.7" />
-        <vers num="6.1.4" />
-        <vers num="6.1.4.5" />
-        <vers num="6.1.5" />
-        <vers num="6.1.5.8" />
-        <vers num="6.1.6" />
-        <vers num="6.1.6.9" />
-        <vers num="6.1.7" />
-        <vers num="6.1.7.5" />
-        <vers num="6.1.8" />
-        <vers num="6.1.8.7" />
-        <vers num="6.1.9.4" />
-        <vers num="6.2" />
-        <vers num="6.2.0.3" />
-        <vers num="6.2.0.4" />
-        <vers num="6.2.0.7" />
-        <vers num="6.2.0.8" />
-        <vers num="6.2.1" />
-        <vers num="6.2.1.7" />
-        <vers num="6.2.2" />
-        <vers num="6.2.2.5" />
-        <vers num="6.2.3" />
-        <vers num="6.2.3.4" />
-        <vers num="6.2.3.6" />
-        <vers num="6.2.4" />
-        <vers num="6.2.4.3" />
-        <vers num="6.2.4.5" />
-        <vers num="6.2.5" />
-        <vers num="6.2.6" />
-        <vers num="6.2.7" />
-        <vers num="6.2.8" />
-        <vers num="6.2.8.0" />
-        <vers num="6.2.8.1" />
-        <vers num="6.2.8.2" />
-        <vers num="6.2.8.3" />
-        <vers num="6.2.9" />
-        <vers num="6.2.9.2" />
-        <vers num="6.3.0.0" />
-        <vers num="6.3.0.1" />
-        <vers num="6.3.0.2" />
-        <vers num="6.3.0.3" />
-        <vers num="6.3.0.4" />
-        <vers num="6.3.0.5" />
-        <vers num="6.3.0.7" />
-        <vers num="6.3.0.8" />
-        <vers num="6.3.1" />
-        <vers num="6.3.1-6" />
-        <vers num="6.3.1-7" />
-        <vers num="6.3.1.0" />
-        <vers num="6.3.1.1" />
-        <vers num="6.3.1.2." />
-        <vers num="6.3.1.3" />
-        <vers num="6.3.1.4" />
-        <vers num="6.3.1.5" />
-        <vers num="6.3.1.6" />
-        <vers num="6.3.1.7" />
-        <vers num="6.3.2" />
-        <vers num="6.3.2-1" />
-        <vers num="6.3.2-2" />
-        <vers num="6.3.2-3" />
-        <vers num="6.3.2-4" />
-        <vers num="6.3.2-5" />
-        <vers num="6.3.2-6" />
-        <vers num="6.3.2-7" />
-        <vers num="6.3.2-8" />
-        <vers num="6.3.2.0" />
-        <vers num="6.3.2.1" />
-        <vers num="6.3.2.2" />
-        <vers num="6.3.2.3" />
-        <vers num="6.3.2.4" />
-        <vers num="6.3.2.5" />
-        <vers num="6.3.2.6" />
-        <vers num="6.3.2.7" />
-        <vers num="6.3.2.8" />
-        <vers num="6.3.3" />
-        <vers num="6.3.3-1" />
-        <vers num="6.3.3-2" />
-        <vers num="6.3.3-3" />
-        <vers num="6.3.3-4" />
-        <vers num="6.3.3-5" />
-        <vers num="6.3.3-6" />
-        <vers num="6.3.3-7" />
-        <vers num="6.3.3-8" />
-        <vers num="6.3.3-9" />
-        <vers num="6.3.3.0" />
-        <vers num="6.3.3.1" />
-        <vers num="6.3.3.2" />
-        <vers num="6.3.3.3" />
-        <vers num="6.3.3.4" />
-        <vers num="6.3.3_3" />
-        <vers num="6.3.3_5" />
-        <vers num="6.3.3_6" />
-        <vers num="6.3.4" />
-        <vers num="6.3.4-1" />
-        <vers num="6.3.4-10" />
-        <vers num="6.3.4-2" />
-        <vers num="6.3.4-3" />
-        <vers num="6.3.4-4" />
-        <vers num="6.3.4-5" />
-        <vers num="6.3.4-6" />
-        <vers num="6.3.4-8" />
-        <vers num="6.3.4-9" />
-        <vers num="6.3.5" />
-        <vers num="6.3.5-10" />
-        <vers num="6.3.5-4" />
-        <vers num="6.3.5-5" />
-        <vers num="6.3.5-6" />
-        <vers num="6.3.5-7" />
-        <vers num="6.3.5-9" />
-        <vers num="6.3.6" />
-        <vers num="6.3.6-1" />
-        <vers num="6.3.6-10" />
-        <vers num="6.3.6-2" />
-        <vers num="6.3.6-3" />
-        <vers num="6.3.6-4" />
-        <vers num="6.3.6-5" />
-        <vers num="6.3.6-6" />
-        <vers num="6.3.6-7" />
-        <vers num="6.3.6-8" />
-        <vers num="6.3.6-9" />
-        <vers num="6.3.7" />
-        <vers num="6.3.7-1" />
-        <vers num="6.3.7-10" />
-        <vers num="6.3.7-2" />
-        <vers num="6.3.7-3" />
-        <vers num="6.3.7-4" />
-        <vers num="6.3.7-5" />
-        <vers num="6.3.7-7" />
-        <vers num="6.3.7-9" />
-        <vers num="6.3.8" />
-        <vers num="6.3.8-1" />
-        <vers num="6.3.8-10" />
-        <vers num="6.3.8-2" />
-        <vers num="6.3.8-3" />
-        <vers num="6.3.8-5" />
-        <vers num="6.3.8-6" />
-        <vers num="6.3.8-7" />
-        <vers num="6.3.8-9" />
-        <vers num="6.3.9" />
-        <vers num="6.3.9-1" />
-        <vers num="6.3.9-10" />
-        <vers num="6.3.9-2" />
-        <vers num="6.3.9-4" />
-        <vers num="6.3.9-5" />
-        <vers num="6.3.9-6" />
-        <vers num="6.3.9-7" />
-        <vers num="6.3.9-8" />
-        <vers num="6.3.9-9" />
-        <vers num="6.4.0" />
-        <vers num="6.4.0-1" />
-        <vers num="6.4.0-10" />
-        <vers num="6.4.0-11" />
-        <vers num="6.4.0-4" />
-        <vers num="6.4.0-5" />
-        <vers num="6.4.0-6" />
-        <vers num="6.4.0-7" />
-        <vers num="6.4.0-8" />
-        <vers num="6.4.1" />
-        <vers num="6.4.1-1" />
-        <vers num="6.4.1-2" />
-        <vers num="6.4.1-3" />
-        <vers num="6.4.1-4" />
-        <vers num="6.4.1-5" />
-        <vers num="6.4.1-6" />
-        <vers num="6.4.1-7" />
-        <vers num="6.4.1-8" />
-        <vers num="6.4.1-9" />
-        <vers num="6.4.2" />
-        <vers num="6.4.2-1" />
-        <vers num="6.4.2-10" />
-        <vers num="6.4.2-2" />
-        <vers num="6.4.2-4" />
-        <vers num="6.4.2-5" />
-        <vers num="6.4.2-6" />
-        <vers num="6.4.2-7" />
-        <vers num="6.4.2-8" />
-        <vers num="6.4.2-9" />
-        <vers num="6.4.3" />
-        <vers num="6.4.3-1" />
-        <vers num="6.4.3-10" />
-        <vers num="6.4.3-2" />
-        <vers num="6.4.3-3" />
-        <vers num="6.4.3-5" />
-        <vers num="6.4.3-6" />
-        <vers num="6.4.3-7" />
-        <vers num="6.4.3-8" />
-        <vers num="6.4.4" />
-        <vers num="6.4.4-1" />
-        <vers num="6.4.4-3" />
-        <vers num="6.4.4-5" />
-        <vers num="6.4.4-7" />
-        <vers num="6.4.4-8" />
-        <vers num="6.4.5" />
-        <vers num="6.4.5-1" />
-        <vers num="6.4.5-2" />
-        <vers num="6.4.5-3" />
-        <vers num="6.4.5-4" />
-        <vers num="6.4.5-6" />
-        <vers num="6.4.5-7" />
-        <vers num="6.4.5-9" />
-        <vers num="6.4.6" />
-        <vers num="6.4.6-1" />
-        <vers num="6.4.6-2" />
-        <vers num="6.4.6-3" />
-        <vers num="6.4.6-4" />
-        <vers num="6.4.6-5" />
-        <vers num="6.4.6-6" />
-        <vers num="6.4.6-8" />
-        <vers num="6.4.6-9" />
-        <vers num="6.4.7-1" />
-        <vers num="6.4.7-10" />
-        <vers num="6.4.7-2" />
-        <vers num="6.4.7-3" />
-        <vers num="6.4.7-4" />
-        <vers num="6.4.7-5" />
-        <vers num="6.4.7-6" />
-        <vers num="6.4.7-7" />
-        <vers num="6.4.7-8" />
-        <vers num="6.4.7-9" />
-        <vers num="6.4.8" />
-        <vers num="6.4.8-1" />
-        <vers num="6.4.8-10" />
-        <vers num="6.4.8-2" />
-        <vers num="6.4.8-3" />
-        <vers num="6.4.8-4" />
-        <vers num="6.4.8-5" />
-        <vers num="6.4.8-6" />
-        <vers num="6.4.8-7" />
-        <vers num="6.4.8-8" />
-        <vers num="6.4.8-9" />
-        <vers num="6.4.9" />
-        <vers num="6.4.9-10" />
-        <vers num="6.4.9-2" />
-        <vers num="6.4.9-3" />
-        <vers num="6.4.9-5" />
-        <vers num="6.4.9-7" />
-        <vers num="6.4.9-8" />
-        <vers num="6.4.9-9" />
-        <vers num="6.5.0" />
-        <vers num="6.5.0-1" />
-        <vers num="6.5.0-10" />
-        <vers num="6.5.0-2" />
-        <vers num="6.5.0-3" />
-        <vers num="6.5.0-4" />
-        <vers num="6.5.0-5" />
-        <vers num="6.5.0-6" />
-        <vers num="6.5.0-7" />
-        <vers num="6.5.0-8" />
-        <vers num="6.5.0-9" />
-        <vers num="6.5.1" />
-        <vers num="6.5.1-1" />
-        <vers num="6.5.1-10" />
-        <vers num="6.5.1-2" />
-        <vers num="6.5.1-3" />
-        <vers num="6.5.1-4" />
-        <vers num="6.5.1-5" />
-        <vers num="6.5.1-6" />
-        <vers num="6.5.1-7" />
-        <vers num="6.5.1-9" />
-        <vers num="6.5.2" />
-        <vers num="6.5.2-1" />
-        <vers num="6.5.2-10" />
-        <vers num="6.5.2-2" />
-        <vers num="6.5.2-3" />
-        <vers num="6.5.2-4" />
-        <vers num="6.5.2-5" />
-        <vers num="6.5.2-6" />
-        <vers num="6.5.2-7" />
-        <vers num="6.5.2-8" />
-        <vers num="6.5.2-9" />
-        <vers num="6.5.3" />
-        <vers num="6.5.3-1" />
-        <vers num="6.5.3-10" />
-        <vers num="6.5.3-3" />
-        <vers num="6.5.3-4" />
-        <vers num="6.5.3-5" />
-        <vers num="6.5.3-6" />
-        <vers num="6.5.3-7" />
-        <vers num="6.5.3-8" />
-        <vers num="6.5.4" />
-        <vers num="6.5.4-1" />
-        <vers num="6.5.4-10" />
-        <vers num="6.5.4-2" />
-        <vers num="6.5.4-3" />
-        <vers num="6.5.4-4" />
-        <vers num="6.5.4-5" />
-        <vers num="6.5.4-6" />
-        <vers num="6.5.4-7" />
-        <vers num="6.5.4-8" />
-        <vers num="6.5.4-9" />
-        <vers num="6.5.5" />
-        <vers num="6.5.5-1" />
-        <vers num="6.5.5-10" />
-        <vers num="6.5.5-2" />
-        <vers num="6.5.5-3" />
-        <vers num="6.5.5-4" />
-        <vers num="6.5.5-5" />
-        <vers num="6.5.5-6" />
-        <vers num="6.5.5-7" />
-        <vers num="6.5.5-8" />
-        <vers num="6.5.5-9" />
-        <vers num="6.5.6" />
-        <vers num="6.5.6-10" />
-        <vers num="6.5.6-2" />
-        <vers num="6.5.6-3" />
-        <vers num="6.5.6-4" />
-        <vers num="6.5.6-5" />
-        <vers num="6.5.6-6" />
-        <vers num="6.5.6-7" />
-        <vers num="6.5.6-8" />
-        <vers num="6.5.6-9" />
-        <vers num="6.5.7" />
-        <vers num="6.5.7-1" />
-        <vers num="6.5.7-2" />
-        <vers num="6.5.7-3" />
-        <vers num="6.5.7-4" />
-        <vers num="6.5.7-5" />
-        <vers num="6.5.7-6" />
-        <vers num="6.5.7-7" />
-        <vers num="6.5.7-8" />
-        <vers num="6.5.7-9" />
-        <vers num="6.5.8" />
-        <vers num="6.5.8-1" />
-        <vers num="6.5.8-2" />
-        <vers num="6.5.8-3" />
-        <vers num="6.5.8-4" />
-        <vers num="6.5.8-5" />
-        <vers num="6.5.8-6" />
-        <vers num="6.5.8-7" />
-        <vers num="6.5.8-8" />
-        <vers num="6.5.8-9" />
-        <vers num="6.5.9" />
-        <vers num="6.5.9-1" />
-        <vers num="6.5.9-10" />
-        <vers num="6.5.9-2" />
-        <vers num="6.5.9-3" />
-        <vers num="6.5.9-4" />
-        <vers num="6.5.9-5" />
-        <vers num="6.5.9-6" />
-        <vers num="6.5.9-7" />
-        <vers num="6.5.9-8" />
-        <vers num="6.6.0" />
-        <vers num="6.6.0-1" />
-        <vers num="6.6.0-10" />
-        <vers num="6.6.0-2" />
-        <vers num="6.6.0-4" />
-        <vers num="6.6.0-5" />
-        <vers num="6.6.0-6" />
-        <vers num="6.6.0-7" />
-        <vers num="6.6.0-8" />
-        <vers num="6.6.0-9" />
-        <vers num="6.6.1" />
-        <vers num="6.6.1-1" />
-        <vers num="6.6.1-10" />
-        <vers num="6.6.1-2" />
-        <vers num="6.6.1-3" />
-        <vers num="6.6.1-4" />
-        <vers num="6.6.1-5" />
-        <vers num="6.6.1-6" />
-        <vers num="6.6.1-7" />
-        <vers num="6.6.1-8" />
-        <vers num="6.6.1-9" />
-        <vers num="6.6.2" />
-        <vers num="6.6.2-1" />
-        <vers num="6.6.2-10" />
-        <vers num="6.6.2-2" />
-        <vers num="6.6.2-3" />
-        <vers num="6.6.2-4" />
-        <vers num="6.6.2-5" />
-        <vers num="6.6.2-6" />
-        <vers num="6.6.2-7" />
-        <vers num="6.6.2-8" />
-        <vers num="6.6.2-9" />
-        <vers num="6.6.3" />
-        <vers num="6.6.3-1" />
-        <vers num="6.6.3-10" />
-        <vers num="6.6.3-2" />
-        <vers num="6.6.3-3" />
-        <vers num="6.6.3-4" />
-        <vers num="6.6.3-5" />
-        <vers num="6.6.3-6" />
-        <vers num="6.6.3-7" />
-        <vers num="6.6.4" />
-        <vers num="6.6.4-1" />
-        <vers num="6.6.4-10" />
-        <vers num="6.6.4-2" />
-        <vers num="6.6.4-4" />
-        <vers num="6.6.4-5" />
-        <vers num="6.6.4-6" />
-        <vers num="6.6.4-7" />
-        <vers num="6.6.4-8" />
-        <vers num="6.6.4-9" />
-        <vers num="6.6.5" />
-        <vers num="6.6.5-1" />
-        <vers num="6.6.5-10" />
-        <vers num="6.6.5-2" />
-        <vers num="6.6.5-3" />
-        <vers num="6.6.5-4" />
-        <vers num="6.6.5-5" />
-        <vers num="6.6.5-6" />
-        <vers num="6.6.5-7" />
-        <vers num="6.6.5-8" />
-        <vers num="6.6.5-9" />
-        <vers num="6.6.6-0" />
-        <vers num="6.6.6-1" />
-        <vers num="6.6.6-10" />
-        <vers num="6.6.6-2" />
-        <vers num="6.6.6-3" />
-        <vers num="6.6.6-4" />
-        <vers num="6.6.6-5" />
-        <vers num="6.6.6-6" />
-        <vers num="6.6.6-7" />
-        <vers num="6.6.6-8" />
-        <vers num="6.6.6-9" />
-        <vers num="6.6.7-0" />
-        <vers num="6.6.7-1" />
-        <vers num="6.6.7-10" />
-        <vers num="6.6.7-2" />
-        <vers num="6.6.7-3" />
-        <vers num="6.6.7-4" />
-        <vers num="6.6.7-5" />
-        <vers num="6.6.7-6" />
-        <vers num="6.6.7-7" />
-        <vers num="6.6.7-8" />
-        <vers num="6.6.7-9" />
-        <vers num="6.6.8-0" />
-        <vers num="6.6.9-0" />
-        <vers num="6.6.9-1" />
-        <vers num="6.6.9-10" />
-        <vers num="6.6.9-2" />
-        <vers num="6.6.9-3" />
-        <vers num="6.6.9-4" />
-        <vers num="6.6.9-5" />
-        <vers num="6.6.9-6" />
-        <vers num="6.6.9-7" />
-        <vers num="6.6.9-8" />
-        <vers num="6.6.9-9" />
-        <vers num="6.7.0-0" />
-        <vers num="6.7.0-1" />
-        <vers num="6.7.0-10" />
-        <vers num="6.7.0-2" />
-        <vers num="6.7.0-3" />
-        <vers num="6.7.0-4" />
-        <vers num="6.7.0-5" />
-        <vers num="6.7.0-6" />
-        <vers num="6.7.0-7" />
-        <vers num="6.7.0-8" />
-        <vers num="6.7.0-9" />
-        <vers num="6.7.1-0" />
-        <vers num="6.7.1-1" />
-        <vers num="6.7.1-10" />
-        <vers num="6.7.1-2" />
-        <vers num="6.7.1-3" />
-        <vers num="6.7.1-4" />
-        <vers num="6.7.1-5" />
-        <vers num="6.7.1-6" />
-        <vers num="6.7.1-7" />
-        <vers num="6.7.1-8" />
-        <vers num="6.7.1-9" />
-        <vers num="6.7.2-0" />
-        <vers num="6.7.2-1" />
-        <vers num="6.7.2-10" />
-        <vers num="6.7.2-2" />
-        <vers num="6.7.2-3" />
-        <vers num="6.7.2-4" />
-        <vers num="6.7.2-5" />
-        <vers num="6.7.2-6" />
-        <vers num="6.7.2-7" />
-        <vers num="6.7.2-8" />
-        <vers num="6.7.2-9" />
-        <vers num="6.7.3-0" />
-        <vers num="6.7.3-1" />
-        <vers num="6.7.3-10" />
-        <vers num="6.7.3-2" />
-        <vers num="6.7.3-3" />
-        <vers num="6.7.3-4" />
-        <vers num="6.7.3-5" />
-        <vers num="6.7.3-6" />
-        <vers num="6.7.3-7" />
-        <vers num="6.7.3-8" />
-        <vers num="6.7.3-9" />
-        <vers num="6.7.4-0" />
-        <vers num="6.7.4-1" />
-        <vers num="6.7.4-10" />
-        <vers num="6.7.4-2" />
-        <vers num="6.7.4-3" />
-        <vers num="6.7.4-4" />
-        <vers num="6.7.4-5" />
-        <vers num="6.7.4-6" />
-        <vers num="6.7.4-7" />
-        <vers num="6.7.4-8" />
-        <vers num="6.7.4-9" />
-        <vers num="6.7.5-0" />
-        <vers num="6.7.5-1" />
-        <vers num="6.7.5-2" />
-        <vers num="6.7.5-3" />
-        <vers num="6.7.5-4" />
-        <vers num="6.7.5-5" />
-        <vers num="6.7.5-6" />
-        <vers prev="1" num="6.7.5-7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0249" published="2012-04-05" name="CVE-2012-0249" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/551715" source="CERT-VN" patch="1">VU#551715</ref>
-      <ref url="https://bugzilla.quagga.net/show_bug.cgi?id=705" source="CONFIRM" patch="1">https://bugzilla.quagga.net/show_bug.cgi?id=705</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078926.html" source="FEDORA">FEDORA-2012-5436</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html" source="FEDORA">FEDORA-2012-5411</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078794.html" source="FEDORA">FEDORA-2012-5352</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="quagga" name="quagga">
-        <vers num="0.95" />
-        <vers num="0.96" />
-        <vers num="0.96.1" />
-        <vers num="0.96.2" />
-        <vers num="0.96.3" />
-        <vers num="0.96.4" />
-        <vers num="0.96.5" />
-        <vers num="0.97.0" />
-        <vers num="0.97.1" />
-        <vers num="0.97.2" />
-        <vers num="0.97.3" />
-        <vers num="0.97.4" />
-        <vers num="0.97.5" />
-        <vers num="0.98.0" />
-        <vers num="0.98.1" />
-        <vers num="0.98.2" />
-        <vers num="0.98.3" />
-        <vers num="0.98.4" />
-        <vers num="0.98.5" />
-        <vers num="0.98.6" />
-        <vers num="0.99.1" />
-        <vers num="0.99.10" />
-        <vers num="0.99.11" />
-        <vers num="0.99.12" />
-        <vers num="0.99.13" />
-        <vers num="0.99.14" />
-        <vers num="0.99.15" />
-        <vers num="0.99.16" />
-        <vers num="0.99.17" />
-        <vers num="0.99.18" />
-        <vers num="0.99.19" />
-        <vers num="0.99.2" />
-        <vers prev="1" num="0.99.20" />
-        <vers num="0.99.3" />
-        <vers num="0.99.4" />
-        <vers num="0.99.5" />
-        <vers num="0.99.6" />
-        <vers num="0.99.7" />
-        <vers num="0.99.8" />
-        <vers num="0.99.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0250" published="2012-04-05" name="CVE-2012-0250" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/551715" source="CERT-VN">VU#551715</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078926.html" source="FEDORA">FEDORA-2012-5436</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html" source="FEDORA">FEDORA-2012-5411</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078794.html" source="FEDORA">FEDORA-2012-5352</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="quagga" name="quagga">
-        <vers num="0.99.1" />
-        <vers num="0.99.10" />
-        <vers num="0.99.11" />
-        <vers num="0.99.12" />
-        <vers num="0.99.13" />
-        <vers num="0.99.14" />
-        <vers num="0.99.15" />
-        <vers num="0.99.16" />
-        <vers num="0.99.17" />
-        <vers num="0.99.18" />
-        <vers num="0.99.19" />
-        <vers num="0.99.2" />
-        <vers prev="1" num="0.99.20" />
-        <vers num="0.99.3" />
-        <vers num="0.99.4" />
-        <vers num="0.99.5" />
-        <vers num="0.99.6" />
-        <vers num="0.99.7" />
-        <vers num="0.99.8" />
-        <vers num="0.99.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0253" published="2012-04-18" name="CVE-2012-0253" modified="2012-04-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Demand Media Pluck SiteLife before 5.0.13 allow remote attackers to inject arbitrary web script or HTML via (1) the jsonRequest parameter to Direct/Process, the (2) r or (3) cb parameter to Direct/jsonp.htm, or (4) the cb parameter to sys/jsonp.app/.htm.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8Q6JEG" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8Q6JEG</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/400619" source="CERT-VN">VU#400619</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="demandmedia" name="pluck_sitelife">
-        <vers prev="1" num="5.0.12" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0254" published="2012-09-08" name="CVE-2012-0254" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control in Honeywell Process Solutions (HPS) Experion R2xx, R30x, R31x, and R400.x; Honeywell Building Solutions (HBS) Enterprise Building Manager R400 and R410.1; and Honeywell Environmental Combustion and Controls (ECC) SymmetrE R410.1 allows remote attackers to execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-150-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-150-01.pdf</ref>
-      <ref url="https://www.honeywellprocess.com/en-US/support/pages/all-notifications.aspx" source="MISC">https://www.honeywellprocess.com/en-US/support/pages/all-notifications.aspx</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="honeywellprocess" name="enterprise_building_manager">
-        <vers num="r400" />
-        <vers num="r410.1" />
-      </prod>
-      <prod vendor="honeywellprocess" name="experion">
-        <vers num="r200" />
-        <vers num="r300" />
-        <vers num="r310" />
-        <vers num="r400.0" />
-      </prod>
-      <prod vendor="honeywellprocess" name="symmetre">
-        <vers num="r410.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0255" published="2012-04-05" name="CVE-2012-0255" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a message associated with a malformed Four-octet AS Number Capability (aka AS4 capability).</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/551715" source="CERT-VN">VU#551715</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078926.html" source="FEDORA">FEDORA-2012-5436</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html" source="FEDORA">FEDORA-2012-5411</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078794.html" source="FEDORA">FEDORA-2012-5352</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="quagga" name="quagga">
-        <vers num="0.95" />
-        <vers num="0.96" />
-        <vers num="0.96.1" />
-        <vers num="0.96.2" />
-        <vers num="0.96.3" />
-        <vers num="0.96.4" />
-        <vers num="0.96.5" />
-        <vers num="0.97.0" />
-        <vers num="0.97.1" />
-        <vers num="0.97.2" />
-        <vers num="0.97.3" />
-        <vers num="0.97.4" />
-        <vers num="0.97.5" />
-        <vers num="0.98.0" />
-        <vers num="0.98.1" />
-        <vers num="0.98.2" />
-        <vers num="0.98.3" />
-        <vers num="0.98.4" />
-        <vers num="0.98.5" />
-        <vers num="0.98.6" />
-        <vers num="0.99.1" />
-        <vers num="0.99.10" />
-        <vers num="0.99.11" />
-        <vers num="0.99.12" />
-        <vers num="0.99.13" />
-        <vers num="0.99.14" />
-        <vers num="0.99.15" />
-        <vers num="0.99.16" />
-        <vers num="0.99.17" />
-        <vers num="0.99.18" />
-        <vers num="0.99.19" />
-        <vers num="0.99.2" />
-        <vers prev="1" num="0.99.20" />
-        <vers num="0.99.3" />
-        <vers num="0.99.4" />
-        <vers num="0.99.5" />
-        <vers num="0.99.6" />
-        <vers num="0.99.7" />
-        <vers num="0.99.8" />
-        <vers num="0.99.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0256" published="2012-03-26" name="CVE-2012-0256" modified="2012-03-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://trafficserver.apache.org/downloads" source="CONFIRM" patch="1">http://trafficserver.apache.org/downloads</ref>
-      <ref url="https://www.cert.fi/en/reports/2012/vulnerability612884.html" source="MISC">https://www.cert.fi/en/reports/2012/vulnerability612884.html</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0118.html" source="BUGTRAQ">20120322 [ANNOUNCE] Apache Traffic Server releases for security incident CVE-2012-0256</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="traffic_server">
-        <vers num="2.0.0" edition="alpha" />
-        <vers num="2.0.1" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.1.9" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0257" published="2012-04-02" name="CVE-2012-0257" modified="2012-04-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier, InFusion CE/FE/SCADA 2.5 and earlier, Wonderware Information Server 4.5 and earlier, ArchestrA Application Object Toolkit 3.2 and earlier, and InTouch 10.0 through 10.5 might allow remote attackers to execute arbitrary code via a long string to the Open member, leading to a function-pointer overwrite.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-081-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-081-01.pdf</ref>
-      <ref url="https://wdnresource.wonderware.com/support/docs/_SecurityBulletins/Security_Bulletin_LFSEC00000071.pdf" source="MISC">https://wdnresource.wonderware.com/support/docs/_SecurityBulletins/Security_Bulletin_LFSEC00000071.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="invensys" name="archestra_application_object_toolkit">
-        <vers prev="1" num="3.2" />
-      </prod>
-      <prod vendor="invensys" name="foxboro_control_software">
-        <vers prev="1" num="3.1" />
-      </prod>
-      <prod vendor="invensys" name="infusion_control_edition">
-        <vers prev="1" num="2.5" />
-      </prod>
-      <prod vendor="invensys" name="infusion_foundation_edition">
-        <vers prev="1" num="2.5" />
-      </prod>
-      <prod vendor="invensys" name="infusion_scada">
-        <vers prev="1" num="2.5" />
-      </prod>
-      <prod vendor="invensys" name="intouch">
-        <vers num="10.0" />
-        <vers num="10.5" />
-      </prod>
-      <prod vendor="invensys" name="wonderware_application_server">
-        <vers prev="1" num="2012" />
-      </prod>
-      <prod vendor="invensys" name="wonderware_information_server">
-        <vers num="3.1" />
-        <vers num="4.0" edition="sp1" />
-        <vers prev="1" num="4.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0258" published="2012-04-02" name="CVE-2012-0258" modified="2012-04-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier, InFusion CE/FE/SCADA 2.5 and earlier, Wonderware Information Server 4.5 and earlier, ArchestrA Application Object Toolkit 3.2 and earlier, and InTouch 10.0 through 10.5 might allow remote attackers to execute arbitrary code via a long string to the AddFile member.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-081-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-081-01.pdf</ref>
-      <ref url="https://wdnresource.wonderware.com/support/docs/_SecurityBulletins/Security_Bulletin_LFSEC00000071.pdf" source="MISC">https://wdnresource.wonderware.com/support/docs/_SecurityBulletins/Security_Bulletin_LFSEC00000071.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="invensys" name="archestra_application_object_toolkit">
-        <vers prev="1" num="3.2" />
-      </prod>
-      <prod vendor="invensys" name="foxboro_control_software">
-        <vers prev="1" num="3.1" />
-      </prod>
-      <prod vendor="invensys" name="infusion_control_edition">
-        <vers prev="1" num="2.5" />
-      </prod>
-      <prod vendor="invensys" name="infusion_foundation_edition">
-        <vers prev="1" num="2.5" />
-      </prod>
-      <prod vendor="invensys" name="infusion_scada">
-        <vers prev="1" num="2.5" />
-      </prod>
-      <prod vendor="invensys" name="intouch">
-        <vers num="10.0" />
-        <vers num="10.5" />
-      </prod>
-      <prod vendor="invensys" name="wonderware_application_server">
-        <vers prev="1" num="2012" />
-      </prod>
-      <prod vendor="invensys" name="wonderware_information_server">
-        <vers num="3.1" />
-        <vers num="4.0" edition="sp1" />
-        <vers prev="1" num="4.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0259" published="2012-06-05" name="CVE-2012-0259" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0259" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0259</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74657" source="XF">imagemagick-jpegexif-dos(74657)</ref>
-      <ref url="http://www.securityfocus.com/bid/51957" source="BID">52898</ref>
-      <ref url="http://www.osvdb.org/81021" source="OSVDB">81021</ref>
-      <ref url="http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&amp;t=20629" source="CONFIRM" adv="1">http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&amp;t=20629</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2462" source="DEBIAN">DSA-2462</ref>
-      <ref url="http://www.cert.fi/en/reports/2012/vulnerability635606.html" source="MISC">http://www.cert.fi/en/reports/2012/vulnerability635606.html</ref>
-      <ref url="http://ubuntu.com/usn/usn-1435-1" source="UBUNTU">USN-1435-1</ref>
-      <ref url="http://secunia.com/advisories/49317" source="SECUNIA" adv="1">49317</ref>
-      <ref url="http://secunia.com/advisories/49063" source="SECUNIA" adv="1">49063</ref>
-      <ref url="http://secunia.com/advisories/49043" source="SECUNIA" adv="1">49043</ref>
-      <ref url="http://secunia.com/advisories/48974" source="SECUNIA" adv="1">48974</ref>
-      <ref url="http://secunia.com/advisories/48679" source="SECUNIA" adv="1">48679</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0544.html" source="REDHAT">RHSA-2012:0544</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html" source="SUSE">openSUSE-SU-2012:0692</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="imagemagick" name="imagemagick">
-        <vers num="4.2.7" />
-        <vers num="4.2.9" />
-        <vers num="5.2" />
-        <vers num="5.2.0" />
-        <vers num="5.2.4.3" />
-        <vers num="5.2.6" />
-        <vers num="5.3" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers num="5.3.8" />
-        <vers num="5.3.8.2" />
-        <vers num="5.3.9" />
-        <vers num="5.4" />
-        <vers num="5.4.0.5" />
-        <vers num="5.4.1.2" />
-        <vers num="5.4.2.3" />
-        <vers num="5.4.3" />
-        <vers num="5.4.3.11" />
-        <vers num="5.4.4.5" />
-        <vers num="5.4.5.1" />
-        <vers num="5.4.6.3" />
-        <vers num="5.4.7" />
-        <vers num="5.4.7.4" />
-        <vers num="5.4.8" />
-        <vers num="5.4.8.3" />
-        <vers num="5.4.9.1" />
-        <vers num="5.5" />
-        <vers num="5.5.1.4" />
-        <vers num="5.5.2.5" />
-        <vers num="5.5.3.2" />
-        <vers num="5.5.3.2.1.2.0" />
-        <vers num="5.5.4" />
-        <vers num="5.5.4.4" />
-        <vers num="5.5.5.3" />
-        <vers num="5.5.6" />
-        <vers num="5.5.6.0_2003-04-09" />
-        <vers num="5.5.6.0_20030409" />
-        <vers num="5.5.7" />
-        <vers num="5.5.7.15" />
-        <vers num="5.5.7.31" />
-        <vers num="5.5.7.35" />
-        <vers num="5.5.7q16" />
-        <vers num="5.5.7q8" />
-        <vers num="6.0" />
-        <vers num="6.0.0.7" />
-        <vers num="6.0.1" />
-        <vers num="6.0.1.4" />
-        <vers num="6.0.2" />
-        <vers num="6.0.2.5" />
-        <vers num="6.0.2.7" />
-        <vers num="6.0.3" />
-        <vers num="6.0.3.5" />
-        <vers num="6.0.4" />
-        <vers num="6.0.4.4" />
-        <vers num="6.0.5" />
-        <vers num="6.0.5.3" />
-        <vers num="6.0.6" />
-        <vers num="6.0.6.1" />
-        <vers num="6.0.6.2" />
-        <vers num="6.0.7" />
-        <vers num="6.0.7.3" />
-        <vers num="6.0.8" />
-        <vers num="6.0.8.3" />
-        <vers num="6.1" />
-        <vers num="6.1.0.9" />
-        <vers num="6.1.1" />
-        <vers num="6.1.1.6" />
-        <vers num="6.1.2" />
-        <vers num="6.1.2.7" />
-        <vers num="6.1.3" />
-        <vers num="6.1.3.7" />
-        <vers num="6.1.4" />
-        <vers num="6.1.4.5" />
-        <vers num="6.1.5" />
-        <vers num="6.1.5.8" />
-        <vers num="6.1.6" />
-        <vers num="6.1.6.9" />
-        <vers num="6.1.7" />
-        <vers num="6.1.7.5" />
-        <vers num="6.1.8" />
-        <vers num="6.1.8.7" />
-        <vers num="6.1.9.4" />
-        <vers num="6.2" />
-        <vers num="6.2.0.3" />
-        <vers num="6.2.0.4" />
-        <vers num="6.2.0.7" />
-        <vers num="6.2.0.8" />
-        <vers num="6.2.1" />
-        <vers num="6.2.1.7" />
-        <vers num="6.2.2" />
-        <vers num="6.2.2.5" />
-        <vers num="6.2.3" />
-        <vers num="6.2.3.4" />
-        <vers num="6.2.3.6" />
-        <vers num="6.2.4" />
-        <vers num="6.2.4.3" />
-        <vers num="6.2.4.5" />
-        <vers num="6.2.5" />
-        <vers num="6.2.6" />
-        <vers num="6.2.7" />
-        <vers num="6.2.8" />
-        <vers num="6.2.8.0" />
-        <vers num="6.2.8.1" />
-        <vers num="6.2.8.2" />
-        <vers num="6.2.8.3" />
-        <vers num="6.2.9" />
-        <vers num="6.2.9.2" />
-        <vers num="6.3.0.0" />
-        <vers num="6.3.0.1" />
-        <vers num="6.3.0.2" />
-        <vers num="6.3.0.3" />
-        <vers num="6.3.0.4" />
-        <vers num="6.3.0.5" />
-        <vers num="6.3.0.7" />
-        <vers num="6.3.0.8" />
-        <vers num="6.3.1" />
-        <vers num="6.3.1-6" />
-        <vers num="6.3.1-7" />
-        <vers num="6.3.1.0" />
-        <vers num="6.3.1.1" />
-        <vers num="6.3.1.2." />
-        <vers num="6.3.1.3" />
-        <vers num="6.3.1.4" />
-        <vers num="6.3.1.5" />
-        <vers num="6.3.1.6" />
-        <vers num="6.3.1.7" />
-        <vers num="6.3.2" />
-        <vers num="6.3.2-1" />
-        <vers num="6.3.2-2" />
-        <vers num="6.3.2-3" />
-        <vers num="6.3.2-4" />
-        <vers num="6.3.2-5" />
-        <vers num="6.3.2-6" />
-        <vers num="6.3.2-7" />
-        <vers num="6.3.2-8" />
-        <vers num="6.3.2.0" />
-        <vers num="6.3.2.1" />
-        <vers num="6.3.2.2" />
-        <vers num="6.3.2.3" />
-        <vers num="6.3.2.4" />
-        <vers num="6.3.2.5" />
-        <vers num="6.3.2.6" />
-        <vers num="6.3.2.7" />
-        <vers num="6.3.2.8" />
-        <vers num="6.3.3" />
-        <vers num="6.3.3-1" />
-        <vers num="6.3.3-2" />
-        <vers num="6.3.3-3" />
-        <vers num="6.3.3-4" />
-        <vers num="6.3.3-5" />
-        <vers num="6.3.3-6" />
-        <vers num="6.3.3-7" />
-        <vers num="6.3.3-8" />
-        <vers num="6.3.3-9" />
-        <vers num="6.3.3.0" />
-        <vers num="6.3.3.1" />
-        <vers num="6.3.3.2" />
-        <vers num="6.3.3.3" />
-        <vers num="6.3.3.4" />
-        <vers num="6.3.3_3" />
-        <vers num="6.3.3_5" />
-        <vers num="6.3.3_6" />
-        <vers num="6.3.4" />
-        <vers num="6.3.4-1" />
-        <vers num="6.3.4-10" />
-        <vers num="6.3.4-2" />
-        <vers num="6.3.4-3" />
-        <vers num="6.3.4-4" />
-        <vers num="6.3.4-5" />
-        <vers num="6.3.4-6" />
-        <vers num="6.3.4-8" />
-        <vers num="6.3.4-9" />
-        <vers num="6.3.5" />
-        <vers num="6.3.5-10" />
-        <vers num="6.3.5-4" />
-        <vers num="6.3.5-5" />
-        <vers num="6.3.5-6" />
-        <vers num="6.3.5-7" />
-        <vers num="6.3.5-9" />
-        <vers num="6.3.6" />
-        <vers num="6.3.6-1" />
-        <vers num="6.3.6-10" />
-        <vers num="6.3.6-2" />
-        <vers num="6.3.6-3" />
-        <vers num="6.3.6-4" />
-        <vers num="6.3.6-5" />
-        <vers num="6.3.6-6" />
-        <vers num="6.3.6-7" />
-        <vers num="6.3.6-8" />
-        <vers num="6.3.6-9" />
-        <vers num="6.3.7" />
-        <vers num="6.3.7-1" />
-        <vers num="6.3.7-10" />
-        <vers num="6.3.7-2" />
-        <vers num="6.3.7-3" />
-        <vers num="6.3.7-4" />
-        <vers num="6.3.7-5" />
-        <vers num="6.3.7-7" />
-        <vers num="6.3.7-9" />
-        <vers num="6.3.8" />
-        <vers num="6.3.8-1" />
-        <vers num="6.3.8-10" />
-        <vers num="6.3.8-2" />
-        <vers num="6.3.8-3" />
-        <vers num="6.3.8-5" />
-        <vers num="6.3.8-6" />
-        <vers num="6.3.8-7" />
-        <vers num="6.3.8-9" />
-        <vers num="6.3.9" />
-        <vers num="6.3.9-1" />
-        <vers num="6.3.9-10" />
-        <vers num="6.3.9-2" />
-        <vers num="6.3.9-4" />
-        <vers num="6.3.9-5" />
-        <vers num="6.3.9-6" />
-        <vers num="6.3.9-7" />
-        <vers num="6.3.9-8" />
-        <vers num="6.3.9-9" />
-        <vers num="6.4.0" />
-        <vers num="6.4.0-1" />
-        <vers num="6.4.0-10" />
-        <vers num="6.4.0-11" />
-        <vers num="6.4.0-4" />
-        <vers num="6.4.0-5" />
-        <vers num="6.4.0-6" />
-        <vers num="6.4.0-7" />
-        <vers num="6.4.0-8" />
-        <vers num="6.4.1" />
-        <vers num="6.4.1-1" />
-        <vers num="6.4.1-2" />
-        <vers num="6.4.1-3" />
-        <vers num="6.4.1-4" />
-        <vers num="6.4.1-5" />
-        <vers num="6.4.1-6" />
-        <vers num="6.4.1-7" />
-        <vers num="6.4.1-8" />
-        <vers num="6.4.1-9" />
-        <vers num="6.4.2" />
-        <vers num="6.4.2-1" />
-        <vers num="6.4.2-10" />
-        <vers num="6.4.2-2" />
-        <vers num="6.4.2-4" />
-        <vers num="6.4.2-5" />
-        <vers num="6.4.2-6" />
-        <vers num="6.4.2-7" />
-        <vers num="6.4.2-8" />
-        <vers num="6.4.2-9" />
-        <vers num="6.4.3" />
-        <vers num="6.4.3-1" />
-        <vers num="6.4.3-10" />
-        <vers num="6.4.3-2" />
-        <vers num="6.4.3-3" />
-        <vers num="6.4.3-5" />
-        <vers num="6.4.3-6" />
-        <vers num="6.4.3-7" />
-        <vers num="6.4.3-8" />
-        <vers num="6.4.4" />
-        <vers num="6.4.4-1" />
-        <vers num="6.4.4-3" />
-        <vers num="6.4.4-5" />
-        <vers num="6.4.4-7" />
-        <vers num="6.4.4-8" />
-        <vers num="6.4.5" />
-        <vers num="6.4.5-1" />
-        <vers num="6.4.5-2" />
-        <vers num="6.4.5-3" />
-        <vers num="6.4.5-4" />
-        <vers num="6.4.5-6" />
-        <vers num="6.4.5-7" />
-        <vers num="6.4.5-9" />
-        <vers num="6.4.6" />
-        <vers num="6.4.6-1" />
-        <vers num="6.4.6-2" />
-        <vers num="6.4.6-3" />
-        <vers num="6.4.6-4" />
-        <vers num="6.4.6-5" />
-        <vers num="6.4.6-6" />
-        <vers num="6.4.6-8" />
-        <vers num="6.4.6-9" />
-        <vers num="6.4.7-1" />
-        <vers num="6.4.7-10" />
-        <vers num="6.4.7-2" />
-        <vers num="6.4.7-3" />
-        <vers num="6.4.7-4" />
-        <vers num="6.4.7-5" />
-        <vers num="6.4.7-6" />
-        <vers num="6.4.7-7" />
-        <vers num="6.4.7-8" />
-        <vers num="6.4.7-9" />
-        <vers num="6.4.8" />
-        <vers num="6.4.8-1" />
-        <vers num="6.4.8-10" />
-        <vers num="6.4.8-2" />
-        <vers num="6.4.8-3" />
-        <vers num="6.4.8-4" />
-        <vers num="6.4.8-5" />
-        <vers num="6.4.8-6" />
-        <vers num="6.4.8-7" />
-        <vers num="6.4.8-8" />
-        <vers num="6.4.8-9" />
-        <vers num="6.4.9" />
-        <vers num="6.4.9-10" />
-        <vers num="6.4.9-2" />
-        <vers num="6.4.9-3" />
-        <vers num="6.4.9-5" />
-        <vers num="6.4.9-7" />
-        <vers num="6.4.9-8" />
-        <vers num="6.4.9-9" />
-        <vers num="6.5.0" />
-        <vers num="6.5.0-1" />
-        <vers num="6.5.0-10" />
-        <vers num="6.5.0-2" />
-        <vers num="6.5.0-3" />
-        <vers num="6.5.0-4" />
-        <vers num="6.5.0-5" />
-        <vers num="6.5.0-6" />
-        <vers num="6.5.0-7" />
-        <vers num="6.5.0-8" />
-        <vers num="6.5.0-9" />
-        <vers num="6.5.1" />
-        <vers num="6.5.1-1" />
-        <vers num="6.5.1-10" />
-        <vers num="6.5.1-2" />
-        <vers num="6.5.1-3" />
-        <vers num="6.5.1-4" />
-        <vers num="6.5.1-5" />
-        <vers num="6.5.1-6" />
-        <vers num="6.5.1-7" />
-        <vers num="6.5.1-9" />
-        <vers num="6.5.2" />
-        <vers num="6.5.2-1" />
-        <vers num="6.5.2-10" />
-        <vers num="6.5.2-2" />
-        <vers num="6.5.2-3" />
-        <vers num="6.5.2-4" />
-        <vers num="6.5.2-5" />
-        <vers num="6.5.2-6" />
-        <vers num="6.5.2-7" />
-        <vers num="6.5.2-8" />
-        <vers num="6.5.2-9" />
-        <vers num="6.5.3" />
-        <vers num="6.5.3-1" />
-        <vers num="6.5.3-10" />
-        <vers num="6.5.3-3" />
-        <vers num="6.5.3-4" />
-        <vers num="6.5.3-5" />
-        <vers num="6.5.3-6" />
-        <vers num="6.5.3-7" />
-        <vers num="6.5.3-8" />
-        <vers num="6.5.4" />
-        <vers num="6.5.4-1" />
-        <vers num="6.5.4-10" />
-        <vers num="6.5.4-2" />
-        <vers num="6.5.4-3" />
-        <vers num="6.5.4-4" />
-        <vers num="6.5.4-5" />
-        <vers num="6.5.4-6" />
-        <vers num="6.5.4-7" />
-        <vers num="6.5.4-8" />
-        <vers num="6.5.4-9" />
-        <vers num="6.5.5" />
-        <vers num="6.5.5-1" />
-        <vers num="6.5.5-10" />
-        <vers num="6.5.5-2" />
-        <vers num="6.5.5-3" />
-        <vers num="6.5.5-4" />
-        <vers num="6.5.5-5" />
-        <vers num="6.5.5-6" />
-        <vers num="6.5.5-7" />
-        <vers num="6.5.5-8" />
-        <vers num="6.5.5-9" />
-        <vers num="6.5.6" />
-        <vers num="6.5.6-10" />
-        <vers num="6.5.6-2" />
-        <vers num="6.5.6-3" />
-        <vers num="6.5.6-4" />
-        <vers num="6.5.6-5" />
-        <vers num="6.5.6-6" />
-        <vers num="6.5.6-7" />
-        <vers num="6.5.6-8" />
-        <vers num="6.5.6-9" />
-        <vers num="6.5.7" />
-        <vers num="6.5.7-1" />
-        <vers num="6.5.7-2" />
-        <vers num="6.5.7-3" />
-        <vers num="6.5.7-4" />
-        <vers num="6.5.7-5" />
-        <vers num="6.5.7-6" />
-        <vers num="6.5.7-7" />
-        <vers num="6.5.7-8" />
-        <vers num="6.5.7-9" />
-        <vers num="6.5.8" />
-        <vers num="6.5.8-1" />
-        <vers num="6.5.8-2" />
-        <vers num="6.5.8-3" />
-        <vers num="6.5.8-4" />
-        <vers num="6.5.8-5" />
-        <vers num="6.5.8-6" />
-        <vers num="6.5.8-7" />
-        <vers num="6.5.8-8" />
-        <vers num="6.5.8-9" />
-        <vers num="6.5.9" />
-        <vers num="6.5.9-1" />
-        <vers num="6.5.9-10" />
-        <vers num="6.5.9-2" />
-        <vers num="6.5.9-3" />
-        <vers num="6.5.9-4" />
-        <vers num="6.5.9-5" />
-        <vers num="6.5.9-6" />
-        <vers num="6.5.9-7" />
-        <vers num="6.5.9-8" />
-        <vers num="6.6.0" />
-        <vers num="6.6.0-1" />
-        <vers num="6.6.0-10" />
-        <vers num="6.6.0-2" />
-        <vers num="6.6.0-4" />
-        <vers num="6.6.0-5" />
-        <vers num="6.6.0-6" />
-        <vers num="6.6.0-7" />
-        <vers num="6.6.0-8" />
-        <vers num="6.6.0-9" />
-        <vers num="6.6.1" />
-        <vers num="6.6.1-1" />
-        <vers num="6.6.1-10" />
-        <vers num="6.6.1-2" />
-        <vers num="6.6.1-3" />
-        <vers num="6.6.1-4" />
-        <vers num="6.6.1-5" />
-        <vers num="6.6.1-6" />
-        <vers num="6.6.1-7" />
-        <vers num="6.6.1-8" />
-        <vers num="6.6.1-9" />
-        <vers num="6.6.2" />
-        <vers num="6.6.2-1" />
-        <vers num="6.6.2-10" />
-        <vers num="6.6.2-2" />
-        <vers num="6.6.2-3" />
-        <vers num="6.6.2-4" />
-        <vers num="6.6.2-5" />
-        <vers num="6.6.2-6" />
-        <vers num="6.6.2-7" />
-        <vers num="6.6.2-8" />
-        <vers num="6.6.2-9" />
-        <vers num="6.6.3" />
-        <vers num="6.6.3-1" />
-        <vers num="6.6.3-10" />
-        <vers num="6.6.3-2" />
-        <vers num="6.6.3-3" />
-        <vers num="6.6.3-4" />
-        <vers num="6.6.3-5" />
-        <vers num="6.6.3-6" />
-        <vers num="6.6.3-7" />
-        <vers num="6.6.4" />
-        <vers num="6.6.4-1" />
-        <vers num="6.6.4-10" />
-        <vers num="6.6.4-2" />
-        <vers num="6.6.4-4" />
-        <vers num="6.6.4-5" />
-        <vers num="6.6.4-6" />
-        <vers num="6.6.4-7" />
-        <vers num="6.6.4-8" />
-        <vers num="6.6.4-9" />
-        <vers num="6.6.5" />
-        <vers num="6.6.5-1" />
-        <vers num="6.6.5-10" />
-        <vers num="6.6.5-2" />
-        <vers num="6.6.5-3" />
-        <vers num="6.6.5-4" />
-        <vers num="6.6.5-5" />
-        <vers num="6.6.5-6" />
-        <vers num="6.6.5-7" />
-        <vers num="6.6.5-8" />
-        <vers num="6.6.5-9" />
-        <vers num="6.6.6-0" />
-        <vers num="6.6.6-1" />
-        <vers num="6.6.6-10" />
-        <vers num="6.6.6-2" />
-        <vers num="6.6.6-3" />
-        <vers num="6.6.6-4" />
-        <vers num="6.6.6-5" />
-        <vers num="6.6.6-6" />
-        <vers num="6.6.6-7" />
-        <vers num="6.6.6-8" />
-        <vers num="6.6.6-9" />
-        <vers num="6.6.7-0" />
-        <vers num="6.6.7-1" />
-        <vers num="6.6.7-10" />
-        <vers num="6.6.7-2" />
-        <vers num="6.6.7-3" />
-        <vers num="6.6.7-4" />
-        <vers num="6.6.7-5" />
-        <vers num="6.6.7-6" />
-        <vers num="6.6.7-7" />
-        <vers num="6.6.7-8" />
-        <vers num="6.6.7-9" />
-        <vers num="6.6.8-0" />
-        <vers num="6.6.9-0" />
-        <vers num="6.6.9-1" />
-        <vers num="6.6.9-10" />
-        <vers num="6.6.9-2" />
-        <vers num="6.6.9-3" />
-        <vers num="6.6.9-4" />
-        <vers num="6.6.9-5" />
-        <vers num="6.6.9-6" />
-        <vers num="6.6.9-7" />
-        <vers num="6.6.9-8" />
-        <vers num="6.6.9-9" />
-        <vers num="6.7.0-0" />
-        <vers num="6.7.0-1" />
-        <vers num="6.7.0-10" />
-        <vers num="6.7.0-2" />
-        <vers num="6.7.0-3" />
-        <vers num="6.7.0-4" />
-        <vers num="6.7.0-5" />
-        <vers num="6.7.0-6" />
-        <vers num="6.7.0-7" />
-        <vers num="6.7.0-8" />
-        <vers num="6.7.0-9" />
-        <vers num="6.7.1-0" />
-        <vers num="6.7.1-1" />
-        <vers num="6.7.1-10" />
-        <vers num="6.7.1-2" />
-        <vers num="6.7.1-3" />
-        <vers num="6.7.1-4" />
-        <vers num="6.7.1-5" />
-        <vers num="6.7.1-6" />
-        <vers num="6.7.1-7" />
-        <vers num="6.7.1-8" />
-        <vers num="6.7.1-9" />
-        <vers num="6.7.2-0" />
-        <vers num="6.7.2-1" />
-        <vers num="6.7.2-10" />
-        <vers num="6.7.2-2" />
-        <vers num="6.7.2-3" />
-        <vers num="6.7.2-4" />
-        <vers num="6.7.2-5" />
-        <vers num="6.7.2-6" />
-        <vers num="6.7.2-7" />
-        <vers num="6.7.2-8" />
-        <vers num="6.7.2-9" />
-        <vers num="6.7.3-0" />
-        <vers num="6.7.3-1" />
-        <vers num="6.7.3-10" />
-        <vers num="6.7.3-2" />
-        <vers num="6.7.3-3" />
-        <vers num="6.7.3-4" />
-        <vers num="6.7.3-5" />
-        <vers num="6.7.3-6" />
-        <vers num="6.7.3-7" />
-        <vers num="6.7.3-8" />
-        <vers num="6.7.3-9" />
-        <vers num="6.7.4-0" />
-        <vers num="6.7.4-1" />
-        <vers num="6.7.4-10" />
-        <vers num="6.7.4-2" />
-        <vers num="6.7.4-3" />
-        <vers num="6.7.4-4" />
-        <vers num="6.7.4-5" />
-        <vers num="6.7.4-6" />
-        <vers num="6.7.4-7" />
-        <vers num="6.7.4-8" />
-        <vers num="6.7.4-9" />
-        <vers num="6.7.5-0" />
-        <vers num="6.7.5-1" />
-        <vers num="6.7.5-10" />
-        <vers num="6.7.5-2" />
-        <vers num="6.7.5-3" />
-        <vers num="6.7.5-4" />
-        <vers num="6.7.5-5" />
-        <vers num="6.7.5-6" />
-        <vers num="6.7.5-7" />
-        <vers num="6.7.5-8" />
-        <vers num="6.7.5-9" />
-        <vers num="6.7.6-0" />
-        <vers num="6.7.6-1" />
-        <vers prev="1" num="6.7.6-2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0260" published="2012-06-05" name="CVE-2012-0260" modified="2012-06-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory consumption) via a JPEG image with a crafted sequence of restart markers.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52898" source="BID" patch="1">52898</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74658" source="XF">imagemagick-jpegwarninghandler-dos(74658)</ref>
-      <ref url="http://www.osvdb.org/81022" source="OSVDB">81022</ref>
-      <ref url="http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&amp;t=20629" source="CONFIRM" adv="1">http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&amp;t=20629</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2462" source="DEBIAN">DSA-2462</ref>
-      <ref url="http://www.cert.fi/en/reports/2012/vulnerability635606.html" source="MISC">http://www.cert.fi/en/reports/2012/vulnerability635606.html</ref>
-      <ref url="http://secunia.com/advisories/49317" source="SECUNIA" adv="1">49317</ref>
-      <ref url="http://secunia.com/advisories/49068" source="SECUNIA" adv="1">49068</ref>
-      <ref url="http://secunia.com/advisories/49063" source="SECUNIA" adv="1">49063</ref>
-      <ref url="http://secunia.com/advisories/48974" source="SECUNIA" adv="1">48974</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0545.html" source="REDHAT">RHSA-2012:0545</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0544.html" source="REDHAT">RHSA-2012:0544</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html" source="SUSE">openSUSE-SU-2012:0692</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="imagemagick" name="imagemagick">
-        <vers num="4.2.7" />
-        <vers num="4.2.9" />
-        <vers num="5.2" />
-        <vers num="5.2.0" />
-        <vers num="5.2.4.3" />
-        <vers num="5.2.6" />
-        <vers num="5.3" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers num="5.3.8" />
-        <vers num="5.3.8.2" />
-        <vers num="5.3.9" />
-        <vers num="5.4" />
-        <vers num="5.4.0.5" />
-        <vers num="5.4.1.2" />
-        <vers num="5.4.2.3" />
-        <vers num="5.4.3" />
-        <vers num="5.4.3.11" />
-        <vers num="5.4.4.5" />
-        <vers num="5.4.5.1" />
-        <vers num="5.4.6.3" />
-        <vers num="5.4.7" />
-        <vers num="5.4.7.4" />
-        <vers num="5.4.8" />
-        <vers num="5.4.8.3" />
-        <vers num="5.4.9.1" />
-        <vers num="5.5" />
-        <vers num="5.5.1.4" />
-        <vers num="5.5.2.5" />
-        <vers num="5.5.3.2" />
-        <vers num="5.5.3.2.1.2.0" />
-        <vers num="5.5.4" />
-        <vers num="5.5.4.4" />
-        <vers num="5.5.5.3" />
-        <vers num="5.5.6" />
-        <vers num="5.5.6.0_2003-04-09" />
-        <vers num="5.5.6.0_20030409" />
-        <vers num="5.5.7" />
-        <vers num="5.5.7.15" />
-        <vers num="5.5.7.31" />
-        <vers num="5.5.7.35" />
-        <vers num="5.5.7q16" />
-        <vers num="5.5.7q8" />
-        <vers num="6.0" />
-        <vers num="6.0.0.7" />
-        <vers num="6.0.1" />
-        <vers num="6.0.1.4" />
-        <vers num="6.0.2" />
-        <vers num="6.0.2.5" />
-        <vers num="6.0.2.7" />
-        <vers num="6.0.3" />
-        <vers num="6.0.3.5" />
-        <vers num="6.0.4" />
-        <vers num="6.0.4.4" />
-        <vers num="6.0.5" />
-        <vers num="6.0.5.3" />
-        <vers num="6.0.6" />
-        <vers num="6.0.6.1" />
-        <vers num="6.0.6.2" />
-        <vers num="6.0.7" />
-        <vers num="6.0.7.3" />
-        <vers num="6.0.8" />
-        <vers num="6.0.8.3" />
-        <vers num="6.1" />
-        <vers num="6.1.0.9" />
-        <vers num="6.1.1" />
-        <vers num="6.1.1.6" />
-        <vers num="6.1.2" />
-        <vers num="6.1.2.7" />
-        <vers num="6.1.3" />
-        <vers num="6.1.3.7" />
-        <vers num="6.1.4" />
-        <vers num="6.1.4.5" />
-        <vers num="6.1.5" />
-        <vers num="6.1.5.8" />
-        <vers num="6.1.6" />
-        <vers num="6.1.6.9" />
-        <vers num="6.1.7" />
-        <vers num="6.1.7.5" />
-        <vers num="6.1.8" />
-        <vers num="6.1.8.7" />
-        <vers num="6.1.9.4" />
-        <vers num="6.2" />
-        <vers num="6.2.0.3" />
-        <vers num="6.2.0.4" />
-        <vers num="6.2.0.7" />
-        <vers num="6.2.0.8" />
-        <vers num="6.2.1" />
-        <vers num="6.2.1.7" />
-        <vers num="6.2.2" />
-        <vers num="6.2.2.5" />
-        <vers num="6.2.3" />
-        <vers num="6.2.3.4" />
-        <vers num="6.2.3.6" />
-        <vers num="6.2.4" />
-        <vers num="6.2.4.3" />
-        <vers num="6.2.4.5" />
-        <vers num="6.2.5" />
-        <vers num="6.2.6" />
-        <vers num="6.2.7" />
-        <vers num="6.2.8" />
-        <vers num="6.2.8.0" />
-        <vers num="6.2.8.1" />
-        <vers num="6.2.8.2" />
-        <vers num="6.2.8.3" />
-        <vers num="6.2.9" />
-        <vers num="6.2.9.2" />
-        <vers num="6.3.0.0" />
-        <vers num="6.3.0.1" />
-        <vers num="6.3.0.2" />
-        <vers num="6.3.0.3" />
-        <vers num="6.3.0.4" />
-        <vers num="6.3.0.5" />
-        <vers num="6.3.0.7" />
-        <vers num="6.3.0.8" />
-        <vers num="6.3.1" />
-        <vers num="6.3.1-6" />
-        <vers num="6.3.1-7" />
-        <vers num="6.3.1.0" />
-        <vers num="6.3.1.1" />
-        <vers num="6.3.1.2." />
-        <vers num="6.3.1.3" />
-        <vers num="6.3.1.4" />
-        <vers num="6.3.1.5" />
-        <vers num="6.3.1.6" />
-        <vers num="6.3.1.7" />
-        <vers num="6.3.2" />
-        <vers num="6.3.2-1" />
-        <vers num="6.3.2-2" />
-        <vers num="6.3.2-3" />
-        <vers num="6.3.2-4" />
-        <vers num="6.3.2-5" />
-        <vers num="6.3.2-6" />
-        <vers num="6.3.2-7" />
-        <vers num="6.3.2-8" />
-        <vers num="6.3.2.0" />
-        <vers num="6.3.2.1" />
-        <vers num="6.3.2.2" />
-        <vers num="6.3.2.3" />
-        <vers num="6.3.2.4" />
-        <vers num="6.3.2.5" />
-        <vers num="6.3.2.6" />
-        <vers num="6.3.2.7" />
-        <vers num="6.3.2.8" />
-        <vers num="6.3.3" />
-        <vers num="6.3.3-1" />
-        <vers num="6.3.3-2" />
-        <vers num="6.3.3-3" />
-        <vers num="6.3.3-4" />
-        <vers num="6.3.3-5" />
-        <vers num="6.3.3-6" />
-        <vers num="6.3.3-7" />
-        <vers num="6.3.3-8" />
-        <vers num="6.3.3-9" />
-        <vers num="6.3.3.0" />
-        <vers num="6.3.3.1" />
-        <vers num="6.3.3.2" />
-        <vers num="6.3.3.3" />
-        <vers num="6.3.3.4" />
-        <vers num="6.3.3_3" />
-        <vers num="6.3.3_5" />
-        <vers num="6.3.3_6" />
-        <vers num="6.3.4" />
-        <vers num="6.3.4-1" />
-        <vers num="6.3.4-10" />
-        <vers num="6.3.4-2" />
-        <vers num="6.3.4-3" />
-        <vers num="6.3.4-4" />
-        <vers num="6.3.4-5" />
-        <vers num="6.3.4-6" />
-        <vers num="6.3.4-8" />
-        <vers num="6.3.4-9" />
-        <vers num="6.3.5" />
-        <vers num="6.3.5-10" />
-        <vers num="6.3.5-4" />
-        <vers num="6.3.5-5" />
-        <vers num="6.3.5-6" />
-        <vers num="6.3.5-7" />
-        <vers num="6.3.5-9" />
-        <vers num="6.3.6" />
-        <vers num="6.3.6-1" />
-        <vers num="6.3.6-10" />
-        <vers num="6.3.6-2" />
-        <vers num="6.3.6-3" />
-        <vers num="6.3.6-4" />
-        <vers num="6.3.6-5" />
-        <vers num="6.3.6-6" />
-        <vers num="6.3.6-7" />
-        <vers num="6.3.6-8" />
-        <vers num="6.3.6-9" />
-        <vers num="6.3.7" />
-        <vers num="6.3.7-1" />
-        <vers num="6.3.7-10" />
-        <vers num="6.3.7-2" />
-        <vers num="6.3.7-3" />
-        <vers num="6.3.7-4" />
-        <vers num="6.3.7-5" />
-        <vers num="6.3.7-7" />
-        <vers num="6.3.7-9" />
-        <vers num="6.3.8" />
-        <vers num="6.3.8-1" />
-        <vers num="6.3.8-10" />
-        <vers num="6.3.8-2" />
-        <vers num="6.3.8-3" />
-        <vers num="6.3.8-5" />
-        <vers num="6.3.8-6" />
-        <vers num="6.3.8-7" />
-        <vers num="6.3.8-9" />
-        <vers num="6.3.9" />
-        <vers num="6.3.9-1" />
-        <vers num="6.3.9-10" />
-        <vers num="6.3.9-2" />
-        <vers num="6.3.9-4" />
-        <vers num="6.3.9-5" />
-        <vers num="6.3.9-6" />
-        <vers num="6.3.9-7" />
-        <vers num="6.3.9-8" />
-        <vers num="6.3.9-9" />
-        <vers num="6.4.0" />
-        <vers num="6.4.0-1" />
-        <vers num="6.4.0-10" />
-        <vers num="6.4.0-11" />
-        <vers num="6.4.0-4" />
-        <vers num="6.4.0-5" />
-        <vers num="6.4.0-6" />
-        <vers num="6.4.0-7" />
-        <vers num="6.4.0-8" />
-        <vers num="6.4.1" />
-        <vers num="6.4.1-1" />
-        <vers num="6.4.1-2" />
-        <vers num="6.4.1-3" />
-        <vers num="6.4.1-4" />
-        <vers num="6.4.1-5" />
-        <vers num="6.4.1-6" />
-        <vers num="6.4.1-7" />
-        <vers num="6.4.1-8" />
-        <vers num="6.4.1-9" />
-        <vers num="6.4.2" />
-        <vers num="6.4.2-1" />
-        <vers num="6.4.2-10" />
-        <vers num="6.4.2-2" />
-        <vers num="6.4.2-4" />
-        <vers num="6.4.2-5" />
-        <vers num="6.4.2-6" />
-        <vers num="6.4.2-7" />
-        <vers num="6.4.2-8" />
-        <vers num="6.4.2-9" />
-        <vers num="6.4.3" />
-        <vers num="6.4.3-1" />
-        <vers num="6.4.3-10" />
-        <vers num="6.4.3-2" />
-        <vers num="6.4.3-3" />
-        <vers num="6.4.3-5" />
-        <vers num="6.4.3-6" />
-        <vers num="6.4.3-7" />
-        <vers num="6.4.3-8" />
-        <vers num="6.4.4" />
-        <vers num="6.4.4-1" />
-        <vers num="6.4.4-3" />
-        <vers num="6.4.4-5" />
-        <vers num="6.4.4-7" />
-        <vers num="6.4.4-8" />
-        <vers num="6.4.5" />
-        <vers num="6.4.5-1" />
-        <vers num="6.4.5-2" />
-        <vers num="6.4.5-3" />
-        <vers num="6.4.5-4" />
-        <vers num="6.4.5-6" />
-        <vers num="6.4.5-7" />
-        <vers num="6.4.5-9" />
-        <vers num="6.4.6" />
-        <vers num="6.4.6-1" />
-        <vers num="6.4.6-2" />
-        <vers num="6.4.6-3" />
-        <vers num="6.4.6-4" />
-        <vers num="6.4.6-5" />
-        <vers num="6.4.6-6" />
-        <vers num="6.4.6-8" />
-        <vers num="6.4.6-9" />
-        <vers num="6.4.7-1" />
-        <vers num="6.4.7-10" />
-        <vers num="6.4.7-2" />
-        <vers num="6.4.7-3" />
-        <vers num="6.4.7-4" />
-        <vers num="6.4.7-5" />
-        <vers num="6.4.7-6" />
-        <vers num="6.4.7-7" />
-        <vers num="6.4.7-8" />
-        <vers num="6.4.7-9" />
-        <vers num="6.4.8" />
-        <vers num="6.4.8-1" />
-        <vers num="6.4.8-10" />
-        <vers num="6.4.8-2" />
-        <vers num="6.4.8-3" />
-        <vers num="6.4.8-4" />
-        <vers num="6.4.8-5" />
-        <vers num="6.4.8-6" />
-        <vers num="6.4.8-7" />
-        <vers num="6.4.8-8" />
-        <vers num="6.4.8-9" />
-        <vers num="6.4.9" />
-        <vers num="6.4.9-10" />
-        <vers num="6.4.9-2" />
-        <vers num="6.4.9-3" />
-        <vers num="6.4.9-5" />
-        <vers num="6.4.9-7" />
-        <vers num="6.4.9-8" />
-        <vers num="6.4.9-9" />
-        <vers num="6.5.0" />
-        <vers num="6.5.0-1" />
-        <vers num="6.5.0-10" />
-        <vers num="6.5.0-2" />
-        <vers num="6.5.0-3" />
-        <vers num="6.5.0-4" />
-        <vers num="6.5.0-5" />
-        <vers num="6.5.0-6" />
-        <vers num="6.5.0-7" />
-        <vers num="6.5.0-8" />
-        <vers num="6.5.0-9" />
-        <vers num="6.5.1" />
-        <vers num="6.5.1-1" />
-        <vers num="6.5.1-10" />
-        <vers num="6.5.1-2" />
-        <vers num="6.5.1-3" />
-        <vers num="6.5.1-4" />
-        <vers num="6.5.1-5" />
-        <vers num="6.5.1-6" />
-        <vers num="6.5.1-7" />
-        <vers num="6.5.1-9" />
-        <vers num="6.5.2" />
-        <vers num="6.5.2-1" />
-        <vers num="6.5.2-10" />
-        <vers num="6.5.2-2" />
-        <vers num="6.5.2-3" />
-        <vers num="6.5.2-4" />
-        <vers num="6.5.2-5" />
-        <vers num="6.5.2-6" />
-        <vers num="6.5.2-7" />
-        <vers num="6.5.2-8" />
-        <vers num="6.5.2-9" />
-        <vers num="6.5.3" />
-        <vers num="6.5.3-1" />
-        <vers num="6.5.3-10" />
-        <vers num="6.5.3-3" />
-        <vers num="6.5.3-4" />
-        <vers num="6.5.3-5" />
-        <vers num="6.5.3-6" />
-        <vers num="6.5.3-7" />
-        <vers num="6.5.3-8" />
-        <vers num="6.5.4" />
-        <vers num="6.5.4-1" />
-        <vers num="6.5.4-10" />
-        <vers num="6.5.4-2" />
-        <vers num="6.5.4-3" />
-        <vers num="6.5.4-4" />
-        <vers num="6.5.4-5" />
-        <vers num="6.5.4-6" />
-        <vers num="6.5.4-7" />
-        <vers num="6.5.4-8" />
-        <vers num="6.5.4-9" />
-        <vers num="6.5.5" />
-        <vers num="6.5.5-1" />
-        <vers num="6.5.5-10" />
-        <vers num="6.5.5-2" />
-        <vers num="6.5.5-3" />
-        <vers num="6.5.5-4" />
-        <vers num="6.5.5-5" />
-        <vers num="6.5.5-6" />
-        <vers num="6.5.5-7" />
-        <vers num="6.5.5-8" />
-        <vers num="6.5.5-9" />
-        <vers num="6.5.6" />
-        <vers num="6.5.6-10" />
-        <vers num="6.5.6-2" />
-        <vers num="6.5.6-3" />
-        <vers num="6.5.6-4" />
-        <vers num="6.5.6-5" />
-        <vers num="6.5.6-6" />
-        <vers num="6.5.6-7" />
-        <vers num="6.5.6-8" />
-        <vers num="6.5.6-9" />
-        <vers num="6.5.7" />
-        <vers num="6.5.7-1" />
-        <vers num="6.5.7-2" />
-        <vers num="6.5.7-3" />
-        <vers num="6.5.7-4" />
-        <vers num="6.5.7-5" />
-        <vers num="6.5.7-6" />
-        <vers num="6.5.7-7" />
-        <vers num="6.5.7-8" />
-        <vers num="6.5.7-9" />
-        <vers num="6.5.8" />
-        <vers num="6.5.8-1" />
-        <vers num="6.5.8-2" />
-        <vers num="6.5.8-3" />
-        <vers num="6.5.8-4" />
-        <vers num="6.5.8-5" />
-        <vers num="6.5.8-6" />
-        <vers num="6.5.8-7" />
-        <vers num="6.5.8-8" />
-        <vers num="6.5.8-9" />
-        <vers num="6.5.9" />
-        <vers num="6.5.9-1" />
-        <vers num="6.5.9-10" />
-        <vers num="6.5.9-2" />
-        <vers num="6.5.9-3" />
-        <vers num="6.5.9-4" />
-        <vers num="6.5.9-5" />
-        <vers num="6.5.9-6" />
-        <vers num="6.5.9-7" />
-        <vers num="6.5.9-8" />
-        <vers num="6.6.0" />
-        <vers num="6.6.0-1" />
-        <vers num="6.6.0-10" />
-        <vers num="6.6.0-2" />
-        <vers num="6.6.0-4" />
-        <vers num="6.6.0-5" />
-        <vers num="6.6.0-6" />
-        <vers num="6.6.0-7" />
-        <vers num="6.6.0-8" />
-        <vers num="6.6.0-9" />
-        <vers num="6.6.1" />
-        <vers num="6.6.1-1" />
-        <vers num="6.6.1-10" />
-        <vers num="6.6.1-2" />
-        <vers num="6.6.1-3" />
-        <vers num="6.6.1-4" />
-        <vers num="6.6.1-5" />
-        <vers num="6.6.1-6" />
-        <vers num="6.6.1-7" />
-        <vers num="6.6.1-8" />
-        <vers num="6.6.1-9" />
-        <vers num="6.6.2" />
-        <vers num="6.6.2-1" />
-        <vers num="6.6.2-10" />
-        <vers num="6.6.2-2" />
-        <vers num="6.6.2-3" />
-        <vers num="6.6.2-4" />
-        <vers num="6.6.2-5" />
-        <vers num="6.6.2-6" />
-        <vers num="6.6.2-7" />
-        <vers num="6.6.2-8" />
-        <vers num="6.6.2-9" />
-        <vers num="6.6.3" />
-        <vers num="6.6.3-1" />
-        <vers num="6.6.3-10" />
-        <vers num="6.6.3-2" />
-        <vers num="6.6.3-3" />
-        <vers num="6.6.3-4" />
-        <vers num="6.6.3-5" />
-        <vers num="6.6.3-6" />
-        <vers num="6.6.3-7" />
-        <vers num="6.6.4" />
-        <vers num="6.6.4-1" />
-        <vers num="6.6.4-10" />
-        <vers num="6.6.4-2" />
-        <vers num="6.6.4-4" />
-        <vers num="6.6.4-5" />
-        <vers num="6.6.4-6" />
-        <vers num="6.6.4-7" />
-        <vers num="6.6.4-8" />
-        <vers num="6.6.4-9" />
-        <vers num="6.6.5" />
-        <vers num="6.6.5-1" />
-        <vers num="6.6.5-10" />
-        <vers num="6.6.5-2" />
-        <vers num="6.6.5-3" />
-        <vers num="6.6.5-4" />
-        <vers num="6.6.5-5" />
-        <vers num="6.6.5-6" />
-        <vers num="6.6.5-7" />
-        <vers num="6.6.5-8" />
-        <vers num="6.6.5-9" />
-        <vers num="6.6.6-0" />
-        <vers num="6.6.6-1" />
-        <vers num="6.6.6-10" />
-        <vers num="6.6.6-2" />
-        <vers num="6.6.6-3" />
-        <vers num="6.6.6-4" />
-        <vers num="6.6.6-5" />
-        <vers num="6.6.6-6" />
-        <vers num="6.6.6-7" />
-        <vers num="6.6.6-8" />
-        <vers num="6.6.6-9" />
-        <vers num="6.6.7-0" />
-        <vers num="6.6.7-1" />
-        <vers num="6.6.7-10" />
-        <vers num="6.6.7-2" />
-        <vers num="6.6.7-3" />
-        <vers num="6.6.7-4" />
-        <vers num="6.6.7-5" />
-        <vers num="6.6.7-6" />
-        <vers num="6.6.7-7" />
-        <vers num="6.6.7-8" />
-        <vers num="6.6.7-9" />
-        <vers num="6.6.8-0" />
-        <vers num="6.6.9-0" />
-        <vers num="6.6.9-1" />
-        <vers num="6.6.9-10" />
-        <vers num="6.6.9-2" />
-        <vers num="6.6.9-3" />
-        <vers num="6.6.9-4" />
-        <vers num="6.6.9-5" />
-        <vers num="6.6.9-6" />
-        <vers num="6.6.9-7" />
-        <vers num="6.6.9-8" />
-        <vers num="6.6.9-9" />
-        <vers num="6.7.0-0" />
-        <vers num="6.7.0-1" />
-        <vers num="6.7.0-10" />
-        <vers num="6.7.0-2" />
-        <vers num="6.7.0-3" />
-        <vers num="6.7.0-4" />
-        <vers num="6.7.0-5" />
-        <vers num="6.7.0-6" />
-        <vers num="6.7.0-7" />
-        <vers num="6.7.0-8" />
-        <vers num="6.7.0-9" />
-        <vers num="6.7.1-0" />
-        <vers num="6.7.1-1" />
-        <vers num="6.7.1-10" />
-        <vers num="6.7.1-2" />
-        <vers num="6.7.1-3" />
-        <vers num="6.7.1-4" />
-        <vers num="6.7.1-5" />
-        <vers num="6.7.1-6" />
-        <vers num="6.7.1-7" />
-        <vers num="6.7.1-8" />
-        <vers num="6.7.1-9" />
-        <vers num="6.7.2-0" />
-        <vers num="6.7.2-1" />
-        <vers num="6.7.2-10" />
-        <vers num="6.7.2-2" />
-        <vers num="6.7.2-3" />
-        <vers num="6.7.2-4" />
-        <vers num="6.7.2-5" />
-        <vers num="6.7.2-6" />
-        <vers num="6.7.2-7" />
-        <vers num="6.7.2-8" />
-        <vers num="6.7.2-9" />
-        <vers num="6.7.3-0" />
-        <vers num="6.7.3-1" />
-        <vers num="6.7.3-10" />
-        <vers num="6.7.3-2" />
-        <vers num="6.7.3-3" />
-        <vers num="6.7.3-4" />
-        <vers num="6.7.3-5" />
-        <vers num="6.7.3-6" />
-        <vers num="6.7.3-7" />
-        <vers num="6.7.3-8" />
-        <vers num="6.7.3-9" />
-        <vers num="6.7.4-0" />
-        <vers num="6.7.4-1" />
-        <vers num="6.7.4-10" />
-        <vers num="6.7.4-2" />
-        <vers num="6.7.4-3" />
-        <vers num="6.7.4-4" />
-        <vers num="6.7.4-5" />
-        <vers num="6.7.4-6" />
-        <vers num="6.7.4-7" />
-        <vers num="6.7.4-8" />
-        <vers num="6.7.4-9" />
-        <vers num="6.7.5-0" />
-        <vers num="6.7.5-1" />
-        <vers num="6.7.5-10" />
-        <vers num="6.7.5-2" />
-        <vers num="6.7.5-3" />
-        <vers num="6.7.5-4" />
-        <vers num="6.7.5-5" />
-        <vers num="6.7.5-6" />
-        <vers num="6.7.5-7" />
-        <vers num="6.7.5-8" />
-        <vers num="6.7.5-9" />
-        <vers num="6.7.6-0" />
-        <vers num="6.7.6-1" />
-        <vers prev="1" num="6.7.6-2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0265" published="2012-05-16" name="CVE-2012-0265" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted pathname for a file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53578" source="BID">53578</ref>
-      <ref url="http://support.apple.com/kb/HT5261" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5261</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00005.html" source="APPLE" adv="1">APPLE-SA-2012-05-15-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="quicktime">
-        <vers num="3.0" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="6.0" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.1" />
-        <vers num="6.1.0" />
-        <vers num="6.1.1" />
-        <vers num="6.2.0" />
-        <vers num="6.3.0" />
-        <vers num="6.4.0" />
-        <vers num="6.5" />
-        <vers num="6.5.0" />
-        <vers num="6.5.1" />
-        <vers num="6.5.2" />
-        <vers num="7.0" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.0.3" />
-        <vers num="7.0.4" />
-        <vers num="7.1" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.1.2" />
-        <vers num="7.1.3" />
-        <vers num="7.1.4" />
-        <vers num="7.1.5" />
-        <vers num="7.1.6" />
-        <vers num="7.2" />
-        <vers num="7.2.0" />
-        <vers num="7.2.1" />
-        <vers num="7.3" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.1.70" />
-        <vers num="7.4" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.5" />
-        <vers num="7.5.0" />
-        <vers num="7.5.5" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.6.5" />
-        <vers num="7.6.6" />
-        <vers num="7.6.7" />
-        <vers num="7.6.8" />
-        <vers num="7.6.9" />
-        <vers num="7.60.92.0" />
-        <vers num="7.62.14.0" />
-        <vers num="7.64.17.73" />
-        <vers num="7.65.17.80" />
-        <vers num="7.66.71.0" />
-        <vers num="7.67.75.0" />
-        <vers num="7.68.75.0" />
-        <vers num="7.69.80.9" />
-        <vers num="7.7.0" />
-        <vers prev="1" num="7.7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0266" published="2012-01-14" name="CVE-2012-0266" modified="2012-02-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a long bstrUrl parameter to the StartModule method, (2) a long bstrParams parameter to the Check method, a long bstrUrl parameter to the (3) Download or (4) DownloadModule method during construction of a .ntr pathname, or a long bstrUrl parameter to the (5) Download or (6) DownloadModule method during construction of a URL.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72293" source="XF">ntr-download-bo(72293)</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72292" source="XF">ntr-check-bo(72292)</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72291" source="XF">ntr-startmodule-bo(72291)</ref>
-      <ref url="http://secunia.com/secunia_research/2012-1/" source="MISC" adv="1">http://secunia.com/secunia_research/2012-1/</ref>
-      <ref url="http://secunia.com/advisories/45166" source="SECUNIA">45166</ref>
-      <ref url="http://osvdb.org/78252" source="OSVDB">78252</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0074.html" source="BUGTRAQ">20120111 Secunia Research: NTR ActiveX Control Four Buffer Overflow Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ntrglobal" name="ntr_activex_control">
-        <vers prev="1" num="1.1.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0267" published="2012-01-14" name="CVE-2012-0267" modified="2012-02-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a function pointer.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72295" source="XF">ntr-stopmodule-code-exec(72295)</ref>
-      <ref url="http://secunia.com/secunia_research/2012-2/" source="MISC" adv="1">http://secunia.com/secunia_research/2012-2/</ref>
-      <ref url="http://secunia.com/advisories/45166" source="SECUNIA">45166</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ntrglobal" name="ntr_activex_control">
-        <vers prev="1" num="1.1.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0268" published="2012-01-19" name="CVE-2012-0268" modified="2012-01-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="5.1" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="4.9" CVSS_base_score="5.1">
-    <desc>
-      <descript source="cve">Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://secunia.com/advisories/47041" source="SECUNIA" adv="1">47041</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="yahoo" name="messenger">
-        <vers num="0.99.17-1" />
-        <vers num="1.0" />
-        <vers num="1.0.4" />
-        <vers num="1.0.6" />
-        <vers num="10.0.0.1102" />
-        <vers num="10.0.0.1241" />
-        <vers num="10.0.0.1258" />
-        <vers num="10.0.0.1264" />
-        <vers num="10.0.0.1267" />
-        <vers num="10.0.0.1270" />
-        <vers num="10.0.0.331" edition="pre-alpha" />
-        <vers num="10.0.0.525" edition="beta" />
-        <vers num="10.0.0.542" edition="beta" />
-        <vers num="11.0.0.1751" />
-        <vers num="11.0.0.2009" />
-        <vers num="11.0.0.2014" />
-        <vers prev="1" num="11.5.0.152" />
-        <vers num="2.0.1.4" />
-        <vers num="3.0" />
-        <vers num="3.0.1" edition="beta-35554" />
-        <vers num="3.5" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1046" />
-        <vers num="5.0.1065" />
-        <vers num="5.0.1232" />
-        <vers num="5.5" />
-        <vers num="5.5.1249" />
-        <vers num="5.6" />
-        <vers num="5.6.0.1347" />
-        <vers num="5.6.0.1351" />
-        <vers num="5.6.0.1355" />
-        <vers num="5.6.0.1356" />
-        <vers num="5.6.0.1358" />
-        <vers num="6.0" />
-        <vers num="6.0.0.1643" />
-        <vers num="6.0.0.1750" />
-        <vers num="6.0.0.1921" />
-        <vers num="6.1" />
-        <vers num="7.0" />
-        <vers num="7.0.0.426" />
-        <vers num="7.0.0.437" />
-        <vers num="7.0.438" />
-        <vers num="7.5" />
-        <vers num="7.5.0.814" />
-        <vers num="8.0" />
-        <vers num="8.0.0.505" />
-        <vers num="8.0.0.508" />
-        <vers num="8.0.0.701" />
-        <vers num="8.0.0.716" />
-        <vers num="8.0.0.863" />
-        <vers num="8.0.1" />
-        <vers num="8.0_2005.1.1.4" />
-        <vers num="8.1" />
-        <vers num="8.1.0.195" />
-        <vers num="8.1.0.209" />
-        <vers num="8.1.0.239" />
-        <vers num="8.1.0.244" />
-        <vers num="8.1.0.249" />
-        <vers num="8.1.0.401" />
-        <vers num="8.1.0.402" />
-        <vers num="8.1.0.413" />
-        <vers num="8.1.0.416" />
-        <vers num="8.1.0.419" />
-        <vers num="8.1.0.421" />
-        <vers num="9.0.0.1389" edition="beta" />
-        <vers num="9.0.0.1912" />
-        <vers num="9.0.0.2018" />
-        <vers num="9.0.0.2034" />
-        <vers num="9.0.0.2112" />
-        <vers num="9.0.0.2123" />
-        <vers num="9.0.0.2128" />
-        <vers num="9.0.0.2133" />
-        <vers num="9.0.0.2136" />
-        <vers num="9.0.0.2152" />
-        <vers num="9.0.0.2160" />
-        <vers num="9.0.0.2161" />
-        <vers num="9.0.0.2162" />
-        <vers num="9.0.0.797" edition="beta" />
-        <vers num="9.0.0.907" edition="beta" />
-        <vers num="9.0.0.922" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0269" published="2012-04-27" name="CVE-2012-0269" modified="2012-04-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School, JUST School 2009 and 2010, JUST Jump 4, JUST Frontier, oreplug, Shuriken Pro4, Shuriken 2007 through 2010, Shuriken Pro4 Corporate Edition, Shuriken CE/2007 through CE/2009 Corporate Edition, Shuriken 2010 Corporate Edition, Rekishimail Sengokubusho no missho, and Bakumatsushishi no missho allows remote attackers to execute arbitrary code via a crafted image file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.justsystems.com/jp/info/js12001.html" source="CONFIRM" adv="1">http://www.justsystems.com/jp/info/js12001.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000035" source="JVNDB">JVNDB-2012-000035</ref>
-      <ref url="http://jvn.jp/en/jp/JVN09619876/index.html" source="JVN">JVN#09619876</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="justsystems" name="ichitaro">
-        <vers num="2006" edition="-" />
-        <vers num="2006" edition="-:government" />
-        <vers num="2007" edition="-" />
-        <vers num="2007" edition="-:government" />
-        <vers num="2008" edition="-" />
-        <vers num="2008" edition="-:government" />
-        <vers num="2009" edition="-" />
-        <vers num="2009" edition="-:government" />
-        <vers num="2010" edition="-" />
-        <vers num="2010" edition="-:government" />
-        <vers num="2011" edition="-" />
-        <vers num="2011" edition="-:sou" />
-      </prod>
-      <prod vendor="justsystems" name="ichitaro_portable_with_oreplug">
-        <vers num="-" />
-      </prod>
-      <prod vendor="justsystems" name="ichitaro_viewer">
-        <vers num="-" />
-      </prod>
-      <prod vendor="justsystems" name="just_frontier">
-        <vers num="-" />
-      </prod>
-      <prod vendor="justsystems" name="just_jump">
-        <vers num="4" />
-      </prod>
-      <prod vendor="justsystems" name="just_school">
-        <vers num="-" />
-        <vers num="2009" />
-        <vers num="2010" />
-      </prod>
-      <prod vendor="justsystems" name="oreplug">
-        <vers num="-" />
-      </prod>
-      <prod vendor="justsystems" name="rekishimail_bakumatsushishi_no_missho">
-        <vers num="-" />
-      </prod>
-      <prod vendor="justsystems" name="rekishimail_sengokubusho_no_missho">
-        <vers num="-" />
-      </prod>
-      <prod vendor="justsystems" name="shuriken">
-        <vers num="2007" edition="-" />
-        <vers num="2007" edition="-:corporate" />
-        <vers num="2008" edition="-" />
-        <vers num="2008" edition="-:corporate" />
-        <vers num="2009" edition="-" />
-        <vers num="2009" edition="-:corporate" />
-        <vers num="2010" edition="-" />
-        <vers num="2010" edition="-:corporate" />
-      </prod>
-      <prod vendor="justsystems" name="shuriken_pro">
-        <vers num="4" edition="-" />
-        <vers num="4" edition="-:corporate" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0275" published="2012-09-04" name="CVE-2012-0275" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted TIFF image with SGI24LogLum compression.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-20.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-20.html</ref>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-11.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-11.html</ref>
-      <ref url="http://secunia.com/secunia_research/2012-29/" source="MISC" adv="1">http://secunia.com/secunia_research/2012-29/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="photoshop_cs5.5">
-        <vers num="12.0.1" />
-        <vers num="12.0.2" />
-        <vers num="12.0.3" />
-        <vers num="12.0.4" />
-        <vers num="12.1" />
-      </prod>
-      <prod vendor="adobe" name="photoshop_cs6">
-        <vers num="13.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0276" published="2012-07-17" name="CVE-2012-0276" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a (1) SGI32LogLum compressed TIFF image or (2) SGI32LogLum compressed TIFF image with the PhotometricInterpretation encoding set to LogL.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.protekresearchlab.com/index.php?option=com_content&amp;view=article&amp;id=49" source="MISC">http://www.protekresearchlab.com/index.php?option=com_content&amp;view=article&amp;id=49</ref>
-      <ref url="http://www.protekresearchlab.com/index.php?option=com_content&amp;view=article&amp;id=48" source="MISC">http://www.protekresearchlab.com/index.php?option=com_content&amp;view=article&amp;id=48</ref>
-      <ref url="http://www.exploit-db.com/exploits/19338" source="EXPLOIT-DB">19338</ref>
-      <ref url="http://www.exploit-db.com/exploits/19337" source="EXPLOIT-DB">19337</ref>
-      <ref url="http://secunia.com/advisories/48666" source="SECUNIA" adv="1">48666</ref>
-      <ref url="http://newsgroup.xnview.com/viewtopic.php?f=35&amp;t=25858" source="CONFIRM">http://newsgroup.xnview.com/viewtopic.php?f=35&amp;t=25858</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="xnview" name="xnview">
-        <vers prev="1" num="1.98.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0277" published="2012-07-17" name="CVE-2012-0277" modified="2012-08-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PCT image.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.protekresearchlab.com/index.php?option=com_content&amp;view=article&amp;id=50" source="MISC">http://www.protekresearchlab.com/index.php?option=com_content&amp;view=article&amp;id=50</ref>
-      <ref url="http://www.exploit-db.com/exploits/19336" source="EXPLOIT-DB">19336</ref>
-      <ref url="http://secunia.com/advisories/48666" source="SECUNIA" adv="1">48666</ref>
-      <ref url="http://newsgroup.xnview.com/viewtopic.php?f=35&amp;t=25858" source="CONFIRM">http://newsgroup.xnview.com/viewtopic.php?f=35&amp;t=25858</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="xnview" name="xnview">
-        <vers prev="1" num="1.98.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0278" published="2012-04-18" name="CVE-2012-0278" modified="2012-04-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute arbitrary code via a .fpx file containing a crafted FlashPix image that is not properly handled during decompression.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.protekresearchlab.com/index.php?option=com_content&amp;view=article&amp;id=41&amp;Itemid=41" source="MISC">http://www.protekresearchlab.com/index.php?option=com_content&amp;view=article&amp;id=41&amp;Itemid=41</ref>
-      <ref url="http://secunia.com/advisories/48772" source="SECUNIA" adv="1">48772</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="irfanview" name="flashpix_plugin">
-        <vers num="4.32" />
-        <vers prev="1" num="4.33" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0279" published="2012-05-01" name="CVE-2012-0279" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75192" source="XF">quest-toad-insecure-permissions(75192)</ref>
-      <ref url="http://secunia.com/secunia_research/2012-13/" source="MISC" adv="1">http://secunia.com/secunia_research/2012-13/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="quest" name="toad_for_data_analysts">
-        <vers num="3.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0282" published="2012-07-17" name="CVE-2012-0282" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ImageLeftPosition value in an ImageDescriptor structure in a GIF image.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.protekresearchlab.com/index.php?option=com_content&amp;view=article&amp;id=51" source="MISC">http://www.protekresearchlab.com/index.php?option=com_content&amp;view=article&amp;id=51</ref>
-      <ref url="http://www.osvdb.org/83086" source="OSVDB">83086</ref>
-      <ref url="http://www.exploit-db.com/exploits/19335" source="EXPLOIT-DB">19335</ref>
-      <ref url="http://secunia.com/advisories/48666" source="SECUNIA" adv="1">48666</ref>
-      <ref url="http://newsgroup.xnview.com/viewtopic.php?f=35&amp;t=25858" source="CONFIRM">http://newsgroup.xnview.com/viewtopic.php?f=35&amp;t=25858</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="xnview" name="xnview">
-        <vers prev="1" num="1.98.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0283" published="2012-07-13" name="CVE-2012-0283" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://secunia.com/secunia_research/2012-24/" source="MISC" adv="1">http://secunia.com/secunia_research/2012-24/</ref>
-      <ref url="http://bugs.dokuwiki.org/index.php?do=details&amp;task_id=2561" source="CONFIRM" adv="1">http://bugs.dokuwiki.org/index.php?do=details&amp;task_id=2561</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="andreas_gohr" name="dokuwiki">
-        <vers num="2005-07-01" />
-        <vers num="2005-09-19" />
-        <vers num="2005-09-22" />
-        <vers num="2006-03-05" />
-        <vers num="2006-03-09" />
-        <vers num="2006-11-06" />
-        <vers num="2007-06-26" />
-        <vers num="2007-07-13" />
-        <vers num="2008-05-05" />
-        <vers num="2009-02-14b" />
-        <vers num="2009-12-25c" />
-        <vers num="2010-11-07a" />
-        <vers num="2011-05-25" />
-        <vers num="2011-05-25a" />
-        <vers num="2011-05-25c" />
-        <vers num="2012-01-25" />
-        <vers prev="1" num="2012-01-25a" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0284" published="2012-07-19" name="CVE-2012-0284" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC200 Wireless-G PTZ Internet video camera allows remote attackers to execute arbitrary code via a long URL in the first argument (aka the sURL argument).</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://secunia.com/secunia_research/2012-25/" source="MISC" adv="1">http://secunia.com/secunia_research/2012-25/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="linksys_playerpt_activex_control">
-        <vers num="1.0.0.15" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0285" published="2012-01-24" name="CVE-2012-0285" modified="2012-01-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Stoneware webNetwork before 6.0.8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.stone-ware.com/swql.jsp?kb=d1960" source="CONFIRM" adv="1">http://www.stone-ware.com/swql.jsp?kb=d1960</ref>
-      <ref url="http://www.stone-ware.com/support/techdocs/kb/d1960/sb_6_0_8.pdf" source="CONFIRM" adv="1">http://www.stone-ware.com/support/techdocs/kb/d1960/sb_6_0_8.pdf</ref>
-      <ref url="http://infosec42.blogspot.com/2012/01/cve-2012-0285-and-cve-2012-0286.html" source="MISC">http://infosec42.blogspot.com/2012/01/cve-2012-0285-and-cve-2012-0286.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="stone-ware" name="webnetwork">
-        <vers num="6.0.5.0" />
-        <vers prev="1" num="6.0.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0286" published="2012-01-24" name="CVE-2012-0286" modified="2012-01-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to hijack the authentication of unspecified victims for requests that modify user accounts.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.stone-ware.com/swql.jsp?kb=d1960" source="CONFIRM" adv="1">http://www.stone-ware.com/swql.jsp?kb=d1960</ref>
-      <ref url="http://www.stone-ware.com/support/techdocs/kb/d1960/sb_6_0_8.pdf" source="CONFIRM" adv="1">http://www.stone-ware.com/support/techdocs/kb/d1960/sb_6_0_8.pdf</ref>
-      <ref url="http://infosec42.blogspot.com/2012/01/cve-2012-0285-and-cve-2012-0286.html" source="MISC">http://infosec42.blogspot.com/2012/01/cve-2012-0285-and-cve-2012-0286.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="stone-ware" name="webnetwork">
-        <vers num="6.0.5.0" />
-        <vers prev="1" num="6.0.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0287" published="2012-01-05" name="CVE-2012-0287" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected" feature.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://wordpress.org/news/2012/01/wordpress-3-3-1/" source="CONFIRM" patch="1" adv="1">https://wordpress.org/news/2012/01/wordpress-3-3-1/</ref>
-      <ref url="http://www.securitytracker.com/id?1026542" source="SECTRACK">1026542</ref>
-      <ref url="http://oldmanlab.blogspot.com/2012/01/wordpress-33-xss-vulnerability.html" source="MISC">http://oldmanlab.blogspot.com/2012/01/wordpress-33-xss-vulnerability.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wordpress" name="wordpress">
-        <vers num="3.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0289" published="2012-05-23" name="CVE-2012-0289" modified="2012-05-31" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">Buffer overflow in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.710x and Symantec Network Access Control (SNAC) 11.0.600x through 11.0.710x allows local users to gain privileges, and modify data or cause a denial of service, via a crafted script.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-      <sec_prot admin="1" />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120522_01" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120522_01</ref>
-      <ref url="http://www.securityfocus.com/bid/51795" source="BID">51795</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="endpoint_protection">
-        <vers num="11.0.6000" />
-        <vers num="11.0.6100" />
-        <vers num="11.0.6200" />
-        <vers num="11.0.6200.754" />
-        <vers num="11.0.6300" />
-        <vers num="11.0.7000" />
-        <vers num="11.0.7100" />
-      </prod>
-      <prod vendor="symantec" name="network_access_control">
-        <vers num="11.0.6000" />
-        <vers num="11.0.6100" />
-        <vers num="11.0.6200" />
-        <vers num="11.0.6300" />
-        <vers num="11.0.7000" />
-        <vers num="11.0.7100" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0290" published="2012-02-06" name="CVE-2012-0290" modified="2012-02-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) do not properly handle the client state after abnormal termination of a remote session, which allows remote attackers to obtain access to the client by leveraging an "open client session."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72996" source="XF">pcanywhere-unauth-access(72996)</ref>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120124_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120124_00</ref>
-      <ref url="http://www.securityfocus.com/bid/51862" source="BID">51862</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="altiris_client_management_suite_pcanywhere_solution">
-        <vers num="12.5" edition="sp1" />
-        <vers num="12.5" edition="sp2" />
-        <vers num="12.6" edition="sp1" />
-        <vers num="12.6" edition="sp2" />
-      </prod>
-      <prod vendor="symantec" name="altiris_deployment_solution_remote_pcanywhere_solution">
-        <vers num="12.5" edition="sp1" />
-        <vers num="12.5" edition="sp2" />
-        <vers num="12.6" edition="sp1" />
-        <vers num="12.6" edition="sp2" />
-      </prod>
-      <prod vendor="symantec" name="pcanywhere">
-        <vers num="10.5" />
-        <vers num="11.5" />
-        <vers num="11.5.1" />
-        <vers num="12.1" />
-        <vers num="12.5" edition="sp1" />
-        <vers num="12.5" edition="sp2" />
-        <vers num="12.5" edition="sp3" />
-        <vers num="12.5.265" />
-        <vers prev="1" num="12.5.3" />
-        <vers num="12.5.539" />
-        <vers num="12.6.65" />
-        <vers num="12.6.7580" />
-        <vers num="5.0" />
-        <vers num="8.0" />
-        <vers num="9.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0291" published="2012-02-22" name="CVE-2012-0291" modified="2012-02-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allow remote attackers to cause a denial of service (application crash or hang) via (1) malformed data from a client, (2) malformed data from a server, or (3) an invalid response.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120124_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120124_00</ref>
-      <ref url="http://www.securityfocus.com/bid/51965" source="BID">51965</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="altiris_client_management_suite_pcanywhere_solution">
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="symantec" name="altiris_deployment_solution_remote_pcanywhere_solution">
-        <vers num="7.1" />
-      </prod>
-      <prod vendor="symantec" name="altiris_it_management_suite_pcanywhere_solution">
-        <vers num="7.0" />
-        <vers num="7.1" />
-      </prod>
-      <prod vendor="symantec" name="pcanywhere">
-        <vers num="10.0" />
-        <vers num="10.5" />
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="11.5" />
-        <vers num="11.5.1" />
-        <vers num="12.0" />
-        <vers num="12.0.1" />
-        <vers num="12.0.2" />
-        <vers num="12.0.3" />
-        <vers num="12.1" />
-        <vers prev="1" num="12.5" edition="sp1" />
-        <vers prev="1" num="12.5" edition="sp2" />
-        <vers prev="1" num="12.5" edition="sp3" />
-        <vers num="12.5.265" />
-        <vers num="12.5.3" />
-        <vers num="12.5.539" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0292" published="2012-03-07" name="CVE-2012-0292" modified="2012-03-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allows remote attackers to cause a denial of service (daemon crash) via a crafted TCP session on port 5631.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120301_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120301_00</ref>
-      <ref url="http://www.securityfocus.com/bid/52094" source="BID">52094</ref>
-      <ref url="http://www.exploit-db.com/exploits/18493/" source="EXPLOIT-DB">18493</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="altiris_client_management_suite_pcanywhere_solution">
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="symantec" name="altiris_climentent_manage_suite_pcanywhere_solution">
-        <vers num="7.1" />
-      </prod>
-      <prod vendor="symantec" name="altiris_deployment_solution_remote_pcanywhere_solution">
-        <vers num="7.1" />
-      </prod>
-      <prod vendor="symantec" name="altiris_it_management_suite_pcanywhere_solution">
-        <vers num="7.0" />
-        <vers num="7.1" />
-      </prod>
-      <prod vendor="symantec" name="pcanywhere">
-        <vers num="10.0" />
-        <vers num="10.5" />
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="11.5" />
-        <vers num="11.5.1" />
-        <vers num="12.0" />
-        <vers num="12.0.1" />
-        <vers num="12.0.2" />
-        <vers num="12.0.3" />
-        <vers num="12.1" />
-        <vers prev="1" num="12.5" edition="sp1" />
-        <vers prev="1" num="12.5" edition="sp2" />
-        <vers prev="1" num="12.5" edition="sp3" />
-        <vers num="12.5.265" />
-        <vers num="12.5.3" />
-        <vers num="12.5.539" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0293" published="2012-03-17" name="CVE-2012-0293" modified="2012-03-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in Symantec Altiris WISE Package Studio before 8.0MR1 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120314_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120314_00</ref>
-      <ref url="http://www.securityfocus.com/bid/52392" source="BID">52392</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="altiris_wise_package_studio">
-        <vers num="7" edition="sp2" />
-        <vers num="7.0" edition="sp1" />
-        <vers num="7.0" edition="sp1:mr1" />
-        <vers num="7.0" edition="sp3" />
-        <vers prev="1" num="8.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0294" published="2012-05-23" name="CVE-2012-0294" modified="2012-05-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:P)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in the Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to delete files via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120522_01" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120522_01</ref>
-      <ref url="http://www.securityfocus.com/bid/53182" source="BID">53182</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="endpoint_protection">
-        <vers num="12.1" />
-        <vers num="12.1.1000" />
-        <vers num="12.1.671" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0295" published="2012-05-23" name="CVE-2012-0295" modified="2012-05-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation of CVE-2012-0294.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120522_01" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120522_01</ref>
-      <ref url="http://www.securityfocus.com/bid/53184" source="BID">53184</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="endpoint_protection">
-        <vers num="12.1" />
-        <vers num="12.1.1000" />
-        <vers num="12.1.671" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0296" published="2012-05-21" name="CVE-2012-0296" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120517_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120517_00</ref>
-      <ref url="http://www.securityfocus.com/bid/53396" source="BID">53396</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="web_gateway">
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0297" published="2012-05-21" name="CVE-2012-0297" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted data or (2) including crafted data.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120517_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120517_00</ref>
-      <ref url="http://www.securityfocus.com/bid/53444" source="BID">53444</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="web_gateway">
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0298" published="2012-05-21" name="CVE-2012-0298" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to (1) read or (2) delete arbitrary files via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120517_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120517_00</ref>
-      <ref url="http://www.securityfocus.com/bid/53442" source="BID">53442</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="web_gateway">
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0299" published="2012-05-21" name="CVE-2012-0299" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120517_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120517_00</ref>
-      <ref url="http://www.securityfocus.com/bid/53443" source="BID">53443</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="web_gateway">
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0300" published="2012-07-05" name="CVE-2012-0300" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">Brightmail Control Center in Symantec Message Filter 6.3 does not properly restrict establishment of sessions to the listening port, which allows remote attackers to obtain potentially sensitive version information via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120626_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120626_00</ref>
-      <ref url="http://www.securityfocus.com/bid/54136" source="BID">54136</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="message_filter">
-        <vers prev="1" num="6.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0301" published="2012-07-05" name="CVE-2012-0301" modified="2012-07-06" CVSS_version="2.0" CVSS_vector="(AV:A/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="5.4" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="5.5" CVSS_base_score="5.4">
-    <desc>
-      <descript source="cve">Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to hijack web sessions via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120626_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120626_00</ref>
-      <ref url="http://www.securityfocus.com/bid/54135" source="BID">54135</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="message_filter">
-        <vers prev="1" num="6.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0302" published="2012-07-05" name="CVE-2012-0302" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120626_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120626_00</ref>
-      <ref url="http://www.securityfocus.com/bid/54134" source="BID">54134</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="message_filter">
-        <vers num="6.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0303" published="2012-07-05" name="CVE-2012-0303" modified="2012-07-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote attackers to hijack the authentication of arbitrary users for requests that (1) execute application commands or (2) create admin accounts.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120626_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120626_00</ref>
-      <ref url="http://www.securityfocus.com/bid/54133" source="BID">54133</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="message_filter">
-        <vers prev="1" num="6.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0304" published="2012-06-22" name="CVE-2012-0304" modified="2012-06-22" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Symantec LiveUpdate Administrator before 2.3.1 uses weak permissions (Everyone: Full Control) for the installation directory, which allows local users to gain privileges via a Trojan horse file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120615_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120615_00</ref>
-      <ref url="http://www.securityfocus.com/bid/53903" source="BID">53903</ref>
-      <ref url="http://www.nessus.org/plugins/index.php?view=single&amp;id=59193" source="MISC">http://www.nessus.org/plugins/index.php?view=single&amp;id=59193</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="liveupdate_administrator">
-        <vers num="1.5.3.21" />
-        <vers num="1.5.4" />
-        <vers num="1.5.7.19" />
-        <vers num="2.1.0" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.2.9" />
-        <vers prev="1" num="2.3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0305" published="2012-07-23" name="CVE-2012-0305" modified="2012-07-24" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="4.4" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.4" CVSS_base_score="4.4">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain privileges via a Trojan horse DLL in the current working directory.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;suid=20120720_01" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;suid=20120720_01</ref>
-      <ref url="http://www.securityfocus.com/bid/54594" source="BID">54594</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="backupexec_system_recovery">
-        <vers num="2010" />
-        <vers num="2011" />
-      </prod>
-      <prod vendor="symantec" name="system_recovery">
-        <vers num="2011" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0307" published="2012-08-29" name="CVE-2012-0307" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Symantec Messaging Gateway before 10.0 allow remote attackers to inject arbitrary web script or HTML via (1) web content or (2) e-mail content.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120827_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120827_00</ref>
-      <ref url="http://www.securityfocus.com/bid/55138" source="BID">55138</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="messaging_gateway">
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-        <vers num="9.5.2" />
-        <vers num="9.5.3" />
-        <vers prev="1" num="9.5.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0308" published="2012-08-29" name="CVE-2012-0308" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in Symantec Messaging Gateway before 10.0 allows remote attackers to hijack the authentication of administrators.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120827_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120827_00</ref>
-      <ref url="http://www.securityfocus.com/bid/55137" source="BID">55137</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="messaging_gateway">
-        <vers num="10.0" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-        <vers num="9.5.2" />
-        <vers num="9.5.3" />
-        <vers prev="1" num="9.5.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0309" published="2012-01-12" name="CVE-2012-0309" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72305" source="XF">cogentdatahub-unspecified-xss(72305)</ref>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-016-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-016-01.pdf</ref>
-      <ref url="http://www.securityfocus.com/bid/51375" source="BID">51375</ref>
-      <ref url="http://www.cogentdatahub.com/ReleaseNotes.html" source="CONFIRM">http://www.cogentdatahub.com/ReleaseNotes.html</ref>
-      <ref url="http://secunia.com/advisories/47525" source="SECUNIA">47525</ref>
-      <ref url="http://secunia.com/advisories/47496" source="SECUNIA">47496</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000001" source="JVNDB">JVNDB-2012-000001</ref>
-      <ref url="http://jvn.jp/en/jp/JVN12983784/index.html" source="JVN">JVN#12983784</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cogentdatahub" name="cascade_datahub">
-        <vers prev="1" num="6.4.20" />
-      </prod>
-      <prod vendor="cogentdatahub" name="cogent_datahub">
-        <vers num="7.0" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.1.1.63" />
-        <vers prev="1" num="7.1.2" />
-      </prod>
-      <prod vendor="cogentdatahub" name="opc_datahub">
-        <vers prev="1" num="6.4.20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0310" published="2012-01-12" name="CVE-2012-0310" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:P)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72306" source="XF">cogentdatahub-unspecified-header-injection(72306)</ref>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-016-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-016-01.pdf</ref>
-      <ref url="http://www.securityfocus.com/bid/51375" source="BID">51375</ref>
-      <ref url="http://www.cogentdatahub.com/ReleaseNotes.html" source="CONFIRM">http://www.cogentdatahub.com/ReleaseNotes.html</ref>
-      <ref url="http://secunia.com/advisories/47525" source="SECUNIA">47525</ref>
-      <ref url="http://secunia.com/advisories/47496" source="SECUNIA">47496</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000002" source="JVNDB">JVNDB-2012-000002</ref>
-      <ref url="http://jvn.jp/en/jp/JVN63249231/index.html" source="JVN">JVN#63249231</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cogentdatahub" name="cascade_datahub">
-        <vers prev="1" num="6.4.20" />
-      </prod>
-      <prod vendor="cogentdatahub" name="cogent_datahub">
-        <vers num="7.0" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.1.1.63" />
-        <vers prev="1" num="7.1.2" />
-      </prod>
-      <prod vendor="cogentdatahub" name="opc_datahub">
-        <vers prev="1" num="6.4.20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0311" published="2012-01-26" name="CVE-2012-0311" modified="2012-02-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://sourceforge.jp/forum/forum.php?forum_id=28119" source="CONFIRM">http://sourceforge.jp/forum/forum.php?forum_id=28119</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000004" source="JVNDB">JVNDB-2012-000004</ref>
-      <ref url="http://jvn.jp/en/jp/JVN36559450/index.html" source="JVN">JVN#36559450</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oscommerce" name="oscommerce">
-        <vers num="2.2ms1j-r1" />
-        <vers num="2.2ms1j-r2" />
-        <vers num="2.2ms1j-r3" />
-        <vers num="2.2ms1j-r4" />
-        <vers num="2.2ms1j-r5" />
-        <vers num="2.2ms1j-r6a" />
-        <vers num="2.2ms1j-r7" />
-        <vers num="2.2ms1j-r8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0312" published="2012-01-26" name="CVE-2012-0312" modified="2012-02-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9, and osCommerce Online Merchant before 2.3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://sourceforge.jp/forum/forum.php?forum_id=28119" source="CONFIRM">http://sourceforge.jp/forum/forum.php?forum_id=28119</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000005" source="JVNDB">JVNDB-2012-000005</ref>
-      <ref url="http://jvn.jp/en/jp/JVN64386898/index.html" source="JVN">JVN#64386898</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oscommerce" name="online_merchant">
-        <vers num="2.2" />
-        <vers prev="1" num="2.3.0" />
-      </prod>
-      <prod vendor="oscommerce" name="oscommerce">
-        <vers num="2.2ms1j-r1" />
-        <vers num="2.2ms1j-r2" />
-        <vers num="2.2ms1j-r3" />
-        <vers num="2.2ms1j-r4" />
-        <vers num="2.2ms1j-r5" />
-        <vers num="2.2ms1j-r6a" />
-        <vers num="2.2ms1j-r7" />
-        <vers num="2.2ms1j-r8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0313" published="2012-01-23" name="CVE-2012-0313" modified="2012-01-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in glucose 2 before stage 6.2 allows remote attackers to inject arbitrary web script or HTML via an RSS feed.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000008" source="JVNDB">JVNDB-2012-000008</ref>
-      <ref url="http://jvn.jp/en/jp/JVN65869891/index.html" source="JVN">JVN#65869891</ref>
-      <ref url="http://glucose.jp/release/19" source="MISC" adv="1">http://glucose.jp/release/19</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="glucose" name="glucose_2">
-        <vers num="beta_stage_5" />
-        <vers num="beta_stage_5.1" />
-        <vers num="stage6" />
-        <vers prev="1" num="stage6.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0314" published="2012-02-02" name="CVE-2012-0314" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities on the eAccess Pocket WiFi (aka GP02) router before 2.00 with firmware 11.203.11.05.168 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51782" source="BID">51782</ref>
-      <ref url="http://secunia.com/advisories/47795" source="SECUNIA">47795</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000010" source="JVNDB">JVNDB-2012-000010</ref>
-      <ref url="http://jvn.jp/en/jp/JVN33021167/index.html" source="JVN">JVN#33021167</ref>
-      <ref url="http://emobile.jp/topics/info20120201_01.html" source="CONFIRM">http://emobile.jp/topics/info20120201_01.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emobile" name="pocket_wifi_firmware">
-        <vers prev="1" num="11.203.11.05.168" />
-      </prod>
-      <prod vendor="emobile" name="pocket_wifi">
-        <vers prev="1" num="2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0315" published="2012-02-22" nvd_name="CWE-426: Untrusted Search Path" name="CVE-2012-0315" modified="2012-02-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in ALFTP before 5.31 allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.altools.jp/download.aspx" source="MISC" patch="1">http://www.altools.jp/download.aspx</ref>
-      <ref url="http://www.altools.jp/ETC/NEWS.aspx?mid=231&amp;vidx=118" source="MISC" adv="1">http://www.altools.jp/ETC/NEWS.aspx?mid=231&amp;vidx=118</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000011" source="JVNDB">JVNDB-2012-000011</ref>
-      <ref url="http://jvn.jp/en/jp/JVN85695061/index.html" source="JVN">JVN#85695061</ref>
-      <ref url="http://jvn.jp/en/jp/JVN85695061/995223/index.html" source="MISC">http://jvn.jp/en/jp/JVN85695061/995223/index.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="estsoft" name="alftp">
-        <vers num="4.1" edition="beta2" />
-        <vers num="4.1" edition="beta2:" />
-        <vers num="4.1" edition="beta2::english" />
-        <vers num="5.0" />
-        <vers prev="1" num="5.1" edition="beta2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0316" published="2012-03-01" name="CVE-2012-0316" modified="2012-03-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Cookpad 1.5.16 and earlier and Cookpad Noseru 1.1.1 and earlier applications for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000014" source="JVNDB">JVNDB-2012-000014</ref>
-      <ref url="http://jvn.jp/en/jp/JVN25731073/index.html" source="JVN">JVN#25731073</ref>
-      <ref url="http://cookpad.typepad.jp/help/2012/02/23oshirase.html" source="CONFIRM" adv="1">http://cookpad.typepad.jp/help/2012/02/23oshirase.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cookpad" name="android_activities">
-        <vers prev="1" num="1.5.16" />
-      </prod>
-      <prod vendor="cookpad" name="android_mykitchen">
-        <vers prev="1" num="1.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0317" published="2012-03-02" name="CVE-2012-0317" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allow remote attackers to hijack the authentication of arbitrary users for requests that modify data via the (1) commenting feature or (2) community script.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.movabletype.org/documentation/appendices/release-notes/513.html" source="CONFIRM" patch="1" adv="1">http://www.movabletype.org/documentation/appendices/release-notes/513.html</ref>
-      <ref url="http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html" source="CONFIRM" patch="1" adv="1">http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000015" source="JVNDB">JVNDB-2012-000015</ref>
-      <ref url="http://jvn.jp/en/jp/JVN70683217/index.html" source="JVN">JVN#70683217</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sixapart" name="movable_type">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="rc1" />
-        <vers num="4.0" edition="rc2" />
-        <vers num="4.0" edition="rc3" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.1" edition="beta2" />
-        <vers num="4.1" edition="rc1" />
-        <vers num="4.12" />
-        <vers num="4.15" edition="beta1" />
-        <vers num="4.15" edition="beta3" />
-        <vers num="4.15" edition="beta4" />
-        <vers num="4.2" edition="rc2" />
-        <vers num="4.2" edition="rc4" />
-        <vers num="4.2" edition="rc5" />
-        <vers num="4.22" />
-        <vers num="4.23" />
-        <vers num="4.24" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.27" />
-        <vers num="4.28" edition="" />
-        <vers num="4.28" edition=":open_source" />
-        <vers num="4.28" edition=":enterprise" />
-        <vers num="4.29" edition="" />
-        <vers num="4.29" edition=":open_source" />
-        <vers num="4.29" edition=":enterprise" />
-        <vers num="4.291" edition="" />
-        <vers num="4.291" edition=":open_source" />
-        <vers num="4.291" edition=":enterprise" />
-        <vers prev="1" num="4.292" edition="" />
-        <vers prev="1" num="4.292" edition=":enterprise" />
-        <vers prev="1" num="4.292" edition=":open_source" />
-        <vers num="4.35" />
-        <vers num="4.36" edition="" />
-        <vers num="4.36" edition=":open_source" />
-        <vers num="4.361" edition="" />
-        <vers num="4.361" edition=":open_source" />
-        <vers prev="1" num="4.37" edition="" />
-        <vers prev="1" num="4.37" edition=":open_source" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":open_source" />
-        <vers num="5.0" edition="beta1" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="rc1" />
-        <vers num="5.0" edition="rc2" />
-        <vers num="5.0" edition="rc3" />
-        <vers num="5.01" edition="" />
-        <vers num="5.01" edition=":open_source" />
-        <vers num="5.02" edition="" />
-        <vers num="5.02" edition=":open_source" />
-        <vers num="5.02" edition=":advanced" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" edition="" />
-        <vers num="5.04" edition=":advanced" />
-        <vers num="5.04" edition=":open_source" />
-        <vers num="5.05" edition="" />
-        <vers num="5.05" edition=":advanced" />
-        <vers num="5.05" edition=":open_source" />
-        <vers num="5.051" edition="" />
-        <vers num="5.051" edition=":advanced" />
-        <vers num="5.051" edition=":open_source" />
-        <vers num="5.06" edition="" />
-        <vers num="5.06" edition=":open_source" />
-        <vers num="5.06" edition=":advanced" />
-        <vers num="5.07" />
-        <vers num="5.1" edition="" />
-        <vers num="5.1" edition=":advanced" />
-        <vers num="5.1" edition=":open_source" />
-        <vers num="5.1" edition="beta" />
-        <vers num="5.1" edition="rc1" />
-        <vers num="5.11" edition="" />
-        <vers num="5.11" edition=":advanced" />
-        <vers num="5.11" edition=":open_source" />
-        <vers num="5.12" edition="" />
-        <vers num="5.12" edition=":open_source" />
-        <vers num="5.12" edition=":advanced" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0318" published="2012-03-02" name="CVE-2012-0318" modified="2012-03-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allow remote attackers to inject arbitrary web script or HTML via vectors involving templates, a different issue than CVE-2012-1262.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.movabletype.org/documentation/appendices/release-notes/513.html" source="CONFIRM" patch="1" adv="1">http://www.movabletype.org/documentation/appendices/release-notes/513.html</ref>
-      <ref url="http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html" source="CONFIRM" patch="1" adv="1">http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000016" source="JVNDB">JVNDB-2012-000016</ref>
-      <ref url="http://jvn.jp/en/jp/JVN49836527/index.html" source="JVN">JVN#49836527</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="movabletype" name="movable_type_advanced">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.01" edition="beta" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.2" edition="beta" />
-        <vers num="4.23" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.3" />
-        <vers num="4.31" />
-        <vers num="4.32" />
-        <vers num="4.33" />
-        <vers num="4.34" />
-        <vers num="4.35" />
-        <vers num="4.36" />
-        <vers num="4.361" />
-        <vers prev="1" num="4.37" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.051" />
-        <vers num="5.06" />
-        <vers num="5.1" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-      </prod>
-      <prod vendor="movabletype" name="movable_type_enterprise">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.01" edition="beta" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.2" edition="beta" />
-        <vers num="4.23" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.3" />
-        <vers num="4.31" />
-        <vers num="4.32" />
-        <vers num="4.33" />
-        <vers num="4.34" />
-        <vers num="4.35" />
-        <vers num="4.36" />
-        <vers num="4.361" />
-        <vers prev="1" num="4.37" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.051" />
-        <vers num="5.06" />
-        <vers num="5.1" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-      </prod>
-      <prod vendor="movabletype" name="movable_type_open_source">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.01" edition="beta" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.2" edition="beta" />
-        <vers num="4.23" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.3" />
-        <vers num="4.31" />
-        <vers num="4.32" />
-        <vers num="4.33" />
-        <vers num="4.34" />
-        <vers num="4.35" />
-        <vers num="4.36" />
-        <vers num="4.361" />
-        <vers prev="1" num="4.37" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.051" />
-        <vers num="5.06" />
-        <vers num="5.1" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-      </prod>
-      <prod vendor="movabletype" name="movable_type_pro">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.01" edition="beta" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.2" edition="beta" />
-        <vers num="4.23" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.3" />
-        <vers num="4.31" />
-        <vers num="4.32" />
-        <vers num="4.33" />
-        <vers num="4.34" />
-        <vers num="4.35" />
-        <vers num="4.36" />
-        <vers num="4.361" />
-        <vers prev="1" num="4.37" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.051" />
-        <vers num="5.06" />
-        <vers num="5.1" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0319" published="2012-03-02" name="CVE-2012-0319" modified="2012-03-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">The file-management system in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote authenticated users to execute arbitrary commands by leveraging the file-upload feature, related to an "OS Command Injection" issue.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.movabletype.org/documentation/appendices/release-notes/513.html" source="CONFIRM" patch="1" adv="1">http://www.movabletype.org/documentation/appendices/release-notes/513.html</ref>
-      <ref url="http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html" source="CONFIRM" patch="1" adv="1">http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000017" source="JVNDB">JVNDB-2012-000017</ref>
-      <ref url="http://jvn.jp/en/jp/JVN92683325/index.html" source="JVN">JVN#92683325</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="movabletype" name="movable_type_advanced">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.01" edition="beta" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.2" edition="beta" />
-        <vers num="4.23" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.3" />
-        <vers num="4.31" />
-        <vers num="4.32" />
-        <vers num="4.33" />
-        <vers num="4.34" />
-        <vers num="4.35" />
-        <vers num="4.36" />
-        <vers num="4.361" />
-        <vers prev="1" num="4.37" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.051" />
-        <vers num="5.06" />
-        <vers num="5.1" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-      </prod>
-      <prod vendor="movabletype" name="movable_type_enterprise">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.01" edition="beta" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.2" edition="beta" />
-        <vers num="4.23" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.3" />
-        <vers num="4.31" />
-        <vers num="4.32" />
-        <vers num="4.33" />
-        <vers num="4.34" />
-        <vers num="4.35" />
-        <vers num="4.36" />
-        <vers num="4.361" />
-        <vers prev="1" num="4.37" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.051" />
-        <vers num="5.06" />
-        <vers num="5.1" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-      </prod>
-      <prod vendor="movabletype" name="movable_type_open_source">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.01" edition="beta" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.2" edition="beta" />
-        <vers num="4.23" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.3" />
-        <vers num="4.31" />
-        <vers num="4.32" />
-        <vers num="4.33" />
-        <vers num="4.34" />
-        <vers num="4.35" />
-        <vers num="4.36" />
-        <vers num="4.361" />
-        <vers prev="1" num="4.37" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.051" />
-        <vers num="5.06" />
-        <vers num="5.1" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-      </prod>
-      <prod vendor="movabletype" name="movable_type_pro">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.01" edition="beta" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.2" edition="beta" />
-        <vers num="4.23" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.3" />
-        <vers num="4.31" />
-        <vers num="4.32" />
-        <vers num="4.33" />
-        <vers num="4.34" />
-        <vers num="4.35" />
-        <vers num="4.36" />
-        <vers num="4.361" />
-        <vers prev="1" num="4.37" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.051" />
-        <vers num="5.06" />
-        <vers num="5.1" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0320" published="2012-03-02" name="CVE-2012-0320" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community script.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.movabletype.org/documentation/appendices/release-notes/513.html" source="CONFIRM" patch="1" adv="1">http://www.movabletype.org/documentation/appendices/release-notes/513.html</ref>
-      <ref url="http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html" source="CONFIRM" patch="1" adv="1">http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000018" source="JVNDB">JVNDB-2012-000018</ref>
-      <ref url="http://jvn.jp/en/jp/JVN20083397/index.html" source="JVN">JVN#20083397</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sixapart" name="movable_type">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="rc1" />
-        <vers num="4.0" edition="rc2" />
-        <vers num="4.0" edition="rc3" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.1" edition="beta2" />
-        <vers num="4.1" edition="rc1" />
-        <vers num="4.12" />
-        <vers num="4.15" edition="beta1" />
-        <vers num="4.15" edition="beta3" />
-        <vers num="4.15" edition="beta4" />
-        <vers num="4.2" edition="rc2" />
-        <vers num="4.2" edition="rc4" />
-        <vers num="4.2" edition="rc5" />
-        <vers num="4.22" />
-        <vers num="4.23" />
-        <vers num="4.24" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.27" />
-        <vers num="4.28" edition="" />
-        <vers num="4.28" edition=":open_source" />
-        <vers num="4.28" edition=":enterprise" />
-        <vers num="4.29" edition="" />
-        <vers num="4.29" edition=":open_source" />
-        <vers num="4.29" edition=":enterprise" />
-        <vers num="4.291" edition="" />
-        <vers num="4.291" edition=":open_source" />
-        <vers num="4.291" edition=":enterprise" />
-        <vers prev="1" num="4.292" edition="" />
-        <vers prev="1" num="4.292" edition=":enterprise" />
-        <vers prev="1" num="4.292" edition=":open_source" />
-        <vers num="4.35" />
-        <vers num="4.36" edition="" />
-        <vers num="4.36" edition=":open_source" />
-        <vers num="4.361" edition="" />
-        <vers num="4.361" edition=":open_source" />
-        <vers prev="1" num="4.37" edition="" />
-        <vers prev="1" num="4.37" edition=":open_source" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":open_source" />
-        <vers num="5.0" edition="beta1" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="rc1" />
-        <vers num="5.0" edition="rc2" />
-        <vers num="5.0" edition="rc3" />
-        <vers num="5.01" edition="" />
-        <vers num="5.01" edition=":open_source" />
-        <vers num="5.02" edition="" />
-        <vers num="5.02" edition=":open_source" />
-        <vers num="5.02" edition=":advanced" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" edition="" />
-        <vers num="5.04" edition=":advanced" />
-        <vers num="5.04" edition=":open_source" />
-        <vers num="5.05" edition="" />
-        <vers num="5.05" edition=":advanced" />
-        <vers num="5.05" edition=":open_source" />
-        <vers num="5.051" edition="" />
-        <vers num="5.051" edition=":advanced" />
-        <vers num="5.051" edition=":open_source" />
-        <vers num="5.06" edition="" />
-        <vers num="5.06" edition=":open_source" />
-        <vers num="5.06" edition=":advanced" />
-        <vers num="5.07" />
-        <vers num="5.1" edition="" />
-        <vers num="5.1" edition=":advanced" />
-        <vers num="5.1" edition=":open_source" />
-        <vers num="5.1" edition="beta" />
-        <vers num="5.1" edition="rc1" />
-        <vers num="5.11" edition="" />
-        <vers num="5.11" edition=":advanced" />
-        <vers num="5.11" edition=":open_source" />
-        <vers num="5.12" edition="" />
-        <vers num="5.12" edition=":open_source" />
-        <vers num="5.12" edition=":advanced" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0321" published="2012-03-02" name="CVE-2012-0321" modified="2012-03-05" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the device driver in Kingsoft Internet Security 2011 allows local users to cause a denial of service via a crafted application.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.kingsoft.jp/support/security/support_news/supportnews_20120229" source="CONFIRM" adv="1">http://www.kingsoft.jp/support/security/support_news/supportnews_20120229</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000019" source="JVNDB">JVNDB-2012-000019</ref>
-      <ref url="http://jvn.jp/en/jp/JVN31517714/index.html" source="JVN">JVN#31517714</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kingsoft" name="internet_security">
-        <vers num="2011" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0322" published="2012-03-05" name="CVE-2012-0322" modified="2012-03-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The EStrongs ES File Explorer application 1.6.0.2 through 1.6.1.1 for Android does not properly restrict access, which allows remote attackers to read arbitrary files via vectors involving an unspecified function.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000020" source="JVNDB">JVNDB-2012-000020</ref>
-      <ref url="http://jvn.jp/en/jp/JVN08871006/index.html" source="JVN">JVN#08871006</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="estrongs" name="es_file_explorer">
-        <vers num="1.6.0.2" />
-        <vers num="1.6.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0323" published="2012-03-09" name="CVE-2012-0323" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Autocomplete plugin before 3.0 for SquirrelMail allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://squirrelmail.org/plugin_view.php?id=32" source="MISC" adv="1">http://squirrelmail.org/plugin_view.php?id=32</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000021" source="JVNDB">JVNDB-2012-000021</ref>
-      <ref url="http://jvn.jp/en/jp/JVN56653852/index.html" source="JVN">JVN#56653852</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="paul_lesniewsk" name="autocomplete">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="2.0" />
-        <vers prev="1" num="2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0324" published="2012-03-09" name="CVE-2012-0324" modified="2012-03-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in CloudBees Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0325.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-03-05.cb" source="CONFIRM" adv="1">http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-03-05.cb</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000022" source="JVNDB">JVNDB-2012-000022</ref>
-      <ref url="http://jvn.jp/en/jp/JVN14791558/index.html" source="JVN">JVN#14791558</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cloudbees" name="jenkins">
-        <vers num="1.301" />
-        <vers num="1.302" />
-        <vers num="1.303" />
-        <vers num="1.304" />
-        <vers num="1.305" />
-        <vers num="1.306" />
-        <vers num="1.307" />
-        <vers num="1.308" />
-        <vers num="1.309" />
-        <vers num="1.310" />
-        <vers num="1.311" />
-        <vers num="1.312" />
-        <vers num="1.313" />
-        <vers num="1.314" />
-        <vers num="1.315" />
-        <vers num="1.316" />
-        <vers num="1.317" />
-        <vers num="1.318" />
-        <vers num="1.319" />
-        <vers num="1.320" />
-        <vers num="1.321" />
-        <vers num="1.322" />
-        <vers num="1.323" />
-        <vers num="1.324" />
-        <vers num="1.325" />
-        <vers num="1.326" />
-        <vers num="1.327" />
-        <vers num="1.328" />
-        <vers num="1.329" />
-        <vers num="1.330" />
-        <vers num="1.331" />
-        <vers num="1.332" />
-        <vers num="1.333" />
-        <vers num="1.334" />
-        <vers num="1.335" />
-        <vers num="1.336" />
-        <vers num="1.337" />
-        <vers num="1.338" />
-        <vers num="1.339" />
-        <vers num="1.340" />
-        <vers num="1.341" />
-        <vers num="1.342" />
-        <vers num="1.343" />
-        <vers num="1.344" />
-        <vers num="1.345" />
-        <vers num="1.346" />
-        <vers num="1.347" />
-        <vers num="1.348" />
-        <vers num="1.349" />
-        <vers num="1.350" />
-        <vers num="1.351" />
-        <vers num="1.352" />
-        <vers num="1.353" />
-        <vers num="1.354" />
-        <vers num="1.355" />
-        <vers num="1.356" />
-        <vers num="1.357" />
-        <vers num="1.358" />
-        <vers num="1.359" />
-        <vers num="1.360" />
-        <vers num="1.361" />
-        <vers num="1.362" />
-        <vers num="1.363" />
-        <vers num="1.364" />
-        <vers num="1.365" />
-        <vers num="1.366" />
-        <vers num="1.367" />
-        <vers num="1.368" />
-        <vers num="1.369" />
-        <vers num="1.370" />
-        <vers num="1.371" />
-        <vers num="1.372" />
-        <vers num="1.373" />
-        <vers num="1.374" />
-        <vers num="1.375" />
-        <vers num="1.376" />
-        <vers num="1.377" />
-        <vers num="1.378" />
-        <vers num="1.379" />
-        <vers num="1.380" />
-        <vers num="1.382" />
-        <vers num="1.383" />
-        <vers num="1.384" />
-        <vers num="1.386" />
-        <vers num="1.387" />
-        <vers num="1.388" />
-        <vers num="1.389" />
-        <vers num="1.390" />
-        <vers num="1.391" />
-        <vers num="1.392" />
-        <vers num="1.393" />
-        <vers num="1.394" />
-        <vers num="1.395" />
-        <vers num="1.396" />
-        <vers num="1.397" />
-        <vers num="1.398" />
-        <vers num="1.399" />
-        <vers num="1.400" edition="" />
-        <vers num="1.400" edition=":lts" />
-        <vers num="1.400" edition=":enterprise" />
-        <vers num="1.400.0.12" edition="" />
-        <vers num="1.400.0.12" edition=":enterprise" />
-        <vers num="1.400.0.12" edition=":lts" />
-        <vers num="1.401" />
-        <vers num="1.402" />
-        <vers num="1.403" />
-        <vers num="1.404" />
-        <vers num="1.405" />
-        <vers num="1.406" />
-        <vers num="1.407" />
-        <vers num="1.408" />
-        <vers num="1.409" />
-        <vers num="1.409.1" edition="" />
-        <vers num="1.409.1" edition=":lts" />
-        <vers num="1.409.2" edition="" />
-        <vers num="1.409.2" edition=":lts" />
-        <vers num="1.410" />
-        <vers num="1.411" />
-        <vers num="1.412" />
-        <vers num="1.413" />
-        <vers num="1.414" />
-        <vers num="1.415" />
-        <vers num="1.416" />
-        <vers num="1.417" />
-        <vers num="1.418" />
-        <vers num="1.419" />
-        <vers num="1.420" />
-        <vers num="1.421" />
-        <vers num="1.422" />
-        <vers num="1.423" />
-        <vers num="1.424" edition="" />
-        <vers num="1.424" edition=":enterprise" />
-        <vers num="1.424.5" edition="" />
-        <vers num="1.424.5" edition=":enterprise" />
-        <vers num="1.425" />
-        <vers num="1.426" />
-        <vers num="1.427" />
-        <vers num="1.428" />
-        <vers num="1.429" />
-        <vers num="1.430" />
-        <vers num="1.431" />
-        <vers num="1.432" />
-        <vers num="1.433" />
-        <vers num="1.434" />
-        <vers num="1.435" />
-        <vers num="1.436" />
-        <vers num="1.437" />
-        <vers prev="1" num="1.453" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0325" published="2012-03-09" name="CVE-2012-0325" modified="2012-03-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in CloudBees Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0324.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-03-05.cb" source="CONFIRM" adv="1">http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-03-05.cb</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000023" source="JVNDB">JVNDB-2012-000023</ref>
-      <ref url="http://jvn.jp/en/jp/JVN79950061/index.html" source="JVN">JVN#79950061</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cloudbees" name="jenkins">
-        <vers num="1.301" />
-        <vers num="1.302" />
-        <vers num="1.303" />
-        <vers num="1.304" />
-        <vers num="1.305" />
-        <vers num="1.306" />
-        <vers num="1.307" />
-        <vers num="1.308" />
-        <vers num="1.309" />
-        <vers num="1.310" />
-        <vers num="1.311" />
-        <vers num="1.312" />
-        <vers num="1.313" />
-        <vers num="1.314" />
-        <vers num="1.315" />
-        <vers num="1.316" />
-        <vers num="1.317" />
-        <vers num="1.318" />
-        <vers num="1.319" />
-        <vers num="1.320" />
-        <vers num="1.321" />
-        <vers num="1.322" />
-        <vers num="1.323" />
-        <vers num="1.324" />
-        <vers num="1.325" />
-        <vers num="1.326" />
-        <vers num="1.327" />
-        <vers num="1.328" />
-        <vers num="1.329" />
-        <vers num="1.330" />
-        <vers num="1.331" />
-        <vers num="1.332" />
-        <vers num="1.333" />
-        <vers num="1.334" />
-        <vers num="1.335" />
-        <vers num="1.336" />
-        <vers num="1.337" />
-        <vers num="1.338" />
-        <vers num="1.339" />
-        <vers num="1.340" />
-        <vers num="1.341" />
-        <vers num="1.342" />
-        <vers num="1.343" />
-        <vers num="1.344" />
-        <vers num="1.345" />
-        <vers num="1.346" />
-        <vers num="1.347" />
-        <vers num="1.348" />
-        <vers num="1.349" />
-        <vers num="1.350" />
-        <vers num="1.351" />
-        <vers num="1.352" />
-        <vers num="1.353" />
-        <vers num="1.354" />
-        <vers num="1.355" />
-        <vers num="1.356" />
-        <vers num="1.357" />
-        <vers num="1.358" />
-        <vers num="1.359" />
-        <vers num="1.360" />
-        <vers num="1.361" />
-        <vers num="1.362" />
-        <vers num="1.363" />
-        <vers num="1.364" />
-        <vers num="1.365" />
-        <vers num="1.366" />
-        <vers num="1.367" />
-        <vers num="1.368" />
-        <vers num="1.369" />
-        <vers num="1.370" />
-        <vers num="1.371" />
-        <vers num="1.372" />
-        <vers num="1.373" />
-        <vers num="1.374" />
-        <vers num="1.375" />
-        <vers num="1.376" />
-        <vers num="1.377" />
-        <vers num="1.378" />
-        <vers num="1.379" />
-        <vers num="1.380" />
-        <vers num="1.382" />
-        <vers num="1.383" />
-        <vers num="1.384" />
-        <vers num="1.386" />
-        <vers num="1.387" />
-        <vers num="1.388" />
-        <vers num="1.389" />
-        <vers num="1.390" />
-        <vers num="1.391" />
-        <vers num="1.392" />
-        <vers num="1.393" />
-        <vers num="1.394" />
-        <vers num="1.395" />
-        <vers num="1.396" />
-        <vers num="1.397" />
-        <vers num="1.398" />
-        <vers num="1.399" />
-        <vers num="1.400" edition="" />
-        <vers num="1.400" edition=":lts" />
-        <vers num="1.400" edition=":enterprise" />
-        <vers num="1.400.0.12" edition="" />
-        <vers num="1.400.0.12" edition=":enterprise" />
-        <vers num="1.400.0.12" edition=":lts" />
-        <vers num="1.401" />
-        <vers num="1.402" />
-        <vers num="1.403" />
-        <vers num="1.404" />
-        <vers num="1.405" />
-        <vers num="1.406" />
-        <vers num="1.407" />
-        <vers num="1.408" />
-        <vers num="1.409" />
-        <vers num="1.409.1" edition="" />
-        <vers num="1.409.1" edition=":lts" />
-        <vers num="1.409.2" edition="" />
-        <vers num="1.409.2" edition=":lts" />
-        <vers num="1.410" />
-        <vers num="1.411" />
-        <vers num="1.412" />
-        <vers num="1.413" />
-        <vers num="1.414" />
-        <vers num="1.415" />
-        <vers num="1.416" />
-        <vers num="1.417" />
-        <vers num="1.418" />
-        <vers num="1.419" />
-        <vers num="1.420" />
-        <vers num="1.421" />
-        <vers num="1.422" />
-        <vers num="1.423" />
-        <vers num="1.424" edition="" />
-        <vers num="1.424" edition=":enterprise" />
-        <vers num="1.424.5" edition="" />
-        <vers num="1.424.5" edition=":enterprise" />
-        <vers num="1.425" />
-        <vers num="1.426" />
-        <vers num="1.427" />
-        <vers num="1.428" />
-        <vers num="1.429" />
-        <vers num="1.430" />
-        <vers num="1.431" />
-        <vers num="1.432" />
-        <vers num="1.433" />
-        <vers num="1.434" />
-        <vers num="1.435" />
-        <vers num="1.436" />
-        <vers num="1.437" />
-        <vers prev="1" num="1.453" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0326" published="2012-03-17" name="CVE-2012-0326" modified="2012-03-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of network privileges, which allows remote attackers to read media files on an SD card via a crafted application.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://play.google.com/store/apps/details?id=jp.r246.twicca" source="CONFIRM" patch="1" adv="1">https://play.google.com/store/apps/details?id=jp.r246.twicca</ref>
-      <ref url="http://twicca.r246.jp/notice/" source="CONFIRM" patch="1">http://twicca.r246.jp/notice/</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000024" source="JVNDB">JVNDB-2012-000024</ref>
-      <ref url="http://jvn.jp/en/jp/JVN31860555/index.html" source="JVN">JVN#31860555</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tetsuya_aoyama" name="twicca">
-        <vers num="0.7.0" />
-        <vers num="0.8.8" />
-        <vers num="0.9.13" edition="rc2" />
-        <vers num="0.9.13a" edition="rc2" />
-        <vers num="0.9.13b-rc2" />
-        <vers num="0.9.16" />
-        <vers num="0.9.17b" />
-        <vers num="0.9.20" />
-        <vers num="0.9.20a" />
-        <vers num="0.9.20b" />
-        <vers num="0.9.20c" />
-        <vers num="0.9.20e" />
-        <vers num="0.9.26" />
-        <vers num="0.9.26c" />
-        <vers num="0.9.26c2" />
-        <vers num="0.9.30" />
-        <vers num="0.9.31" />
-        <vers num="0.9.31a" />
-        <vers num="0.9.4g" edition="rc2" />
-        <vers num="0.9.4g2" edition="rc2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0327" published="2012-04-05" name="CVE-2012-0327" modified="2012-04-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Redmine before 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.redmine.org/versions/42" source="MISC">http://www.redmine.org/versions/42</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000025" source="JVNDB">JVNDB-2012-000025</ref>
-      <ref url="http://jvn.jp/en/jp/JVN93406632/index.html" source="JVN">JVN#93406632</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="redmine" name="redmine">
-        <vers num="0.1.0" />
-        <vers num="0.2.1" />
-        <vers num="0.2.2" />
-        <vers num="0.3.0" />
-        <vers num="0.4.0" />
-        <vers num="0.4.1" />
-        <vers num="0.4.2" />
-        <vers num="0.5.0" />
-        <vers num="0.5.1" />
-        <vers num="0.6.0" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.6.4" />
-        <vers num="0.7.0" edition="rc1" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.8.0" edition="rc1" />
-        <vers num="0.8.1" />
-        <vers num="0.8.2" />
-        <vers num="0.8.3" />
-        <vers num="0.8.4" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.9.0" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="0.9.4" />
-        <vers num="0.9.5" />
-        <vers num="0.9.6" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.3.0" />
-        <vers prev="1" num="1.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0328" published="2012-03-19" name="CVE-2012-0328" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Janetter before 3.3.0.0 (aka 3.3.0) allows remote attackers to obtain session information for twitter.com web sites via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74132" source="XF">janetter-info-disclosure(74132)</ref>
-      <ref url="http://secunia.com/advisories/48480" source="SECUNIA">48480</ref>
-      <ref url="http://osvdb.org/80334" source="OSVDB">80334</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000026" source="JVNDB">JVNDB-2012-000026</ref>
-      <ref url="http://jvn.jp/en/jp/JVN10745573/index.html" source="JVN">JVN#10745573</ref>
-      <ref url="http://janetter.net/history.html" source="CONFIRM">http://janetter.net/history.html</ref>
-      <ref url="http://blog.janetter.net/" source="CONFIRM">http://blog.janetter.net/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="janetter" name="janetter">
-        <vers num="1.0.0.0" />
-        <vers num="1.1.0.0" />
-        <vers num="1.2.0.0" />
-        <vers num="1.2.1.0" />
-        <vers num="1.3.0.0" />
-        <vers num="1.4.0.0" />
-        <vers num="1.5.0.0" />
-        <vers num="1.6.0.0" />
-        <vers num="1.6.1.0" />
-        <vers num="1.6.2.0" />
-        <vers num="1.6.3.0" />
-        <vers num="1.7.0.0" />
-        <vers num="1.7.1.0" />
-        <vers num="1.7.2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.1.0" />
-        <vers num="2.0.2.0" />
-        <vers num="2.0.3.0" />
-        <vers num="2.1.0.0" />
-        <vers num="2.1.1.0" />
-        <vers num="2.1.1.1" />
-        <vers num="2.1.1.2" />
-        <vers num="2.2.0.0" />
-        <vers num="2.3.0.0" />
-        <vers num="2.4.0.0" />
-        <vers num="2.5.0.0" />
-        <vers num="2.5.1.0" />
-        <vers num="3.0.0.0" />
-        <vers num="3.1.0.0" />
-        <vers num="3.1.0.1" />
-        <vers num="3.1.1.0" />
-        <vers num="3.2.0.0" />
-        <vers num="3.2.1.0" />
-        <vers prev="1" num="3.2.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0329" published="2012-01-19" name="CVE-2012-0329" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">Cisco Digital Media Manager 5.2.2 and earlier, and 5.2.3, allows remote authenticated users to execute arbitrary code via vectors involving a URL and an administrative resource, aka Bug ID CSCts63878.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026541" source="SECTRACK">1026541</ref>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120118-dmm" source="CISCO" adv="1">20120118 Cisco Digital Media Manager Privilege Escalation Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="digital_media_manager">
-        <vers num="3.5" />
-        <vers num="3.5(1)" />
-        <vers num="4.0" />
-        <vers num="4.1(0)40" />
-        <vers num="5.0" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.2.1" />
-        <vers num="5.2.1.1" />
-        <vers prev="1" num="5.2.2" />
-        <vers num="5.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0330" published="2012-02-29" name="CVE-2012-0330" modified="2012-03-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a malformed SIP message, aka Bug ID CSCtr20426.</descript>
-      <descript source="nvd">Per: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-vcs
-
-'Vulnerable Products
-These vulnerabilities affect all three variants (Control, Expressway, and Starter Pack Express) of Cisco TelePresence Video Communication Server.'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-vcs" source="CISCO" adv="1">20120229 Cisco TelePresence Video Communication Server Session Initiation Protocol Denial of Service Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="telepresence_system_software">
-        <vers num="x5.2" />
-        <vers num="x6.0" />
-        <vers num="x6.1" />
-        <vers prev="1" num="x7.0" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_video_communication_server">
-        <vers num="" edition=":starter_pack_express" />
-        <vers num="" edition=":control" />
-        <vers num="" edition=":expressway" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0331" published="2012-02-29" name="CVE-2012-0331" modified="2012-03-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a crafted SIP packet, as demonstrated by a SIP INVITE message from a Tandberg device, aka Bug ID CSCtq73319.</descript>
-      <descript source="nvd">Per: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-vcs
-
-'Vulnerable Products
-These vulnerabilities affect all three variants (Control, Expressway, and Starter Pack Express) of Cisco TelePresence Video Communication Server.'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-vcs" source="CISCO" adv="1">20120229 Cisco TelePresence Video Communication Server Session Initiation Protocol Denial of Service Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="telepresence_system_software">
-        <vers num="x5.2" />
-        <vers num="x6.0" />
-        <vers num="x6.1" />
-        <vers prev="1" num="x7.0" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_video_communication_server">
-        <vers num="" edition=":starter_pack_express" />
-        <vers num="" edition=":control" />
-        <vers num="" edition=":expressway" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0333" published="2012-05-02" name="CVE-2012-0333" modified="2012-05-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XML requests, which allows remote attackers to make telephone calls via an XML document, aka Bug ID CSCts08768.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www-europe.cisco.com/en/US/docs/voice_ip_comm/csbpipp/ip_phones/release/notes/spa525g_relnote_7_5_1.pdf" source="CONFIRM">http://www-europe.cisco.com/en/US/docs/voice_ip_comm/csbpipp/ip_phones/release/notes/spa525g_relnote_7_5_1.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="small_business_ip_phone_firmware">
-        <vers num="7.1.7" />
-        <vers num="7.2.5" />
-        <vers num="7.3.5" />
-        <vers num="7.4.3" />
-        <vers num="7.4.4" />
-        <vers num="7.4.5" />
-        <vers num="7.4.6" />
-        <vers num="7.4.7" />
-        <vers num="7.4.8" />
-        <vers prev="1" num="7.4.9" />
-      </prod>
-      <prod vendor="cisco" name="small_business_ip_phone">
-        <vers num="spa525g" />
-        <vers num="spa525g2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0335" published="2012-05-02" name="CVE-2012-0335" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication during attempts to cut through a firewall, which allows remote attackers to obtain sensitive information via a connection attempt, aka Bug ID CSCtx42746.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/web/software/280775065/89203/ASA-843-Interim-Release-Notes.html" source="CONFIRM">http://www.cisco.com/web/software/280775065/89203/ASA-843-Interim-Release-Notes.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="adaptive_security_appliance_software">
-        <vers num="7.2" />
-        <vers num="7.2(1)" />
-        <vers num="7.2(1.22)" />
-        <vers num="7.2(2)" />
-        <vers num="7.2(2.10)" />
-        <vers num="7.2(2.14)" />
-        <vers num="7.2(2.15)" />
-        <vers num="7.2(2.16)" />
-        <vers num="7.2(2.17)" />
-        <vers num="7.2(2.18)" />
-        <vers num="7.2(2.19)" />
-        <vers num="7.2(2.48)" />
-        <vers num="7.2(2.5)" />
-        <vers num="7.2(2.7)" />
-        <vers num="7.2(2.8)" />
-        <vers num="7.2(3)" />
-        <vers num="7.2(4)" />
-        <vers num="7.2(5)" />
-        <vers num="7.2.1" />
-        <vers num="7.2.2" />
-        <vers num="7.2.3" />
-        <vers num="7.2.4" />
-        <vers num="7.2.5" />
-        <vers num="8.2(1)" />
-        <vers num="8.2(2)" />
-        <vers num="8.2(3)" />
-        <vers num="8.2(3.9)" />
-        <vers num="8.2(4)" />
-        <vers num="8.2(4.1)" />
-        <vers num="8.2(4.4)" />
-        <vers num="8.2(5)" />
-        <vers num="8.2.1" />
-        <vers num="8.2.2" edition="interim" />
-        <vers num="8.2.3" />
-        <vers num="8.3(1)" />
-        <vers num="8.3(2)" />
-        <vers num="8.3.1" edition="interim" />
-        <vers num="8.3.2" />
-        <vers num="8.4" />
-        <vers num="8.4(1)" />
-        <vers num="8.4(1.11)" />
-        <vers num="8.4(2)" />
-        <vers num="8.4(2.11)" />
-      </prod>
-      <prod vendor="cisco" name="5500_series_adaptive_security_appliance">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0337" published="2012-05-02" name="CVE-2012-0337" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/voice_ip_comm/meetingplace/7_1/english/release_notes/mp71rn.html" source="CONFIRM">http://www.cisco.com/en/US/docs/voice_ip_comm/meetingplace/7_1/english/release_notes/mp71rn.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="unified_meetingplace">
-        <vers num="7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0338" published="2012-05-02" name="CVE-2012-0338" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish SSH connections from arbitrary source IP addresses via a standard SSH client, aka Bug ID CSCsv86113.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://supportforums.cisco.com/thread/2030226" source="CONFIRM">https://supportforums.cisco.com/thread/2030226</ref>
-      <ref url="http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXH_rebuilds.html" source="CONFIRM">http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXH_rebuilds.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.2" />
-        <vers num="12.3" />
-        <vers num="12.4" />
-        <vers num="15.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0339" published="2012-05-02" name="CVE-2012-0339" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish TELNET connections from arbitrary source IP addresses via a standard TELNET client, aka Bug ID CSCsi77774.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/release/notes/caveats_SXF_rebuilds.html" source="CONFIRM">http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/release/notes/caveats_SXF_rebuilds.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.2" />
-        <vers num="12.3" />
-        <vers num="12.4" />
-        <vers num="15.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0340" published="2012-02-13" name="CVE-2012-0340" modified="2012-02-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the management interface on the Cisco IronPort Encryption Appliance with software before 6.5.3 allows remote attackers to inject arbitrary web script or HTML via the header parameter to the default URI under admin/, aka bug ID 72410.</descript>
-      <descript source="nvd">Additional information can be found at: 
-http://www.secureworks.com/research/advisories/SWRX-2012-001/ </descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.secureworks.com/research/advisories/SWRX-2012-001/" source="MISC">http://www.secureworks.com/research/advisories/SWRX-2012-001/</ref>
-      <ref url="http://tools.cisco.com/security/center/viewAlert.x?alertId=25045" source="CONFIRM" adv="1">http://tools.cisco.com/security/center/viewAlert.x?alertId=25045</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ironport_encryption_appliance">
-        <vers num="4.2.1-22.2.i386" />
-        <vers num="4.2.1-22.i386" />
-        <vers num="5.2" />
-        <vers num="6.2" />
-        <vers num="6.2.4" />
-        <vers num="6.2.4.1" />
-        <vers num="6.2.5" />
-        <vers num="6.2.6" />
-        <vers num="6.2.7" />
-        <vers num="6.2.7.1" />
-        <vers num="6.2.7.2" />
-        <vers num="6.2.7.3" />
-        <vers num="6.2.7.4" />
-        <vers num="6.2.7.5" />
-        <vers num="6.2.7.6" />
-        <vers num="6.2.7.7" />
-        <vers num="6.2.9" />
-        <vers num="6.3" />
-        <vers num="6.3.0.1" />
-        <vers num="6.3.0.2" />
-        <vers num="6.3.0.3" />
-        <vers num="6.3.0.4" />
-        <vers num="6.5" />
-        <vers num="6.5.0.1" />
-        <vers num="6.5.0.3" />
-        <vers num="6.5.2" />
-        <vers num="6.5.2.1" />
-        <vers prev="1" num="6.5.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0352" published="2012-02-16" name="CVE-2012-0352" modified="2012-02-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Cisco NX-OS 4.2.x before 4.2(1)SV1(5.1) on Nexus 1000v series switches; 4.x and 5.0.x before 5.0(2)N1(1) on Nexus 5000 series switches; and 4.2.x before 4.2.8, 5.0.x before 5.0.5, and 5.1.x before 5.1.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (netstack process crash and device reload) via a malformed IP packet, aka Bug IDs CSCti23447, CSCti49507, and CSCtj01991.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120215-nxos" source="CISCO" adv="1">20120215 Cisco NX-OS Malformed IP Packet Denial of Service Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="nexus_1000v">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nexus_5000">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nexus_5010">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nexus_5020">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nexus_5548p">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nexus_5548up">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nexus_5596up">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nexus_7000">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nexus_7000_10-slot">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nexus_7000_18-slot">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nexus_7000_9-slot">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nx-os">
-        <vers num="4.0(0)n1(1a)" />
-        <vers num="4.0(0)n1(2)" />
-        <vers num="4.0(0)n1(2a)" />
-        <vers num="4.0(1a)n1(1)" />
-        <vers num="4.0(1a)n1(1a)" />
-        <vers num="4.0(1a)n2(1)" />
-        <vers num="4.0(1a)n2(1a)" />
-        <vers num="4.0(4)sv1(1)" />
-        <vers num="4.0(4)sv1(2)" />
-        <vers num="4.0(4)sv1(3)" />
-        <vers num="4.0(4)sv1(3a)" />
-        <vers num="4.0(4)sv1(3b)" />
-        <vers num="4.0(4)sv1(3c)" />
-        <vers num="4.0(4)sv1(3d)" />
-        <vers num="4.1(3)n1(1)" />
-        <vers num="4.1(3)n1(1a)" />
-        <vers num="4.1(3)n2(1)" />
-        <vers num="4.1(3)n2(1a)" />
-        <vers num="4.1.(2)" />
-        <vers num="4.1.(3)" />
-        <vers num="4.1.(4)" />
-        <vers num="4.1.(5)" />
-        <vers num="4.2(1)" />
-        <vers num="4.2(1)n1(1)" />
-        <vers num="4.2(1)n2(1)" />
-        <vers num="4.2(1)n2(1a)" />
-        <vers num="4.2(1)sv1(4)" />
-        <vers num="4.2(1)sv1(4a)" />
-        <vers num="4.2(2)" />
-        <vers num="4.2(3)" />
-        <vers num="4.2(4)" />
-        <vers num="4.2(6)" />
-        <vers num="4.2.(2a)" />
-        <vers num="5.0(2)" />
-        <vers num="5.0(2)n2(1)" />
-        <vers num="5.0(2)n2(1a)" />
-        <vers num="5.0(2a)" />
-        <vers num="5.0(3)" />
-        <vers num="5.0(3)n1(1)" />
-        <vers num="5.0(3)n1(1a)" />
-        <vers num="5.0(3)n1(1b)" />
-        <vers num="5.0(3)n1(1c)" />
-        <vers num="5.0(3)n2(1)" />
-        <vers num="5.0(3)n2(2)" />
-        <vers num="5.0(3)n2(2a)" />
-        <vers num="5.0(3)n2(2b)" />
-        <vers num="5.1(1a)" />
-        <vers num="5.1(2)" />
-        <vers num="5.1(3)" />
-        <vers num="5.1(3)n1(1)" />
-        <vers num="5.1(3)n1(1a)" />
-        <vers num="5.1(4)" />
-        <vers num="5.1(5)" />
-        <vers num="5.1(6)" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0353" published="2012-03-14" name="CVE-2012-0353" modified="2012-03-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:C)" CVSS_score="7.1" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="8.6" CVSS_base_score="7.1">
-    <desc>
-      <descript source="cve">The UDP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.0 before 8.0(5.25), 8.1 before 8.1(2.50), 8.2 before 8.2(5.5), 8.3 before 8.3(2.22), 8.4 before 8.4(2.1), and 8.5 before 8.5(1.2) does not properly handle flows, which allows remote attackers to cause a denial of service (device reload) via a crafted series of (1) IPv4 or (2) IPv6 UDP packets, aka Bug ID CSCtq10441.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-asa" source="CISCO" adv="1">20120314 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="adaptive_security_appliance_software">
-        <vers num="8.0" />
-        <vers num="8.0(2)" />
-        <vers num="8.0(3)" />
-        <vers num="8.0(4)" />
-        <vers num="8.0(5)" />
-        <vers num="8.0.2" />
-        <vers num="8.0.3" />
-        <vers num="8.0.4" />
-        <vers num="8.0.5" />
-        <vers num="8.1" />
-        <vers num="8.2(1)" />
-        <vers num="8.2(2)" />
-        <vers num="8.2(3)" />
-        <vers num="8.2(3.9)" />
-        <vers num="8.2(4)" />
-        <vers num="8.2(4.1)" />
-        <vers num="8.2(4.4)" />
-        <vers num="8.2(5)" />
-        <vers num="8.2.1" />
-        <vers num="8.2.2" edition="interim" />
-        <vers num="8.2.3" />
-        <vers num="8.3(1)" />
-        <vers num="8.3(2)" />
-        <vers num="8.3.1" edition="interim" />
-        <vers num="8.3.2" />
-        <vers num="8.4" />
-        <vers num="8.4(1)" />
-        <vers num="8.4(1.11)" />
-        <vers num="8.4(2)" />
-        <vers num="8.5" />
-      </prod>
-      <prod vendor="cisco" name="5500_series_adaptive_security_appliance">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6500">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6503-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6504-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6506-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6509-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6509-neb-a">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6509-v-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6513">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6513-e">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0354" published="2012-03-14" name="CVE-2012-0354" modified="2012-03-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:C)" CVSS_score="7.1" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="8.6" CVSS_base_score="7.1">
-    <desc>
-      <descript source="cve">The Threat Detection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.0 through 8.2 before 8.2(5.20), 8.3 before 8.3(2.29), 8.4 before 8.4(3), 8.5 before 8.5(1.6), and 8.6 before 8.6(1.1) allows remote attackers to cause a denial of service (device reload) via (1) IPv4 or (2) IPv6 packets that trigger a shun event, aka Bug ID CSCtw35765.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-asa" source="CISCO" adv="1">20120314 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="adaptive_security_appliance_software">
-        <vers num="8.0" />
-        <vers num="8.0(2)" />
-        <vers num="8.0(3)" />
-        <vers num="8.0(4)" />
-        <vers num="8.0(5)" />
-        <vers num="8.0.2" />
-        <vers num="8.0.3" />
-        <vers num="8.0.4" />
-        <vers num="8.0.5" />
-        <vers num="8.1" />
-        <vers num="8.2(1)" />
-        <vers num="8.2(2)" />
-        <vers num="8.2(3)" />
-        <vers num="8.2(3.9)" />
-        <vers num="8.2(4)" />
-        <vers num="8.2(4.1)" />
-        <vers num="8.2(4.4)" />
-        <vers num="8.2(5)" />
-        <vers num="8.2.1" />
-        <vers num="8.2.2" edition="interim" />
-        <vers num="8.2.3" />
-        <vers num="8.3(1)" />
-        <vers num="8.3(2)" />
-        <vers num="8.3.1" edition="interim" />
-        <vers num="8.3.2" />
-        <vers num="8.4" />
-        <vers num="8.4(1)" />
-        <vers num="8.4(1.11)" />
-        <vers num="8.4(2)" />
-        <vers num="8.4(2.11)" />
-        <vers num="8.5" />
-        <vers num="8.5(1)" />
-        <vers num="8.5(1.4)" />
-        <vers num="8.6" />
-      </prod>
-      <prod vendor="cisco" name="5500_series_adaptive_security_appliance">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6500">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6503-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6504-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6506-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6509-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6509-neb-a">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6509-v-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6513">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6513-e">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0355" published="2012-03-14" name="CVE-2012-0355" modified="2012-03-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(2.11) and 8.5 before 8.5(1.4) allow remote attackers to cause a denial of service (device reload) via (1) IPv4 or (2) IPv6 packets that trigger syslog message 305006, aka Bug ID CSCts39634.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-asa" source="CISCO" adv="1">20120314 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="adaptive_security_appliance_software">
-        <vers num="8.4" />
-        <vers num="8.4(1)" />
-        <vers num="8.4(1.11)" />
-        <vers num="8.4(2)" />
-        <vers num="8.4(2.11)" />
-        <vers num="8.5" />
-        <vers num="8.5(1)" />
-        <vers num="8.5(1.4)" />
-      </prod>
-      <prod vendor="cisco" name="5500_series_adaptive_security_appliance">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6500">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6503-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6504-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6506-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6509-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6509-neb-a">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6509-v-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6513">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6513-e">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0356" published="2012-03-14" name="CVE-2012-0356" modified="2012-03-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 through 7.2 before 7.2(5.7), 8.0 before 8.0(5.27), 8.1 before 8.1(2.53), 8.2 before 8.2(5.8), 8.3 before 8.3(2.25), 8.4 before 8.4(2.5), and 8.5 before 8.5(1.2) and the Firewall Services Module (FWSM) 3.1 and 3.2 before 3.2(23) and 4.0 and 4.1 before 4.1(8) in Cisco Catalyst 6500 series devices, when multicast routing is enabled, allow remote attackers to cause a denial of service (device reload) via a crafted IPv4 PIM message, aka Bug IDs CSCtr47517 and CSCtu97367.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-fwsm" source="CISCO" adv="1">20120314 Cisco Firewall Services Module Crafted Protocol Independent Multicast Message Denial of Service Vulnerability</ref>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-asa" source="CISCO" adv="1">20120314 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="adaptive_security_appliance_software">
-        <vers num="7.0" />
-        <vers num="7.0(0)" />
-        <vers num="7.0(1)" />
-        <vers num="7.0(2)" />
-        <vers num="7.0(4)" />
-        <vers num="7.0(5)" />
-        <vers num="7.0(5.2)" />
-        <vers num="7.0(6)" />
-        <vers num="7.0(6.7)" />
-        <vers num="7.0(7)" />
-        <vers num="7.0(8)" />
-        <vers num="7.0.1" />
-        <vers num="7.0.1.4" />
-        <vers num="7.0.2" />
-        <vers num="7.0.4" />
-        <vers num="7.0.4.3" />
-        <vers num="7.0.5" />
-        <vers num="7.0.6" />
-        <vers num="7.0.7" />
-        <vers num="7.0.8" edition="interim" />
-        <vers num="7.1" />
-        <vers num="7.1(2)" />
-        <vers num="7.1(2.27)" />
-        <vers num="7.1(2.48)" />
-        <vers num="7.1(2.49)" />
-        <vers num="7.1(2.5)" />
-        <vers num="7.1(5)" />
-        <vers num="7.1.1" />
-        <vers num="7.1.2" />
-        <vers num="7.2" />
-        <vers num="7.2(1)" />
-        <vers num="7.2(1.22)" />
-        <vers num="7.2(2)" />
-        <vers num="7.2(2.10)" />
-        <vers num="7.2(2.14)" />
-        <vers num="7.2(2.15)" />
-        <vers num="7.2(2.16)" />
-        <vers num="7.2(2.17)" />
-        <vers num="7.2(2.18)" />
-        <vers num="7.2(2.19)" />
-        <vers num="7.2(2.48)" />
-        <vers num="7.2(2.5)" />
-        <vers num="7.2(2.7)" />
-        <vers num="7.2(2.8)" />
-        <vers num="7.2(3)" />
-        <vers num="7.2(4)" />
-        <vers num="7.2(5)" />
-        <vers num="7.2.1" />
-        <vers num="7.2.2" />
-        <vers num="7.2.3" />
-        <vers num="7.2.4" />
-        <vers num="7.2.5" />
-        <vers num="8.0" />
-        <vers num="8.0(2)" />
-        <vers num="8.0(3)" />
-        <vers num="8.0(4)" />
-        <vers num="8.0(5)" />
-        <vers num="8.0.2" />
-        <vers num="8.0.3" />
-        <vers num="8.0.4" />
-        <vers num="8.0.5" />
-        <vers num="8.1" />
-        <vers num="8.2(1)" />
-        <vers num="8.2(2)" />
-        <vers num="8.2(3)" />
-        <vers num="8.2(3.9)" />
-        <vers num="8.2(4)" />
-        <vers num="8.2(4.1)" />
-        <vers num="8.2(4.4)" />
-        <vers num="8.2(5)" />
-        <vers num="8.2.1" />
-        <vers num="8.2.2" edition="interim" />
-        <vers num="8.2.3" />
-        <vers num="8.3(1)" />
-        <vers num="8.3(2)" />
-        <vers num="8.3.1" edition="interim" />
-        <vers num="8.3.2" />
-        <vers num="8.4" />
-        <vers num="8.4(1)" />
-        <vers num="8.4(1.11)" />
-        <vers num="8.4(2)" />
-        <vers num="8.4(2.11)" />
-        <vers num="8.5" />
-        <vers num="8.5(1)" />
-        <vers num="8.5(1.4)" />
-      </prod>
-      <prod vendor="cisco" name="firewall_services_module_software">
-        <vers num="3.1" />
-        <vers num="3.1(10)" />
-        <vers num="3.1(11)" />
-        <vers num="3.1(12)" />
-        <vers num="3.1(13)" />
-        <vers num="3.1(14)" />
-        <vers num="3.1(15)" />
-        <vers num="3.1(16)" />
-        <vers num="3.1(17)" />
-        <vers num="3.1(18)" />
-        <vers num="3.1(19)" />
-        <vers num="3.1(2)" />
-        <vers num="3.1(20)" />
-        <vers num="3.1(21)" />
-        <vers num="3.1(3)" />
-        <vers num="3.1(4)" />
-        <vers num="3.1(5)" />
-        <vers num="3.1(6)" />
-        <vers num="3.1(7)" />
-        <vers num="3.1(8)" />
-        <vers num="3.1(9)" />
-        <vers num="3.2" />
-        <vers num="3.2(1)" />
-        <vers num="3.2(10)" />
-        <vers num="3.2(11)" />
-        <vers num="3.2(12)" />
-        <vers num="3.2(13)" />
-        <vers num="3.2(14)" />
-        <vers num="3.2(15)" />
-        <vers num="3.2(16)" />
-        <vers num="3.2(17)" />
-        <vers num="3.2(18)" />
-        <vers num="3.2(19)" />
-        <vers num="3.2(2)" />
-        <vers num="3.2(20)" />
-        <vers num="3.2(21)" />
-        <vers num="3.2(22)" />
-        <vers num="3.2(3)" />
-        <vers num="3.2(4)" />
-        <vers num="3.2(5)" />
-        <vers num="3.2(6)" />
-        <vers num="3.2(7)" />
-        <vers num="3.2(8)" />
-        <vers num="3.2(9)" />
-        <vers num="4.0" />
-        <vers num="4.0(1)" />
-        <vers num="4.0(10)" />
-        <vers num="4.0(11)" />
-        <vers num="4.0(12)" />
-        <vers num="4.0(13)" />
-        <vers num="4.0(14)" />
-        <vers num="4.0(15)" />
-        <vers num="4.0(2)" />
-        <vers num="4.0(3)" />
-        <vers num="4.0(4)" />
-        <vers num="4.0(5)" />
-        <vers num="4.0(6)" />
-        <vers num="4.0(7)" />
-        <vers num="4.0(8)" />
-        <vers num="4.1" />
-        <vers num="4.1(1)" />
-        <vers num="4.1(2)" />
-        <vers num="4.1(3)" />
-        <vers num="4.1(4)" />
-        <vers num="4.1(5)" />
-        <vers num="4.1(6)" />
-        <vers num="4.1(7)" />
-      </prod>
-      <prod vendor="cisco" name="5500_series_adaptive_security_appliance">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6500">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6503-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6504-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6506-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6509-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6509-neb-a">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6509-v-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6513">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6513-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="firewall_services_module">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0358" published="2012-03-14" name="CVE-2012-0358" modified="2012-03-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 through 7.2 before 7.2(5.6), 8.0 before 8.0(5.26), 8.1 before 8.1(2.53), 8.2 before 8.2(5.18), 8.3 before 8.3(2.28), 8.2 before 8.4(2.16), and 8.6 before 8.6(1.1), allows remote attackers to execute arbitrary code via unspecified vectors, aka Bug ID CSCtr00165.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-asaclient" source="CISCO" adv="1">20120314 Cisco ASA 5500 Series Adaptive Security Appliance Clientless VPN ActiveX Control Remote Code Execution Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="adaptive_security_appliance_software">
-        <vers num="7.0" />
-        <vers num="7.0(0)" />
-        <vers num="7.0(1)" />
-        <vers num="7.0(2)" />
-        <vers num="7.0(4)" />
-        <vers num="7.0(5)" />
-        <vers num="7.0(5.2)" />
-        <vers num="7.0(6)" />
-        <vers num="7.0(6.7)" />
-        <vers num="7.0(7)" />
-        <vers num="7.0(8)" />
-        <vers num="7.0.1" />
-        <vers num="7.0.1.4" />
-        <vers num="7.0.2" />
-        <vers num="7.0.4" />
-        <vers num="7.0.4.3" />
-        <vers num="7.0.5" />
-        <vers num="7.0.6" />
-        <vers num="7.0.7" />
-        <vers num="7.0.8" edition="interim" />
-        <vers num="7.1" />
-        <vers num="7.1(2)" />
-        <vers num="7.1(2.27)" />
-        <vers num="7.1(2.48)" />
-        <vers num="7.1(2.49)" />
-        <vers num="7.1(2.5)" />
-        <vers num="7.1(5)" />
-        <vers num="7.1.1" />
-        <vers num="7.1.2" />
-        <vers num="7.2" />
-        <vers num="7.2(1)" />
-        <vers num="7.2(1.22)" />
-        <vers num="7.2(2)" />
-        <vers num="7.2(2.10)" />
-        <vers num="7.2(2.14)" />
-        <vers num="7.2(2.15)" />
-        <vers num="7.2(2.16)" />
-        <vers num="7.2(2.17)" />
-        <vers num="7.2(2.18)" />
-        <vers num="7.2(2.19)" />
-        <vers num="7.2(2.48)" />
-        <vers num="7.2(2.5)" />
-        <vers num="7.2(2.7)" />
-        <vers num="7.2(2.8)" />
-        <vers num="7.2(3)" />
-        <vers num="7.2(4)" />
-        <vers num="7.2(5)" />
-        <vers num="7.2.1" />
-        <vers num="7.2.2" />
-        <vers num="7.2.3" />
-        <vers num="7.2.4" />
-        <vers num="7.2.5" />
-        <vers num="8.0" />
-        <vers num="8.0(2)" />
-        <vers num="8.0(3)" />
-        <vers num="8.0(4)" />
-        <vers num="8.0(5)" />
-        <vers num="8.0.2" />
-        <vers num="8.0.3" />
-        <vers num="8.0.4" />
-        <vers num="8.0.5" />
-        <vers num="8.1" />
-        <vers num="8.2(1)" />
-        <vers num="8.2(2)" />
-        <vers num="8.2(3)" />
-        <vers num="8.2(3.9)" />
-        <vers num="8.2(4)" />
-        <vers num="8.2(4.1)" />
-        <vers num="8.2(4.4)" />
-        <vers num="8.2(5)" />
-        <vers num="8.2.1" />
-        <vers num="8.2.2" edition="interim" />
-        <vers num="8.2.3" />
-        <vers num="8.3(1)" />
-        <vers num="8.3(2)" />
-        <vers num="8.3.1" edition="interim" />
-        <vers num="8.3.2" />
-        <vers num="8.4" />
-        <vers num="8.4(1)" />
-        <vers num="8.4(1.11)" />
-        <vers num="8.4(2)" />
-        <vers num="8.4(2.11)" />
-        <vers num="8.5" />
-        <vers num="8.6" />
-        <vers num="8.6(1)" />
-      </prod>
-      <prod vendor="cisco" name="5500_series_adaptive_security_appliance">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0359" published="2012-02-29" name="CVE-2012-0359" modified="2012-03-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The Cisco Cius with software before 9.2(1) SR2 allows remote attackers to cause a denial of service (device crash or hang) via malformed network traffic, aka Bug ID CSCto71445.</descript>
-      <descript source="nvd">Per: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cius
-
-'Vulnerable Products
-The following products are affected by the vulnerability detailed in this advisory:
-
-    * Cius Wifi devices running Cius Software Version 9.2(1) SR1 and prior'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cius" source="CISCO" adv="1">20120229 Cisco Cius Denial of Service Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="cius_software">
-        <vers num="9.2" />
-        <vers num="9.2(1)" />
-        <vers prev="1" num="9.2(1)sr1" />
-        <vers num="9.2(2)" />
-        <vers num="9.2(2)at" />
-      </prod>
-      <prod vendor="cisco" name="cius">
-        <vers num="-" />
-        <vers num="7-at-k9" />
-        <vers num="7-k9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0361" published="2012-05-02" name="CVE-2012-0361" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The sccp-protocol component in Cisco IP Communicator (CIPC) 7.0 through 8.6 does not limit the rate of SCCP messages to Cisco Unified Communications Manager (CUCM), which allows remote attackers to cause a denial of service via vectors that trigger (1) on hook and (2) off hook messages, as demonstrated by a Plantronics headset, aka Bug ID CSCti40315.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/voice_ip_comm/cipc/8_5/english/release_notes/CIPC8x_RN.html" source="CONFIRM">http://www.cisco.com/en/US/docs/voice_ip_comm/cipc/8_5/english/release_notes/CIPC8x_RN.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ip_communicator">
-        <vers num="7.0" />
-        <vers num="7.0(1)" />
-        <vers num="7.0(2)" />
-        <vers num="7.0(3)" />
-        <vers num="7.0(4)" />
-        <vers num="7.0(5)" />
-        <vers num="7.0(6)" />
-        <vers num="8.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0362" published="2012-05-02" name="CVE-2012-0362" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The extended ACL functionality in Cisco IOS 12.2(58)SE2 and 15.0(1)SE discards all lines that end with a log or time keyword, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending network traffic, aka Bug ID CSCts01106.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://puck.nether.net/pipermail/cisco-nsp/2012-February/083517.html" source="MLIST">[cisco-nsp] 20120202 Ambiguous ACL </ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.2(58)ses" />
-        <vers num="15.0(1)se" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0363" published="2012-02-24" name="CVE-2012-0363" modified="2012-03-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">The web interface on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability," aka Bug ID CSCtt46871.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500" source="CISCO" patch="1" adv="1">20120223 Cisco Small Business SRP 500 Series Multiple Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="small_business_srp520-u_series_firmware">
-        <vers num="1.1.0" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp520_series_firmware">
-        <vers num="1.01.01" />
-        <vers num="1.01.09" />
-        <vers num="1.01.11" />
-        <vers num="1.01.19" />
-        <vers num="1.01.23" />
-        <vers prev="1" num="1.01.24" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp540_series_firmware">
-        <vers num="1.02.00.023" />
-        <vers prev="1" num="1.02.01" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp521w">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp521w-u">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp526w">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp526w-u">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp527w">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp527w-u">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp541w">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp546w">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp547w">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0364" published="2012-02-24" name="CVE-2012-0364" modified="2012-03-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:C/A:N)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allow remote attackers to replace the configuration file via an upload request to an unspecified URL, aka Bug ID CSCtw55495.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500" source="CISCO" patch="1" adv="1">20120223 Cisco Small Business SRP 500 Series Multiple Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="small_business_srp520-u_series_firmware">
-        <vers num="1.1.0" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp520_series_firmware">
-        <vers num="1.01.01" />
-        <vers num="1.01.09" />
-        <vers num="1.01.11" />
-        <vers num="1.01.19" />
-        <vers num="1.01.23" />
-        <vers prev="1" num="1.01.24" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp540_series_firmware">
-        <vers num="1.02.00.023" />
-        <vers prev="1" num="1.02.01" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp521w">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp521w-u">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp526w">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp526w-u">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp527w">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp527w-u">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp541w">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp546w">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp547w">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0365" published="2012-02-24" name="CVE-2012-0365" modified="2012-03-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in the Local TFTP file-upload application on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to upload software to arbitrary directories via unspecified vectors, aka Bug ID CSCtw56009.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500" source="CISCO" adv="1">20120223 Cisco Small Business SRP 500 Series Multiple Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="small_business_srp520-u_series_firmware">
-        <vers num="1.1.0" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp520_series_firmware">
-        <vers num="1.01.01" />
-        <vers num="1.01.09" />
-        <vers num="1.01.11" />
-        <vers num="1.01.19" />
-        <vers num="1.01.23" />
-        <vers prev="1" num="1.01.24" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp540_series_firmware">
-        <vers num="1.02.00.023" />
-        <vers prev="1" num="1.02.01" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp521w">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp521w-u">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp526w">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp526w-u">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp527w">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp527w-u">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp541w">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp546w">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="small_business_srp547w">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0366" published="2012-02-29" name="CVE-2012-0366" modified="2012-03-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cuc" source="CISCO" adv="1">20120229 Multiple Vulnerabilities in Cisco Unity Connection</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="unity_connection">
-        <vers num="1.1" />
-        <vers num="1.1(1)" />
-        <vers num="1.1(1)_es1" />
-        <vers num="1.1(1)_es12" />
-        <vers num="1.1(1)_sr1" />
-        <vers num="1.2" />
-        <vers num="1.2(1)" />
-        <vers num="1.2(1)_es65" />
-        <vers num="1.2(1)sr2" />
-        <vers num="2.0" />
-        <vers num="2.0(1)" />
-        <vers num="2.1" />
-        <vers num="2.1(1)" />
-        <vers num="2.1(2)" />
-        <vers num="2.1(3)" />
-        <vers num="2.1(3b)su1" />
-        <vers num="2.1(4)" />
-        <vers num="2.1(4)su1" />
-        <vers num="2.1(4a)" />
-        <vers num="2.1(4a)su2" />
-        <vers num="2.1(5)" />
-        <vers num="2.1(5)su1" />
-        <vers num="2.1(5)su2" />
-        <vers num="2.1(5)su3" />
-        <vers num="6.1(3b)su1" />
-        <vers num="7.0" />
-        <vers num="7.0(2)" />
-        <vers num="7.0(2a)su2" />
-        <vers num="7.0(2a)su3" />
-        <vers num="7.1" />
-        <vers num="7.1(2)" />
-        <vers num="7.1(2a)" />
-        <vers num="7.1(2a)su1" />
-        <vers num="7.1(2b)" />
-        <vers num="7.1(2b)su1" />
-        <vers num="7.1(3)" />
-        <vers num="7.1(3a)" />
-        <vers num="7.1(3a)su1" />
-        <vers num="7.1(3a)su1a" />
-        <vers num="7.1(3b)" />
-        <vers prev="1" num="7.1(3b)su1" />
-        <vers num="7.1(5)" />
-        <vers num="7.1(5)su1a" />
-        <vers num="7.1(5a)" />
-        <vers num="7.1(5b)" />
-        <vers num="7.1(5b)su2" />
-        <vers num="7.1(5b)su3" />
-        <vers num="7.1(5b)su4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0367" published="2012-02-29" name="CVE-2012-0367" modified="2012-03-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Cisco Unity Connection before 7.1.5b(Su5), 8.0 and 8.5 before 8.5.1(Su3), and 8.6 before 8.6.2 allows remote attackers to cause a denial of service (services crash) via a series of crafted TCP segments, aka Bug ID CSCtq67899.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cuc" source="CISCO" adv="1">20120229 Multiple Vulnerabilities in Cisco Unity Connection</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="unity_connection">
-        <vers num="1.1" />
-        <vers num="1.1(1)" />
-        <vers num="1.1(1)_es1" />
-        <vers num="1.1(1)_es12" />
-        <vers num="1.1(1)_sr1" />
-        <vers num="1.2" />
-        <vers num="1.2(1)" />
-        <vers num="1.2(1)_es65" />
-        <vers num="1.2(1)sr2" />
-        <vers num="2.0" />
-        <vers num="2.0(1)" />
-        <vers num="2.1" />
-        <vers num="2.1(1)" />
-        <vers num="2.1(2)" />
-        <vers num="2.1(3)" />
-        <vers num="2.1(3b)su1" />
-        <vers num="2.1(4)" />
-        <vers num="2.1(4)su1" />
-        <vers num="2.1(4a)" />
-        <vers num="2.1(4a)su2" />
-        <vers num="2.1(5)" />
-        <vers num="2.1(5)su1" />
-        <vers num="2.1(5)su2" />
-        <vers num="2.1(5)su3" />
-        <vers num="6.1(3b)su1" />
-        <vers num="7.0" />
-        <vers num="7.0(2)" />
-        <vers num="7.0(2a)su2" />
-        <vers num="7.0(2a)su3" />
-        <vers num="7.1" />
-        <vers num="7.1(2)" />
-        <vers num="7.1(2a)" />
-        <vers num="7.1(2a)su1" />
-        <vers num="7.1(2b)" />
-        <vers num="7.1(2b)su1" />
-        <vers num="7.1(3)" />
-        <vers num="7.1(3a)" />
-        <vers num="7.1(3a)su1" />
-        <vers num="7.1(3a)su1a" />
-        <vers num="7.1(3b)" />
-        <vers num="7.1(3b)su1" />
-        <vers num="7.1(3b)su2" />
-        <vers num="7.1(5)" />
-        <vers num="7.1(5)su1a" />
-        <vers num="7.1(5a)" />
-        <vers num="7.1(5b)" />
-        <vers num="7.1(5b)su2" />
-        <vers num="7.1(5b)su3" />
-        <vers prev="1" num="7.1(5b)su4" />
-        <vers num="8.0" />
-        <vers num="8.0(2c)" />
-        <vers num="8.0(2c)su1" />
-        <vers num="8.0(3)" />
-        <vers num="8.0(3a)" />
-        <vers num="8.0(3a)su1" />
-        <vers num="8.0(3a)su2" />
-        <vers num="8.0(3a)su3" />
-        <vers num="8.5" />
-        <vers num="8.5(1)" />
-        <vers num="8.5(1)su1" />
-        <vers num="8.5(1)su2" />
-        <vers num="8.6" />
-        <vers num="8.6(1a)" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0368" published="2012-02-29" name="CVE-2012-0368" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request, aka Bug ID CSCts81997.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc" source="CISCO" adv="1">20120229 Multiple Vulnerabilities in Cisco Wireless LAN Controllers</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="2000_wireless_lan_controller">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="2100_wireless_lan_controller">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="2106_wireless_lan_controller">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="2112_wireless_lan_controller">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="2125_wireless_lan_controller">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="2500_wireless_lan_controller">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="2504_wireless_lan_controller">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="4100_wireless_lan_controller">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="4400_wireless_lan_controller">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="4402_wireless_lan_controller">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="4404_wireless_lan_controller">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="5508_wireless_controller">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="wireless_lan_controller_software">
-        <vers num="4.0" />
-        <vers num="4.0.108" />
-        <vers num="4.0.155.0" />
-        <vers num="4.0.155.5" />
-        <vers num="4.0.179.11" />
-        <vers num="4.0.179.8" />
-        <vers num="4.0.196" />
-        <vers num="4.0.206.0" />
-        <vers num="4.0.217.0" />
-        <vers num="4.0.219.0" />
-        <vers num="4.1" />
-        <vers num="4.1.171.0" />
-        <vers num="4.1.181.0" />
-        <vers num="4.1.185.0" />
-        <vers num="4.1m" />
-        <vers num="4.2" />
-        <vers num="4.2.112.0" />
-        <vers num="4.2.117.0" />
-        <vers num="4.2.130.0" />
-        <vers num="4.2.173.0" />
-        <vers num="4.2.174.0" />
-        <vers num="4.2.176.0" />
-        <vers num="4.2.182.0" />
-        <vers num="4.2.61.0" />
-        <vers num="4.2.99.0" />
-        <vers num="4.2m" />
-        <vers num="5.0" />
-        <vers num="5.0.148.0" />
-        <vers num="5.0.148.2" />
-        <vers num="5.1" />
-        <vers num="5.1.151.0" />
-        <vers num="5.1.152.0" />
-        <vers num="5.1.160.0" />
-        <vers num="5.2" />
-        <vers num="5.2.157.0" />
-        <vers num="5.2.169.0" />
-        <vers num="6.0" />
-        <vers num="6.0.182.0" />
-        <vers num="6.0.188.0" />
-        <vers num="6.0.196.0" />
-        <vers num="6.0.199.0" />
-        <vers num="6.0.199.4" />
-        <vers num="7.0" />
-        <vers num="7.0.98.0" />
-        <vers num="7.1" />
-        <vers num="7.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0369" published="2012-02-29" name="CVE-2012-0369" modified="2012-03-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Cisco Wireless LAN Controller (WLC) devices with software 6.0 and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (device reload) via a sequence of IPv6 packets, aka Bug ID CSCtt07949.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc" source="CISCO" adv="1">20120229 Multiple Vulnerabilities in Cisco Wireless LAN Controllers</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="2000_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2100_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2106_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2112_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2125_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2500_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2504_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="4100_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="4400_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="4402_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="4404_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="5508_wireless_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="wireless_lan_controller_software">
-        <vers num="6.0" />
-        <vers num="6.0.182.0" />
-        <vers num="6.0.188.0" />
-        <vers num="6.0.196.0" />
-        <vers num="6.0.199.0" />
-        <vers num="6.0.199.4" />
-        <vers num="7.0" />
-        <vers num="7.0.98.0" />
-        <vers num="7.1" />
-        <vers num="7.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0370" published="2012-02-29" name="CVE-2012-0370" modified="2012-03-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0, when WebAuth is enabled, allow remote attackers to cause a denial of service (device reload) via a sequence of (1) HTTP or (2) HTTPS packets, aka Bug ID CSCtt47435.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc" source="CISCO" adv="1">20120229 Multiple Vulnerabilities in Cisco Wireless LAN Controllers</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="2000_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2100_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2106_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2112_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2125_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2500_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2504_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="4100_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="4400_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="4402_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="4404_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="5508_wireless_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="wireless_lan_controller_software">
-        <vers num="4.0" />
-        <vers num="4.0.108" />
-        <vers num="4.0.155.0" />
-        <vers num="4.0.155.5" />
-        <vers num="4.0.179.11" />
-        <vers num="4.0.179.8" />
-        <vers num="4.0.196" />
-        <vers num="4.0.206.0" />
-        <vers num="4.0.217.0" />
-        <vers num="4.0.219.0" />
-        <vers num="4.1" />
-        <vers num="4.1.171.0" />
-        <vers num="4.1.181.0" />
-        <vers num="4.1.185.0" />
-        <vers num="4.1m" />
-        <vers num="4.2" />
-        <vers num="4.2.112.0" />
-        <vers num="4.2.117.0" />
-        <vers num="4.2.130.0" />
-        <vers num="4.2.173.0" />
-        <vers num="4.2.174.0" />
-        <vers num="4.2.176.0" />
-        <vers num="4.2.182.0" />
-        <vers num="4.2.61.0" />
-        <vers num="4.2.99.0" />
-        <vers num="4.2m" />
-        <vers num="5.0" />
-        <vers num="5.0.148.0" />
-        <vers num="5.0.148.2" />
-        <vers num="5.1" />
-        <vers num="5.1.151.0" />
-        <vers num="5.1.152.0" />
-        <vers num="5.1.160.0" />
-        <vers num="5.2" />
-        <vers num="5.2.157.0" />
-        <vers num="5.2.169.0" />
-        <vers num="6.0" />
-        <vers num="6.0.182.0" />
-        <vers num="6.0.188.0" />
-        <vers num="6.0.196.0" />
-        <vers num="6.0.199.0" />
-        <vers num="6.0.199.4" />
-        <vers num="7.0" />
-        <vers num="7.0.98.0" />
-        <vers num="7.1" />
-        <vers num="7.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0371" published="2012-02-29" name="CVE-2012-0371" modified="2012-03-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka Bug ID CSCtu56709.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc" source="CISCO" adv="1">20120229 Multiple Vulnerabilities in Cisco Wireless LAN Controllers</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="2000_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2100_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2106_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2112_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2125_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2500_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="2504_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="4100_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="4400_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="4402_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="4404_wireless_lan_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="5508_wireless_controller">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="wireless_lan_controller_software">
-        <vers num="4.0" />
-        <vers num="4.0.108" />
-        <vers num="4.0.155.0" />
-        <vers num="4.0.155.5" />
-        <vers num="4.0.179.11" />
-        <vers num="4.0.179.8" />
-        <vers num="4.0.196" />
-        <vers num="4.0.206.0" />
-        <vers num="4.0.217.0" />
-        <vers num="4.0.219.0" />
-        <vers num="4.1" />
-        <vers num="4.1.171.0" />
-        <vers num="4.1.181.0" />
-        <vers num="4.1.185.0" />
-        <vers num="4.1m" />
-        <vers num="4.2" />
-        <vers num="4.2.112.0" />
-        <vers num="4.2.117.0" />
-        <vers num="4.2.130.0" />
-        <vers num="4.2.173.0" />
-        <vers num="4.2.174.0" />
-        <vers num="4.2.176.0" />
-        <vers num="4.2.182.0" />
-        <vers num="4.2.61.0" />
-        <vers num="4.2.99.0" />
-        <vers num="4.2m" />
-        <vers num="5.0" />
-        <vers num="5.0.148.0" />
-        <vers num="5.0.148.2" />
-        <vers num="5.1" />
-        <vers num="5.1.151.0" />
-        <vers num="5.1.152.0" />
-        <vers num="5.1.160.0" />
-        <vers num="5.2" />
-        <vers num="5.2.157.0" />
-        <vers num="5.2.169.0" />
-        <vers num="6.0" />
-        <vers num="6.0.182.0" />
-        <vers num="6.0.188.0" />
-        <vers num="6.0.196.0" />
-        <vers num="6.0.199.0" />
-        <vers num="6.0.199.4" />
-        <vers num="7.0" />
-        <vers num="7.0.98.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0376" published="2012-05-03" name="CVE-2012-0376" modified="2012-05-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The voice-sipstack component in Cisco Unified Communications Manager (CUCM) 8.5 allows remote attackers to cause a denial of service (core dump) via vectors involving SIP messages that arrive after an upgrade, aka Bug ID CSCtj87367.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/voice_ip_comm/cucmbe/rel_notes/8_5_1/cucmbe-rel_notes-851.html" source="CONFIRM">http://www.cisco.com/en/US/docs/voice_ip_comm/cucmbe/rel_notes/8_5_1/cucmbe-rel_notes-851.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="unified_communications_manager">
-        <vers num="8.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0378" published="2012-05-03" name="CVE-2012-0378" modified="2012-05-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allow remote attackers to cause a denial of service (connection limit exceeded) by triggering a large number of stale connections that result in an incorrect value for an MPF connection count, aka Bug ID CSCtv19854.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/web/software/280775065/89203/ASA-843-Interim-Release-Notes.html" source="CONFIRM">http://www.cisco.com/web/software/280775065/89203/ASA-843-Interim-Release-Notes.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="adaptive_security_appliance_software">
-        <vers num="8.0" />
-        <vers num="8.0(2)" />
-        <vers num="8.0(3)" />
-        <vers num="8.0(4)" />
-        <vers num="8.0(5)" />
-        <vers num="8.0.2" />
-        <vers num="8.0.3" />
-        <vers num="8.0.4" />
-        <vers num="8.0.5" />
-        <vers num="8.1" />
-        <vers num="8.2(1)" />
-        <vers num="8.2(2)" />
-        <vers num="8.2(3)" />
-        <vers num="8.2(3.9)" />
-        <vers num="8.2(4)" />
-        <vers num="8.2(4.1)" />
-        <vers num="8.2(4.4)" />
-        <vers num="8.2(5)" />
-        <vers num="8.2.1" />
-        <vers num="8.2.2" edition="interim" />
-        <vers num="8.2.3" />
-        <vers num="8.3(1)" />
-        <vers num="8.3(2)" />
-        <vers num="8.3.1" edition="interim" />
-        <vers num="8.3.2" />
-        <vers num="8.4" />
-        <vers num="8.4(1)" />
-        <vers num="8.4(1.11)" />
-        <vers num="8.4(2)" />
-        <vers num="8.4(2.11)" />
-      </prod>
-      <prod vendor="cisco" name="5500_series_adaptive_security_appliance">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0381" published="2012-03-29" name="CVE-2012-0381" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service (device reload) by sending IKE UDP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCts38429.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74427" source="XF">ciscoios-ike-packet-dos(74427)</ref>
-      <ref url="http://www.securityfocus.com/bid/52757" source="BID">52757</ref>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-ike" source="CISCO" adv="1">20120328 Cisco IOS Internet Key Exchange Vulnerability</ref>
-      <ref url="http://secunia.com/advisories/48607" source="SECUNIA">48607</ref>
-      <ref url="http://osvdb.org/80700" source="OSVDB">80700</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.2" />
-        <vers num="12.2(1)" />
-        <vers num="12.2(1)dx" />
-        <vers num="12.2(1)s" />
-        <vers num="12.2(1)t" />
-        <vers num="12.2(1)xa" />
-        <vers num="12.2(1)xd" />
-        <vers num="12.2(1)xd1" />
-        <vers num="12.2(1)xd3" />
-        <vers num="12.2(1)xd4" />
-        <vers num="12.2(1)xe" />
-        <vers num="12.2(1)xe2" />
-        <vers num="12.2(1)xe3" />
-        <vers num="12.2(1)xh" />
-        <vers num="12.2(1)xq" />
-        <vers num="12.2(1)xs" />
-        <vers num="12.2(1)xs1" />
-        <vers num="12.2(1.1)" />
-        <vers num="12.2(1.1)pi" />
-        <vers num="12.2(1.4)s" />
-        <vers num="12.2(10)da2" />
-        <vers num="12.2(10)da4" />
-        <vers num="12.2(10.5)s" />
-        <vers num="12.2(10g)" />
-        <vers num="12.2(11)bc3c" />
-        <vers num="12.2(11)ja" />
-        <vers num="12.2(11)ja1" />
-        <vers num="12.2(11)t" />
-        <vers num="12.2(11)t2" />
-        <vers num="12.2(11)t3" />
-        <vers num="12.2(11)t8" />
-        <vers num="12.2(11)t9" />
-        <vers num="12.2(11)yp1" />
-        <vers num="12.2(11)yu" />
-        <vers num="12.2(11)yv" />
-        <vers num="12.2(11)yx1" />
-        <vers num="12.2(11)yz2" />
-        <vers num="12.2(12)" />
-        <vers num="12.2(12)da3" />
-        <vers num="12.2(12)da8" />
-        <vers num="12.2(12)da9" />
-        <vers num="12.2(12.02)s" />
-        <vers num="12.2(12.02)t" />
-        <vers num="12.2(12.05)" />
-        <vers num="12.2(12.05)s" />
-        <vers num="12.2(12.05)t" />
-        <vers num="12.2(12b)" />
-        <vers num="12.2(12c)" />
-        <vers num="12.2(12g)" />
-        <vers num="12.2(12h)" />
-        <vers num="12.2(12i)" />
-        <vers num="12.2(12m)" />
-        <vers num="12.2(13)" />
-        <vers num="12.2(13)ja1" />
-        <vers num="12.2(13)mc1" />
-        <vers num="12.2(13)t" />
-        <vers num="12.2(13)t1" />
-        <vers num="12.2(13)t14" />
-        <vers num="12.2(13)t16" />
-        <vers num="12.2(13)t9" />
-        <vers num="12.2(13)zc" />
-        <vers num="12.2(13)zd" />
-        <vers num="12.2(13)zd3" />
-        <vers num="12.2(13)zd4" />
-        <vers num="12.2(13)ze" />
-        <vers num="12.2(13)zf" />
-        <vers num="12.2(13)zg" />
-        <vers num="12.2(13)zh" />
-        <vers num="12.2(13)zh3" />
-        <vers num="12.2(13)zh8" />
-        <vers num="12.2(13)zj" />
-        <vers num="12.2(13)zk" />
-        <vers num="12.2(13)zl" />
-        <vers num="12.2(13.03)b" />
-        <vers num="12.2(13a)" />
-        <vers num="12.2(13e)" />
-        <vers num="12.2(14)s" />
-        <vers num="12.2(14)s13" />
-        <vers num="12.2(14)s14" />
-        <vers num="12.2(14)s15" />
-        <vers num="12.2(14)su2" />
-        <vers num="12.2(14)sx1" />
-        <vers num="12.2(14)sy" />
-        <vers num="12.2(14)sy03" />
-        <vers num="12.2(14)sy1" />
-        <vers num="12.2(14)sz" />
-        <vers num="12.2(14)sz1" />
-        <vers num="12.2(14)sz2" />
-        <vers num="12.2(14)za" />
-        <vers num="12.2(14)za2" />
-        <vers num="12.2(14)za8" />
-        <vers num="12.2(14.5)" />
-        <vers num="12.2(14.5)t" />
-        <vers num="12.2(15)b" />
-        <vers num="12.2(15)bc" />
-        <vers num="12.2(15)bc1" />
-        <vers num="12.2(15)bc1f" />
-        <vers num="12.2(15)bc2f" />
-        <vers num="12.2(15)bc2h" />
-        <vers num="12.2(15)bc2i" />
-        <vers num="12.2(15)bx" />
-        <vers num="12.2(15)bz" />
-        <vers num="12.2(15)cx" />
-        <vers num="12.2(15)cz3" />
-        <vers num="12.2(15)jk2" />
-        <vers num="12.2(15)jk4" />
-        <vers num="12.2(15)jk5" />
-        <vers num="12.2(15)mc1" />
-        <vers num="12.2(15)mc2c" />
-        <vers num="12.2(15)mc2e" />
-        <vers num="12.2(15)sl1" />
-        <vers num="12.2(15)t" />
-        <vers num="12.2(15)t15" />
-        <vers num="12.2(15)t16" />
-        <vers num="12.2(15)t17" />
-        <vers num="12.2(15)t5" />
-        <vers num="12.2(15)t7" />
-        <vers num="12.2(15)t8" />
-        <vers num="12.2(15)t9" />
-        <vers num="12.2(15)xr" />
-        <vers num="12.2(15)xr2" />
-        <vers num="12.2(15)ys" />
-        <vers num="12.2(15)ys_1.2(1)" />
-        <vers num="12.2(15)zj" />
-        <vers num="12.2(15)zj1" />
-        <vers num="12.2(15)zj2" />
-        <vers num="12.2(15)zj3" />
-        <vers num="12.2(15)zk" />
-        <vers num="12.2(15)zl" />
-        <vers num="12.2(15)zl1" />
-        <vers num="12.2(15)zn" />
-        <vers num="12.2(15)zo" />
-        <vers num="12.2(15.1)s" />
-        <vers num="12.2(16)b" />
-        <vers num="12.2(16)b1" />
-        <vers num="12.2(16)bx" />
-        <vers num="12.2(16.1)b" />
-        <vers num="12.2(16.5)s" />
-        <vers num="12.2(16f)" />
-        <vers num="12.2(17)" />
-        <vers num="12.2(17)a" />
-        <vers num="12.2(17)zd3" />
-        <vers num="12.2(17a)" />
-        <vers num="12.2(17a)sxa" />
-        <vers num="12.2(17b)sxa" />
-        <vers num="12.2(17d)" />
-        <vers num="12.2(17d)sx" />
-        <vers num="12.2(17d)sxb" />
-        <vers num="12.2(17d)sxb10" />
-        <vers num="12.2(17d)sxb7" />
-        <vers num="12.2(17d)sxb8" />
-        <vers num="12.2(17f)" />
-        <vers num="12.2(18)ew" />
-        <vers num="12.2(18)ew2" />
-        <vers num="12.2(18)ew3" />
-        <vers num="12.2(18)ew5" />
-        <vers num="12.2(18)ewa" />
-        <vers num="12.2(18)s" />
-        <vers num="12.2(18)s10" />
-        <vers num="12.2(18)s6" />
-        <vers num="12.2(18)s8" />
-        <vers num="12.2(18)s9" />
-        <vers num="12.2(18)se" />
-        <vers num="12.2(18)so4" />
-        <vers num="12.2(18)sv" />
-        <vers num="12.2(18)sv3" />
-        <vers num="12.2(18)sw" />
-        <vers num="12.2(18)sxd1" />
-        <vers num="12.2(18)sxd4" />
-        <vers num="12.2(18)sxd5" />
-        <vers num="12.2(18)sxd6" />
-        <vers num="12.2(18)sxd7" />
-        <vers num="12.2(18)sxe" />
-        <vers num="12.2(18)sxe1" />
-        <vers num="12.2(18)sxe3" />
-        <vers num="12.2(18)sxf" />
-        <vers num="12.2(18.2)" />
-        <vers num="12.2(19)" />
-        <vers num="12.2(19)b" />
-        <vers num="12.2(1b)" />
-        <vers num="12.2(1b)da1" />
-        <vers num="12.2(1d)" />
-        <vers num="12.2(2)b" />
-        <vers num="12.2(2)bx" />
-        <vers num="12.2(2)by" />
-        <vers num="12.2(2)by2" />
-        <vers num="12.2(2)dd3" />
-        <vers num="12.2(2)t" />
-        <vers num="12.2(2)t1" />
-        <vers num="12.2(2)t4" />
-        <vers num="12.2(2)xa" />
-        <vers num="12.2(2)xa1" />
-        <vers num="12.2(2)xa5" />
-        <vers num="12.2(2)xb" />
-        <vers num="12.2(2)xb11" />
-        <vers num="12.2(2)xb14" />
-        <vers num="12.2(2)xb15" />
-        <vers num="12.2(2)xb3" />
-        <vers num="12.2(2)xb4" />
-        <vers num="12.2(2)xc1" />
-        <vers num="12.2(2)xf" />
-        <vers num="12.2(2)xg" />
-        <vers num="12.2(2)xh" />
-        <vers num="12.2(2)xh2" />
-        <vers num="12.2(2)xh3" />
-        <vers num="12.2(2)xi" />
-        <vers num="12.2(2)xi1" />
-        <vers num="12.2(2)xi2" />
-        <vers num="12.2(2)xj" />
-        <vers num="12.2(2)xj1" />
-        <vers num="12.2(2)xk" />
-        <vers num="12.2(2)xk2" />
-        <vers num="12.2(2)xn" />
-        <vers num="12.2(2)xr" />
-        <vers num="12.2(2)xt" />
-        <vers num="12.2(2)xt3" />
-        <vers num="12.2(2)xu" />
-        <vers num="12.2(2)xu2" />
-        <vers num="12.2(2)yc" />
-        <vers num="12.2(2.2)t" />
-        <vers num="12.2(20)eu" />
-        <vers num="12.2(20)eu1" />
-        <vers num="12.2(20)eu2" />
-        <vers num="12.2(20)ew" />
-        <vers num="12.2(20)ew2" />
-        <vers num="12.2(20)ew3" />
-        <vers num="12.2(20)ewa" />
-        <vers num="12.2(20)ewa2" />
-        <vers num="12.2(20)ewa3" />
-        <vers num="12.2(20)s" />
-        <vers num="12.2(20)s1" />
-        <vers num="12.2(20)s2" />
-        <vers num="12.2(20)s4" />
-        <vers num="12.2(20)s7" />
-        <vers num="12.2(20)s8" />
-        <vers num="12.2(20)s9" />
-        <vers num="12.2(20)se3" />
-        <vers num="12.2(21)" />
-        <vers num="12.2(21a)" />
-        <vers num="12.2(21b)" />
-        <vers num="12.2(22)ea6" />
-        <vers num="12.2(22)s" />
-        <vers num="12.2(22)s2" />
-        <vers num="12.2(22)sv1" />
-        <vers num="12.2(23)" />
-        <vers num="12.2(23)sv1" />
-        <vers num="12.2(23)sw" />
-        <vers num="12.2(23.6)" />
-        <vers num="12.2(23a)" />
-        <vers num="12.2(23f)" />
-        <vers num="12.2(24)" />
-        <vers num="12.2(24)sv" />
-        <vers num="12.2(24)sv1" />
-        <vers num="12.2(25)ewa" />
-        <vers num="12.2(25)ewa1" />
-        <vers num="12.2(25)ewa3" />
-        <vers num="12.2(25)ewa4" />
-        <vers num="12.2(25)ex" />
-        <vers num="12.2(25)ey" />
-        <vers num="12.2(25)ey2" />
-        <vers num="12.2(25)ey3" />
-        <vers num="12.2(25)ez" />
-        <vers num="12.2(25)ez1" />
-        <vers num="12.2(25)fx" />
-        <vers num="12.2(25)fy" />
-        <vers num="12.2(25)s" />
-        <vers num="12.2(25)s1" />
-        <vers num="12.2(25)s3" />
-        <vers num="12.2(25)s4" />
-        <vers num="12.2(25)s6" />
-        <vers num="12.2(25)se" />
-        <vers num="12.2(25)seb" />
-        <vers num="12.2(25)seb2" />
-        <vers num="12.2(25)seb3" />
-        <vers num="12.2(25)seb4" />
-        <vers num="12.2(25)sec1" />
-        <vers num="12.2(25)sec2" />
-        <vers num="12.2(25)sed" />
-        <vers num="12.2(25)sg" />
-        <vers num="12.2(25)sv2" />
-        <vers num="12.2(25)sw" />
-        <vers num="12.2(25)sw3a" />
-        <vers num="12.2(25)sw4" />
-        <vers num="12.2(25)sw4a" />
-        <vers num="12.2(26)sv" />
-        <vers num="12.2(26)sv1" />
-        <vers num="12.2(26b)" />
-        <vers num="12.2(27)sbc" />
-        <vers num="12.2(27)sv1" />
-        <vers num="12.2(27b)" />
-        <vers num="12.2(28)" />
-        <vers num="12.2(28c)" />
-        <vers num="12.2(29a)" />
-        <vers num="12.2(3)" />
-        <vers num="12.2(3.4)bp" />
-        <vers num="12.2(30)s1" />
-        <vers num="12.2(31)" />
-        <vers num="12.2(3d)" />
-        <vers num="12.2(4)" />
-        <vers num="12.2(4)b" />
-        <vers num="12.2(4)b1" />
-        <vers num="12.2(4)b2" />
-        <vers num="12.2(4)b3" />
-        <vers num="12.2(4)b4" />
-        <vers num="12.2(4)bc1" />
-        <vers num="12.2(4)bc1a" />
-        <vers num="12.2(4)bx" />
-        <vers num="12.2(4)ja" />
-        <vers num="12.2(4)ja1" />
-        <vers num="12.2(4)mb12" />
-        <vers num="12.2(4)mb13b" />
-        <vers num="12.2(4)mb13c" />
-        <vers num="12.2(4)mb3" />
-        <vers num="12.2(4)mx" />
-        <vers num="12.2(4)mx1" />
-        <vers num="12.2(4)t" />
-        <vers num="12.2(4)t1" />
-        <vers num="12.2(4)t3" />
-        <vers num="12.2(4)t6" />
-        <vers num="12.2(4)xl" />
-        <vers num="12.2(4)xl4" />
-        <vers num="12.2(4)xm" />
-        <vers num="12.2(4)xm2" />
-        <vers num="12.2(4)xr" />
-        <vers num="12.2(4)xw" />
-        <vers num="12.2(4)xw1" />
-        <vers num="12.2(4)ya" />
-        <vers num="12.2(4)ya1" />
-        <vers num="12.2(4)ya10" />
-        <vers num="12.2(4)ya11" />
-        <vers num="12.2(4)ya7" />
-        <vers num="12.2(4)ya8" />
-        <vers num="12.2(4)ya9" />
-        <vers num="12.2(4)yb" />
-        <vers num="12.2(5)" />
-        <vers num="12.2(5)ca1" />
-        <vers num="12.2(5d)" />
-        <vers num="12.2(6.8)t0a" />
-        <vers num="12.2(6.8)t1a" />
-        <vers num="12.2(6.8a)" />
-        <vers num="12.2(6c)" />
-        <vers num="12.2(7)" />
-        <vers num="12.2(7)da" />
-        <vers num="12.2(7.4)s" />
-        <vers num="12.2(7a)" />
-        <vers num="12.2(7b)" />
-        <vers num="12.2(7c)" />
-        <vers num="12.2(8)bc1" />
-        <vers num="12.2(8)ja" />
-        <vers num="12.2(8)t" />
-        <vers num="12.2(8)t10" />
-        <vers num="12.2(8)tpc10a" />
-        <vers num="12.2(8)yd" />
-        <vers num="12.2(8)yw2" />
-        <vers num="12.2(8)yw3" />
-        <vers num="12.2(8)yy" />
-        <vers num="12.2(8)yy3" />
-        <vers num="12.2(8)zb7" />
-        <vers num="12.2(9)s" />
-        <vers num="12.2(9.4)da" />
-        <vers num="12.2b" />
-        <vers num="12.2bc" />
-        <vers num="12.2bw" />
-        <vers num="12.2bx" />
-        <vers num="12.2by" />
-        <vers num="12.2bz" />
-        <vers num="12.2ca" />
-        <vers num="12.2cx" />
-        <vers num="12.2cy" />
-        <vers num="12.2cz" />
-        <vers num="12.2da" />
-        <vers num="12.2dd" />
-        <vers num="12.2dx" />
-        <vers num="12.2e" />
-        <vers num="12.2eu" />
-        <vers num="12.2ew" />
-        <vers num="12.2ewa" />
-        <vers num="12.2ex" />
-        <vers num="12.2ey" />
-        <vers num="12.2ez" />
-        <vers num="12.2f" />
-        <vers num="12.2fx" />
-        <vers num="12.2fy" />
-        <vers num="12.2ja" />
-        <vers num="12.2jk" />
-        <vers num="12.2jx" />
-        <vers num="12.2mb" />
-        <vers num="12.2mc" />
-        <vers num="12.2mx" />
-        <vers num="12.2n" />
-        <vers num="12.2pb" />
-        <vers num="12.2pi" />
-        <vers num="12.2s" />
-        <vers num="12.2sa" />
-        <vers num="12.2sbc" />
-        <vers num="12.2se" />
-        <vers num="12.2sea" />
-        <vers num="12.2seb" />
-        <vers num="12.2sec" />
-        <vers num="12.2sg" />
-        <vers num="12.2sh" />
-        <vers num="12.2so" />
-        <vers num="12.2su" />
-        <vers num="12.2sv" />
-        <vers num="12.2sw" />
-        <vers num="12.2sx" />
-        <vers num="12.2sxa" />
-        <vers num="12.2sxb" />
-        <vers num="12.2sxd" />
-        <vers num="12.2sxe" />
-        <vers num="12.2sxf" />
-        <vers num="12.2sy" />
-        <vers num="12.2sz" />
-        <vers num="12.2t" />
-        <vers num="12.2tpc" />
-        <vers num="12.2x" />
-        <vers num="12.2xa" />
-        <vers num="12.2xb" />
-        <vers num="12.2xc" />
-        <vers num="12.2xd" />
-        <vers num="12.2xe" />
-        <vers num="12.2xf" />
-        <vers num="12.2xg" />
-        <vers num="12.2xh" />
-        <vers num="12.2xi" />
-        <vers num="12.2xj" />
-        <vers num="12.2xk" />
-        <vers num="12.2xl" />
-        <vers num="12.2xm" />
-        <vers num="12.2xn" />
-        <vers num="12.2xq" />
-        <vers num="12.2xr" />
-        <vers num="12.2xs" />
-        <vers num="12.2xt" />
-        <vers num="12.2xu" />
-        <vers num="12.2xv" />
-        <vers num="12.2xw" />
-        <vers num="12.2xz" />
-        <vers num="12.2ya" />
-        <vers num="12.2yb" />
-        <vers num="12.2yc" />
-        <vers num="12.2yd" />
-        <vers num="12.2ye" />
-        <vers num="12.2yf" />
-        <vers num="12.2yg" />
-        <vers num="12.2yh" />
-        <vers num="12.2yj" />
-        <vers num="12.2yk" />
-        <vers num="12.2yl" />
-        <vers num="12.2ym" />
-        <vers num="12.2yn" />
-        <vers num="12.2yo" />
-        <vers num="12.2yp" />
-        <vers num="12.2yq" />
-        <vers num="12.2yr" />
-        <vers num="12.2ys" />
-        <vers num="12.2yt" />
-        <vers num="12.2yu" />
-        <vers num="12.2yv" />
-        <vers num="12.2yw" />
-        <vers num="12.2yx" />
-        <vers num="12.2yy" />
-        <vers num="12.2yz" />
-        <vers num="12.2za" />
-        <vers num="12.2zb" />
-        <vers num="12.2zd" />
-        <vers num="12.2ze" />
-        <vers num="12.2zf" />
-        <vers num="12.2zg" />
-        <vers num="12.2zh" />
-        <vers num="12.2zi" />
-        <vers num="12.2zj" />
-        <vers num="12.2zk" />
-        <vers num="12.2zl" />
-        <vers num="12.2zm" />
-        <vers num="12.2zn" />
-        <vers num="12.2zo" />
-        <vers num="12.2zp" />
-        <vers num="12.2zq" />
-        <vers num="12.2zu" />
-        <vers num="12.2zx" />
-        <vers num="12.2zy" />
-        <vers num="12.2zya" />
-        <vers num="12.3" />
-        <vers num="12.3(10)" />
-        <vers num="12.3(10c)" />
-        <vers num="12.3(10d)" />
-        <vers num="12.3(10e)" />
-        <vers num="12.3(11)" />
-        <vers num="12.3(11)t" />
-        <vers num="12.3(11)t4" />
-        <vers num="12.3(11)t5" />
-        <vers num="12.3(11)t6" />
-        <vers num="12.3(11)t8" />
-        <vers num="12.3(11)t9" />
-        <vers num="12.3(11)xl" />
-        <vers num="12.3(11)xl3" />
-        <vers num="12.3(11)yf" />
-        <vers num="12.3(11)yf2" />
-        <vers num="12.3(11)yf3" />
-        <vers num="12.3(11)yf4" />
-        <vers num="12.3(11)yj" />
-        <vers num="12.3(11)yk" />
-        <vers num="12.3(11)yk1" />
-        <vers num="12.3(11)yk2" />
-        <vers num="12.3(11)yl" />
-        <vers num="12.3(11)yn" />
-        <vers num="12.3(11)yr" />
-        <vers num="12.3(11)ys" />
-        <vers num="12.3(11)ys1" />
-        <vers num="12.3(11)yw" />
-        <vers num="12.3(12)" />
-        <vers num="12.3(12b)" />
-        <vers num="12.3(12e)" />
-        <vers num="12.3(13)" />
-        <vers num="12.3(13a)" />
-        <vers num="12.3(13a)bc" />
-        <vers num="12.3(13a)bc1" />
-        <vers num="12.3(13b)" />
-        <vers num="12.3(14)t" />
-        <vers num="12.3(14)t2" />
-        <vers num="12.3(14)t4" />
-        <vers num="12.3(14)t5" />
-        <vers num="12.3(14)ym4" />
-        <vers num="12.3(14)yq" />
-        <vers num="12.3(14)yq1" />
-        <vers num="12.3(14)yq3" />
-        <vers num="12.3(14)yq4" />
-        <vers num="12.3(14)yt" />
-        <vers num="12.3(14)yt1" />
-        <vers num="12.3(14)yu" />
-        <vers num="12.3(14)yu1" />
-        <vers num="12.3(15)" />
-        <vers num="12.3(15b)" />
-        <vers num="12.3(16)" />
-        <vers num="12.3(1a)" />
-        <vers num="12.3(2)ja" />
-        <vers num="12.3(2)ja5" />
-        <vers num="12.3(2)jk" />
-        <vers num="12.3(2)jk1" />
-        <vers num="12.3(2)t3" />
-        <vers num="12.3(2)t8" />
-        <vers num="12.3(2)xa4" />
-        <vers num="12.3(2)xa5" />
-        <vers num="12.3(2)xc1" />
-        <vers num="12.3(2)xc2" />
-        <vers num="12.3(2)xc3" />
-        <vers num="12.3(2)xc4" />
-        <vers num="12.3(2)xe3" />
-        <vers num="12.3(2)xe4" />
-        <vers num="12.3(3e)" />
-        <vers num="12.3(3h)" />
-        <vers num="12.3(3i)" />
-        <vers num="12.3(4)eo1" />
-        <vers num="12.3(4)ja" />
-        <vers num="12.3(4)ja1" />
-        <vers num="12.3(4)t" />
-        <vers num="12.3(4)t1" />
-        <vers num="12.3(4)t2" />
-        <vers num="12.3(4)t3" />
-        <vers num="12.3(4)t4" />
-        <vers num="12.3(4)t8" />
-        <vers num="12.3(4)tpc11a" />
-        <vers num="12.3(4)xd" />
-        <vers num="12.3(4)xd1" />
-        <vers num="12.3(4)xd2" />
-        <vers num="12.3(4)xe4" />
-        <vers num="12.3(4)xg1" />
-        <vers num="12.3(4)xg2" />
-        <vers num="12.3(4)xg4" />
-        <vers num="12.3(4)xg5" />
-        <vers num="12.3(4)xh" />
-        <vers num="12.3(4)xk" />
-        <vers num="12.3(4)xk1" />
-        <vers num="12.3(4)xk3" />
-        <vers num="12.3(4)xk4" />
-        <vers num="12.3(4)xq" />
-        <vers num="12.3(4)xq1" />
-        <vers num="12.3(5)" />
-        <vers num="12.3(5)b1" />
-        <vers num="12.3(5a)" />
-        <vers num="12.3(5a)b" />
-        <vers num="12.3(5a)b2" />
-        <vers num="12.3(5a)b5" />
-        <vers num="12.3(5b)" />
-        <vers num="12.3(5c)" />
-        <vers num="12.3(5e)" />
-        <vers num="12.3(5f)" />
-        <vers num="12.3(6)" />
-        <vers num="12.3(6a)" />
-        <vers num="12.3(6d)" />
-        <vers num="12.3(6e)" />
-        <vers num="12.3(6f)" />
-        <vers num="12.3(7)ja" />
-        <vers num="12.3(7)ja1" />
-        <vers num="12.3(7)jx" />
-        <vers num="12.3(7)t" />
-        <vers num="12.3(7)t10" />
-        <vers num="12.3(7)t12" />
-        <vers num="12.3(7)t4" />
-        <vers num="12.3(7)t8" />
-        <vers num="12.3(7)t9" />
-        <vers num="12.3(7)xi3" />
-        <vers num="12.3(7)xi4" />
-        <vers num="12.3(7)xi7" />
-        <vers num="12.3(7)xr3" />
-        <vers num="12.3(7)xr4" />
-        <vers num="12.3(7)xr6" />
-        <vers num="12.3(7.7)" />
-        <vers num="12.3(8)ja" />
-        <vers num="12.3(8)ja1" />
-        <vers num="12.3(8)t11" />
-        <vers num="12.3(8)t4" />
-        <vers num="12.3(8)t7" />
-        <vers num="12.3(8)t8" />
-        <vers num="12.3(8)t9" />
-        <vers num="12.3(8)xu2" />
-        <vers num="12.3(8)xy4" />
-        <vers num="12.3(8)xy5" />
-        <vers num="12.3(8)xy6" />
-        <vers num="12.3(8)ya1" />
-        <vers num="12.3(8)yd" />
-        <vers num="12.3(8)yf" />
-        <vers num="12.3(8)yg" />
-        <vers num="12.3(8)yg1" />
-        <vers num="12.3(8)yg2" />
-        <vers num="12.3(8)yg3" />
-        <vers num="12.3(8)yh" />
-        <vers num="12.3(8)yi" />
-        <vers num="12.3(8)yi1" />
-        <vers num="12.3(8)yi3" />
-        <vers num="12.3(9)" />
-        <vers num="12.3(9a)bc" />
-        <vers num="12.3(9a)bc2" />
-        <vers num="12.3(9a)bc6" />
-        <vers num="12.3(9a)bc7" />
-        <vers num="12.3(9d)" />
-        <vers num="12.3(9e)" />
-        <vers num="12.3b" />
-        <vers num="12.3bc" />
-        <vers num="12.3bw" />
-        <vers num="12.3j" />
-        <vers num="12.3ja" />
-        <vers num="12.3jea" />
-        <vers num="12.3jeb" />
-        <vers num="12.3jec" />
-        <vers num="12.3jk" />
-        <vers num="12.3jx" />
-        <vers num="12.3t" />
-        <vers num="12.3tpc" />
-        <vers num="12.3xa" />
-        <vers num="12.3xb" />
-        <vers num="12.3xc" />
-        <vers num="12.3xd" />
-        <vers num="12.3xe" />
-        <vers num="12.3xf" />
-        <vers num="12.3xg" />
-        <vers num="12.3xh" />
-        <vers num="12.3xi" />
-        <vers num="12.3xj" />
-        <vers num="12.3xk" />
-        <vers num="12.3xl" />
-        <vers num="12.3xm" />
-        <vers num="12.3xn" />
-        <vers num="12.3xq" />
-        <vers num="12.3xr" />
-        <vers num="12.3xs" />
-        <vers num="12.3xt" />
-        <vers num="12.3xu" />
-        <vers num="12.3xv" />
-        <vers num="12.3xw" />
-        <vers num="12.3xx" />
-        <vers num="12.3xy" />
-        <vers num="12.3xz" />
-        <vers num="12.3ya" />
-        <vers num="12.3yb" />
-        <vers num="12.3yc" />
-        <vers num="12.3yd" />
-        <vers num="12.3ye" />
-        <vers num="12.3yf" />
-        <vers num="12.3yg" />
-        <vers num="12.3yh" />
-        <vers num="12.3yi" />
-        <vers num="12.3yj" />
-        <vers num="12.3yk" />
-        <vers num="12.3yl" />
-        <vers num="12.3ym" />
-        <vers num="12.3yn" />
-        <vers num="12.3yq" />
-        <vers num="12.3yr" />
-        <vers num="12.3ys" />
-        <vers num="12.3yt" />
-        <vers num="12.3yu" />
-        <vers num="12.3yw" />
-        <vers num="12.3yx" />
-        <vers num="12.3yz" />
-        <vers num="12.4" />
-        <vers num="12.4(1)" />
-        <vers num="12.4(1b)" />
-        <vers num="12.4(1c)" />
-        <vers num="12.4(2)mr" />
-        <vers num="12.4(2)mr1" />
-        <vers num="12.4(2)t" />
-        <vers num="12.4(2)t1" />
-        <vers num="12.4(2)t2" />
-        <vers num="12.4(2)t3" />
-        <vers num="12.4(2)t4" />
-        <vers num="12.4(2)xa" />
-        <vers num="12.4(2)xb" />
-        <vers num="12.4(2)xb2" />
-        <vers num="12.4(23)" />
-        <vers num="12.4(3)" />
-        <vers num="12.4(3)t2" />
-        <vers num="12.4(3a)" />
-        <vers num="12.4(3b)" />
-        <vers num="12.4(3d)" />
-        <vers num="12.4(4)mr" />
-        <vers num="12.4(4)t" />
-        <vers num="12.4(4)t2" />
-        <vers num="12.4(5)" />
-        <vers num="12.4(5b)" />
-        <vers num="12.4(6)t" />
-        <vers num="12.4(6)t1" />
-        <vers num="12.4(7)" />
-        <vers num="12.4(7a)" />
-        <vers num="12.4(8)" />
-        <vers num="12.4(9)t" />
-        <vers num="12.4ja" />
-        <vers num="12.4jda" />
-        <vers num="12.4jk" />
-        <vers num="12.4jl" />
-        <vers num="12.4jma" />
-        <vers num="12.4jmb" />
-        <vers num="12.4jx" />
-        <vers num="12.4md" />
-        <vers num="12.4mr" />
-        <vers num="12.4sw" />
-        <vers num="12.4t" />
-        <vers num="12.4xa" />
-        <vers num="12.4xb" />
-        <vers num="12.4xc" />
-        <vers num="12.4xd" />
-        <vers num="12.4xe" />
-        <vers num="12.4xf" />
-        <vers num="12.4xg" />
-        <vers num="12.4xj" />
-        <vers num="12.4xk" />
-        <vers num="12.4xl" />
-        <vers num="12.4xm" />
-        <vers num="12.4xn" />
-        <vers num="12.4xp" />
-        <vers num="12.4xt" />
-        <vers num="12.4xv" />
-        <vers num="12.4xw" />
-        <vers num="15.0" />
-        <vers num="15.0(1)s1" />
-        <vers num="15.0(1)s2" />
-        <vers num="15.0m" />
-        <vers num="15.0mr" />
-        <vers num="15.0mra" />
-        <vers num="15.0s" />
-        <vers num="15.0sa" />
-        <vers num="15.0sg" />
-        <vers num="15.0xa" />
-        <vers num="15.0xo" />
-        <vers num="15.1" />
-        <vers num="15.1(1)xb1" />
-        <vers num="15.1(2)t" />
-        <vers num="15.1(3)t" />
-        <vers num="15.1(4)m" />
-        <vers num="15.1(4)m1" />
-        <vers num="15.1ey" />
-        <vers num="15.1gc" />
-        <vers num="15.1m" />
-        <vers num="15.1s" />
-        <vers num="15.1t" />
-        <vers num="15.1xb" />
-        <vers num="15.2" />
-      </prod>
-      <prod vendor="cisco" name="ios_xe">
-        <vers num="2.1" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.1t" />
-        <vers num="2.3.2" />
-        <vers num="2.4" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="3.1.0s" />
-        <vers num="3.1.0sg" />
-        <vers num="3.1.1s" />
-        <vers num="3.1.1sg" />
-        <vers num="3.1.2s" />
-        <vers num="3.1.3s" />
-        <vers num="3.1.4s" />
-        <vers num="3.2.0s" />
-        <vers num="3.2.0sg" />
-        <vers num="3.2.1s" />
-        <vers num="3.2.1sg" />
-        <vers num="3.2.2s" />
-        <vers num="3.3.0s" />
-        <vers num="3.3.1s" />
-        <vers num="3.3.2s" />
-        <vers num="3.3.3s" />
-        <vers num="3.4.0s" />
-        <vers num="3.4.1s" />
-        <vers num="3.5.0s" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0382" published="2012-03-29" name="CVE-2012-0382" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:C)" CVSS_score="7.1" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="8.6" CVSS_base_score="7.1">
-    <desc>
-      <descript source="cve">The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.1S and 3.1.xSG and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service (device reload) via encapsulated IGMP data in an MSDP packet, aka Bug ID CSCtr28857.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52759" source="BID">52759</ref>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-msdp" source="CISCO" adv="1">20120328 Cisco IOS Software Multicast Source Discovery Protocol Vulnerability</ref>
-      <ref url="http://osvdb.org/80693" source="OSVDB">80693</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.2" />
-        <vers num="12.2(1)" />
-        <vers num="12.2(1)dx" />
-        <vers num="12.2(1)s" />
-        <vers num="12.2(1)t" />
-        <vers num="12.2(1)xa" />
-        <vers num="12.2(1)xd" />
-        <vers num="12.2(1)xd1" />
-        <vers num="12.2(1)xd3" />
-        <vers num="12.2(1)xd4" />
-        <vers num="12.2(1)xe" />
-        <vers num="12.2(1)xe2" />
-        <vers num="12.2(1)xe3" />
-        <vers num="12.2(1)xh" />
-        <vers num="12.2(1)xq" />
-        <vers num="12.2(1)xs" />
-        <vers num="12.2(1)xs1" />
-        <vers num="12.2(1.1)" />
-        <vers num="12.2(1.1)pi" />
-        <vers num="12.2(1.4)s" />
-        <vers num="12.2(10)da2" />
-        <vers num="12.2(10)da4" />
-        <vers num="12.2(10.5)s" />
-        <vers num="12.2(10g)" />
-        <vers num="12.2(11)bc3c" />
-        <vers num="12.2(11)ja" />
-        <vers num="12.2(11)ja1" />
-        <vers num="12.2(11)t" />
-        <vers num="12.2(11)t2" />
-        <vers num="12.2(11)t3" />
-        <vers num="12.2(11)t8" />
-        <vers num="12.2(11)t9" />
-        <vers num="12.2(11)yp1" />
-        <vers num="12.2(11)yu" />
-        <vers num="12.2(11)yv" />
-        <vers num="12.2(11)yx1" />
-        <vers num="12.2(11)yz2" />
-        <vers num="12.2(12)" />
-        <vers num="12.2(12)da3" />
-        <vers num="12.2(12)da8" />
-        <vers num="12.2(12)da9" />
-        <vers num="12.2(12.02)s" />
-        <vers num="12.2(12.02)t" />
-        <vers num="12.2(12.05)" />
-        <vers num="12.2(12.05)s" />
-        <vers num="12.2(12.05)t" />
-        <vers num="12.2(12b)" />
-        <vers num="12.2(12c)" />
-        <vers num="12.2(12g)" />
-        <vers num="12.2(12h)" />
-        <vers num="12.2(12i)" />
-        <vers num="12.2(12m)" />
-        <vers num="12.2(13)" />
-        <vers num="12.2(13)ja1" />
-        <vers num="12.2(13)mc1" />
-        <vers num="12.2(13)t" />
-        <vers num="12.2(13)t1" />
-        <vers num="12.2(13)t14" />
-        <vers num="12.2(13)t16" />
-        <vers num="12.2(13)t9" />
-        <vers num="12.2(13)zc" />
-        <vers num="12.2(13)zd" />
-        <vers num="12.2(13)zd3" />
-        <vers num="12.2(13)zd4" />
-        <vers num="12.2(13)ze" />
-        <vers num="12.2(13)zf" />
-        <vers num="12.2(13)zg" />
-        <vers num="12.2(13)zh" />
-        <vers num="12.2(13)zh3" />
-        <vers num="12.2(13)zh8" />
-        <vers num="12.2(13)zj" />
-        <vers num="12.2(13)zk" />
-        <vers num="12.2(13)zl" />
-        <vers num="12.2(13.03)b" />
-        <vers num="12.2(13a)" />
-        <vers num="12.2(13e)" />
-        <vers num="12.2(14)s" />
-        <vers num="12.2(14)s13" />
-        <vers num="12.2(14)s14" />
-        <vers num="12.2(14)s15" />
-        <vers num="12.2(14)su2" />
-        <vers num="12.2(14)sx1" />
-        <vers num="12.2(14)sy" />
-        <vers num="12.2(14)sy03" />
-        <vers num="12.2(14)sy1" />
-        <vers num="12.2(14)sz" />
-        <vers num="12.2(14)sz1" />
-        <vers num="12.2(14)sz2" />
-        <vers num="12.2(14)za" />
-        <vers num="12.2(14)za2" />
-        <vers num="12.2(14)za8" />
-        <vers num="12.2(14.5)" />
-        <vers num="12.2(14.5)t" />
-        <vers num="12.2(15)b" />
-        <vers num="12.2(15)bc" />
-        <vers num="12.2(15)bc1" />
-        <vers num="12.2(15)bc1f" />
-        <vers num="12.2(15)bc2f" />
-        <vers num="12.2(15)bc2h" />
-        <vers num="12.2(15)bc2i" />
-        <vers num="12.2(15)bx" />
-        <vers num="12.2(15)bz" />
-        <vers num="12.2(15)cx" />
-        <vers num="12.2(15)cz3" />
-        <vers num="12.2(15)jk2" />
-        <vers num="12.2(15)jk4" />
-        <vers num="12.2(15)jk5" />
-        <vers num="12.2(15)mc1" />
-        <vers num="12.2(15)mc2c" />
-        <vers num="12.2(15)mc2e" />
-        <vers num="12.2(15)sl1" />
-        <vers num="12.2(15)t" />
-        <vers num="12.2(15)t15" />
-        <vers num="12.2(15)t16" />
-        <vers num="12.2(15)t17" />
-        <vers num="12.2(15)t5" />
-        <vers num="12.2(15)t7" />
-        <vers num="12.2(15)t8" />
-        <vers num="12.2(15)t9" />
-        <vers num="12.2(15)xr" />
-        <vers num="12.2(15)xr2" />
-        <vers num="12.2(15)ys" />
-        <vers num="12.2(15)ys_1.2(1)" />
-        <vers num="12.2(15)zj" />
-        <vers num="12.2(15)zj1" />
-        <vers num="12.2(15)zj2" />
-        <vers num="12.2(15)zj3" />
-        <vers num="12.2(15)zk" />
-        <vers num="12.2(15)zl" />
-        <vers num="12.2(15)zl1" />
-        <vers num="12.2(15)zn" />
-        <vers num="12.2(15)zo" />
-        <vers num="12.2(15.1)s" />
-        <vers num="12.2(16)b" />
-        <vers num="12.2(16)b1" />
-        <vers num="12.2(16)bx" />
-        <vers num="12.2(16.1)b" />
-        <vers num="12.2(16.5)s" />
-        <vers num="12.2(16f)" />
-        <vers num="12.2(17)" />
-        <vers num="12.2(17)a" />
-        <vers num="12.2(17)zd3" />
-        <vers num="12.2(17a)" />
-        <vers num="12.2(17a)sxa" />
-        <vers num="12.2(17b)sxa" />
-        <vers num="12.2(17d)" />
-        <vers num="12.2(17d)sx" />
-        <vers num="12.2(17d)sxb" />
-        <vers num="12.2(17d)sxb10" />
-        <vers num="12.2(17d)sxb7" />
-        <vers num="12.2(17d)sxb8" />
-        <vers num="12.2(17f)" />
-        <vers num="12.2(18)ew" />
-        <vers num="12.2(18)ew2" />
-        <vers num="12.2(18)ew3" />
-        <vers num="12.2(18)ew5" />
-        <vers num="12.2(18)ewa" />
-        <vers num="12.2(18)s" />
-        <vers num="12.2(18)s10" />
-        <vers num="12.2(18)s6" />
-        <vers num="12.2(18)s8" />
-        <vers num="12.2(18)s9" />
-        <vers num="12.2(18)se" />
-        <vers num="12.2(18)so4" />
-        <vers num="12.2(18)sv" />
-        <vers num="12.2(18)sv3" />
-        <vers num="12.2(18)sw" />
-        <vers num="12.2(18)sxd1" />
-        <vers num="12.2(18)sxd4" />
-        <vers num="12.2(18)sxd5" />
-        <vers num="12.2(18)sxd6" />
-        <vers num="12.2(18)sxd7" />
-        <vers num="12.2(18)sxe" />
-        <vers num="12.2(18)sxe1" />
-        <vers num="12.2(18)sxe3" />
-        <vers num="12.2(18)sxf" />
-        <vers num="12.2(18.2)" />
-        <vers num="12.2(19)" />
-        <vers num="12.2(19)b" />
-        <vers num="12.2(1b)" />
-        <vers num="12.2(1b)da1" />
-        <vers num="12.2(1d)" />
-        <vers num="12.2(2)b" />
-        <vers num="12.2(2)bx" />
-        <vers num="12.2(2)by" />
-        <vers num="12.2(2)by2" />
-        <vers num="12.2(2)dd3" />
-        <vers num="12.2(2)t" />
-        <vers num="12.2(2)t1" />
-        <vers num="12.2(2)t4" />
-        <vers num="12.2(2)xa" />
-        <vers num="12.2(2)xa1" />
-        <vers num="12.2(2)xa5" />
-        <vers num="12.2(2)xb" />
-        <vers num="12.2(2)xb11" />
-        <vers num="12.2(2)xb14" />
-        <vers num="12.2(2)xb15" />
-        <vers num="12.2(2)xb3" />
-        <vers num="12.2(2)xb4" />
-        <vers num="12.2(2)xc1" />
-        <vers num="12.2(2)xf" />
-        <vers num="12.2(2)xg" />
-        <vers num="12.2(2)xh" />
-        <vers num="12.2(2)xh2" />
-        <vers num="12.2(2)xh3" />
-        <vers num="12.2(2)xi" />
-        <vers num="12.2(2)xi1" />
-        <vers num="12.2(2)xi2" />
-        <vers num="12.2(2)xj" />
-        <vers num="12.2(2)xj1" />
-        <vers num="12.2(2)xk" />
-        <vers num="12.2(2)xk2" />
-        <vers num="12.2(2)xn" />
-        <vers num="12.2(2)xr" />
-        <vers num="12.2(2)xt" />
-        <vers num="12.2(2)xt3" />
-        <vers num="12.2(2)xu" />
-        <vers num="12.2(2)xu2" />
-        <vers num="12.2(2)yc" />
-        <vers num="12.2(2.2)t" />
-        <vers num="12.2(20)eu" />
-        <vers num="12.2(20)eu1" />
-        <vers num="12.2(20)eu2" />
-        <vers num="12.2(20)ew" />
-        <vers num="12.2(20)ew2" />
-        <vers num="12.2(20)ew3" />
-        <vers num="12.2(20)ewa" />
-        <vers num="12.2(20)ewa2" />
-        <vers num="12.2(20)ewa3" />
-        <vers num="12.2(20)s" />
-        <vers num="12.2(20)s1" />
-        <vers num="12.2(20)s2" />
-        <vers num="12.2(20)s4" />
-        <vers num="12.2(20)s7" />
-        <vers num="12.2(20)s8" />
-        <vers num="12.2(20)s9" />
-        <vers num="12.2(20)se3" />
-        <vers num="12.2(21)" />
-        <vers num="12.2(21a)" />
-        <vers num="12.2(21b)" />
-        <vers num="12.2(22)ea6" />
-        <vers num="12.2(22)s" />
-        <vers num="12.2(22)s2" />
-        <vers num="12.2(22)sv1" />
-        <vers num="12.2(23)" />
-        <vers num="12.2(23)sv1" />
-        <vers num="12.2(23)sw" />
-        <vers num="12.2(23.6)" />
-        <vers num="12.2(23a)" />
-        <vers num="12.2(23f)" />
-        <vers num="12.2(24)" />
-        <vers num="12.2(24)sv" />
-        <vers num="12.2(24)sv1" />
-        <vers num="12.2(25)ewa" />
-        <vers num="12.2(25)ewa1" />
-        <vers num="12.2(25)ewa3" />
-        <vers num="12.2(25)ewa4" />
-        <vers num="12.2(25)ex" />
-        <vers num="12.2(25)ey" />
-        <vers num="12.2(25)ey2" />
-        <vers num="12.2(25)ey3" />
-        <vers num="12.2(25)ez" />
-        <vers num="12.2(25)ez1" />
-        <vers num="12.2(25)fx" />
-        <vers num="12.2(25)fy" />
-        <vers num="12.2(25)s" />
-        <vers num="12.2(25)s1" />
-        <vers num="12.2(25)s3" />
-        <vers num="12.2(25)s4" />
-        <vers num="12.2(25)s6" />
-        <vers num="12.2(25)se" />
-        <vers num="12.2(25)seb" />
-        <vers num="12.2(25)seb2" />
-        <vers num="12.2(25)seb3" />
-        <vers num="12.2(25)seb4" />
-        <vers num="12.2(25)sec1" />
-        <vers num="12.2(25)sec2" />
-        <vers num="12.2(25)sed" />
-        <vers num="12.2(25)sg" />
-        <vers num="12.2(25)sv2" />
-        <vers num="12.2(25)sw" />
-        <vers num="12.2(25)sw3a" />
-        <vers num="12.2(25)sw4" />
-        <vers num="12.2(25)sw4a" />
-        <vers num="12.2(26)sv" />
-        <vers num="12.2(26)sv1" />
-        <vers num="12.2(26b)" />
-        <vers num="12.2(27)sbc" />
-        <vers num="12.2(27)sv1" />
-        <vers num="12.2(27b)" />
-        <vers num="12.2(28)" />
-        <vers num="12.2(28c)" />
-        <vers num="12.2(29a)" />
-        <vers num="12.2(3)" />
-        <vers num="12.2(3.4)bp" />
-        <vers num="12.2(30)s1" />
-        <vers num="12.2(31)" />
-        <vers num="12.2(3d)" />
-        <vers num="12.2(4)" />
-        <vers num="12.2(4)b" />
-        <vers num="12.2(4)b1" />
-        <vers num="12.2(4)b2" />
-        <vers num="12.2(4)b3" />
-        <vers num="12.2(4)b4" />
-        <vers num="12.2(4)bc1" />
-        <vers num="12.2(4)bc1a" />
-        <vers num="12.2(4)bx" />
-        <vers num="12.2(4)ja" />
-        <vers num="12.2(4)ja1" />
-        <vers num="12.2(4)mb12" />
-        <vers num="12.2(4)mb13b" />
-        <vers num="12.2(4)mb13c" />
-        <vers num="12.2(4)mb3" />
-        <vers num="12.2(4)mx" />
-        <vers num="12.2(4)mx1" />
-        <vers num="12.2(4)t" />
-        <vers num="12.2(4)t1" />
-        <vers num="12.2(4)t3" />
-        <vers num="12.2(4)t6" />
-        <vers num="12.2(4)xl" />
-        <vers num="12.2(4)xl4" />
-        <vers num="12.2(4)xm" />
-        <vers num="12.2(4)xm2" />
-        <vers num="12.2(4)xr" />
-        <vers num="12.2(4)xw" />
-        <vers num="12.2(4)xw1" />
-        <vers num="12.2(4)ya" />
-        <vers num="12.2(4)ya1" />
-        <vers num="12.2(4)ya10" />
-        <vers num="12.2(4)ya11" />
-        <vers num="12.2(4)ya7" />
-        <vers num="12.2(4)ya8" />
-        <vers num="12.2(4)ya9" />
-        <vers num="12.2(4)yb" />
-        <vers num="12.2(5)" />
-        <vers num="12.2(5)ca1" />
-        <vers num="12.2(5d)" />
-        <vers num="12.2(6.8)t0a" />
-        <vers num="12.2(6.8)t1a" />
-        <vers num="12.2(6.8a)" />
-        <vers num="12.2(6c)" />
-        <vers num="12.2(7)" />
-        <vers num="12.2(7)da" />
-        <vers num="12.2(7.4)s" />
-        <vers num="12.2(7a)" />
-        <vers num="12.2(7b)" />
-        <vers num="12.2(7c)" />
-        <vers num="12.2(8)bc1" />
-        <vers num="12.2(8)ja" />
-        <vers num="12.2(8)t" />
-        <vers num="12.2(8)t10" />
-        <vers num="12.2(8)tpc10a" />
-        <vers num="12.2(8)yd" />
-        <vers num="12.2(8)yw2" />
-        <vers num="12.2(8)yw3" />
-        <vers num="12.2(8)yy" />
-        <vers num="12.2(8)yy3" />
-        <vers num="12.2(8)zb7" />
-        <vers num="12.2(9)s" />
-        <vers num="12.2(9.4)da" />
-        <vers num="12.2b" />
-        <vers num="12.2bc" />
-        <vers num="12.2bw" />
-        <vers num="12.2bx" />
-        <vers num="12.2by" />
-        <vers num="12.2bz" />
-        <vers num="12.2ca" />
-        <vers num="12.2cx" />
-        <vers num="12.2cy" />
-        <vers num="12.2cz" />
-        <vers num="12.2da" />
-        <vers num="12.2dd" />
-        <vers num="12.2dx" />
-        <vers num="12.2e" />
-        <vers num="12.2eu" />
-        <vers num="12.2ew" />
-        <vers num="12.2ewa" />
-        <vers num="12.2ex" />
-        <vers num="12.2ey" />
-        <vers num="12.2ez" />
-        <vers num="12.2f" />
-        <vers num="12.2fx" />
-        <vers num="12.2fy" />
-        <vers num="12.2ja" />
-        <vers num="12.2jk" />
-        <vers num="12.2jx" />
-        <vers num="12.2mb" />
-        <vers num="12.2mc" />
-        <vers num="12.2mx" />
-        <vers num="12.2n" />
-        <vers num="12.2pb" />
-        <vers num="12.2pi" />
-        <vers num="12.2s" />
-        <vers num="12.2sa" />
-        <vers num="12.2sbc" />
-        <vers num="12.2se" />
-        <vers num="12.2sea" />
-        <vers num="12.2seb" />
-        <vers num="12.2sec" />
-        <vers num="12.2sg" />
-        <vers num="12.2sh" />
-        <vers num="12.2so" />
-        <vers num="12.2su" />
-        <vers num="12.2sv" />
-        <vers num="12.2sw" />
-        <vers num="12.2sx" />
-        <vers num="12.2sxa" />
-        <vers num="12.2sxb" />
-        <vers num="12.2sxd" />
-        <vers num="12.2sxe" />
-        <vers num="12.2sxf" />
-        <vers num="12.2sy" />
-        <vers num="12.2sz" />
-        <vers num="12.2t" />
-        <vers num="12.2tpc" />
-        <vers num="12.2x" />
-        <vers num="12.2xa" />
-        <vers num="12.2xb" />
-        <vers num="12.2xc" />
-        <vers num="12.2xd" />
-        <vers num="12.2xe" />
-        <vers num="12.2xf" />
-        <vers num="12.2xg" />
-        <vers num="12.2xh" />
-        <vers num="12.2xi" />
-        <vers num="12.2xj" />
-        <vers num="12.2xk" />
-        <vers num="12.2xl" />
-        <vers num="12.2xm" />
-        <vers num="12.2xn" />
-        <vers num="12.2xq" />
-        <vers num="12.2xr" />
-        <vers num="12.2xs" />
-        <vers num="12.2xt" />
-        <vers num="12.2xu" />
-        <vers num="12.2xv" />
-        <vers num="12.2xw" />
-        <vers num="12.2xz" />
-        <vers num="12.2ya" />
-        <vers num="12.2yb" />
-        <vers num="12.2yc" />
-        <vers num="12.2yd" />
-        <vers num="12.2ye" />
-        <vers num="12.2yf" />
-        <vers num="12.2yg" />
-        <vers num="12.2yh" />
-        <vers num="12.2yj" />
-        <vers num="12.2yk" />
-        <vers num="12.2yl" />
-        <vers num="12.2ym" />
-        <vers num="12.2yn" />
-        <vers num="12.2yo" />
-        <vers num="12.2yp" />
-        <vers num="12.2yq" />
-        <vers num="12.2yr" />
-        <vers num="12.2ys" />
-        <vers num="12.2yt" />
-        <vers num="12.2yu" />
-        <vers num="12.2yv" />
-        <vers num="12.2yw" />
-        <vers num="12.2yx" />
-        <vers num="12.2yy" />
-        <vers num="12.2yz" />
-        <vers num="12.2za" />
-        <vers num="12.2zb" />
-        <vers num="12.2zd" />
-        <vers num="12.2ze" />
-        <vers num="12.2zf" />
-        <vers num="12.2zg" />
-        <vers num="12.2zh" />
-        <vers num="12.2zi" />
-        <vers num="12.2zj" />
-        <vers num="12.2zk" />
-        <vers num="12.2zl" />
-        <vers num="12.2zm" />
-        <vers num="12.2zn" />
-        <vers num="12.2zo" />
-        <vers num="12.2zp" />
-        <vers num="12.2zq" />
-        <vers num="12.2zu" />
-        <vers num="12.2zx" />
-        <vers num="12.2zy" />
-        <vers num="12.2zya" />
-        <vers num="12.3" />
-        <vers num="12.3(10)" />
-        <vers num="12.3(10c)" />
-        <vers num="12.3(10d)" />
-        <vers num="12.3(10e)" />
-        <vers num="12.3(11)" />
-        <vers num="12.3(11)t" />
-        <vers num="12.3(11)t4" />
-        <vers num="12.3(11)t5" />
-        <vers num="12.3(11)t6" />
-        <vers num="12.3(11)t8" />
-        <vers num="12.3(11)t9" />
-        <vers num="12.3(11)xl" />
-        <vers num="12.3(11)xl3" />
-        <vers num="12.3(11)yf" />
-        <vers num="12.3(11)yf2" />
-        <vers num="12.3(11)yf3" />
-        <vers num="12.3(11)yf4" />
-        <vers num="12.3(11)yj" />
-        <vers num="12.3(11)yk" />
-        <vers num="12.3(11)yk1" />
-        <vers num="12.3(11)yk2" />
-        <vers num="12.3(11)yl" />
-        <vers num="12.3(11)yn" />
-        <vers num="12.3(11)yr" />
-        <vers num="12.3(11)ys" />
-        <vers num="12.3(11)ys1" />
-        <vers num="12.3(11)yw" />
-        <vers num="12.3(12)" />
-        <vers num="12.3(12b)" />
-        <vers num="12.3(12e)" />
-        <vers num="12.3(13)" />
-        <vers num="12.3(13a)" />
-        <vers num="12.3(13a)bc" />
-        <vers num="12.3(13a)bc1" />
-        <vers num="12.3(13b)" />
-        <vers num="12.3(14)t" />
-        <vers num="12.3(14)t2" />
-        <vers num="12.3(14)t4" />
-        <vers num="12.3(14)t5" />
-        <vers num="12.3(14)ym4" />
-        <vers num="12.3(14)yq" />
-        <vers num="12.3(14)yq1" />
-        <vers num="12.3(14)yq3" />
-        <vers num="12.3(14)yq4" />
-        <vers num="12.3(14)yt" />
-        <vers num="12.3(14)yt1" />
-        <vers num="12.3(14)yu" />
-        <vers num="12.3(14)yu1" />
-        <vers num="12.3(15)" />
-        <vers num="12.3(15b)" />
-        <vers num="12.3(16)" />
-        <vers num="12.3(1a)" />
-        <vers num="12.3(2)ja" />
-        <vers num="12.3(2)ja5" />
-        <vers num="12.3(2)jk" />
-        <vers num="12.3(2)jk1" />
-        <vers num="12.3(2)t3" />
-        <vers num="12.3(2)t8" />
-        <vers num="12.3(2)xa4" />
-        <vers num="12.3(2)xa5" />
-        <vers num="12.3(2)xc1" />
-        <vers num="12.3(2)xc2" />
-        <vers num="12.3(2)xc3" />
-        <vers num="12.3(2)xc4" />
-        <vers num="12.3(2)xe3" />
-        <vers num="12.3(2)xe4" />
-        <vers num="12.3(3e)" />
-        <vers num="12.3(3h)" />
-        <vers num="12.3(3i)" />
-        <vers num="12.3(4)eo1" />
-        <vers num="12.3(4)ja" />
-        <vers num="12.3(4)ja1" />
-        <vers num="12.3(4)t" />
-        <vers num="12.3(4)t1" />
-        <vers num="12.3(4)t2" />
-        <vers num="12.3(4)t3" />
-        <vers num="12.3(4)t4" />
-        <vers num="12.3(4)t8" />
-        <vers num="12.3(4)tpc11a" />
-        <vers num="12.3(4)xd" />
-        <vers num="12.3(4)xd1" />
-        <vers num="12.3(4)xd2" />
-        <vers num="12.3(4)xe4" />
-        <vers num="12.3(4)xg1" />
-        <vers num="12.3(4)xg2" />
-        <vers num="12.3(4)xg4" />
-        <vers num="12.3(4)xg5" />
-        <vers num="12.3(4)xh" />
-        <vers num="12.3(4)xk" />
-        <vers num="12.3(4)xk1" />
-        <vers num="12.3(4)xk3" />
-        <vers num="12.3(4)xk4" />
-        <vers num="12.3(4)xq" />
-        <vers num="12.3(4)xq1" />
-        <vers num="12.3(5)" />
-        <vers num="12.3(5)b1" />
-        <vers num="12.3(5a)" />
-        <vers num="12.3(5a)b" />
-        <vers num="12.3(5a)b2" />
-        <vers num="12.3(5a)b5" />
-        <vers num="12.3(5b)" />
-        <vers num="12.3(5c)" />
-        <vers num="12.3(5e)" />
-        <vers num="12.3(5f)" />
-        <vers num="12.3(6)" />
-        <vers num="12.3(6a)" />
-        <vers num="12.3(6d)" />
-        <vers num="12.3(6e)" />
-        <vers num="12.3(6f)" />
-        <vers num="12.3(7)ja" />
-        <vers num="12.3(7)ja1" />
-        <vers num="12.3(7)jx" />
-        <vers num="12.3(7)t" />
-        <vers num="12.3(7)t10" />
-        <vers num="12.3(7)t12" />
-        <vers num="12.3(7)t4" />
-        <vers num="12.3(7)t8" />
-        <vers num="12.3(7)t9" />
-        <vers num="12.3(7)xi3" />
-        <vers num="12.3(7)xi4" />
-        <vers num="12.3(7)xi7" />
-        <vers num="12.3(7)xr3" />
-        <vers num="12.3(7)xr4" />
-        <vers num="12.3(7)xr6" />
-        <vers num="12.3(7.7)" />
-        <vers num="12.3(8)ja" />
-        <vers num="12.3(8)ja1" />
-        <vers num="12.3(8)t11" />
-        <vers num="12.3(8)t4" />
-        <vers num="12.3(8)t7" />
-        <vers num="12.3(8)t8" />
-        <vers num="12.3(8)t9" />
-        <vers num="12.3(8)xu2" />
-        <vers num="12.3(8)xy4" />
-        <vers num="12.3(8)xy5" />
-        <vers num="12.3(8)xy6" />
-        <vers num="12.3(8)ya1" />
-        <vers num="12.3(8)yd" />
-        <vers num="12.3(8)yf" />
-        <vers num="12.3(8)yg" />
-        <vers num="12.3(8)yg1" />
-        <vers num="12.3(8)yg2" />
-        <vers num="12.3(8)yg3" />
-        <vers num="12.3(8)yh" />
-        <vers num="12.3(8)yi" />
-        <vers num="12.3(8)yi1" />
-        <vers num="12.3(8)yi3" />
-        <vers num="12.3(9)" />
-        <vers num="12.3(9a)bc" />
-        <vers num="12.3(9a)bc2" />
-        <vers num="12.3(9a)bc6" />
-        <vers num="12.3(9a)bc7" />
-        <vers num="12.3(9d)" />
-        <vers num="12.3(9e)" />
-        <vers num="12.3b" />
-        <vers num="12.3bc" />
-        <vers num="12.3bw" />
-        <vers num="12.3j" />
-        <vers num="12.3ja" />
-        <vers num="12.3jea" />
-        <vers num="12.3jeb" />
-        <vers num="12.3jec" />
-        <vers num="12.3jk" />
-        <vers num="12.3jx" />
-        <vers num="12.3t" />
-        <vers num="12.3tpc" />
-        <vers num="12.3xa" />
-        <vers num="12.3xb" />
-        <vers num="12.3xc" />
-        <vers num="12.3xd" />
-        <vers num="12.3xe" />
-        <vers num="12.3xf" />
-        <vers num="12.3xg" />
-        <vers num="12.3xh" />
-        <vers num="12.3xi" />
-        <vers num="12.3xj" />
-        <vers num="12.3xk" />
-        <vers num="12.3xl" />
-        <vers num="12.3xm" />
-        <vers num="12.3xn" />
-        <vers num="12.3xq" />
-        <vers num="12.3xr" />
-        <vers num="12.3xs" />
-        <vers num="12.3xt" />
-        <vers num="12.3xu" />
-        <vers num="12.3xv" />
-        <vers num="12.3xw" />
-        <vers num="12.3xx" />
-        <vers num="12.3xy" />
-        <vers num="12.3xz" />
-        <vers num="12.3ya" />
-        <vers num="12.3yb" />
-        <vers num="12.3yc" />
-        <vers num="12.3yd" />
-        <vers num="12.3ye" />
-        <vers num="12.3yf" />
-        <vers num="12.3yg" />
-        <vers num="12.3yh" />
-        <vers num="12.3yi" />
-        <vers num="12.3yj" />
-        <vers num="12.3yk" />
-        <vers num="12.3yl" />
-        <vers num="12.3ym" />
-        <vers num="12.3yn" />
-        <vers num="12.3yq" />
-        <vers num="12.3yr" />
-        <vers num="12.3ys" />
-        <vers num="12.3yt" />
-        <vers num="12.3yu" />
-        <vers num="12.3yw" />
-        <vers num="12.3yx" />
-        <vers num="12.3yz" />
-        <vers num="12.4" />
-        <vers num="12.4(1)" />
-        <vers num="12.4(1b)" />
-        <vers num="12.4(1c)" />
-        <vers num="12.4(2)mr" />
-        <vers num="12.4(2)mr1" />
-        <vers num="12.4(2)t" />
-        <vers num="12.4(2)t1" />
-        <vers num="12.4(2)t2" />
-        <vers num="12.4(2)t3" />
-        <vers num="12.4(2)t4" />
-        <vers num="12.4(2)xa" />
-        <vers num="12.4(2)xb" />
-        <vers num="12.4(2)xb2" />
-        <vers num="12.4(23)" />
-        <vers num="12.4(3)" />
-        <vers num="12.4(3)t2" />
-        <vers num="12.4(3a)" />
-        <vers num="12.4(3b)" />
-        <vers num="12.4(3d)" />
-        <vers num="12.4(4)mr" />
-        <vers num="12.4(4)t" />
-        <vers num="12.4(4)t2" />
-        <vers num="12.4(5)" />
-        <vers num="12.4(5b)" />
-        <vers num="12.4(6)t" />
-        <vers num="12.4(6)t1" />
-        <vers num="12.4(7)" />
-        <vers num="12.4(7a)" />
-        <vers num="12.4(8)" />
-        <vers num="12.4(9)t" />
-        <vers num="12.4ja" />
-        <vers num="12.4jda" />
-        <vers num="12.4jk" />
-        <vers num="12.4jl" />
-        <vers num="12.4jma" />
-        <vers num="12.4jmb" />
-        <vers num="12.4jx" />
-        <vers num="12.4md" />
-        <vers num="12.4mr" />
-        <vers num="12.4sw" />
-        <vers num="12.4t" />
-        <vers num="12.4xa" />
-        <vers num="12.4xb" />
-        <vers num="12.4xc" />
-        <vers num="12.4xd" />
-        <vers num="12.4xe" />
-        <vers num="12.4xf" />
-        <vers num="12.4xg" />
-        <vers num="12.4xj" />
-        <vers num="12.4xk" />
-        <vers num="12.4xl" />
-        <vers num="12.4xm" />
-        <vers num="12.4xn" />
-        <vers num="12.4xp" />
-        <vers num="12.4xt" />
-        <vers num="12.4xv" />
-        <vers num="12.4xw" />
-        <vers num="15.0" />
-        <vers num="15.0(1)s1" />
-        <vers num="15.0(1)s2" />
-        <vers num="15.0m" />
-        <vers num="15.0mr" />
-        <vers num="15.0mra" />
-        <vers num="15.0s" />
-        <vers num="15.0sa" />
-        <vers num="15.0sg" />
-        <vers num="15.0xa" />
-        <vers num="15.0xo" />
-        <vers num="15.1" />
-        <vers num="15.1(1)xb1" />
-        <vers num="15.1(2)t" />
-        <vers num="15.1(3)t" />
-        <vers num="15.1(4)m" />
-        <vers num="15.1(4)m1" />
-        <vers num="15.1ey" />
-        <vers num="15.1gc" />
-        <vers num="15.1m" />
-        <vers num="15.1s" />
-        <vers num="15.1t" />
-        <vers num="15.1xb" />
-        <vers num="15.2" />
-      </prod>
-      <prod vendor="cisco" name="ios_xe">
-        <vers num="2.1" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.1t" />
-        <vers num="2.3.2" />
-        <vers num="2.4" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="3.1.0s" />
-        <vers num="3.1.0sg" />
-        <vers num="3.1.1s" />
-        <vers num="3.1.1sg" />
-        <vers num="3.1.2s" />
-        <vers num="3.1.3s" />
-        <vers num="3.1.4s" />
-        <vers num="3.2.0s" />
-        <vers num="3.2.1s" />
-        <vers num="3.2.2s" />
-        <vers num="3.3.0s" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0383" published="2012-03-29" name="CVE-2012-0383" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (memory consumption, and device hang or reload) via SIP packets that require translation, related to a "memory starvation vulnerability," aka Bug ID CSCti35326.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-nat" source="CISCO" adv="1">20120328 Cisco IOS Software Network Address Translation Vulnerability</ref>
-      <ref url="http://osvdb.org/80701" source="OSVDB">80701</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.4" />
-        <vers num="15.0" />
-        <vers num="15.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0384" published="2012-03-29" name="CVE-2012-0384" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:C/I:C/A:C)" CVSS_score="8.5" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="6.8" CVSS_base_score="8.5">
-    <desc>
-      <descript source="cve">Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG and 3.2.xSG before 3.2.2SG, when AAA authorization is enabled, allow remote authenticated users to bypass intended access restrictions and execute commands via a (1) HTTP or (2) HTTPS session, aka Bug ID CSCtr91106.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-pai" source="CISCO" adv="1">20120328 Cisco IOS Software Command Authorization Bypass</ref>
-      <ref url="http://osvdb.org/80704" source="OSVDB">80704</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.2" />
-        <vers num="12.2(1)" />
-        <vers num="12.2(1)dx" />
-        <vers num="12.2(1)s" />
-        <vers num="12.2(1)t" />
-        <vers num="12.2(1)xa" />
-        <vers num="12.2(1)xd" />
-        <vers num="12.2(1)xd1" />
-        <vers num="12.2(1)xd3" />
-        <vers num="12.2(1)xd4" />
-        <vers num="12.2(1)xe" />
-        <vers num="12.2(1)xe2" />
-        <vers num="12.2(1)xe3" />
-        <vers num="12.2(1)xh" />
-        <vers num="12.2(1)xq" />
-        <vers num="12.2(1)xs" />
-        <vers num="12.2(1)xs1" />
-        <vers num="12.2(1.1)" />
-        <vers num="12.2(1.1)pi" />
-        <vers num="12.2(1.4)s" />
-        <vers num="12.2(10)da2" />
-        <vers num="12.2(10)da4" />
-        <vers num="12.2(10.5)s" />
-        <vers num="12.2(10g)" />
-        <vers num="12.2(11)bc3c" />
-        <vers num="12.2(11)ja" />
-        <vers num="12.2(11)ja1" />
-        <vers num="12.2(11)t" />
-        <vers num="12.2(11)t2" />
-        <vers num="12.2(11)t3" />
-        <vers num="12.2(11)t8" />
-        <vers num="12.2(11)t9" />
-        <vers num="12.2(11)yp1" />
-        <vers num="12.2(11)yu" />
-        <vers num="12.2(11)yv" />
-        <vers num="12.2(11)yx1" />
-        <vers num="12.2(11)yz2" />
-        <vers num="12.2(12)" />
-        <vers num="12.2(12)da3" />
-        <vers num="12.2(12)da8" />
-        <vers num="12.2(12)da9" />
-        <vers num="12.2(12.02)s" />
-        <vers num="12.2(12.02)t" />
-        <vers num="12.2(12.05)" />
-        <vers num="12.2(12.05)s" />
-        <vers num="12.2(12.05)t" />
-        <vers num="12.2(12b)" />
-        <vers num="12.2(12c)" />
-        <vers num="12.2(12g)" />
-        <vers num="12.2(12h)" />
-        <vers num="12.2(12i)" />
-        <vers num="12.2(12m)" />
-        <vers num="12.2(13)" />
-        <vers num="12.2(13)ja1" />
-        <vers num="12.2(13)mc1" />
-        <vers num="12.2(13)t" />
-        <vers num="12.2(13)t1" />
-        <vers num="12.2(13)t14" />
-        <vers num="12.2(13)t16" />
-        <vers num="12.2(13)t9" />
-        <vers num="12.2(13)zc" />
-        <vers num="12.2(13)zd" />
-        <vers num="12.2(13)zd3" />
-        <vers num="12.2(13)zd4" />
-        <vers num="12.2(13)ze" />
-        <vers num="12.2(13)zf" />
-        <vers num="12.2(13)zg" />
-        <vers num="12.2(13)zh" />
-        <vers num="12.2(13)zh3" />
-        <vers num="12.2(13)zh8" />
-        <vers num="12.2(13)zj" />
-        <vers num="12.2(13)zk" />
-        <vers num="12.2(13)zl" />
-        <vers num="12.2(13.03)b" />
-        <vers num="12.2(13a)" />
-        <vers num="12.2(13e)" />
-        <vers num="12.2(14)s" />
-        <vers num="12.2(14)s13" />
-        <vers num="12.2(14)s14" />
-        <vers num="12.2(14)s15" />
-        <vers num="12.2(14)su2" />
-        <vers num="12.2(14)sx1" />
-        <vers num="12.2(14)sy" />
-        <vers num="12.2(14)sy03" />
-        <vers num="12.2(14)sy1" />
-        <vers num="12.2(14)sz" />
-        <vers num="12.2(14)sz1" />
-        <vers num="12.2(14)sz2" />
-        <vers num="12.2(14)za" />
-        <vers num="12.2(14)za2" />
-        <vers num="12.2(14)za8" />
-        <vers num="12.2(14.5)" />
-        <vers num="12.2(14.5)t" />
-        <vers num="12.2(15)b" />
-        <vers num="12.2(15)bc" />
-        <vers num="12.2(15)bc1" />
-        <vers num="12.2(15)bc1f" />
-        <vers num="12.2(15)bc2f" />
-        <vers num="12.2(15)bc2h" />
-        <vers num="12.2(15)bc2i" />
-        <vers num="12.2(15)bx" />
-        <vers num="12.2(15)bz" />
-        <vers num="12.2(15)cx" />
-        <vers num="12.2(15)cz3" />
-        <vers num="12.2(15)jk2" />
-        <vers num="12.2(15)jk4" />
-        <vers num="12.2(15)jk5" />
-        <vers num="12.2(15)mc1" />
-        <vers num="12.2(15)mc2c" />
-        <vers num="12.2(15)mc2e" />
-        <vers num="12.2(15)sl1" />
-        <vers num="12.2(15)t" />
-        <vers num="12.2(15)t15" />
-        <vers num="12.2(15)t16" />
-        <vers num="12.2(15)t17" />
-        <vers num="12.2(15)t5" />
-        <vers num="12.2(15)t7" />
-        <vers num="12.2(15)t8" />
-        <vers num="12.2(15)t9" />
-        <vers num="12.2(15)xr" />
-        <vers num="12.2(15)xr2" />
-        <vers num="12.2(15)ys" />
-        <vers num="12.2(15)ys_1.2(1)" />
-        <vers num="12.2(15)zj" />
-        <vers num="12.2(15)zj1" />
-        <vers num="12.2(15)zj2" />
-        <vers num="12.2(15)zj3" />
-        <vers num="12.2(15)zk" />
-        <vers num="12.2(15)zl" />
-        <vers num="12.2(15)zl1" />
-        <vers num="12.2(15)zn" />
-        <vers num="12.2(15)zo" />
-        <vers num="12.2(15.1)s" />
-        <vers num="12.2(16)b" />
-        <vers num="12.2(16)b1" />
-        <vers num="12.2(16)bx" />
-        <vers num="12.2(16.1)b" />
-        <vers num="12.2(16.5)s" />
-        <vers num="12.2(16f)" />
-        <vers num="12.2(17)" />
-        <vers num="12.2(17)a" />
-        <vers num="12.2(17)zd3" />
-        <vers num="12.2(17a)" />
-        <vers num="12.2(17a)sxa" />
-        <vers num="12.2(17b)sxa" />
-        <vers num="12.2(17d)" />
-        <vers num="12.2(17d)sx" />
-        <vers num="12.2(17d)sxb" />
-        <vers num="12.2(17d)sxb10" />
-        <vers num="12.2(17d)sxb7" />
-        <vers num="12.2(17d)sxb8" />
-        <vers num="12.2(17f)" />
-        <vers num="12.2(18)ew" />
-        <vers num="12.2(18)ew2" />
-        <vers num="12.2(18)ew3" />
-        <vers num="12.2(18)ew5" />
-        <vers num="12.2(18)ewa" />
-        <vers num="12.2(18)s" />
-        <vers num="12.2(18)s10" />
-        <vers num="12.2(18)s6" />
-        <vers num="12.2(18)s8" />
-        <vers num="12.2(18)s9" />
-        <vers num="12.2(18)se" />
-        <vers num="12.2(18)so4" />
-        <vers num="12.2(18)sv" />
-        <vers num="12.2(18)sv3" />
-        <vers num="12.2(18)sw" />
-        <vers num="12.2(18)sxd1" />
-        <vers num="12.2(18)sxd4" />
-        <vers num="12.2(18)sxd5" />
-        <vers num="12.2(18)sxd6" />
-        <vers num="12.2(18)sxd7" />
-        <vers num="12.2(18)sxe" />
-        <vers num="12.2(18)sxe1" />
-        <vers num="12.2(18)sxe3" />
-        <vers num="12.2(18)sxf" />
-        <vers num="12.2(18.2)" />
-        <vers num="12.2(19)" />
-        <vers num="12.2(19)b" />
-        <vers num="12.2(1b)" />
-        <vers num="12.2(1b)da1" />
-        <vers num="12.2(1d)" />
-        <vers num="12.2(2)b" />
-        <vers num="12.2(2)bx" />
-        <vers num="12.2(2)by" />
-        <vers num="12.2(2)by2" />
-        <vers num="12.2(2)dd3" />
-        <vers num="12.2(2)t" />
-        <vers num="12.2(2)t1" />
-        <vers num="12.2(2)t4" />
-        <vers num="12.2(2)xa" />
-        <vers num="12.2(2)xa1" />
-        <vers num="12.2(2)xa5" />
-        <vers num="12.2(2)xb" />
-        <vers num="12.2(2)xb11" />
-        <vers num="12.2(2)xb14" />
-        <vers num="12.2(2)xb15" />
-        <vers num="12.2(2)xb3" />
-        <vers num="12.2(2)xb4" />
-        <vers num="12.2(2)xc1" />
-        <vers num="12.2(2)xf" />
-        <vers num="12.2(2)xg" />
-        <vers num="12.2(2)xh" />
-        <vers num="12.2(2)xh2" />
-        <vers num="12.2(2)xh3" />
-        <vers num="12.2(2)xi" />
-        <vers num="12.2(2)xi1" />
-        <vers num="12.2(2)xi2" />
-        <vers num="12.2(2)xj" />
-        <vers num="12.2(2)xj1" />
-        <vers num="12.2(2)xk" />
-        <vers num="12.2(2)xk2" />
-        <vers num="12.2(2)xn" />
-        <vers num="12.2(2)xr" />
-        <vers num="12.2(2)xt" />
-        <vers num="12.2(2)xt3" />
-        <vers num="12.2(2)xu" />
-        <vers num="12.2(2)xu2" />
-        <vers num="12.2(2)yc" />
-        <vers num="12.2(2.2)t" />
-        <vers num="12.2(20)eu" />
-        <vers num="12.2(20)eu1" />
-        <vers num="12.2(20)eu2" />
-        <vers num="12.2(20)ew" />
-        <vers num="12.2(20)ew2" />
-        <vers num="12.2(20)ew3" />
-        <vers num="12.2(20)ewa" />
-        <vers num="12.2(20)ewa2" />
-        <vers num="12.2(20)ewa3" />
-        <vers num="12.2(20)s" />
-        <vers num="12.2(20)s1" />
-        <vers num="12.2(20)s2" />
-        <vers num="12.2(20)s4" />
-        <vers num="12.2(20)s7" />
-        <vers num="12.2(20)s8" />
-        <vers num="12.2(20)s9" />
-        <vers num="12.2(20)se3" />
-        <vers num="12.2(21)" />
-        <vers num="12.2(21a)" />
-        <vers num="12.2(21b)" />
-        <vers num="12.2(22)ea6" />
-        <vers num="12.2(22)s" />
-        <vers num="12.2(22)s2" />
-        <vers num="12.2(22)sv1" />
-        <vers num="12.2(23)" />
-        <vers num="12.2(23)sv1" />
-        <vers num="12.2(23)sw" />
-        <vers num="12.2(23.6)" />
-        <vers num="12.2(23a)" />
-        <vers num="12.2(23f)" />
-        <vers num="12.2(24)" />
-        <vers num="12.2(24)sv" />
-        <vers num="12.2(24)sv1" />
-        <vers num="12.2(25)ewa" />
-        <vers num="12.2(25)ewa1" />
-        <vers num="12.2(25)ewa3" />
-        <vers num="12.2(25)ewa4" />
-        <vers num="12.2(25)ex" />
-        <vers num="12.2(25)ey" />
-        <vers num="12.2(25)ey2" />
-        <vers num="12.2(25)ey3" />
-        <vers num="12.2(25)ez" />
-        <vers num="12.2(25)ez1" />
-        <vers num="12.2(25)fx" />
-        <vers num="12.2(25)fy" />
-        <vers num="12.2(25)s" />
-        <vers num="12.2(25)s1" />
-        <vers num="12.2(25)s3" />
-        <vers num="12.2(25)s4" />
-        <vers num="12.2(25)s6" />
-        <vers num="12.2(25)se" />
-        <vers num="12.2(25)seb" />
-        <vers num="12.2(25)seb2" />
-        <vers num="12.2(25)seb3" />
-        <vers num="12.2(25)seb4" />
-        <vers num="12.2(25)sec1" />
-        <vers num="12.2(25)sec2" />
-        <vers num="12.2(25)sed" />
-        <vers num="12.2(25)sg" />
-        <vers num="12.2(25)sv2" />
-        <vers num="12.2(25)sw" />
-        <vers num="12.2(25)sw3a" />
-        <vers num="12.2(25)sw4" />
-        <vers num="12.2(25)sw4a" />
-        <vers num="12.2(26)sv" />
-        <vers num="12.2(26)sv1" />
-        <vers num="12.2(26b)" />
-        <vers num="12.2(27)sbc" />
-        <vers num="12.2(27)sv1" />
-        <vers num="12.2(27b)" />
-        <vers num="12.2(28)" />
-        <vers num="12.2(28c)" />
-        <vers num="12.2(29a)" />
-        <vers num="12.2(3)" />
-        <vers num="12.2(3.4)bp" />
-        <vers num="12.2(30)s1" />
-        <vers num="12.2(31)" />
-        <vers num="12.2(3d)" />
-        <vers num="12.2(4)" />
-        <vers num="12.2(4)b" />
-        <vers num="12.2(4)b1" />
-        <vers num="12.2(4)b2" />
-        <vers num="12.2(4)b3" />
-        <vers num="12.2(4)b4" />
-        <vers num="12.2(4)bc1" />
-        <vers num="12.2(4)bc1a" />
-        <vers num="12.2(4)bx" />
-        <vers num="12.2(4)ja" />
-        <vers num="12.2(4)ja1" />
-        <vers num="12.2(4)mb12" />
-        <vers num="12.2(4)mb13b" />
-        <vers num="12.2(4)mb13c" />
-        <vers num="12.2(4)mb3" />
-        <vers num="12.2(4)mx" />
-        <vers num="12.2(4)mx1" />
-        <vers num="12.2(4)t" />
-        <vers num="12.2(4)t1" />
-        <vers num="12.2(4)t3" />
-        <vers num="12.2(4)t6" />
-        <vers num="12.2(4)xl" />
-        <vers num="12.2(4)xl4" />
-        <vers num="12.2(4)xm" />
-        <vers num="12.2(4)xm2" />
-        <vers num="12.2(4)xr" />
-        <vers num="12.2(4)xw" />
-        <vers num="12.2(4)xw1" />
-        <vers num="12.2(4)ya" />
-        <vers num="12.2(4)ya1" />
-        <vers num="12.2(4)ya10" />
-        <vers num="12.2(4)ya11" />
-        <vers num="12.2(4)ya7" />
-        <vers num="12.2(4)ya8" />
-        <vers num="12.2(4)ya9" />
-        <vers num="12.2(4)yb" />
-        <vers num="12.2(5)" />
-        <vers num="12.2(5)ca1" />
-        <vers num="12.2(5d)" />
-        <vers num="12.2(6.8)t0a" />
-        <vers num="12.2(6.8)t1a" />
-        <vers num="12.2(6.8a)" />
-        <vers num="12.2(6c)" />
-        <vers num="12.2(7)" />
-        <vers num="12.2(7)da" />
-        <vers num="12.2(7.4)s" />
-        <vers num="12.2(7a)" />
-        <vers num="12.2(7b)" />
-        <vers num="12.2(7c)" />
-        <vers num="12.2(8)bc1" />
-        <vers num="12.2(8)ja" />
-        <vers num="12.2(8)t" />
-        <vers num="12.2(8)t10" />
-        <vers num="12.2(8)tpc10a" />
-        <vers num="12.2(8)yd" />
-        <vers num="12.2(8)yw2" />
-        <vers num="12.2(8)yw3" />
-        <vers num="12.2(8)yy" />
-        <vers num="12.2(8)yy3" />
-        <vers num="12.2(8)zb7" />
-        <vers num="12.2(9)s" />
-        <vers num="12.2(9.4)da" />
-        <vers num="12.2b" />
-        <vers num="12.2bc" />
-        <vers num="12.2bw" />
-        <vers num="12.2bx" />
-        <vers num="12.2by" />
-        <vers num="12.2bz" />
-        <vers num="12.2ca" />
-        <vers num="12.2cx" />
-        <vers num="12.2cy" />
-        <vers num="12.2cz" />
-        <vers num="12.2da" />
-        <vers num="12.2dd" />
-        <vers num="12.2dx" />
-        <vers num="12.2e" />
-        <vers num="12.2eu" />
-        <vers num="12.2ew" />
-        <vers num="12.2ewa" />
-        <vers num="12.2ex" />
-        <vers num="12.2ey" />
-        <vers num="12.2ez" />
-        <vers num="12.2f" />
-        <vers num="12.2fx" />
-        <vers num="12.2fy" />
-        <vers num="12.2ja" />
-        <vers num="12.2jk" />
-        <vers num="12.2jx" />
-        <vers num="12.2mb" />
-        <vers num="12.2mc" />
-        <vers num="12.2mx" />
-        <vers num="12.2n" />
-        <vers num="12.2pb" />
-        <vers num="12.2pi" />
-        <vers num="12.2s" />
-        <vers num="12.2sa" />
-        <vers num="12.2sbc" />
-        <vers num="12.2se" />
-        <vers num="12.2sea" />
-        <vers num="12.2seb" />
-        <vers num="12.2sec" />
-        <vers num="12.2sg" />
-        <vers num="12.2sh" />
-        <vers num="12.2so" />
-        <vers num="12.2su" />
-        <vers num="12.2sv" />
-        <vers num="12.2sw" />
-        <vers num="12.2sx" />
-        <vers num="12.2sxa" />
-        <vers num="12.2sxb" />
-        <vers num="12.2sxd" />
-        <vers num="12.2sxe" />
-        <vers num="12.2sxf" />
-        <vers num="12.2sy" />
-        <vers num="12.2sz" />
-        <vers num="12.2t" />
-        <vers num="12.2tpc" />
-        <vers num="12.2x" />
-        <vers num="12.2xa" />
-        <vers num="12.2xb" />
-        <vers num="12.2xc" />
-        <vers num="12.2xd" />
-        <vers num="12.2xe" />
-        <vers num="12.2xf" />
-        <vers num="12.2xg" />
-        <vers num="12.2xh" />
-        <vers num="12.2xi" />
-        <vers num="12.2xj" />
-        <vers num="12.2xk" />
-        <vers num="12.2xl" />
-        <vers num="12.2xm" />
-        <vers num="12.2xn" />
-        <vers num="12.2xq" />
-        <vers num="12.2xr" />
-        <vers num="12.2xs" />
-        <vers num="12.2xt" />
-        <vers num="12.2xu" />
-        <vers num="12.2xv" />
-        <vers num="12.2xw" />
-        <vers num="12.2xz" />
-        <vers num="12.2ya" />
-        <vers num="12.2yb" />
-        <vers num="12.2yc" />
-        <vers num="12.2yd" />
-        <vers num="12.2ye" />
-        <vers num="12.2yf" />
-        <vers num="12.2yg" />
-        <vers num="12.2yh" />
-        <vers num="12.2yj" />
-        <vers num="12.2yk" />
-        <vers num="12.2yl" />
-        <vers num="12.2ym" />
-        <vers num="12.2yn" />
-        <vers num="12.2yo" />
-        <vers num="12.2yp" />
-        <vers num="12.2yq" />
-        <vers num="12.2yr" />
-        <vers num="12.2ys" />
-        <vers num="12.2yt" />
-        <vers num="12.2yu" />
-        <vers num="12.2yv" />
-        <vers num="12.2yw" />
-        <vers num="12.2yx" />
-        <vers num="12.2yy" />
-        <vers num="12.2yz" />
-        <vers num="12.2za" />
-        <vers num="12.2zb" />
-        <vers num="12.2zd" />
-        <vers num="12.2ze" />
-        <vers num="12.2zf" />
-        <vers num="12.2zg" />
-        <vers num="12.2zh" />
-        <vers num="12.2zi" />
-        <vers num="12.2zj" />
-        <vers num="12.2zk" />
-        <vers num="12.2zl" />
-        <vers num="12.2zm" />
-        <vers num="12.2zn" />
-        <vers num="12.2zo" />
-        <vers num="12.2zp" />
-        <vers num="12.2zq" />
-        <vers num="12.2zu" />
-        <vers num="12.2zx" />
-        <vers num="12.2zy" />
-        <vers num="12.2zya" />
-        <vers num="12.3" />
-        <vers num="12.3(10)" />
-        <vers num="12.3(10c)" />
-        <vers num="12.3(10d)" />
-        <vers num="12.3(10e)" />
-        <vers num="12.3(11)" />
-        <vers num="12.3(11)t" />
-        <vers num="12.3(11)t4" />
-        <vers num="12.3(11)t5" />
-        <vers num="12.3(11)t6" />
-        <vers num="12.3(11)t8" />
-        <vers num="12.3(11)t9" />
-        <vers num="12.3(11)xl" />
-        <vers num="12.3(11)xl3" />
-        <vers num="12.3(11)yf" />
-        <vers num="12.3(11)yf2" />
-        <vers num="12.3(11)yf3" />
-        <vers num="12.3(11)yf4" />
-        <vers num="12.3(11)yj" />
-        <vers num="12.3(11)yk" />
-        <vers num="12.3(11)yk1" />
-        <vers num="12.3(11)yk2" />
-        <vers num="12.3(11)yl" />
-        <vers num="12.3(11)yn" />
-        <vers num="12.3(11)yr" />
-        <vers num="12.3(11)ys" />
-        <vers num="12.3(11)ys1" />
-        <vers num="12.3(11)yw" />
-        <vers num="12.3(12)" />
-        <vers num="12.3(12b)" />
-        <vers num="12.3(12e)" />
-        <vers num="12.3(13)" />
-        <vers num="12.3(13a)" />
-        <vers num="12.3(13a)bc" />
-        <vers num="12.3(13a)bc1" />
-        <vers num="12.3(13b)" />
-        <vers num="12.3(14)t" />
-        <vers num="12.3(14)t2" />
-        <vers num="12.3(14)t4" />
-        <vers num="12.3(14)t5" />
-        <vers num="12.3(14)ym4" />
-        <vers num="12.3(14)yq" />
-        <vers num="12.3(14)yq1" />
-        <vers num="12.3(14)yq3" />
-        <vers num="12.3(14)yq4" />
-        <vers num="12.3(14)yt" />
-        <vers num="12.3(14)yt1" />
-        <vers num="12.3(14)yu" />
-        <vers num="12.3(14)yu1" />
-        <vers num="12.3(15)" />
-        <vers num="12.3(15b)" />
-        <vers num="12.3(16)" />
-        <vers num="12.3(1a)" />
-        <vers num="12.3(2)ja" />
-        <vers num="12.3(2)ja5" />
-        <vers num="12.3(2)jk" />
-        <vers num="12.3(2)jk1" />
-        <vers num="12.3(2)t3" />
-        <vers num="12.3(2)t8" />
-        <vers num="12.3(2)xa4" />
-        <vers num="12.3(2)xa5" />
-        <vers num="12.3(2)xc1" />
-        <vers num="12.3(2)xc2" />
-        <vers num="12.3(2)xc3" />
-        <vers num="12.3(2)xc4" />
-        <vers num="12.3(2)xe3" />
-        <vers num="12.3(2)xe4" />
-        <vers num="12.3(3e)" />
-        <vers num="12.3(3h)" />
-        <vers num="12.3(3i)" />
-        <vers num="12.3(4)eo1" />
-        <vers num="12.3(4)ja" />
-        <vers num="12.3(4)ja1" />
-        <vers num="12.3(4)t" />
-        <vers num="12.3(4)t1" />
-        <vers num="12.3(4)t2" />
-        <vers num="12.3(4)t3" />
-        <vers num="12.3(4)t4" />
-        <vers num="12.3(4)t8" />
-        <vers num="12.3(4)tpc11a" />
-        <vers num="12.3(4)xd" />
-        <vers num="12.3(4)xd1" />
-        <vers num="12.3(4)xd2" />
-        <vers num="12.3(4)xe4" />
-        <vers num="12.3(4)xg1" />
-        <vers num="12.3(4)xg2" />
-        <vers num="12.3(4)xg4" />
-        <vers num="12.3(4)xg5" />
-        <vers num="12.3(4)xh" />
-        <vers num="12.3(4)xk" />
-        <vers num="12.3(4)xk1" />
-        <vers num="12.3(4)xk3" />
-        <vers num="12.3(4)xk4" />
-        <vers num="12.3(4)xq" />
-        <vers num="12.3(4)xq1" />
-        <vers num="12.3(5)" />
-        <vers num="12.3(5)b1" />
-        <vers num="12.3(5a)" />
-        <vers num="12.3(5a)b" />
-        <vers num="12.3(5a)b2" />
-        <vers num="12.3(5a)b5" />
-        <vers num="12.3(5b)" />
-        <vers num="12.3(5c)" />
-        <vers num="12.3(5e)" />
-        <vers num="12.3(5f)" />
-        <vers num="12.3(6)" />
-        <vers num="12.3(6a)" />
-        <vers num="12.3(6d)" />
-        <vers num="12.3(6e)" />
-        <vers num="12.3(6f)" />
-        <vers num="12.3(7)ja" />
-        <vers num="12.3(7)ja1" />
-        <vers num="12.3(7)jx" />
-        <vers num="12.3(7)t" />
-        <vers num="12.3(7)t10" />
-        <vers num="12.3(7)t12" />
-        <vers num="12.3(7)t4" />
-        <vers num="12.3(7)t8" />
-        <vers num="12.3(7)t9" />
-        <vers num="12.3(7)xi3" />
-        <vers num="12.3(7)xi4" />
-        <vers num="12.3(7)xi7" />
-        <vers num="12.3(7)xr3" />
-        <vers num="12.3(7)xr4" />
-        <vers num="12.3(7)xr6" />
-        <vers num="12.3(7.7)" />
-        <vers num="12.3(8)ja" />
-        <vers num="12.3(8)ja1" />
-        <vers num="12.3(8)t11" />
-        <vers num="12.3(8)t4" />
-        <vers num="12.3(8)t7" />
-        <vers num="12.3(8)t8" />
-        <vers num="12.3(8)t9" />
-        <vers num="12.3(8)xu2" />
-        <vers num="12.3(8)xy4" />
-        <vers num="12.3(8)xy5" />
-        <vers num="12.3(8)xy6" />
-        <vers num="12.3(8)ya1" />
-        <vers num="12.3(8)yd" />
-        <vers num="12.3(8)yf" />
-        <vers num="12.3(8)yg" />
-        <vers num="12.3(8)yg1" />
-        <vers num="12.3(8)yg2" />
-        <vers num="12.3(8)yg3" />
-        <vers num="12.3(8)yh" />
-        <vers num="12.3(8)yi" />
-        <vers num="12.3(8)yi1" />
-        <vers num="12.3(8)yi3" />
-        <vers num="12.3(9)" />
-        <vers num="12.3(9a)bc" />
-        <vers num="12.3(9a)bc2" />
-        <vers num="12.3(9a)bc6" />
-        <vers num="12.3(9a)bc7" />
-        <vers num="12.3(9d)" />
-        <vers num="12.3(9e)" />
-        <vers num="12.3b" />
-        <vers num="12.3bc" />
-        <vers num="12.3bw" />
-        <vers num="12.3j" />
-        <vers num="12.3ja" />
-        <vers num="12.3jea" />
-        <vers num="12.3jeb" />
-        <vers num="12.3jec" />
-        <vers num="12.3jk" />
-        <vers num="12.3jx" />
-        <vers num="12.3t" />
-        <vers num="12.3tpc" />
-        <vers num="12.3xa" />
-        <vers num="12.3xb" />
-        <vers num="12.3xc" />
-        <vers num="12.3xd" />
-        <vers num="12.3xe" />
-        <vers num="12.3xf" />
-        <vers num="12.3xg" />
-        <vers num="12.3xh" />
-        <vers num="12.3xi" />
-        <vers num="12.3xj" />
-        <vers num="12.3xk" />
-        <vers num="12.3xl" />
-        <vers num="12.3xm" />
-        <vers num="12.3xn" />
-        <vers num="12.3xq" />
-        <vers num="12.3xr" />
-        <vers num="12.3xs" />
-        <vers num="12.3xt" />
-        <vers num="12.3xu" />
-        <vers num="12.3xv" />
-        <vers num="12.3xw" />
-        <vers num="12.3xx" />
-        <vers num="12.3xy" />
-        <vers num="12.3xz" />
-        <vers num="12.3ya" />
-        <vers num="12.3yb" />
-        <vers num="12.3yc" />
-        <vers num="12.3yd" />
-        <vers num="12.3ye" />
-        <vers num="12.3yf" />
-        <vers num="12.3yg" />
-        <vers num="12.3yh" />
-        <vers num="12.3yi" />
-        <vers num="12.3yj" />
-        <vers num="12.3yk" />
-        <vers num="12.3yl" />
-        <vers num="12.3ym" />
-        <vers num="12.3yn" />
-        <vers num="12.3yq" />
-        <vers num="12.3yr" />
-        <vers num="12.3ys" />
-        <vers num="12.3yt" />
-        <vers num="12.3yu" />
-        <vers num="12.3yw" />
-        <vers num="12.3yx" />
-        <vers num="12.3yz" />
-        <vers num="12.4" />
-        <vers num="12.4(1)" />
-        <vers num="12.4(1b)" />
-        <vers num="12.4(1c)" />
-        <vers num="12.4(2)mr" />
-        <vers num="12.4(2)mr1" />
-        <vers num="12.4(2)t" />
-        <vers num="12.4(2)t1" />
-        <vers num="12.4(2)t2" />
-        <vers num="12.4(2)t3" />
-        <vers num="12.4(2)t4" />
-        <vers num="12.4(2)xa" />
-        <vers num="12.4(2)xb" />
-        <vers num="12.4(2)xb2" />
-        <vers num="12.4(23)" />
-        <vers num="12.4(3)" />
-        <vers num="12.4(3)t2" />
-        <vers num="12.4(3a)" />
-        <vers num="12.4(3b)" />
-        <vers num="12.4(3d)" />
-        <vers num="12.4(4)mr" />
-        <vers num="12.4(4)t" />
-        <vers num="12.4(4)t2" />
-        <vers num="12.4(5)" />
-        <vers num="12.4(5b)" />
-        <vers num="12.4(6)t" />
-        <vers num="12.4(6)t1" />
-        <vers num="12.4(7)" />
-        <vers num="12.4(7a)" />
-        <vers num="12.4(8)" />
-        <vers num="12.4(9)t" />
-        <vers num="12.4ja" />
-        <vers num="12.4jda" />
-        <vers num="12.4jk" />
-        <vers num="12.4jl" />
-        <vers num="12.4jma" />
-        <vers num="12.4jmb" />
-        <vers num="12.4jx" />
-        <vers num="12.4md" />
-        <vers num="12.4mr" />
-        <vers num="12.4sw" />
-        <vers num="12.4t" />
-        <vers num="12.4xa" />
-        <vers num="12.4xb" />
-        <vers num="12.4xc" />
-        <vers num="12.4xd" />
-        <vers num="12.4xe" />
-        <vers num="12.4xf" />
-        <vers num="12.4xg" />
-        <vers num="12.4xj" />
-        <vers num="12.4xk" />
-        <vers num="12.4xl" />
-        <vers num="12.4xm" />
-        <vers num="12.4xn" />
-        <vers num="12.4xp" />
-        <vers num="12.4xt" />
-        <vers num="12.4xv" />
-        <vers num="12.4xw" />
-        <vers num="15.0" />
-        <vers num="15.0(1)s1" />
-        <vers num="15.0(1)s2" />
-        <vers num="15.0m" />
-        <vers num="15.0mr" />
-        <vers num="15.0mra" />
-        <vers num="15.0s" />
-        <vers num="15.0sa" />
-        <vers num="15.0sg" />
-        <vers num="15.0xa" />
-        <vers num="15.0xo" />
-        <vers num="15.1" />
-        <vers num="15.1(1)xb1" />
-        <vers num="15.1(2)t" />
-        <vers num="15.1(3)t" />
-        <vers num="15.1(4)m" />
-        <vers num="15.1(4)m1" />
-        <vers num="15.1ey" />
-        <vers num="15.1gc" />
-        <vers num="15.1m" />
-        <vers num="15.1s" />
-        <vers num="15.1t" />
-        <vers num="15.1xb" />
-        <vers num="15.2" />
-      </prod>
-      <prod vendor="cisco" name="ios_xe">
-        <vers num="2.1" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.1t" />
-        <vers num="2.3.2" />
-        <vers num="2.4" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="3.1.0s" />
-        <vers num="3.1.0sg" />
-        <vers num="3.1.1s" />
-        <vers num="3.1.1sg" />
-        <vers num="3.1.2s" />
-        <vers num="3.1.3s" />
-        <vers num="3.1.4s" />
-        <vers num="3.2.0s" />
-        <vers num="3.2.1s" />
-        <vers num="3.2.2s" />
-        <vers num="3.3.0s" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0385" published="2012-03-29" name="CVE-2012-0385" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The Smart Install feature in Cisco IOS 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (device reload) by sending a malformed Smart Install message over TCP, aka Bug ID CSCtt16051.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-smartinstall" source="CISCO" adv="1">20120328 Cisco IOS Software Smart Install Denial of Service Vulnerability</ref>
-      <ref url="http://osvdb.org/80694" source="OSVDB">80694</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.2" />
-        <vers num="15.0" />
-        <vers num="15.1" />
-        <vers num="15.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0386" published="2012-03-29" name="CVE-2012-0386" modified="2012-04-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The SSHv2 implementation in Cisco IOS 12.2, 12.4, 15.0, 15.1, and 15.2 and IOS XE 2.3.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S allows remote attackers to cause a denial of service (device reload) via a crafted username in a reverse SSH login attempt, aka Bug ID CSCtr49064.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-ssh" source="CISCO" adv="1">20120328 Cisco IOS Software Reverse SSH Denial of Service Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.2" />
-        <vers num="12.4" />
-        <vers num="15.0" />
-        <vers num="15.1" />
-        <vers num="15.2" />
-      </prod>
-      <prod vendor="cisco" name="ios_xe">
-        <vers num="2.3" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.1t" />
-        <vers num="2.3.2" />
-        <vers num="2.4" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="3.1.0s" />
-        <vers num="3.1.0sg" />
-        <vers num="3.1.1s" />
-        <vers num="3.1.1sg" />
-        <vers num="3.1.2s" />
-        <vers num="3.1.3s" />
-        <vers num="3.1.4s" />
-        <vers num="3.2.0s" />
-        <vers num="3.2.1s" />
-        <vers num="3.2.2s" />
-        <vers num="3.3.0s" />
-        <vers num="3.4.0s" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0387" published="2012-03-29" name="CVE-2012-0387" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit HTTP traffic, aka Bug ID CSCtq36153.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-zbfw" source="CISCO" adv="1">20120328 Cisco IOS Software Zone-Based Firewall Vulnerabilities</ref>
-      <ref url="http://osvdb.org/80697" source="OSVDB">80697</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.4" />
-        <vers num="15.0" />
-        <vers num="15.1" />
-        <vers num="15.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0388" published="2012-03-29" name="CVE-2012-0388" modified="2012-04-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Memory leak in the H.323 inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed transit H.323 traffic, aka Bug ID CSCtq45553.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-zbfw" source="CISCO" adv="1">20120328 Cisco IOS Software Zone-Based Firewall Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.4" />
-        <vers num="15.0" />
-        <vers num="15.1" />
-        <vers num="15.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0389" published="2012-01-24" name="CVE-2012-0389" modified="2012-02-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allows remote attackers to inject arbitrary web script or HTML via the Username parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.mailenable.com/kb/Content/Article.asp?ID=me020567" source="CONFIRM" patch="1" adv="1">http://www.mailenable.com/kb/Content/Article.asp?ID=me020567</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72380" source="XF">mailenable-forgottenpassword-xss(72380)</ref>
-      <ref url="http://www.securitytracker.com/id?1026519" source="SECTRACK">1026519</ref>
-      <ref url="http://www.securityfocus.com/bid/51401" source="BID">51401</ref>
-      <ref url="http://www.nerv.fi/CVE-2012-0389.txt" source="MISC">http://www.nerv.fi/CVE-2012-0389.txt</ref>
-      <ref url="http://www.exploit-db.com/exploits/18447" source="EXPLOIT-DB">18447</ref>
-      <ref url="http://secunia.com/advisories/47562" source="SECUNIA" adv="1">47562</ref>
-      <ref url="http://secunia.com/advisories/47518" source="SECUNIA" adv="1">47518</ref>
-      <ref url="http://osvdb.org/78242" source="OSVDB">78242</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0090.html" source="BUGTRAQ">20120112 ME020567: MailEnable webmail cross-site scripting vulnerability CVE-2012-0389</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mailenable" name="mailenable">
-        <vers num="1.00" edition="" />
-        <vers num="1.00" edition=":enterprise" />
-        <vers num="1.01" edition="" />
-        <vers num="1.01" edition=":enterprise" />
-        <vers num="1.02" edition="" />
-        <vers num="1.02" edition=":enterprise" />
-        <vers num="1.03" edition="" />
-        <vers num="1.03" edition=":enterprise" />
-        <vers num="1.04" edition="" />
-        <vers num="1.04" edition=":enterprise" />
-        <vers num="1.1" edition="" />
-        <vers num="1.1" edition=":enterprise" />
-        <vers num="1.17" edition="" />
-        <vers num="1.17" edition=":professional" />
-        <vers num="1.18" edition="" />
-        <vers num="1.18" edition=":professional" />
-        <vers num="1.19" edition="" />
-        <vers num="1.19" edition=":professional" />
-        <vers num="1.2" edition="" />
-        <vers num="1.2" edition=":enterprise" />
-        <vers num="1.2" edition=":professional" />
-        <vers num="1.21" edition="" />
-        <vers num="1.21" edition=":enterprise" />
-        <vers num="1.22" edition="" />
-        <vers num="1.22" edition=":enterprise" />
-        <vers num="1.23" edition="" />
-        <vers num="1.23" edition=":enterprise" />
-        <vers num="1.24" edition="" />
-        <vers num="1.24" edition=":enterprise" />
-        <vers num="1.25" edition="" />
-        <vers num="1.25" edition=":enterprise" />
-        <vers num="1.26" edition="" />
-        <vers num="1.26" edition=":enterprise" />
-        <vers num="1.2a" edition="" />
-        <vers num="1.2a" edition=":professional" />
-        <vers num="1.5" edition="" />
-        <vers num="1.5" edition=":professional" />
-        <vers num="1.51" edition="" />
-        <vers num="1.51" edition=":professional" />
-        <vers num="1.52" edition="" />
-        <vers num="1.52" edition=":professional" />
-        <vers num="1.53" edition="" />
-        <vers num="1.53" edition=":professional" />
-        <vers num="1.54" edition="" />
-        <vers num="1.54" edition=":professional" />
-        <vers num="1.6" edition="" />
-        <vers num="1.6" edition=":professional" />
-        <vers num="1.7" edition="" />
-        <vers num="1.7" edition=":professional" />
-        <vers num="1.70" edition="" />
-        <vers num="1.70" edition=":professional" />
-        <vers num="1.71" edition="" />
-        <vers num="1.71" edition=":professional" />
-        <vers num="1.72" edition="" />
-        <vers num="1.72" edition=":professional" />
-        <vers num="1.73" edition="" />
-        <vers num="1.73" edition=":professional" />
-        <vers num="1.74" edition="" />
-        <vers num="1.74" edition=":professional" />
-        <vers num="1.75" edition="" />
-        <vers num="1.75" edition=":professional" />
-        <vers num="1.76" edition="" />
-        <vers num="1.76" edition=":professional" />
-        <vers num="1.77" edition="" />
-        <vers num="1.77" edition=":professional" />
-        <vers num="1.78" edition="" />
-        <vers num="1.78" edition=":professional" />
-        <vers num="1.79" edition="" />
-        <vers num="1.79" edition=":professional" />
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:pro" />
-        <vers num="3.0" edition="-:enterprise" />
-        <vers num="3.01" edition="-" />
-        <vers num="3.01" edition="-:pro" />
-        <vers num="3.01" edition="-:enterprise" />
-        <vers num="3.02" edition="-" />
-        <vers num="3.02" edition="-:enterprise" />
-        <vers num="3.02" edition="-:pro" />
-        <vers num="3.03" edition="-" />
-        <vers num="3.03" edition="-:enterprise" />
-        <vers num="3.03" edition="-:pro" />
-        <vers num="3.04" edition="-" />
-        <vers num="3.04" edition="-:enterprise" />
-        <vers num="3.04" edition="-:pro" />
-        <vers num="3.10" edition="-" />
-        <vers num="3.10" edition="-:enterprise" />
-        <vers num="3.10" edition="-:pro" />
-        <vers num="3.11" edition="-" />
-        <vers num="3.11" edition="-:enterprise" />
-        <vers num="3.11" edition="-:pro" />
-        <vers num="3.12" edition="-" />
-        <vers num="3.12" edition="-:pro" />
-        <vers num="3.12" edition="-:enterprise" />
-        <vers num="3.13" edition="-" />
-        <vers num="3.13" edition="-:pro" />
-        <vers num="3.13" edition="-:enterprise" />
-        <vers num="3.14" edition="-" />
-        <vers num="3.14" edition="-:pro" />
-        <vers num="3.14" edition="-:enterprise" />
-        <vers num="3.5" edition="-" />
-        <vers num="3.5" edition="-:pro" />
-        <vers num="3.5" edition="-:enterprise" />
-        <vers num="3.51" edition="-" />
-        <vers num="3.51" edition="-:enterprise" />
-        <vers num="3.51" edition="-:pro" />
-        <vers num="3.52" edition="" />
-        <vers num="3.52" edition=":professional" />
-        <vers num="3.52" edition=":enterprise" />
-        <vers num="3.52" edition="-" />
-        <vers num="3.52" edition="-:pro" />
-        <vers num="3.52" edition="-:enterprise" />
-        <vers num="3.53" edition="-" />
-        <vers num="3.53" edition="-:enterprise" />
-        <vers num="3.53" edition="-:pro" />
-        <vers num="3.6" edition="-" />
-        <vers num="3.6" edition="-:enterprise" />
-        <vers num="3.6" edition="-:pro" />
-        <vers num="3.61" edition="-" />
-        <vers num="3.61" edition="-:pro" />
-        <vers num="3.61" edition="-:enterprise" />
-        <vers num="3.62" edition="-" />
-        <vers num="3.62" edition="-:enterprise" />
-        <vers num="3.62" edition="-:pro" />
-        <vers num="3.63" edition="-" />
-        <vers num="3.63" edition="-:pro" />
-        <vers num="3.63" edition="-:enterprise" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:enterprise" />
-        <vers num="4.0" edition="-:pro" />
-        <vers num="4.01" edition="-" />
-        <vers num="4.01" edition="-:enterprise" />
-        <vers num="4.01" edition="-:pro" />
-        <vers num="4.1" edition="" />
-        <vers num="4.1" edition=":premium" />
-        <vers num="4.1" edition="-" />
-        <vers num="4.1" edition="-:enterprise" />
-        <vers num="4.1" edition="-:pro" />
-        <vers num="4.11" edition="-" />
-        <vers num="4.11" edition="-:pro" />
-        <vers num="4.11" edition="-:enterprise" />
-        <vers num="4.12" edition="-" />
-        <vers num="4.12" edition="-:enterprise" />
-        <vers num="4.12" edition="-:pro" />
-        <vers num="4.13" edition="-" />
-        <vers num="4.13" edition="-:enterprise" />
-        <vers num="4.13" edition="-:pro" />
-        <vers num="4.14" edition="-" />
-        <vers num="4.14" edition="-:enterprise" />
-        <vers num="4.14" edition="-:pro" />
-        <vers num="4.15" edition="-" />
-        <vers num="4.15" edition="-:enterprise" />
-        <vers num="4.15" edition="-:pro" />
-        <vers num="4.16" edition="-" />
-        <vers num="4.16" edition="-:pro" />
-        <vers num="4.16" edition="-:enterprise" />
-        <vers num="4.17" edition="-" />
-        <vers num="4.17" edition="-:pro" />
-        <vers num="4.17" edition="-:enterprise" />
-        <vers num="4.2" edition="" />
-        <vers num="4.2" edition=":premium" />
-        <vers num="4.21" edition="" />
-        <vers num="4.21" edition=":premium" />
-        <vers num="4.22" edition="" />
-        <vers num="4.22" edition=":premium" />
-        <vers num="4.22" edition="-" />
-        <vers num="4.22" edition="-:pro" />
-        <vers num="4.22" edition="-:enterprise" />
-        <vers num="4.23" edition="" />
-        <vers num="4.23" edition=":premium" />
-        <vers num="4.23" edition="-" />
-        <vers num="4.23" edition="-:enterprise" />
-        <vers num="4.23" edition="-:pro" />
-        <vers num="4.24" edition="" />
-        <vers num="4.24" edition=":premium" />
-        <vers num="4.24" edition="-" />
-        <vers num="4.24" edition="-:enterprise" />
-        <vers num="4.24" edition="-:pro" />
-        <vers num="4.25" edition="" />
-        <vers num="4.25" edition=":premium" />
-        <vers num="4.25" edition="-" />
-        <vers num="4.25" edition="-:pro" />
-        <vers num="4.25" edition="-:enterprise" />
-        <vers prev="1" num="4.26" edition="" />
-        <vers prev="1" num="4.26" edition=":premium" />
-        <vers prev="1" num="4.26" edition="-" />
-        <vers prev="1" num="4.26" edition="-:pro" />
-        <vers prev="1" num="4.26" edition="-:enterprise" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":premium" />
-        <vers num="5.0" edition=":professional" />
-        <vers num="5.0" edition=":enterprise" />
-        <vers num="5.01" edition="" />
-        <vers num="5.01" edition=":professional" />
-        <vers num="5.01" edition=":enterprise" />
-        <vers num="5.01" edition=":premium" />
-        <vers num="5.02" edition="" />
-        <vers num="5.02" edition=":professional" />
-        <vers num="5.02" edition=":enterprise" />
-        <vers num="5.02" edition=":premium" />
-        <vers num="5.03" edition="" />
-        <vers num="5.03" edition=":premium" />
-        <vers num="5.03" edition=":professional" />
-        <vers num="5.03" edition=":enterprise" />
-        <vers num="5.04" edition="" />
-        <vers num="5.04" edition=":professional" />
-        <vers num="5.04" edition=":premium" />
-        <vers num="5.04" edition=":enterprise" />
-        <vers num="5.05" edition="" />
-        <vers num="5.05" edition=":enterprise" />
-        <vers num="5.05" edition=":premium" />
-        <vers num="5.05" edition=":professional" />
-        <vers num="5.06" edition="" />
-        <vers num="5.06" edition=":premium" />
-        <vers num="5.06" edition=":enterprise" />
-        <vers num="5.06" edition=":professional" />
-        <vers num="5.07" edition="" />
-        <vers num="5.07" edition=":premium" />
-        <vers num="5.07" edition=":professional" />
-        <vers num="5.07" edition=":enterprise" />
-        <vers num="5.10" edition="" />
-        <vers num="5.10" edition=":premium" />
-        <vers num="5.10" edition=":enterprise" />
-        <vers num="5.10" edition=":professional" />
-        <vers num="5.11" edition="" />
-        <vers num="5.11" edition=":premium" />
-        <vers num="5.11" edition=":professional" />
-        <vers num="5.11" edition=":enterprise" />
-        <vers num="5.5" edition="" />
-        <vers num="5.5" edition=":professional" />
-        <vers num="5.5" edition=":premium" />
-        <vers num="5.5" edition=":enterprise" />
-        <vers num="5.51" edition="" />
-        <vers num="5.51" edition=":professional" />
-        <vers num="5.51" edition=":enterprise" />
-        <vers num="5.51" edition=":premium" />
-        <vers num="5.52" edition="" />
-        <vers num="5.52" edition=":professional" />
-        <vers num="5.52" edition=":premium" />
-        <vers num="5.52" edition=":enterprise" />
-        <vers num="6.0" edition="" />
-        <vers num="6.0" edition=":enterprise" />
-        <vers num="6.0" edition=":premium" />
-        <vers num="6.0" edition=":professional" />
-        <vers num="6.01" edition="" />
-        <vers num="6.01" edition=":premium" />
-        <vers num="6.01" edition=":professional" />
-        <vers num="6.01" edition=":enterprise" />
-        <vers num="6.02" edition="" />
-        <vers num="6.02" edition=":enterprise" />
-        <vers num="6.02" edition=":professional" />
-        <vers num="6.02" edition=":premium" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0390" published="2012-01-05" name="CVE-2012-0390" modified="2012-01-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related issue to CVE-2011-4108.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.isg.rhul.ac.uk/~kp/dtls.pdf" source="MISC">http://www.isg.rhul.ac.uk/~kp/dtls.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnu" name="gnutls">
-        <vers num="2.10.0" />
-        <vers num="2.10.1" />
-        <vers num="2.10.1-x86" />
-        <vers num="2.10.2" />
-        <vers num="2.10.2-x86" />
-        <vers num="2.10.3" />
-        <vers num="2.10.4" />
-        <vers num="2.10.5" />
-        <vers num="2.10.5-x86" />
-        <vers num="2.12.0" />
-        <vers num="2.12.1" />
-        <vers num="2.12.10" />
-        <vers num="2.12.11" />
-        <vers num="2.12.12" />
-        <vers num="2.12.13" />
-        <vers num="2.12.14" />
-        <vers num="2.12.2" />
-        <vers num="2.12.3" />
-        <vers num="2.12.4" />
-        <vers num="2.12.5" />
-        <vers num="2.12.6" />
-        <vers num="2.12.6.1" />
-        <vers num="2.12.7" />
-        <vers num="2.12.8" />
-        <vers num="2.12.9" />
-        <vers num="2.2.4" />
-        <vers num="2.2.5" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.8.0" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" />
-        <vers num="2.8.5" />
-        <vers num="2.8.6" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers prev="1" num="3.0.10" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0391" published="2012-01-08" name="CVE-2012-0391" modified="2012-01-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a crafted parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt" source="MISC">https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt</ref>
-      <ref url="https://issues.apache.org/jira/browse/WW-3668" source="CONFIRM">https://issues.apache.org/jira/browse/WW-3668</ref>
-      <ref url="http://www.exploit-db.com/exploits/18329" source="EXPLOIT-DB">18329</ref>
-      <ref url="http://struts.apache.org/2.x/docs/version-notes-2311.html" source="CONFIRM">http://struts.apache.org/2.x/docs/version-notes-2311.html</ref>
-      <ref url="http://struts.apache.org/2.x/docs/s2-008.html" source="CONFIRM" adv="1">http://struts.apache.org/2.x/docs/s2-008.html</ref>
-      <ref url="http://secunia.com/advisories/47393" source="SECUNIA" adv="1">47393</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html" source="BUGTRAQ">20120105 SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="struts">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.11.1" />
-        <vers num="2.0.11.2" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.8" />
-        <vers num="2.1.8.1" />
-        <vers num="2.2.1" />
-        <vers num="2.2.1.1" />
-        <vers prev="1" num="2.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0392" published="2012-01-08" name="CVE-2012-0392" modified="2012-01-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt" source="MISC">https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt</ref>
-      <ref url="https://lists.immunityinc.com/pipermail/dailydave/2012-January/000011.html" source="MLIST">[dailydave] 20120106 Apache Struts</ref>
-      <ref url="http://www.exploit-db.com/exploits/18329" source="EXPLOIT-DB">18329</ref>
-      <ref url="http://struts.apache.org/2.x/docs/version-notes-2311.html" source="CONFIRM">http://struts.apache.org/2.x/docs/version-notes-2311.html</ref>
-      <ref url="http://struts.apache.org/2.x/docs/s2-008.html" source="CONFIRM" adv="1">http://struts.apache.org/2.x/docs/s2-008.html</ref>
-      <ref url="http://secunia.com/advisories/47393" source="SECUNIA" adv="1">47393</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html" source="BUGTRAQ">20120105 SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="struts">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.11.1" />
-        <vers num="2.0.11.2" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.8" />
-        <vers num="2.1.8.1" />
-        <vers num="2.2.1" />
-        <vers num="2.2.1.1" />
-        <vers prev="1" num="2.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0393" published="2012-01-08" name="CVE-2012-0393" modified="2012-01-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt" source="MISC">https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt</ref>
-      <ref url="http://www.exploit-db.com/exploits/18329" source="EXPLOIT-DB">18329</ref>
-      <ref url="http://struts.apache.org/2.x/docs/version-notes-2311.html" source="CONFIRM">http://struts.apache.org/2.x/docs/version-notes-2311.html</ref>
-      <ref url="http://struts.apache.org/2.x/docs/s2-008.html" source="CONFIRM" adv="1">http://struts.apache.org/2.x/docs/s2-008.html</ref>
-      <ref url="http://secunia.com/advisories/47393" source="SECUNIA" adv="1">47393</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html" source="BUGTRAQ">20120105 SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="struts">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.11.1" />
-        <vers num="2.0.11.2" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.8" />
-        <vers num="2.1.8.1" />
-        <vers num="2.2.1" />
-        <vers num="2.2.1.1" />
-        <vers num="2.2.3" />
-        <vers prev="1" num="2.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0394" published="2012-01-08" name="CVE-2012-0394" modified="2012-01-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">** DISPUTED ** The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors.  NOTE: the vendor characterizes this behavior as not "a security vulnerability itself."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt" source="MISC">https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt</ref>
-      <ref url="http://www.exploit-db.com/exploits/18329" source="EXPLOIT-DB">18329</ref>
-      <ref url="http://struts.apache.org/2.x/docs/version-notes-2311.html" source="MISC">http://struts.apache.org/2.x/docs/version-notes-2311.html</ref>
-      <ref url="http://struts.apache.org/2.x/docs/s2-008.html" source="MISC" adv="1">http://struts.apache.org/2.x/docs/s2-008.html</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html" source="BUGTRAQ">20120105 SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="struts">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.11.1" />
-        <vers num="2.0.11.2" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.8" />
-        <vers num="2.1.8.1" />
-        <vers num="2.2.1" />
-        <vers num="2.2.1.1" />
-        <vers prev="1" num="2.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0395" published="2012-01-26" name="CVE-2012-0395" modified="2012-02-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in the server in EMC NetWorker 7.5.x and 7.6.x before 7.6.3 SP1 Cumulative Release build 851 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/521374" source="BUGTRAQ">20120126 ESA-2012-005: EMC NetWorker buffer overflow vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emc" name="networker">
-        <vers num="7.5" edition="sp1" />
-        <vers num="7.5" edition="sp2" />
-        <vers num="7.5" edition="sp3" />
-        <vers num="7.5.2.0" />
-        <vers num="7.5.2.1" />
-        <vers num="7.5.2.2" />
-        <vers num="7.5.2.3" />
-        <vers num="7.5.2.4" />
-        <vers num="7.5.3" />
-        <vers num="7.5.3.1" />
-        <vers num="7.5.3.2" />
-        <vers num="7.5.3.3" />
-        <vers num="7.5.3.4" />
-        <vers num="7.5.3.5" />
-        <vers num="7.5.4" />
-        <vers num="7.5.4.1" />
-        <vers num="7.5.4.2" />
-        <vers num="7.5.4.3" />
-        <vers num="7.6" edition="sp1" />
-        <vers num="7.6" edition="sp2" />
-        <vers num="7.6.0.2" />
-        <vers num="7.6.0.3" />
-        <vers num="7.6.0.4" />
-        <vers num="7.6.0.5" />
-        <vers num="7.6.0.6" />
-        <vers num="7.6.0.7" />
-        <vers num="7.6.0.8" />
-        <vers num="7.6.0.9" />
-        <vers num="7.6.1" />
-        <vers num="7.6.1.1" />
-        <vers num="7.6.1.2" />
-        <vers num="7.6.1.3" />
-        <vers num="7.6.1.4" />
-        <vers num="7.6.1.5" />
-        <vers num="7.6.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0396" published="2012-02-06" name="CVE-2012-0396" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">EMC Documentum xPlore 1.0, 1.1 before P07, and 1.2 does not properly enforce the requirement for BROWSE permission, which allows remote authenticated users to determine the existence of an object, or read object metadata, via a search.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72994" source="XF">emc-documentum-info-disc(72994)</ref>
-      <ref url="http://www.securityfocus.com/bid/51863" source="BID">51863</ref>
-      <ref url="http://securitytracker.com/id?1026639" source="SECTRACK">1026639</ref>
-      <ref url="http://secunia.com/advisories/47920" source="SECUNIA" adv="1">47920</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0020.html" source="BUGTRAQ">20120203 ESA-2012-010: EMC Documentum xPlore information disclosure vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emc" name="documentum_xplore">
-        <vers num="1.0" />
-        <vers num="1.1" edition="p01" />
-        <vers num="1.1" edition="p03" />
-        <vers num="1.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0397" published="2012-03-06" name="CVE-2012-0397" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="7.6" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="4.9" CVSS_base_score="7.6">
-    <desc>
-      <descript source="cve">Buffer overflow in EMC RSA SecurID Software Token Converter before 2.6.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/521885" source="BUGTRAQ">20120305 ESA-2012-013: RSA SecurID(r) Software Token Converter buffer overflow vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rsa" name="securid_software_token_converter">
-        <vers prev="1" num="2.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0398" published="2012-03-14" name="CVE-2012-0398" modified="2012-03-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0057.html" source="BUGTRAQ">20120313 ESA-2012-012: EMC Documentum eRoom Multiple Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emc" name="documentum_eroom">
-        <vers num="7.3.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers prev="1" num="7.4.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0399" published="2012-03-20" name="CVE-2012-0399" modified="2012-06-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52557" source="BID">52557</ref>
-      <ref url="http://osvdb.org/80206" source="OSVDB">80206</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0081.html" source="BUGTRAQ">20120318 ESA-2012-014: RSA enVision Multiple Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rsa" name="envision">
-        <vers num="4.0" edition="sp1" />
-        <vers num="4.0" edition="sp2" />
-        <vers num="4.0" edition="sp3" />
-        <vers num="4.0" edition="sp4" />
-        <vers num="4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0400" published="2012-03-20" name="CVE-2012-0400" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:A/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="7.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="5.5" CVSS_base_score="7.9">
-    <desc>
-      <descript source="cve">EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74140" source="XF">envision-weak-security(74140)</ref>
-      <ref url="http://www.securityfocus.com/bid/52557" source="BID">52557</ref>
-      <ref url="http://osvdb.org/80207" source="OSVDB">80207</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0081.html" source="BUGTRAQ">20120318 ESA-2012-014: RSA enVision Multiple Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rsa" name="envision">
-        <vers num="4.0" edition="sp1" />
-        <vers num="4.0" edition="sp2" />
-        <vers num="4.0" edition="sp3" />
-        <vers num="4.0" edition="sp4" />
-        <vers num="4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0401" published="2012-03-20" name="CVE-2012-0401" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74137" source="XF">envision-unspec-sql-injection(74137)</ref>
-      <ref url="http://www.securityfocus.com/bid/52557" source="BID">52557</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0081.html" source="BUGTRAQ">20120318 ESA-2012-014: RSA enVision Multiple Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rsa" name="envision">
-        <vers num="4.0" edition="sp1" />
-        <vers num="4.0" edition="sp2" />
-        <vers num="4.0" edition="sp3" />
-        <vers num="4.0" edition="sp4" />
-        <vers num="4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0402" published="2012-03-20" name="CVE-2012-0402" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">EMC RSA enVision 4.x before 4.1 Patch 4 uses unspecified hardcoded credentials, which makes it easier for remote attackers to obtain access via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74138" source="XF">envision-default-account(74138)</ref>
-      <ref url="http://www.securityfocus.com/bid/52557" source="BID">52557</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0081.html" source="BUGTRAQ">20120318 ESA-2012-014: RSA enVision Multiple Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rsa" name="envision">
-        <vers num="4.0" edition="sp1" />
-        <vers num="4.0" edition="sp2" />
-        <vers num="4.0" edition="sp3" />
-        <vers num="4.0" edition="sp4" />
-        <vers num="4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0403" published="2012-03-20" name="CVE-2012-0403" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:C/I:N/A:N)" CVSS_score="6.3" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="6.8" CVSS_base_score="6.3">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in EMC RSA enVision 4.x before 4.1 Patch 4 allows remote authenticated users to have an unspecified impact via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74139" source="XF">envision-unspec-dir-traversal(74139)</ref>
-      <ref url="http://www.securityfocus.com/bid/52557" source="BID">52557</ref>
-      <ref url="http://osvdb.org/80210" source="OSVDB">80210</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0081.html" source="BUGTRAQ">20120318 ESA-2012-014: RSA enVision Multiple Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rsa" name="envision">
-        <vers num="4.0" edition="sp1" />
-        <vers num="4.0" edition="sp2" />
-        <vers num="4.0" edition="sp3" />
-        <vers num="4.0" edition="sp4" />
-        <vers num="4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0404" published="2012-03-14" name="CVE-2012-0404" modified="2012-03-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in EMC Documentum eRoom before 7.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0057.html" source="BUGTRAQ">20120313 ESA-2012-012: EMC Documentum eRoom Multiple Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emc" name="documentum_eroom">
-        <vers num="7.3.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers prev="1" num="7.4.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0406" published="2012-04-20" name="CVE-2012-0406" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026956" source="SECTRACK">1026956</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522408/30/0/threaded" source="BUGTRAQ">20120418 ESA-2012-018: EMC Data Protection Advisor Multiple Vulnerabilities</ref>
-      <ref url="http://www.exploit-db.com/exploits/18688/" source="EXPLOIT-DB">18688</ref>
-      <ref url="http://aluigi.altervista.org/adv/dpa_1-adv.txt" source="MISC">http://aluigi.altervista.org/adv/dpa_1-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emc" name="data_protection_advisor">
-        <vers num="5.5" edition="sp1" />
-        <vers num="5.6" edition="sp1" />
-        <vers num="5.7" edition="sp1" />
-        <vers num="5.8" edition="sp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0407" published="2012-04-20" name="CVE-2012-0407" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Integer overflow in the DPA_Utilities library in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (infinite loop) via a negative 64-bit value in a certain size field.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026956" source="SECTRACK">1026956</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522408/30/0/threaded" source="BUGTRAQ">20120418 ESA-2012-018: EMC Data Protection Advisor Multiple Vulnerabilities</ref>
-      <ref url="http://www.exploit-db.com/exploits/18688/" source="EXPLOIT-DB">18688</ref>
-      <ref url="http://aluigi.altervista.org/adv/dpa_1-adv.txt" source="MISC">http://aluigi.altervista.org/adv/dpa_1-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emc" name="data_protection_advisor">
-        <vers num="5.5" edition="sp1" />
-        <vers num="5.6" edition="sp1" />
-        <vers num="5.7" edition="sp1" />
-        <vers num="5.8" edition="sp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0409" published="2012-06-01" name="CVE-2012-0409" modified="2012-06-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service (agent crash) or possibly execute arbitrary code via crafted packets.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522835" source="BUGTRAQ">20120522 ESA-2012-020: EMC AutoStart Multiple Buffer Overflow Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emc" name="autostart">
-        <vers num="5.3" edition="sp1" />
-        <vers num="5.3" edition="sp2" />
-        <vers num="5.3" edition="sp3" />
-        <vers num="5.4" />
-        <vers num="5.4.1" />
-        <vers num="5.4.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0410" published="2012-07-05" name="CVE-2012-0410" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the User.interface parameter.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=712163" source="CONFIRM">https://bugzilla.novell.com/show_bug.cgi?id=712163</ref>
-      <ref url="http://www.novell.com/support/kb/doc.php?id=7000708" source="CONFIRM" adv="1">http://www.novell.com/support/kb/doc.php?id=7000708</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="novell" name="groupwise">
-        <vers num="5.2" />
-        <vers num="5.5" />
-        <vers num="5.57e" />
-        <vers num="6.0" />
-        <vers num="6.0.1" edition="sp1" />
-        <vers num="6.5" edition="sp1" />
-        <vers num="6.5" edition="sp2" />
-        <vers num="6.5" edition="sp3" />
-        <vers num="6.5" edition="sp4" />
-        <vers num="6.5" edition="sp5" />
-        <vers num="6.5" edition="sp6" />
-        <vers num="6.5.2" />
-        <vers num="6.5.3" />
-        <vers num="6.5.4" />
-        <vers num="6.5.6" />
-        <vers num="6.5.7" />
-        <vers num="7.0" />
-        <vers num="7.0.3" edition="hp4" />
-        <vers num="7.0.3" edition="hp5" />
-        <vers num="7.0.4" edition="ftf" />
-        <vers num="7.01" edition="ir1" />
-        <vers num="7.02" edition="hp1" />
-        <vers num="7.02" edition="hp1a" />
-        <vers num="7.02" edition="hp2" />
-        <vers num="7.02" edition="hp2r1" />
-        <vers num="7.03" edition="hp" />
-        <vers num="7.03" edition="hp2" />
-        <vers num="7.03" edition="hp3" />
-        <vers num="7.03" edition="hp3+ftf" />
-        <vers num="8.0" />
-        <vers num="8.00" edition="hp1" />
-        <vers num="8.00" edition="hp2" />
-        <vers num="8.01" edition="hp" />
-        <vers prev="1" num="8.02" edition="hp1" />
-        <vers prev="1" num="8.02" edition="hp2" />
-        <vers prev="1" num="8.02" edition="hp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0421" published="2012-08-08" name="CVE-2012-0421" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.novell.com/771335" source="CONFIRM">https://bugzilla.novell.com/771335</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00001.html" source="SUSE" adv="1">SUSE-SU-2012:0958</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="novell" name="suse_audit_log_keeper">
-        <vers prev="1" num="0.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0440" published="2012-02-02" name="CVE-2012-0440" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="5.1" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="4.9" CVSS_base_score="5.1">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in jsonrpc.cgi in Bugzilla 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x before 4.2rc2 allows remote attackers to hijack the authentication of arbitrary users for requests that use the JSON-RPC API.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=718319" source="CONFIRM" patch="1">https://bugzilla.mozilla.org/show_bug.cgi?id=718319</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72882" source="XF">bugzilla-jsonrpc-csrf(72882)</ref>
-      <ref url="http://www.securitytracker.com/id?1026623" source="SECTRACK">1026623</ref>
-      <ref url="http://www.bugzilla.org/security/3.4.13/" source="CONFIRM" adv="1">http://www.bugzilla.org/security/3.4.13/</ref>
-      <ref url="http://secunia.com/advisories/47814" source="SECUNIA">47814</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="bugzilla">
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.6" edition="rc1" />
-        <vers num="3.6.0" />
-        <vers num="3.6.1" />
-        <vers num="3.6.2" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.5" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.7" />
-        <vers num="3.7.1" />
-        <vers num="3.7.2" />
-        <vers num="3.7.3" />
-        <vers num="4.0" edition="rc1" />
-        <vers num="4.0" edition="rc2" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="4.1.3" />
-        <vers num="4.2" edition="rc1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0441" published="2012-06-05" name="CVE-2012-0441" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) before 3.13.4, as used in Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10, allows remote attackers to cause a denial of service (application crash) via a zero-length item, as demonstrated by (1) a zero-length basic constraint or (2) a zero-length field in an OCSP response.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=715073" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=715073</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-39.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-39.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-      <prod vendor="mozilla" name="network_security_services">
-        <vers num="3.11.2" />
-        <vers num="3.11.3" />
-        <vers num="3.11.4" />
-        <vers num="3.11.5" />
-        <vers num="3.12" />
-        <vers num="3.12.1" />
-        <vers num="3.12.2" />
-        <vers prev="1" num="3.12.3" />
-        <vers num="3.2" />
-        <vers num="3.2.1" />
-        <vers num="3.3" />
-        <vers num="3.3.1" />
-        <vers num="3.3.2" />
-        <vers num="3.4" />
-        <vers num="3.4.1" />
-        <vers num="3.4.2" />
-        <vers num="3.5" />
-        <vers num="3.6" />
-        <vers num="3.6.1" />
-        <vers num="3.7" />
-        <vers num="3.7.1" />
-        <vers num="3.7.2" />
-        <vers num="3.7.3" />
-        <vers num="3.7.5" />
-        <vers num="3.7.7" />
-        <vers num="3.8" />
-        <vers num="3.9" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0442" published="2012-02-01" name="CVE-2012-0442" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=705347" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=705347</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=693399" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=693399</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-01.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-01.html</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:013" source="MANDRIVA">MDVSA-2012:013</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2400" source="DEBIAN">DSA-2400</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14678" source="OVAL">oval:org.mitre.oval:def:14678</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html" source="SUSE">openSUSE-SU-2012:0234</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html" source="SUSE">SUSE-SU-2012:0221</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html" source="SUSE">SUSE-SU-2012:0198</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="0.1" />
-        <vers num="0.10" />
-        <vers num="0.10.1" />
-        <vers num="0.2" />
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.8" />
-        <vers num="0.9" edition="rc" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers prev="1" num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="0.1" />
-        <vers num="0.2" />
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="0.6" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.8" />
-        <vers num="0.9" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers prev="1" num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0443" published="2012-02-01" name="CVE-2012-0443" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=715662" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=715662</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=714600" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=714600</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=713209" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=713209</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=712289" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=712289</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=712169" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=712169</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=711651" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=711651</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=707051" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=707051</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=696748" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=696748</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=695076" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=695076</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=692817" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=692817</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=684938" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=684938</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=665578" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=665578</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-01.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-01.html</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:013" source="MANDRIVA">MDVSA-2012:013</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14444" source="OVAL">oval:org.mitre.oval:def:14444</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html" source="SUSE">openSUSE-SU-2012:0234</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="2." edition="beta3" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0444" published="2012-02-01" name="CVE-2012-0444" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=719612" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=719612</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72858" source="XF">mozilla-nschildview-code-exec(72858)</ref>
-      <ref url="http://www.securityfocus.com/bid/51753" source="BID">51753</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-07.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-07.html</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:013" source="MANDRIVA">MDVSA-2012:013</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2400" source="DEBIAN">DSA-2400</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14464" source="OVAL">oval:org.mitre.oval:def:14464</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html" source="SUSE">openSUSE-SU-2012:0234</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html" source="SUSE">SUSE-SU-2012:0221</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html" source="SUSE">SUSE-SU-2012:0198</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="0.1" />
-        <vers num="0.10" />
-        <vers num="0.10.1" />
-        <vers num="0.2" />
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.8" />
-        <vers num="0.9" edition="rc" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers prev="1" num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="0.1" />
-        <vers num="0.2" />
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="0.6" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.8" />
-        <vers num="0.9" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers prev="1" num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0445" published="2012-02-01" name="CVE-2012-0445" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and replace arbitrary sub-frames by creating a form submission target with a sub-frame's name attribute.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=701071" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=701071</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72835" source="XF">mozilla-iframeelement-security-bypass(72835)</ref>
-      <ref url="http://www.securityfocus.com/bid/51765" source="BID">51765</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-03.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-03.html</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:013" source="MANDRIVA">MDVSA-2012:013</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14907" source="OVAL">oval:org.mitre.oval:def:14907</ref>
-      <ref url="http://osvdb.org/78735" source="OSVDB">78735</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html" source="SUSE">openSUSE-SU-2012:0234</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0446" published="2012-02-01" name="CVE-2012-0446" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to inject arbitrary web script or HTML via a (1) web page or (2) Firefox extension, related to improper enforcement of XPConnect security restrictions for frame scripts that call untrusted objects.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=705651" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=705651</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72837" source="XF">mozilla-xpconnect-xss(72837)</ref>
-      <ref url="http://www.securityfocus.com/bid/51752" source="BID">51752</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-05.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-05.html</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:013" source="MANDRIVA">MDVSA-2012:013</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14304" source="OVAL">oval:org.mitre.oval:def:14304</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html" source="SUSE">openSUSE-SU-2012:0234</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0447" published="2012-02-01" name="CVE-2012-0447" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain potentially sensitive information by reading a PNG image that was created through conversion from an ICO image.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=710079" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=710079</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72856" source="XF">mozilla-mimagebuffersize-info-disclosure(72856)</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-06.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-06.html</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:013" source="MANDRIVA">MDVSA-2012:013</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14912" source="OVAL">oval:org.mitre.oval:def:14912</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html" source="SUSE">openSUSE-SU-2012:0234</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="2." edition="beta3" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0448" published="2012-02-02" name="CVE-2012-0448" modified="2012-02-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Bugzilla 2.x and 3.x before 3.4.14, 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x before 4.2rc2 does not reject non-ASCII characters in e-mail addresses of new user accounts, which makes it easier for remote authenticated users to spoof other user accounts by choosing a similar e-mail address.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=714472" source="CONFIRM" patch="1">https://bugzilla.mozilla.org/show_bug.cgi?id=714472</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72877" source="XF">bugzilla-unspecified-spoofing(72877)</ref>
-      <ref url="http://www.securitytracker.com/id?1026623" source="SECTRACK">1026623</ref>
-      <ref url="http://www.securityfocus.com/bid/51784" source="BID">51784</ref>
-      <ref url="http://www.bugzilla.org/security/3.4.13/" source="CONFIRM" adv="1">http://www.bugzilla.org/security/3.4.13/</ref>
-      <ref url="http://secunia.com/advisories/47814" source="SECUNIA">47814</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="bugzilla">
-        <vers num="2.0" />
-        <vers num="2.10" />
-        <vers num="2.12" />
-        <vers num="2.14" />
-        <vers num="2.14.1" />
-        <vers num="2.14.2" />
-        <vers num="2.14.3" />
-        <vers num="2.14.4" />
-        <vers num="2.14.5" />
-        <vers num="2.16" edition="rc1" />
-        <vers num="2.16" edition="rc2" />
-        <vers num="2.16.1" />
-        <vers num="2.16.10" />
-        <vers num="2.16.11" />
-        <vers num="2.16.2" />
-        <vers num="2.16.3" />
-        <vers num="2.16.4" />
-        <vers num="2.16.5" />
-        <vers num="2.16.6" />
-        <vers num="2.16.7" />
-        <vers num="2.16.8" />
-        <vers num="2.16.9" />
-        <vers num="2.17" />
-        <vers num="2.17.1" />
-        <vers num="2.17.2" />
-        <vers num="2.17.3" />
-        <vers num="2.17.4" />
-        <vers num="2.17.5" />
-        <vers num="2.17.6" />
-        <vers num="2.17.7" />
-        <vers num="2.18" edition="rc1" />
-        <vers num="2.18" edition="rc2" />
-        <vers num="2.18" edition="rc3" />
-        <vers num="2.18.1" />
-        <vers num="2.18.2" />
-        <vers num="2.18.3" />
-        <vers num="2.18.4" />
-        <vers num="2.18.5" />
-        <vers num="2.18.6" />
-        <vers num="2.18.6+" />
-        <vers num="2.18.7" />
-        <vers num="2.18.8" />
-        <vers num="2.18.9" />
-        <vers num="2.19" />
-        <vers num="2.19.1" />
-        <vers num="2.19.2" />
-        <vers num="2.19.3" />
-        <vers num="2.2" />
-        <vers num="2.20" edition="rc1" />
-        <vers num="2.20" edition="rc2" />
-        <vers num="2.20.1" />
-        <vers num="2.20.2" />
-        <vers num="2.20.3" />
-        <vers num="2.20.4" />
-        <vers num="2.20.5" />
-        <vers num="2.20.6" />
-        <vers num="2.20.7" />
-        <vers num="2.21" />
-        <vers num="2.21.1" />
-        <vers num="2.21.2" edition="rc1" />
-        <vers num="2.22" edition="rc1" />
-        <vers num="2.22.1" />
-        <vers num="2.22.2" />
-        <vers num="2.22.3" />
-        <vers num="2.22.4" />
-        <vers num="2.22.5" />
-        <vers num="2.22.6" />
-        <vers num="2.22.7" />
-        <vers num="2.23" />
-        <vers num="2.23.1" />
-        <vers num="2.23.2" />
-        <vers num="2.23.3" />
-        <vers num="2.23.4" />
-        <vers num="2.4" />
-        <vers num="2.6" />
-        <vers num="2.8" />
-        <vers num="2.9" />
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.2" edition="rc1" />
-        <vers num="3.2" edition="rc2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.10" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" />
-        <vers num="3.2.8" />
-        <vers num="3.2.9" />
-        <vers num="3.3" />
-        <vers num="3.3.1" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers num="3.3.4" />
-        <vers num="3.4" edition="rc1" />
-        <vers num="3.4.1" />
-        <vers num="3.4.10" />
-        <vers num="3.4.11" />
-        <vers num="3.4.12" />
-        <vers num="3.4.13" />
-        <vers num="3.4.2" />
-        <vers num="3.4.3" />
-        <vers num="3.4.4" />
-        <vers num="3.4.5" />
-        <vers num="3.4.6" />
-        <vers num="3.4.7" />
-        <vers num="3.4.8" />
-        <vers num="3.4.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.6" edition="rc1" />
-        <vers num="3.6.0" />
-        <vers num="3.6.1" />
-        <vers num="3.6.2" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.5" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.7" />
-        <vers num="3.7.1" />
-        <vers num="3.7.2" />
-        <vers num="3.7.3" />
-        <vers num="4.0" edition="rc1" />
-        <vers num="4.0" edition="rc2" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="4.1.3" />
-        <vers num="4.2" edition="rc1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0449" published="2012-02-01" name="CVE-2012-0449" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed XSLT stylesheet that is embedded in a document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=702466" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=702466</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=701806" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=701806</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72868" source="XF">mozilla-xsltstylesheets-code-execution(72868)</ref>
-      <ref url="http://www.securityfocus.com/bid/51754" source="BID">51754</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-08.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-08.html</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:013" source="MANDRIVA">MDVSA-2012:013</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2400" source="DEBIAN">DSA-2400</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14618" source="OVAL">oval:org.mitre.oval:def:14618</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html" source="SUSE">openSUSE-SU-2012:0234</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html" source="SUSE">SUSE-SU-2012:0221</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html" source="SUSE">SUSE-SU-2012:0198</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="0.1" />
-        <vers num="0.10" />
-        <vers num="0.10.1" />
-        <vers num="0.2" />
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.8" />
-        <vers num="0.9" edition="rc" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers prev="1" num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="0.1" />
-        <vers num="0.2" />
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="0.6" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.8" />
-        <vers num="0.9" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers prev="1" num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0450" published="2012-02-01" name="CVE-2012-0450" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standard filesystem operations.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=716868" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=716868</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72869" source="XF">mozilla-keyhtml-info-disclosure(72869)</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-09.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-09.html</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:013" source="MANDRIVA">MDVSA-2012:013</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14670" source="OVAL">oval:org.mitre.oval:def:14670</ref>
-      <ref url="http://osvdb.org/78741" source="OSVDB">78741</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html" source="SUSE">openSUSE-SU-2012:0234</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0451" published="2012-03-14" name="CVE-2012-0451" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=717511" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=717511</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-5" source="UBUNTU">USN-1400-5</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-4" source="UBUNTU">USN-1400-4</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-3" source="UBUNTU">USN-1400-3</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-2" source="UBUNTU">USN-1400-2</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-15.html" source="CONFIRM">http://www.mozilla.org/security/announce/2012/mfsa2012-15.html</ref>
-      <ref url="http://secunia.com/advisories/48629" source="SECUNIA">48629</ref>
-      <ref url="http://secunia.com/advisories/48553" source="SECUNIA">48553</ref>
-      <ref url="http://secunia.com/advisories/48513" source="SECUNIA">48513</ref>
-      <ref url="http://secunia.com/advisories/48496" source="SECUNIA">48496</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14909" source="OVAL">oval:org.mitre.oval:def:14909</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE">openSUSE-SU-2012:0417</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.1" />
-        <vers num="10.2" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0452" published="2012-02-10" name="CVE-2012-0452" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger failure of an nsXBLDocumentInfo::ReadPrototypeBindings function call, related to the cycle collector's access to a hash table containing a stale XBL binding.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=724284" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=724284</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1360-1" source="UBUNTU">USN-1360-1</ref>
-      <ref url="http://www.securityfocus.com/bid/51975" source="BID">51975</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-10.html" source="CONFIRM">http://www.mozilla.org/security/announce/2012/mfsa2012-10.html</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:018" source="MANDRIVA">MDVSA-2012:018</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:017" source="MANDRIVA">MDVSA-2012:017</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15017" source="OVAL">oval:org.mitre.oval:def:15017</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00013.html" source="SUSE">SUSE-SU-2012:0261</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00012.html" source="SUSE">openSUSE-SU-2012:0258</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.7" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0453" published="2012-02-24" name="CVE-2012-0453" modified="2012-02-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="5.1" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="4.9" CVSS_base_score="5.1">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in xmlrpc.cgi in Bugzilla 4.0.2 through 4.0.4 and 4.1.1 through 4.2rc2, when mod_perl is used, allows remote attackers to hijack the authentication of arbitrary users for requests that modify the product's installation via the XML-RPC API.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=725663" source="CONFIRM" patch="1">https://bugzilla.mozilla.org/show_bug.cgi?id=725663</ref>
-      <ref url="http://www.bugzilla.org/security/4.0.4/" source="CONFIRM" patch="1" adv="1">http://www.bugzilla.org/security/4.0.4/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="bugzilla">
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="4.1.3" />
-        <vers num="4.2" edition="rc1" />
-        <vers num="4.2" edition="rc2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0454" published="2012-03-14" name="CVE-2012-0454" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 on 32-bit Windows 7 platforms allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving use of the file-open dialog in a child window, related to the IUnknown_QueryService function in the Windows shlwapi.dll library.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=684555" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=684555</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-12.html" source="CONFIRM">http://www.mozilla.org/security/announce/2012/mfsa2012-12.html</ref>
-      <ref url="http://secunia.com/advisories/48629" source="SECUNIA">48629</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14258" source="OVAL">oval:org.mitre.oval:def:14258</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.1" />
-        <vers num="10.2" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0455" published="2012-03-14" name="CVE-2012-0455" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict drag-and-drop operations on javascript: URLs, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web page, related to a "DragAndDropJacking" issue.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=704354" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=704354</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1401-1" source="UBUNTU">USN-1401-1</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-5" source="UBUNTU">USN-1400-5</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-4" source="UBUNTU">USN-1400-4</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-3" source="UBUNTU">USN-1400-3</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-2" source="UBUNTU">USN-1400-2</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-13.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-13.html</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2433" source="DEBIAN">DSA-2433</ref>
-      <ref url="http://secunia.com/advisories/48629" source="SECUNIA">48629</ref>
-      <ref url="http://secunia.com/advisories/48553" source="SECUNIA">48553</ref>
-      <ref url="http://secunia.com/advisories/48513" source="SECUNIA">48513</ref>
-      <ref url="http://secunia.com/advisories/48496" source="SECUNIA">48496</ref>
-      <ref url="http://secunia.com/advisories/48495" source="SECUNIA">48495</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14829" source="OVAL">oval:org.mitre.oval:def:14829</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE">openSUSE-SU-2012:0417</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" edition="" />
-        <vers num="1.0.6" edition=":linux" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="2.0" edition="-" />
-        <vers num="2.0" edition="-:linux" />
-        <vers num="2.0" edition="beta1" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0" edition="rc3" />
-        <vers num="2.0.0.1" edition="-" />
-        <vers num="2.0.0.1" edition="-:linux" />
-        <vers num="2.0.0.10" edition="-" />
-        <vers num="2.0.0.10" edition="-:linux" />
-        <vers num="2.0.0.11" edition="-" />
-        <vers num="2.0.0.11" edition="-:linux" />
-        <vers num="2.0.0.12" edition="-" />
-        <vers num="2.0.0.12" edition="-:linux" />
-        <vers num="2.0.0.13" edition="-" />
-        <vers num="2.0.0.13" edition="-:linux" />
-        <vers num="2.0.0.14" edition="-" />
-        <vers num="2.0.0.14" edition="-:linux" />
-        <vers num="2.0.0.15" edition="-" />
-        <vers num="2.0.0.15" edition="-:linux" />
-        <vers num="2.0.0.16" edition="-" />
-        <vers num="2.0.0.16" edition="-:linux" />
-        <vers num="2.0.0.17" edition="-" />
-        <vers num="2.0.0.17" edition="-:linux" />
-        <vers num="2.0.0.18" edition="-" />
-        <vers num="2.0.0.18" edition="-:linux" />
-        <vers num="2.0.0.19" edition="-" />
-        <vers num="2.0.0.19" edition="-:linux" />
-        <vers num="2.0.0.2" edition="-" />
-        <vers num="2.0.0.2" edition="-:linux" />
-        <vers num="2.0.0.20" edition="-" />
-        <vers num="2.0.0.20" edition="-:linux" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.3" edition="-" />
-        <vers num="2.0.0.3" edition="-:linux" />
-        <vers num="2.0.0.4" edition="-" />
-        <vers num="2.0.0.4" edition="-:linux" />
-        <vers num="2.0.0.5" edition="-" />
-        <vers num="2.0.0.5" edition="-:linux" />
-        <vers num="2.0.0.6" edition="-" />
-        <vers num="2.0.0.6" edition="-:linux" />
-        <vers num="2.0.0.7" edition="-" />
-        <vers num="2.0.0.7" edition="-:linux" />
-        <vers num="2.0.0.8" edition="-" />
-        <vers num="2.0.0.8" edition="-:linux" />
-        <vers num="2.0.0.9" edition="-" />
-        <vers num="2.0.0.9" edition="-:linux" />
-        <vers num="2.0_.1" />
-        <vers num="2.0_.10" />
-        <vers num="2.0_.4" />
-        <vers num="2.0_.5" />
-        <vers num="2.0_.6" />
-        <vers num="2.0_.7" />
-        <vers num="2.0_.9" />
-        <vers num="2.0_8" />
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:linux" />
-        <vers num="3.0" edition="alpha" />
-        <vers num="3.0" edition="beta2" />
-        <vers num="3.0" edition="beta5" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:linux" />
-        <vers num="3.0.10" edition="-" />
-        <vers num="3.0.10" edition="-:linux" />
-        <vers num="3.0.11" edition="-" />
-        <vers num="3.0.11" edition="-:linux" />
-        <vers num="3.0.12" edition="-" />
-        <vers num="3.0.12" edition="-:linux" />
-        <vers num="3.0.13" edition="-" />
-        <vers num="3.0.13" edition="-:linux" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.19" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:linux" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:linux" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:linux" />
-        <vers num="3.0.5" edition="-" />
-        <vers num="3.0.5" edition="-:linux" />
-        <vers num="3.0.6" edition="-" />
-        <vers num="3.0.6" edition="-:linux" />
-        <vers num="3.0.7" edition="-" />
-        <vers num="3.0.7" edition="-:linux" />
-        <vers num="3.0.8" edition="-" />
-        <vers num="3.0.8" edition="-:linux" />
-        <vers num="3.0.9" edition="-" />
-        <vers num="3.0.9" edition="-:linux" />
-        <vers num="3.0beta5" />
-        <vers num="3.1" edition="beta1" />
-        <vers num="3.2" edition="beta1" />
-        <vers num="3.2" edition="beta2" />
-        <vers num="3.2" edition="beta3" />
-        <vers num="3.5" edition="-" />
-        <vers num="3.5" edition="-:linux" />
-        <vers num="3.5.1" edition="-" />
-        <vers num="3.5.1" edition="-:linux" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.16" />
-        <vers num="3.5.17" />
-        <vers num="3.5.18" />
-        <vers num="3.5.19" />
-        <vers num="3.5.2" edition="" />
-        <vers num="3.5.2" edition=":linux" />
-        <vers num="3.5.2" edition="-" />
-        <vers num="3.5.2" edition="-:linux" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" edition="a1" />
-        <vers num="3.6" edition="a1:" />
-        <vers num="3.6" edition="a1::linux" />
-        <vers num="3.6" edition="a1:-" />
-        <vers num="3.6" edition="a1:-:linux" />
-        <vers num="3.6" edition="a1_pre" />
-        <vers num="3.6" edition="beta1" />
-        <vers num="3.6" edition="beta2" />
-        <vers num="3.6.1" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.26" />
-        <vers prev="1" num="3.6.27" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.1" />
-        <vers num="10.2" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="2.0_.12" />
-        <vers num="2.0_.13" />
-        <vers num="2.0_.14" />
-        <vers num="2.0_.4" />
-        <vers num="2.0_.5" />
-        <vers num="2.0_.6" />
-        <vers num="2.0_.9" />
-        <vers num="2.0_8" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.18" />
-        <vers prev="1" num="3.1.19" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0456" published="2012-03-14" name="CVE-2012-0456" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to obtain sensitive information from process memory via vectors that trigger an out-of-bounds read.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=711653" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=711653</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1401-1" source="UBUNTU">USN-1401-1</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-5" source="UBUNTU">USN-1400-5</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-4" source="UBUNTU">USN-1400-4</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-3" source="UBUNTU">USN-1400-3</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-2" source="UBUNTU">USN-1400-2</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-14.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-14.html</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2433" source="DEBIAN">DSA-2433</ref>
-      <ref url="http://secunia.com/advisories/48629" source="SECUNIA">48629</ref>
-      <ref url="http://secunia.com/advisories/48553" source="SECUNIA">48553</ref>
-      <ref url="http://secunia.com/advisories/48513" source="SECUNIA">48513</ref>
-      <ref url="http://secunia.com/advisories/48496" source="SECUNIA">48496</ref>
-      <ref url="http://secunia.com/advisories/48495" source="SECUNIA">48495</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15007" source="OVAL">oval:org.mitre.oval:def:15007</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE">openSUSE-SU-2012:0417</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" edition="" />
-        <vers num="1.0.6" edition=":linux" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="2.0" edition="-" />
-        <vers num="2.0" edition="-:linux" />
-        <vers num="2.0" edition="beta1" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0" edition="rc3" />
-        <vers num="2.0.0.1" edition="-" />
-        <vers num="2.0.0.1" edition="-:linux" />
-        <vers num="2.0.0.10" edition="-" />
-        <vers num="2.0.0.10" edition="-:linux" />
-        <vers num="2.0.0.11" edition="-" />
-        <vers num="2.0.0.11" edition="-:linux" />
-        <vers num="2.0.0.12" edition="-" />
-        <vers num="2.0.0.12" edition="-:linux" />
-        <vers num="2.0.0.13" edition="-" />
-        <vers num="2.0.0.13" edition="-:linux" />
-        <vers num="2.0.0.14" edition="-" />
-        <vers num="2.0.0.14" edition="-:linux" />
-        <vers num="2.0.0.15" edition="-" />
-        <vers num="2.0.0.15" edition="-:linux" />
-        <vers num="2.0.0.16" edition="-" />
-        <vers num="2.0.0.16" edition="-:linux" />
-        <vers num="2.0.0.17" edition="-" />
-        <vers num="2.0.0.17" edition="-:linux" />
-        <vers num="2.0.0.18" edition="-" />
-        <vers num="2.0.0.18" edition="-:linux" />
-        <vers num="2.0.0.19" edition="-" />
-        <vers num="2.0.0.19" edition="-:linux" />
-        <vers num="2.0.0.2" edition="-" />
-        <vers num="2.0.0.2" edition="-:linux" />
-        <vers num="2.0.0.20" edition="-" />
-        <vers num="2.0.0.20" edition="-:linux" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.3" edition="-" />
-        <vers num="2.0.0.3" edition="-:linux" />
-        <vers num="2.0.0.4" edition="-" />
-        <vers num="2.0.0.4" edition="-:linux" />
-        <vers num="2.0.0.5" edition="-" />
-        <vers num="2.0.0.5" edition="-:linux" />
-        <vers num="2.0.0.6" edition="-" />
-        <vers num="2.0.0.6" edition="-:linux" />
-        <vers num="2.0.0.7" edition="-" />
-        <vers num="2.0.0.7" edition="-:linux" />
-        <vers num="2.0.0.8" edition="-" />
-        <vers num="2.0.0.8" edition="-:linux" />
-        <vers num="2.0.0.9" edition="-" />
-        <vers num="2.0.0.9" edition="-:linux" />
-        <vers num="2.0_.1" />
-        <vers num="2.0_.10" />
-        <vers num="2.0_.4" />
-        <vers num="2.0_.5" />
-        <vers num="2.0_.6" />
-        <vers num="2.0_.7" />
-        <vers num="2.0_.9" />
-        <vers num="2.0_8" />
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:linux" />
-        <vers num="3.0" edition="alpha" />
-        <vers num="3.0" edition="beta2" />
-        <vers num="3.0" edition="beta5" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:linux" />
-        <vers num="3.0.10" edition="-" />
-        <vers num="3.0.10" edition="-:linux" />
-        <vers num="3.0.11" edition="-" />
-        <vers num="3.0.11" edition="-:linux" />
-        <vers num="3.0.12" edition="-" />
-        <vers num="3.0.12" edition="-:linux" />
-        <vers num="3.0.13" edition="-" />
-        <vers num="3.0.13" edition="-:linux" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.19" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:linux" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:linux" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:linux" />
-        <vers num="3.0.5" edition="-" />
-        <vers num="3.0.5" edition="-:linux" />
-        <vers num="3.0.6" edition="-" />
-        <vers num="3.0.6" edition="-:linux" />
-        <vers num="3.0.7" edition="-" />
-        <vers num="3.0.7" edition="-:linux" />
-        <vers num="3.0.8" edition="-" />
-        <vers num="3.0.8" edition="-:linux" />
-        <vers num="3.0.9" edition="-" />
-        <vers num="3.0.9" edition="-:linux" />
-        <vers num="3.0beta5" />
-        <vers num="3.1" edition="beta1" />
-        <vers num="3.2" edition="beta1" />
-        <vers num="3.2" edition="beta2" />
-        <vers num="3.2" edition="beta3" />
-        <vers num="3.5" edition="-" />
-        <vers num="3.5" edition="-:linux" />
-        <vers num="3.5.1" edition="-" />
-        <vers num="3.5.1" edition="-:linux" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.16" />
-        <vers num="3.5.17" />
-        <vers num="3.5.18" />
-        <vers num="3.5.19" />
-        <vers num="3.5.2" edition="" />
-        <vers num="3.5.2" edition=":linux" />
-        <vers num="3.5.2" edition="-" />
-        <vers num="3.5.2" edition="-:linux" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" edition="a1" />
-        <vers num="3.6" edition="a1:" />
-        <vers num="3.6" edition="a1::linux" />
-        <vers num="3.6" edition="a1:-" />
-        <vers num="3.6" edition="a1:-:linux" />
-        <vers num="3.6" edition="a1_pre" />
-        <vers num="3.6" edition="beta1" />
-        <vers num="3.6" edition="beta2" />
-        <vers num="3.6.1" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.26" />
-        <vers prev="1" num="3.6.27" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.1" />
-        <vers num="10.2" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="2.0_.12" />
-        <vers num="2.0_.13" />
-        <vers num="2.0_.14" />
-        <vers num="2.0_.4" />
-        <vers num="2.0_.5" />
-        <vers num="2.0_.6" />
-        <vers num="2.0_.9" />
-        <vers num="2.0_8" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.18" />
-        <vers prev="1" num="3.1.19" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0457" published="2012-03-14" name="CVE-2012-0457" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to execute arbitrary code via an SVG animation.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=720103" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=720103</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1401-1" source="UBUNTU">USN-1401-1</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-5" source="UBUNTU">USN-1400-5</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-4" source="UBUNTU">USN-1400-4</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-3" source="UBUNTU">USN-1400-3</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-2" source="UBUNTU">USN-1400-2</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-14.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-14.html</ref>
-      <ref url="http://secunia.com/advisories/48629" source="SECUNIA">48629</ref>
-      <ref url="http://secunia.com/advisories/48553" source="SECUNIA">48553</ref>
-      <ref url="http://secunia.com/advisories/48513" source="SECUNIA">48513</ref>
-      <ref url="http://secunia.com/advisories/48496" source="SECUNIA">48496</ref>
-      <ref url="http://secunia.com/advisories/48495" source="SECUNIA">48495</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14775" source="OVAL">oval:org.mitre.oval:def:14775</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE">openSUSE-SU-2012:0417</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" edition="" />
-        <vers num="1.0.6" edition=":linux" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="2.0" edition="-" />
-        <vers num="2.0" edition="-:linux" />
-        <vers num="2.0" edition="beta1" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0" edition="rc3" />
-        <vers num="2.0.0.1" edition="-" />
-        <vers num="2.0.0.1" edition="-:linux" />
-        <vers num="2.0.0.10" edition="-" />
-        <vers num="2.0.0.10" edition="-:linux" />
-        <vers num="2.0.0.11" edition="-" />
-        <vers num="2.0.0.11" edition="-:linux" />
-        <vers num="2.0.0.12" edition="-" />
-        <vers num="2.0.0.12" edition="-:linux" />
-        <vers num="2.0.0.13" edition="-" />
-        <vers num="2.0.0.13" edition="-:linux" />
-        <vers num="2.0.0.14" edition="-" />
-        <vers num="2.0.0.14" edition="-:linux" />
-        <vers num="2.0.0.15" edition="-" />
-        <vers num="2.0.0.15" edition="-:linux" />
-        <vers num="2.0.0.16" edition="-" />
-        <vers num="2.0.0.16" edition="-:linux" />
-        <vers num="2.0.0.17" edition="-" />
-        <vers num="2.0.0.17" edition="-:linux" />
-        <vers num="2.0.0.18" edition="-" />
-        <vers num="2.0.0.18" edition="-:linux" />
-        <vers num="2.0.0.19" edition="-" />
-        <vers num="2.0.0.19" edition="-:linux" />
-        <vers num="2.0.0.2" edition="-" />
-        <vers num="2.0.0.2" edition="-:linux" />
-        <vers num="2.0.0.20" edition="-" />
-        <vers num="2.0.0.20" edition="-:linux" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.3" edition="-" />
-        <vers num="2.0.0.3" edition="-:linux" />
-        <vers num="2.0.0.4" edition="-" />
-        <vers num="2.0.0.4" edition="-:linux" />
-        <vers num="2.0.0.5" edition="-" />
-        <vers num="2.0.0.5" edition="-:linux" />
-        <vers num="2.0.0.6" edition="-" />
-        <vers num="2.0.0.6" edition="-:linux" />
-        <vers num="2.0.0.7" edition="-" />
-        <vers num="2.0.0.7" edition="-:linux" />
-        <vers num="2.0.0.8" edition="-" />
-        <vers num="2.0.0.8" edition="-:linux" />
-        <vers num="2.0.0.9" edition="-" />
-        <vers num="2.0.0.9" edition="-:linux" />
-        <vers num="2.0_.1" />
-        <vers num="2.0_.10" />
-        <vers num="2.0_.4" />
-        <vers num="2.0_.5" />
-        <vers num="2.0_.6" />
-        <vers num="2.0_.7" />
-        <vers num="2.0_.9" />
-        <vers num="2.0_8" />
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:linux" />
-        <vers num="3.0" edition="alpha" />
-        <vers num="3.0" edition="beta2" />
-        <vers num="3.0" edition="beta5" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:linux" />
-        <vers num="3.0.10" edition="-" />
-        <vers num="3.0.10" edition="-:linux" />
-        <vers num="3.0.11" edition="-" />
-        <vers num="3.0.11" edition="-:linux" />
-        <vers num="3.0.12" edition="-" />
-        <vers num="3.0.12" edition="-:linux" />
-        <vers num="3.0.13" edition="-" />
-        <vers num="3.0.13" edition="-:linux" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.19" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:linux" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:linux" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:linux" />
-        <vers num="3.0.5" edition="-" />
-        <vers num="3.0.5" edition="-:linux" />
-        <vers num="3.0.6" edition="-" />
-        <vers num="3.0.6" edition="-:linux" />
-        <vers num="3.0.7" edition="-" />
-        <vers num="3.0.7" edition="-:linux" />
-        <vers num="3.0.8" edition="-" />
-        <vers num="3.0.8" edition="-:linux" />
-        <vers num="3.0.9" edition="-" />
-        <vers num="3.0.9" edition="-:linux" />
-        <vers num="3.0beta5" />
-        <vers num="3.1" edition="beta1" />
-        <vers num="3.2" edition="beta1" />
-        <vers num="3.2" edition="beta2" />
-        <vers num="3.2" edition="beta3" />
-        <vers num="3.5" edition="-" />
-        <vers num="3.5" edition="-:linux" />
-        <vers num="3.5.1" edition="-" />
-        <vers num="3.5.1" edition="-:linux" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.16" />
-        <vers num="3.5.17" />
-        <vers num="3.5.18" />
-        <vers num="3.5.19" />
-        <vers num="3.5.2" edition="" />
-        <vers num="3.5.2" edition=":linux" />
-        <vers num="3.5.2" edition="-" />
-        <vers num="3.5.2" edition="-:linux" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" edition="a1" />
-        <vers num="3.6" edition="a1:" />
-        <vers num="3.6" edition="a1::linux" />
-        <vers num="3.6" edition="a1:-" />
-        <vers num="3.6" edition="a1:-:linux" />
-        <vers num="3.6" edition="a1_pre" />
-        <vers num="3.6" edition="beta1" />
-        <vers num="3.6" edition="beta2" />
-        <vers num="3.6.1" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.26" />
-        <vers prev="1" num="3.6.27" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.1" />
-        <vers num="10.2" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="2.0_.12" />
-        <vers num="2.0_.13" />
-        <vers num="2.0_.14" />
-        <vers num="2.0_.4" />
-        <vers num="2.0_.5" />
-        <vers num="2.0_.6" />
-        <vers num="2.0_.9" />
-        <vers num="2.0_8" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.18" />
-        <vers prev="1" num="3.1.19" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0458" published="2012-03-14" name="CVE-2012-0458" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a javascript: URL that is later interpreted in the about:sessionrestore context.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=723808" source="CONFIRM" patch="1">https://bugzilla.mozilla.org/show_bug.cgi?id=723808</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=719994" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=719994</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=718203" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=718203</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1401-1" source="UBUNTU">USN-1401-1</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-5" source="UBUNTU">USN-1400-5</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-4" source="UBUNTU">USN-1400-4</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-3" source="UBUNTU">USN-1400-3</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-2" source="UBUNTU">USN-1400-2</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-16.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-16.html</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2433" source="DEBIAN">DSA-2433</ref>
-      <ref url="http://secunia.com/advisories/48629" source="SECUNIA">48629</ref>
-      <ref url="http://secunia.com/advisories/48553" source="SECUNIA">48553</ref>
-      <ref url="http://secunia.com/advisories/48513" source="SECUNIA">48513</ref>
-      <ref url="http://secunia.com/advisories/48496" source="SECUNIA">48496</ref>
-      <ref url="http://secunia.com/advisories/48495" source="SECUNIA">48495</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15122" source="OVAL">oval:org.mitre.oval:def:15122</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE">openSUSE-SU-2012:0417</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" edition="" />
-        <vers num="1.0.6" edition=":linux" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="2.0" edition="-" />
-        <vers num="2.0" edition="-:linux" />
-        <vers num="2.0" edition="beta1" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0" edition="rc3" />
-        <vers num="2.0.0.1" edition="-" />
-        <vers num="2.0.0.1" edition="-:linux" />
-        <vers num="2.0.0.10" edition="-" />
-        <vers num="2.0.0.10" edition="-:linux" />
-        <vers num="2.0.0.11" edition="-" />
-        <vers num="2.0.0.11" edition="-:linux" />
-        <vers num="2.0.0.12" edition="-" />
-        <vers num="2.0.0.12" edition="-:linux" />
-        <vers num="2.0.0.13" edition="-" />
-        <vers num="2.0.0.13" edition="-:linux" />
-        <vers num="2.0.0.14" edition="-" />
-        <vers num="2.0.0.14" edition="-:linux" />
-        <vers num="2.0.0.15" edition="-" />
-        <vers num="2.0.0.15" edition="-:linux" />
-        <vers num="2.0.0.16" edition="-" />
-        <vers num="2.0.0.16" edition="-:linux" />
-        <vers num="2.0.0.17" edition="-" />
-        <vers num="2.0.0.17" edition="-:linux" />
-        <vers num="2.0.0.18" edition="-" />
-        <vers num="2.0.0.18" edition="-:linux" />
-        <vers num="2.0.0.19" edition="-" />
-        <vers num="2.0.0.19" edition="-:linux" />
-        <vers num="2.0.0.2" edition="-" />
-        <vers num="2.0.0.2" edition="-:linux" />
-        <vers num="2.0.0.20" edition="-" />
-        <vers num="2.0.0.20" edition="-:linux" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.3" edition="-" />
-        <vers num="2.0.0.3" edition="-:linux" />
-        <vers num="2.0.0.4" edition="-" />
-        <vers num="2.0.0.4" edition="-:linux" />
-        <vers num="2.0.0.5" edition="-" />
-        <vers num="2.0.0.5" edition="-:linux" />
-        <vers num="2.0.0.6" edition="-" />
-        <vers num="2.0.0.6" edition="-:linux" />
-        <vers num="2.0.0.7" edition="-" />
-        <vers num="2.0.0.7" edition="-:linux" />
-        <vers num="2.0.0.8" edition="-" />
-        <vers num="2.0.0.8" edition="-:linux" />
-        <vers num="2.0.0.9" edition="-" />
-        <vers num="2.0.0.9" edition="-:linux" />
-        <vers num="2.0_.1" />
-        <vers num="2.0_.10" />
-        <vers num="2.0_.4" />
-        <vers num="2.0_.5" />
-        <vers num="2.0_.6" />
-        <vers num="2.0_.7" />
-        <vers num="2.0_.9" />
-        <vers num="2.0_8" />
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:linux" />
-        <vers num="3.0" edition="alpha" />
-        <vers num="3.0" edition="beta2" />
-        <vers num="3.0" edition="beta5" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:linux" />
-        <vers num="3.0.10" edition="-" />
-        <vers num="3.0.10" edition="-:linux" />
-        <vers num="3.0.11" edition="-" />
-        <vers num="3.0.11" edition="-:linux" />
-        <vers num="3.0.12" edition="-" />
-        <vers num="3.0.12" edition="-:linux" />
-        <vers num="3.0.13" edition="-" />
-        <vers num="3.0.13" edition="-:linux" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.19" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:linux" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:linux" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:linux" />
-        <vers num="3.0.5" edition="-" />
-        <vers num="3.0.5" edition="-:linux" />
-        <vers num="3.0.6" edition="-" />
-        <vers num="3.0.6" edition="-:linux" />
-        <vers num="3.0.7" edition="-" />
-        <vers num="3.0.7" edition="-:linux" />
-        <vers num="3.0.8" edition="-" />
-        <vers num="3.0.8" edition="-:linux" />
-        <vers num="3.0.9" edition="-" />
-        <vers num="3.0.9" edition="-:linux" />
-        <vers num="3.0beta5" />
-        <vers num="3.1" edition="beta1" />
-        <vers num="3.2" edition="beta1" />
-        <vers num="3.2" edition="beta2" />
-        <vers num="3.2" edition="beta3" />
-        <vers num="3.5" edition="-" />
-        <vers num="3.5" edition="-:linux" />
-        <vers num="3.5.1" edition="-" />
-        <vers num="3.5.1" edition="-:linux" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.16" />
-        <vers num="3.5.17" />
-        <vers num="3.5.18" />
-        <vers num="3.5.19" />
-        <vers num="3.5.2" edition="" />
-        <vers num="3.5.2" edition=":linux" />
-        <vers num="3.5.2" edition="-" />
-        <vers num="3.5.2" edition="-:linux" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" edition="a1" />
-        <vers num="3.6" edition="a1:" />
-        <vers num="3.6" edition="a1::linux" />
-        <vers num="3.6" edition="a1:-" />
-        <vers num="3.6" edition="a1:-:linux" />
-        <vers num="3.6" edition="a1_pre" />
-        <vers num="3.6" edition="beta1" />
-        <vers num="3.6" edition="beta2" />
-        <vers num="3.6.1" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.26" />
-        <vers prev="1" num="3.6.27" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.1" />
-        <vers num="10.2" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="2.0_.12" />
-        <vers num="2.0_.13" />
-        <vers num="2.0_.14" />
-        <vers num="2.0_.4" />
-        <vers num="2.0_.5" />
-        <vers num="2.0_.6" />
-        <vers num="2.0_.9" />
-        <vers num="2.0_8" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.18" />
-        <vers prev="1" num="3.1.19" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0459" published="2012-03-14" name="CVE-2012-0459" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via dynamic modification of a keyframe followed by access to the cssText of the keyframe.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=723446" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=723446</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-5" source="UBUNTU">USN-1400-5</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-4" source="UBUNTU">USN-1400-4</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-3" source="UBUNTU">USN-1400-3</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-2" source="UBUNTU">USN-1400-2</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-17.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-17.html</ref>
-      <ref url="http://secunia.com/advisories/48629" source="SECUNIA">48629</ref>
-      <ref url="http://secunia.com/advisories/48553" source="SECUNIA">48553</ref>
-      <ref url="http://secunia.com/advisories/48513" source="SECUNIA">48513</ref>
-      <ref url="http://secunia.com/advisories/48496" source="SECUNIA">48496</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15066" source="OVAL">oval:org.mitre.oval:def:15066</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE">openSUSE-SU-2012:0417</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.1" />
-        <vers num="10.2" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0460" published="2012-03-14" name="CVE-2012-0460" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user interface via a crafted web page.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=727303" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=727303</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-5" source="UBUNTU">USN-1400-5</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-4" source="UBUNTU">USN-1400-4</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-3" source="UBUNTU">USN-1400-3</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-2" source="UBUNTU">USN-1400-2</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-18.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-18.html</ref>
-      <ref url="http://secunia.com/advisories/48629" source="SECUNIA">48629</ref>
-      <ref url="http://secunia.com/advisories/48553" source="SECUNIA">48553</ref>
-      <ref url="http://secunia.com/advisories/48513" source="SECUNIA">48513</ref>
-      <ref url="http://secunia.com/advisories/48496" source="SECUNIA">48496</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15114" source="OVAL">oval:org.mitre.oval:def:15114</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE">openSUSE-SU-2012:0417</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.1" />
-        <vers num="10.2" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0461" published="2012-03-14" name="CVE-2012-0461" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=730425" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=730425</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=657588" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=657588</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1401-1" source="UBUNTU">USN-1401-1</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-5" source="UBUNTU">USN-1400-5</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-4" source="UBUNTU">USN-1400-4</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-3" source="UBUNTU">USN-1400-3</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-2" source="UBUNTU">USN-1400-2</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-19.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-19.html</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2433" source="DEBIAN">DSA-2433</ref>
-      <ref url="http://secunia.com/advisories/48629" source="SECUNIA">48629</ref>
-      <ref url="http://secunia.com/advisories/48553" source="SECUNIA">48553</ref>
-      <ref url="http://secunia.com/advisories/48513" source="SECUNIA">48513</ref>
-      <ref url="http://secunia.com/advisories/48496" source="SECUNIA">48496</ref>
-      <ref url="http://secunia.com/advisories/48495" source="SECUNIA">48495</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15009" source="OVAL">oval:org.mitre.oval:def:15009</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE">openSUSE-SU-2012:0417</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" edition="" />
-        <vers num="1.0.6" edition=":linux" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="2.0" edition="-" />
-        <vers num="2.0" edition="-:linux" />
-        <vers num="2.0" edition="beta1" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0" edition="rc3" />
-        <vers num="2.0.0.1" edition="-" />
-        <vers num="2.0.0.1" edition="-:linux" />
-        <vers num="2.0.0.10" edition="-" />
-        <vers num="2.0.0.10" edition="-:linux" />
-        <vers num="2.0.0.11" edition="-" />
-        <vers num="2.0.0.11" edition="-:linux" />
-        <vers num="2.0.0.12" edition="-" />
-        <vers num="2.0.0.12" edition="-:linux" />
-        <vers num="2.0.0.13" edition="-" />
-        <vers num="2.0.0.13" edition="-:linux" />
-        <vers num="2.0.0.14" edition="-" />
-        <vers num="2.0.0.14" edition="-:linux" />
-        <vers num="2.0.0.15" edition="-" />
-        <vers num="2.0.0.15" edition="-:linux" />
-        <vers num="2.0.0.16" edition="-" />
-        <vers num="2.0.0.16" edition="-:linux" />
-        <vers num="2.0.0.17" edition="-" />
-        <vers num="2.0.0.17" edition="-:linux" />
-        <vers num="2.0.0.18" edition="-" />
-        <vers num="2.0.0.18" edition="-:linux" />
-        <vers num="2.0.0.19" edition="-" />
-        <vers num="2.0.0.19" edition="-:linux" />
-        <vers num="2.0.0.2" edition="-" />
-        <vers num="2.0.0.2" edition="-:linux" />
-        <vers num="2.0.0.20" edition="-" />
-        <vers num="2.0.0.20" edition="-:linux" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.3" edition="-" />
-        <vers num="2.0.0.3" edition="-:linux" />
-        <vers num="2.0.0.4" edition="-" />
-        <vers num="2.0.0.4" edition="-:linux" />
-        <vers num="2.0.0.5" edition="-" />
-        <vers num="2.0.0.5" edition="-:linux" />
-        <vers num="2.0.0.6" edition="-" />
-        <vers num="2.0.0.6" edition="-:linux" />
-        <vers num="2.0.0.7" edition="-" />
-        <vers num="2.0.0.7" edition="-:linux" />
-        <vers num="2.0.0.8" edition="-" />
-        <vers num="2.0.0.8" edition="-:linux" />
-        <vers num="2.0.0.9" edition="-" />
-        <vers num="2.0.0.9" edition="-:linux" />
-        <vers num="2.0_.1" />
-        <vers num="2.0_.10" />
-        <vers num="2.0_.4" />
-        <vers num="2.0_.5" />
-        <vers num="2.0_.6" />
-        <vers num="2.0_.7" />
-        <vers num="2.0_.9" />
-        <vers num="2.0_8" />
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:linux" />
-        <vers num="3.0" edition="alpha" />
-        <vers num="3.0" edition="beta2" />
-        <vers num="3.0" edition="beta5" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:linux" />
-        <vers num="3.0.10" edition="-" />
-        <vers num="3.0.10" edition="-:linux" />
-        <vers num="3.0.11" edition="-" />
-        <vers num="3.0.11" edition="-:linux" />
-        <vers num="3.0.12" edition="-" />
-        <vers num="3.0.12" edition="-:linux" />
-        <vers num="3.0.13" edition="-" />
-        <vers num="3.0.13" edition="-:linux" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.19" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:linux" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:linux" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:linux" />
-        <vers num="3.0.5" edition="-" />
-        <vers num="3.0.5" edition="-:linux" />
-        <vers num="3.0.6" edition="-" />
-        <vers num="3.0.6" edition="-:linux" />
-        <vers num="3.0.7" edition="-" />
-        <vers num="3.0.7" edition="-:linux" />
-        <vers num="3.0.8" edition="-" />
-        <vers num="3.0.8" edition="-:linux" />
-        <vers num="3.0.9" edition="-" />
-        <vers num="3.0.9" edition="-:linux" />
-        <vers num="3.0beta5" />
-        <vers num="3.1" edition="beta1" />
-        <vers num="3.2" edition="beta1" />
-        <vers num="3.2" edition="beta2" />
-        <vers num="3.2" edition="beta3" />
-        <vers num="3.5" edition="-" />
-        <vers num="3.5" edition="-:linux" />
-        <vers num="3.5.1" edition="-" />
-        <vers num="3.5.1" edition="-:linux" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.16" />
-        <vers num="3.5.17" />
-        <vers num="3.5.18" />
-        <vers num="3.5.19" />
-        <vers num="3.5.2" edition="" />
-        <vers num="3.5.2" edition=":linux" />
-        <vers num="3.5.2" edition="-" />
-        <vers num="3.5.2" edition="-:linux" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" edition="a1" />
-        <vers num="3.6" edition="a1:" />
-        <vers num="3.6" edition="a1::linux" />
-        <vers num="3.6" edition="a1:-" />
-        <vers num="3.6" edition="a1:-:linux" />
-        <vers num="3.6" edition="a1_pre" />
-        <vers num="3.6" edition="beta1" />
-        <vers num="3.6" edition="beta2" />
-        <vers num="3.6.1" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.26" />
-        <vers prev="1" num="3.6.27" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.1" />
-        <vers num="10.2" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="2.0_.12" />
-        <vers num="2.0_.13" />
-        <vers num="2.0_.14" />
-        <vers num="2.0_.4" />
-        <vers num="2.0_.5" />
-        <vers num="2.0_.6" />
-        <vers num="2.0_.9" />
-        <vers num="2.0_8" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.18" />
-        <vers prev="1" num="3.1.19" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0462" published="2012-03-14" name="CVE-2012-0462" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=727330" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=727330</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=720380" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=720380</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=718516" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=718516</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=718202" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=718202</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=714590" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=714590</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=712572" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=712572</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=705855" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=705855</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=701269" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=701269</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=699033" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=699033</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-5" source="UBUNTU">USN-1400-5</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-4" source="UBUNTU">USN-1400-4</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-3" source="UBUNTU">USN-1400-3</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-2" source="UBUNTU">USN-1400-2</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-19.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-19.html</ref>
-      <ref url="http://secunia.com/advisories/48629" source="SECUNIA">48629</ref>
-      <ref url="http://secunia.com/advisories/48553" source="SECUNIA">48553</ref>
-      <ref url="http://secunia.com/advisories/48513" source="SECUNIA">48513</ref>
-      <ref url="http://secunia.com/advisories/48496" source="SECUNIA">48496</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15012" source="OVAL">oval:org.mitre.oval:def:15012</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE">openSUSE-SU-2012:0417</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.1" />
-        <vers num="10.2" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0463" published="2012-03-14" name="CVE-2012-0463" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The nsWindow implementation in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 does not check the validity of an instance after event dispatching, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, as demonstrated by Mobile Firefox on Android.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=688208" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=688208</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-19.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-19.html</ref>
-      <ref url="http://secunia.com/advisories/48629" source="SECUNIA">48629</ref>
-      <ref url="http://secunia.com/advisories/48553" source="SECUNIA">48553</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15143" source="OVAL">oval:org.mitre.oval:def:15143</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE">openSUSE-SU-2012:0417</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" edition="" />
-        <vers num="1.0.6" edition=":linux" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="2.0" edition="-" />
-        <vers num="2.0" edition="-:linux" />
-        <vers num="2.0" edition="beta1" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0" edition="rc3" />
-        <vers num="2.0.0.1" edition="-" />
-        <vers num="2.0.0.1" edition="-:linux" />
-        <vers num="2.0.0.10" edition="-" />
-        <vers num="2.0.0.10" edition="-:linux" />
-        <vers num="2.0.0.11" edition="-" />
-        <vers num="2.0.0.11" edition="-:linux" />
-        <vers num="2.0.0.12" edition="-" />
-        <vers num="2.0.0.12" edition="-:linux" />
-        <vers num="2.0.0.13" edition="-" />
-        <vers num="2.0.0.13" edition="-:linux" />
-        <vers num="2.0.0.14" edition="-" />
-        <vers num="2.0.0.14" edition="-:linux" />
-        <vers num="2.0.0.15" edition="-" />
-        <vers num="2.0.0.15" edition="-:linux" />
-        <vers num="2.0.0.16" edition="-" />
-        <vers num="2.0.0.16" edition="-:linux" />
-        <vers num="2.0.0.17" edition="-" />
-        <vers num="2.0.0.17" edition="-:linux" />
-        <vers num="2.0.0.18" edition="-" />
-        <vers num="2.0.0.18" edition="-:linux" />
-        <vers num="2.0.0.19" edition="-" />
-        <vers num="2.0.0.19" edition="-:linux" />
-        <vers num="2.0.0.2" edition="-" />
-        <vers num="2.0.0.2" edition="-:linux" />
-        <vers num="2.0.0.20" edition="-" />
-        <vers num="2.0.0.20" edition="-:linux" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.3" edition="-" />
-        <vers num="2.0.0.3" edition="-:linux" />
-        <vers num="2.0.0.4" edition="-" />
-        <vers num="2.0.0.4" edition="-:linux" />
-        <vers num="2.0.0.5" edition="-" />
-        <vers num="2.0.0.5" edition="-:linux" />
-        <vers num="2.0.0.6" edition="-" />
-        <vers num="2.0.0.6" edition="-:linux" />
-        <vers num="2.0.0.7" edition="-" />
-        <vers num="2.0.0.7" edition="-:linux" />
-        <vers num="2.0.0.8" edition="-" />
-        <vers num="2.0.0.8" edition="-:linux" />
-        <vers num="2.0.0.9" edition="-" />
-        <vers num="2.0.0.9" edition="-:linux" />
-        <vers num="2.0_.1" />
-        <vers num="2.0_.10" />
-        <vers num="2.0_.4" />
-        <vers num="2.0_.5" />
-        <vers num="2.0_.6" />
-        <vers num="2.0_.7" />
-        <vers num="2.0_.9" />
-        <vers num="2.0_8" />
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:linux" />
-        <vers num="3.0" edition="alpha" />
-        <vers num="3.0" edition="beta2" />
-        <vers num="3.0" edition="beta5" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:linux" />
-        <vers num="3.0.10" edition="-" />
-        <vers num="3.0.10" edition="-:linux" />
-        <vers num="3.0.11" edition="-" />
-        <vers num="3.0.11" edition="-:linux" />
-        <vers num="3.0.12" edition="-" />
-        <vers num="3.0.12" edition="-:linux" />
-        <vers num="3.0.13" edition="-" />
-        <vers num="3.0.13" edition="-:linux" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.19" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:linux" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:linux" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:linux" />
-        <vers num="3.0.5" edition="-" />
-        <vers num="3.0.5" edition="-:linux" />
-        <vers num="3.0.6" edition="-" />
-        <vers num="3.0.6" edition="-:linux" />
-        <vers num="3.0.7" edition="-" />
-        <vers num="3.0.7" edition="-:linux" />
-        <vers num="3.0.8" edition="-" />
-        <vers num="3.0.8" edition="-:linux" />
-        <vers num="3.0.9" edition="-" />
-        <vers num="3.0.9" edition="-:linux" />
-        <vers num="3.0beta5" />
-        <vers num="3.1" edition="beta1" />
-        <vers num="3.2" edition="beta1" />
-        <vers num="3.2" edition="beta2" />
-        <vers num="3.2" edition="beta3" />
-        <vers num="3.5" edition="-" />
-        <vers num="3.5" edition="-:linux" />
-        <vers num="3.5.1" edition="-" />
-        <vers num="3.5.1" edition="-:linux" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.16" />
-        <vers num="3.5.17" />
-        <vers num="3.5.18" />
-        <vers num="3.5.19" />
-        <vers num="3.5.2" edition="" />
-        <vers num="3.5.2" edition=":linux" />
-        <vers num="3.5.2" edition="-" />
-        <vers num="3.5.2" edition="-:linux" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" edition="a1" />
-        <vers num="3.6" edition="a1:" />
-        <vers num="3.6" edition="a1::linux" />
-        <vers num="3.6" edition="a1:-" />
-        <vers num="3.6" edition="a1:-:linux" />
-        <vers num="3.6" edition="a1_pre" />
-        <vers num="3.6" edition="beta1" />
-        <vers num="3.6" edition="beta2" />
-        <vers num="3.6.1" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.26" />
-        <vers prev="1" num="3.6.27" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.1" />
-        <vers num="10.2" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="2.0_.12" />
-        <vers num="2.0_.13" />
-        <vers num="2.0_.14" />
-        <vers num="2.0_.4" />
-        <vers num="2.0_.5" />
-        <vers num="2.0_.6" />
-        <vers num="2.0_.9" />
-        <vers num="2.0_8" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.18" />
-        <vers prev="1" num="3.1.19" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0464" published="2012-03-14" name="CVE-2012-0464" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute arbitrary code via vectors involving an empty argument to the array.join function in conjunction with the triggering of garbage collection.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=735104" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=735104</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=720079" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=720079</ref>
-      <ref url="http://www.zdnet.com/blog/security/researchers-hack-into-newest-firefox-with-zero-day-flaw/10663" source="MISC">http://www.zdnet.com/blog/security/researchers-hack-into-newest-firefox-with-zero-day-flaw/10663</ref>
-      <ref url="http://www.zdnet.com/blog/security/mozilla-knew-of-pwn2own-bug-before-cansecwest/10757" source="MISC">http://www.zdnet.com/blog/security/mozilla-knew-of-pwn2own-bug-before-cansecwest/10757</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1401-1" source="UBUNTU">USN-1401-1</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-5" source="UBUNTU">USN-1400-5</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-4" source="UBUNTU">USN-1400-4</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-3" source="UBUNTU">USN-1400-3</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1400-2" source="UBUNTU">USN-1400-2</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-19.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-19.html</ref>
-      <ref url="http://secunia.com/advisories/48629" source="SECUNIA">48629</ref>
-      <ref url="http://secunia.com/advisories/48553" source="SECUNIA">48553</ref>
-      <ref url="http://secunia.com/advisories/48513" source="SECUNIA">48513</ref>
-      <ref url="http://secunia.com/advisories/48496" source="SECUNIA">48496</ref>
-      <ref url="http://secunia.com/advisories/48495" source="SECUNIA">48495</ref>
-      <ref url="http://pwn2own.zerodayinitiative.com/status.html" source="MISC">http://pwn2own.zerodayinitiative.com/status.html</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14170" source="OVAL">oval:org.mitre.oval:def:14170</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE">openSUSE-SU-2012:0417</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" edition="" />
-        <vers num="1.0.6" edition=":linux" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="2.0" edition="-" />
-        <vers num="2.0" edition="-:linux" />
-        <vers num="2.0" edition="beta1" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0" edition="rc3" />
-        <vers num="2.0.0.1" edition="-" />
-        <vers num="2.0.0.1" edition="-:linux" />
-        <vers num="2.0.0.10" edition="-" />
-        <vers num="2.0.0.10" edition="-:linux" />
-        <vers num="2.0.0.11" edition="-" />
-        <vers num="2.0.0.11" edition="-:linux" />
-        <vers num="2.0.0.12" edition="-" />
-        <vers num="2.0.0.12" edition="-:linux" />
-        <vers num="2.0.0.13" edition="-" />
-        <vers num="2.0.0.13" edition="-:linux" />
-        <vers num="2.0.0.14" edition="-" />
-        <vers num="2.0.0.14" edition="-:linux" />
-        <vers num="2.0.0.15" edition="-" />
-        <vers num="2.0.0.15" edition="-:linux" />
-        <vers num="2.0.0.16" edition="-" />
-        <vers num="2.0.0.16" edition="-:linux" />
-        <vers num="2.0.0.17" edition="-" />
-        <vers num="2.0.0.17" edition="-:linux" />
-        <vers num="2.0.0.18" edition="-" />
-        <vers num="2.0.0.18" edition="-:linux" />
-        <vers num="2.0.0.19" edition="-" />
-        <vers num="2.0.0.19" edition="-:linux" />
-        <vers num="2.0.0.2" edition="-" />
-        <vers num="2.0.0.2" edition="-:linux" />
-        <vers num="2.0.0.20" edition="-" />
-        <vers num="2.0.0.20" edition="-:linux" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.3" edition="-" />
-        <vers num="2.0.0.3" edition="-:linux" />
-        <vers num="2.0.0.4" edition="-" />
-        <vers num="2.0.0.4" edition="-:linux" />
-        <vers num="2.0.0.5" edition="-" />
-        <vers num="2.0.0.5" edition="-:linux" />
-        <vers num="2.0.0.6" edition="-" />
-        <vers num="2.0.0.6" edition="-:linux" />
-        <vers num="2.0.0.7" edition="-" />
-        <vers num="2.0.0.7" edition="-:linux" />
-        <vers num="2.0.0.8" edition="-" />
-        <vers num="2.0.0.8" edition="-:linux" />
-        <vers num="2.0.0.9" edition="-" />
-        <vers num="2.0.0.9" edition="-:linux" />
-        <vers num="2.0_.1" />
-        <vers num="2.0_.10" />
-        <vers num="2.0_.4" />
-        <vers num="2.0_.5" />
-        <vers num="2.0_.6" />
-        <vers num="2.0_.7" />
-        <vers num="2.0_.9" />
-        <vers num="2.0_8" />
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:linux" />
-        <vers num="3.0" edition="alpha" />
-        <vers num="3.0" edition="beta2" />
-        <vers num="3.0" edition="beta5" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:linux" />
-        <vers num="3.0.10" edition="-" />
-        <vers num="3.0.10" edition="-:linux" />
-        <vers num="3.0.11" edition="-" />
-        <vers num="3.0.11" edition="-:linux" />
-        <vers num="3.0.12" edition="-" />
-        <vers num="3.0.12" edition="-:linux" />
-        <vers num="3.0.13" edition="-" />
-        <vers num="3.0.13" edition="-:linux" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.19" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:linux" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:linux" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:linux" />
-        <vers num="3.0.5" edition="-" />
-        <vers num="3.0.5" edition="-:linux" />
-        <vers num="3.0.6" edition="-" />
-        <vers num="3.0.6" edition="-:linux" />
-        <vers num="3.0.7" edition="-" />
-        <vers num="3.0.7" edition="-:linux" />
-        <vers num="3.0.8" edition="-" />
-        <vers num="3.0.8" edition="-:linux" />
-        <vers num="3.0.9" edition="-" />
-        <vers num="3.0.9" edition="-:linux" />
-        <vers num="3.0beta5" />
-        <vers num="3.1" edition="beta1" />
-        <vers num="3.2" edition="beta1" />
-        <vers num="3.2" edition="beta2" />
-        <vers num="3.2" edition="beta3" />
-        <vers num="3.5" edition="-" />
-        <vers num="3.5" edition="-:linux" />
-        <vers num="3.5.1" edition="-" />
-        <vers num="3.5.1" edition="-:linux" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.16" />
-        <vers num="3.5.17" />
-        <vers num="3.5.18" />
-        <vers num="3.5.19" />
-        <vers num="3.5.2" edition="" />
-        <vers num="3.5.2" edition=":linux" />
-        <vers num="3.5.2" edition="-" />
-        <vers num="3.5.2" edition="-:linux" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" edition="a1" />
-        <vers num="3.6" edition="a1:" />
-        <vers num="3.6" edition="a1::linux" />
-        <vers num="3.6" edition="a1:-" />
-        <vers num="3.6" edition="a1:-:linux" />
-        <vers num="3.6" edition="a1_pre" />
-        <vers num="3.6" edition="beta1" />
-        <vers num="3.6" edition="beta2" />
-        <vers num="3.6.1" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.26" />
-        <vers prev="1" num="3.6.27" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.1" />
-        <vers num="10.2" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers prev="1" num="2.7" edition="beta1" />
-        <vers prev="1" num="2.7" edition="beta2" />
-        <vers prev="1" num="2.7" edition="beta3" />
-        <vers prev="1" num="2.7" edition="beta4" />
-        <vers prev="1" num="2.7" edition="beta5" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="2.0_.12" />
-        <vers num="2.0_.13" />
-        <vers num="2.0_.14" />
-        <vers num="2.0_.4" />
-        <vers num="2.0_.5" />
-        <vers num="2.0_.6" />
-        <vers num="2.0_.9" />
-        <vers num="2.0_8" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.18" />
-        <vers prev="1" num="3.1.19" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0465" published="2012-04-27" name="CVE-2012-0465" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Bugzilla 3.5.x and 3.6.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1, when the inbound_proxies option is enabled, does not properly validate the X-Forwarded-For HTTP header, which allows remote attackers to bypass the lockout policy via a series of authentication requests with (1) different IP address strings in this header or (2) a long string in this header.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=728639" source="CONFIRM" patch="1">https://bugzilla.mozilla.org/show_bug.cgi?id=728639</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079604.html" source="FEDORA">FEDORA-2012-6282</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079481.html" source="FEDORA">FEDORA-2012-6396</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079432.html" source="FEDORA">FEDORA-2012-6368</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0135.html" source="BUGTRAQ">20120418 Security advisory for Bugzilla 4.2.1, 4.0.6 and 3.6.9</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="bugzilla">
-        <vers num="3.5.1" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.6.0" />
-        <vers num="3.6.1" />
-        <vers num="3.6.2" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.5" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.7.1" />
-        <vers num="3.7.2" />
-        <vers num="3.7.3" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="4.1.3" />
-        <vers num="4.2" edition="rc1" />
-        <vers num="4.2" edition="rc2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0466" published="2012-04-27" name="CVE-2012-0466" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="4.9" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1 does not properly handle multiple logins, which allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive bug information via a crafted web page.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=745397" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=745397</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079604.html" source="FEDORA">FEDORA-2012-6282</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079481.html" source="FEDORA">FEDORA-2012-6396</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079432.html" source="FEDORA">FEDORA-2012-6368</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0135.html" source="BUGTRAQ">20120418 Security advisory for Bugzilla 4.2.1, 4.0.6 and 3.6.9</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="bugzilla">
-        <vers num="2.0" />
-        <vers num="2.10" />
-        <vers num="2.12" />
-        <vers num="2.14" />
-        <vers num="2.14.1" />
-        <vers num="2.14.2" />
-        <vers num="2.14.3" />
-        <vers num="2.14.4" />
-        <vers num="2.14.5" />
-        <vers num="2.16" edition="rc1" />
-        <vers num="2.16" edition="rc2" />
-        <vers num="2.16.1" />
-        <vers num="2.16.10" />
-        <vers num="2.16.11" />
-        <vers num="2.16.2" />
-        <vers num="2.16.3" />
-        <vers num="2.16.4" />
-        <vers num="2.16.5" />
-        <vers num="2.16.6" />
-        <vers num="2.16.7" />
-        <vers num="2.16.8" />
-        <vers num="2.16.9" />
-        <vers num="2.17" />
-        <vers num="2.17.1" />
-        <vers num="2.17.2" />
-        <vers num="2.17.3" />
-        <vers num="2.17.4" />
-        <vers num="2.17.5" />
-        <vers num="2.17.6" />
-        <vers num="2.17.7" />
-        <vers num="2.18" edition="rc1" />
-        <vers num="2.18" edition="rc2" />
-        <vers num="2.18" edition="rc3" />
-        <vers num="2.18.1" />
-        <vers num="2.18.2" />
-        <vers num="2.18.3" />
-        <vers num="2.18.4" />
-        <vers num="2.18.5" />
-        <vers num="2.18.6" />
-        <vers num="2.18.6+" />
-        <vers num="2.18.7" />
-        <vers num="2.18.8" />
-        <vers num="2.18.9" />
-        <vers num="2.19" />
-        <vers num="2.19.1" />
-        <vers num="2.19.2" />
-        <vers num="2.19.3" />
-        <vers num="2.2" />
-        <vers num="2.20" edition="rc1" />
-        <vers num="2.20" edition="rc2" />
-        <vers num="2.20.1" />
-        <vers num="2.20.2" />
-        <vers num="2.20.3" />
-        <vers num="2.20.4" />
-        <vers num="2.20.5" />
-        <vers num="2.20.6" />
-        <vers num="2.20.7" />
-        <vers num="2.21" />
-        <vers num="2.21.1" />
-        <vers num="2.21.2" edition="rc1" />
-        <vers num="2.22" edition="rc1" />
-        <vers num="2.22.1" />
-        <vers num="2.22.2" />
-        <vers num="2.22.3" />
-        <vers num="2.22.4" />
-        <vers num="2.22.5" />
-        <vers num="2.22.6" />
-        <vers num="2.22.7" />
-        <vers num="2.23" />
-        <vers num="2.23.1" />
-        <vers num="2.23.2" />
-        <vers num="2.23.3" />
-        <vers num="2.23.4" />
-        <vers num="2.4" />
-        <vers num="2.6" />
-        <vers num="2.8" />
-        <vers num="2.9" />
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.2" edition="rc1" />
-        <vers num="3.2" edition="rc2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.10" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" />
-        <vers num="3.2.8" />
-        <vers num="3.2.9" />
-        <vers num="3.3" />
-        <vers num="3.3.1" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers num="3.3.4" />
-        <vers num="3.4" edition="rc1" />
-        <vers num="3.4.1" />
-        <vers num="3.4.10" />
-        <vers num="3.4.11" />
-        <vers num="3.4.12" />
-        <vers num="3.4.13" />
-        <vers num="3.4.2" />
-        <vers num="3.4.3" />
-        <vers num="3.4.4" />
-        <vers num="3.4.5" />
-        <vers num="3.4.6" />
-        <vers num="3.4.7" />
-        <vers num="3.4.8" />
-        <vers num="3.4.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.6" edition="rc1" />
-        <vers num="3.6.0" />
-        <vers num="3.6.1" />
-        <vers num="3.6.2" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.5" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.7" />
-        <vers num="3.7.1" />
-        <vers num="3.7.2" />
-        <vers num="3.7.3" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="4.1.3" />
-        <vers num="4.2" edition="rc1" />
-        <vers num="4.2" edition="rc2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0467" published="2012-04-25" name="CVE-2012-0467" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=740595" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=740595</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=737875" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=737875</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=737384" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=737384</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=737182" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=737182</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=737129" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=737129</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=736609" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=736609</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=736589" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=736589</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=735943" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=735943</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=735073" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=735073</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733979" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733979</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733282" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733282</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=732951" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=732951</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=732941" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=732941</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=726502" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=726502</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=726332" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=726332</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=723453" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=723453</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=720305" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=720305</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=716556" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=716556</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=714614" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=714614</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=708825" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=708825</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=706381" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=706381</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=680456" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=680456</ref>
-      <ref url="http://www.securityfocus.com/bid/53223" source="BID">53223</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-20.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-20.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0468" published="2012-04-25" name="CVE-2012-0468" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (assertion failure and memory corruption) or possibly execute arbitrary code via vectors related to jsval.h and the js::array_shift function.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=714616" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=714616</ref>
-      <ref url="http://www.securityfocus.com/bid/53221" source="BID">53221</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-20.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-20.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0469" published="2012-04-25" name="CVE-2012-0469" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to execute arbitrary code via vectors related to crafted IndexedDB data.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=738985" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=738985</ref>
-      <ref url="http://www.securityfocus.com/bid/53220" source="BID">53220</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-22.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-22.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0470" published="2012-04-25" name="CVE-2012-0470" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (invalid gfxImageSurface free operation) or possibly execute arbitrary code by leveraging the use of "different number systems."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=734288" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=734288</ref>
-      <ref url="http://www.securityfocus.com/bid/53225" source="BID">53225</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-23.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-23.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0471" published="2012-04-25" name="CVE-2012-0471" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to inject arbitrary web script or HTML via a multibyte character set.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=715319" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=715319</ref>
-      <ref url="http://www.securityfocus.com/bid/53219" source="BID">53219</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-24.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-24.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0472" published="2012-04-25" name="CVE-2012-0472" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9, when certain Windows Vista and Windows 7 configurations are used, does not properly restrict font-rendering attempts, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=744480" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=744480</ref>
-      <ref url="http://www.securityfocus.com/bid/53218" source="BID">53218</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-25.html" source="CONFIRM">http://www.mozilla.org/security/announce/2012/mfsa2012-25.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0473" published="2012-04-25" name="CVE-2012-0473" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The WebGLBuffer::FindMaxUshortElement function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 calls the FindMaxElementInSubArray function with incorrect template arguments, which allows remote attackers to obtain sensitive information from video memory via a crafted WebGL.drawElements call.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=743475" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=743475</ref>
-      <ref url="http://www.securityfocus.com/bid/53231" source="BID">53231</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-26.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-26.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0474" published="2012-04-25" name="CVE-2012-0474" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the docshell implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to inject arbitrary web script or HTML via vectors related to short-circuited page loads, aka "Universal XSS (UXSS)."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=737307" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=737307</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=687745" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=687745</ref>
-      <ref url="http://www.securityfocus.com/bid/53228" source="BID">53228</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-27.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-27.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0475" published="2012-04-25" name="CVE-2012-0475" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 do not properly construct the Origin and Sec-WebSocket-Origin HTTP headers, which might allow remote attackers to bypass an IPv6 literal ACL via a cross-site (1) XMLHttpRequest or (2) WebSocket operation involving a nonstandard port number and an IPv6 address that contains certain zero fields.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=694576" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=694576</ref>
-      <ref url="http://www.securityfocus.com/bid/53230" source="BID">53230</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-28.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-28.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0477" published="2012-04-25" name="CVE-2012-0477" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to inject arbitrary web script or HTML via the (1) ISO-2022-KR or (2) ISO-2022-CN character set.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=718573" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=718573</ref>
-      <ref url="http://www.securityfocus.com/bid/53229" source="BID">53229</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-29.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-29.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0478" published="2012-04-25" name="CVE-2012-0478" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 does not properly restrict JSVAL_TO_OBJECT casts, which might allow remote attackers to execute arbitrary code via a crafted web page.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=727547" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=727547</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75155" source="XF">firefox-teximage2d-dos(75155)</ref>
-      <ref url="http://www.securityfocus.com/bid/53227" source="BID">53227</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-30.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-30.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0479" published="2012-04-25" name="CVE-2012-0479" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to spoof the address bar via an https URL for invalid (1) RSS or (2) Atom XML content.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=714631" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=714631</ref>
-      <ref url="http://www.securityfocus.com/bid/53224" source="BID">53224</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-33.html" source="CONFIRM">http://www.mozilla.org/security/announce/2012/mfsa2012-33.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0484" published="2012-01-18" name="CVE-2012-0484" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect confidentiality via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72525" source="XF">mysql-server-info-disc(72525)</ref>
-      <ref url="http://www.securityfocus.com/bid/51515" source="BID">51515</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78372" source="OSVDB">78372</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.0" />
-        <vers num="5.0.0" edition="alpha" />
-        <vers num="5.0.0.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.10" />
-        <vers num="5.0.10a" />
-        <vers num="5.0.11" />
-        <vers num="5.0.12" />
-        <vers num="5.0.13" />
-        <vers num="5.0.14" />
-        <vers num="5.0.15" />
-        <vers num="5.0.15a" />
-        <vers num="5.0.16" />
-        <vers num="5.0.16a" />
-        <vers num="5.0.17" />
-        <vers num="5.0.17a" />
-        <vers num="5.0.18" />
-        <vers num="5.0.19" />
-        <vers num="5.0.1a" />
-        <vers num="5.0.2" />
-        <vers num="5.0.20" />
-        <vers num="5.0.20a" />
-        <vers num="5.0.21" />
-        <vers num="5.0.22" />
-        <vers num="5.0.22.1.0.1" />
-        <vers num="5.0.23" />
-        <vers num="5.0.24" />
-        <vers num="5.0.24a" />
-        <vers num="5.0.25" />
-        <vers num="5.0.26" />
-        <vers num="5.0.27" />
-        <vers num="5.0.3" edition="beta" />
-        <vers num="5.0.30" edition="sp1" />
-        <vers num="5.0.32" />
-        <vers num="5.0.33" />
-        <vers num="5.0.36" />
-        <vers num="5.0.37" />
-        <vers num="5.0.38" />
-        <vers num="5.0.3a" />
-        <vers num="5.0.4" />
-        <vers num="5.0.41" />
-        <vers num="5.0.42" />
-        <vers num="5.0.44" />
-        <vers num="5.0.45" edition="b" />
-        <vers num="5.0.45b" />
-        <vers num="5.0.4a" />
-        <vers num="5.0.5" />
-        <vers num="5.0.5.0.21" />
-        <vers num="5.0.50" />
-        <vers num="5.0.51" />
-        <vers num="5.0.51a" />
-        <vers num="5.0.51b" />
-        <vers num="5.0.52" />
-        <vers num="5.0.54" />
-        <vers num="5.0.56" />
-        <vers num="5.0.6" />
-        <vers num="5.0.60" />
-        <vers num="5.0.66" />
-        <vers num="5.0.67" />
-        <vers num="5.0.7" />
-        <vers num="5.0.75" />
-        <vers num="5.0.77" />
-        <vers num="5.0.8" />
-        <vers num="5.0.81" />
-        <vers num="5.0.82" />
-        <vers num="5.0.83" />
-        <vers num="5.0.84" />
-        <vers num="5.0.85" />
-        <vers num="5.0.86" />
-        <vers num="5.0.87" />
-        <vers num="5.0.88" />
-        <vers num="5.0.89" />
-        <vers num="5.0.9" />
-        <vers num="5.0.90" />
-        <vers num="5.0.91" />
-        <vers num="5.0.92" />
-        <vers num="5.0.93" />
-        <vers num="5.0.94" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0485" published="2012-01-18" name="CVE-2012-0485" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, and CVE-2012-0492.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72526" source="XF">mysql-serveruns4-dos(72526)</ref>
-      <ref url="http://www.securityfocus.com/bid/51513" source="BID">51513</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78383" source="OSVDB">78383</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0486" published="2012-01-18" name="CVE-2012-0486" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72527" source="XF">mysql-serveruns5-dos(72527)</ref>
-      <ref url="http://www.securityfocus.com/bid/51514" source="BID">51514</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78384" source="OSVDB">78384</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0487" published="2012-01-18" name="CVE-2012-0487" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72528" source="XF">mysql-serveruns6-dos(72528)</ref>
-      <ref url="http://www.securityfocus.com/bid/51503" source="BID">51503</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78385" source="OSVDB">78385</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0488" published="2012-01-18" name="CVE-2012-0488" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72529" source="XF">mysql-serveruns7-dos(72529)</ref>
-      <ref url="http://www.securityfocus.com/bid/51506" source="BID">51506</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78386" source="OSVDB">78386</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0489" published="2012-01-18" name="CVE-2012-0489" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72530" source="XF">mysql-serveruns8-dos(72530)</ref>
-      <ref url="http://www.securityfocus.com/bid/51510" source="BID">51510</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78387" source="OSVDB">78387</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0490" published="2012-01-18" name="CVE-2012-0490" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect availability via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72531" source="XF">mysql-serveruns9-dos(72531)</ref>
-      <ref url="http://www.securityfocus.com/bid/51524" source="BID">51524</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78388" source="OSVDB">78388</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.0" />
-        <vers num="5.0.0" edition="alpha" />
-        <vers num="5.0.0.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.10" />
-        <vers num="5.0.10a" />
-        <vers num="5.0.11" />
-        <vers num="5.0.12" />
-        <vers num="5.0.13" />
-        <vers num="5.0.14" />
-        <vers num="5.0.15" />
-        <vers num="5.0.15a" />
-        <vers num="5.0.16" />
-        <vers num="5.0.16a" />
-        <vers num="5.0.17" />
-        <vers num="5.0.17a" />
-        <vers num="5.0.18" />
-        <vers num="5.0.19" />
-        <vers num="5.0.1a" />
-        <vers num="5.0.2" />
-        <vers num="5.0.20" />
-        <vers num="5.0.20a" />
-        <vers num="5.0.21" />
-        <vers num="5.0.22" />
-        <vers num="5.0.22.1.0.1" />
-        <vers num="5.0.23" />
-        <vers num="5.0.24" />
-        <vers num="5.0.24a" />
-        <vers num="5.0.25" />
-        <vers num="5.0.26" />
-        <vers num="5.0.27" />
-        <vers num="5.0.3" edition="beta" />
-        <vers num="5.0.30" edition="sp1" />
-        <vers num="5.0.32" />
-        <vers num="5.0.33" />
-        <vers num="5.0.36" />
-        <vers num="5.0.37" />
-        <vers num="5.0.38" />
-        <vers num="5.0.3a" />
-        <vers num="5.0.4" />
-        <vers num="5.0.41" />
-        <vers num="5.0.42" />
-        <vers num="5.0.44" />
-        <vers num="5.0.45" edition="b" />
-        <vers num="5.0.45b" />
-        <vers num="5.0.4a" />
-        <vers num="5.0.5" />
-        <vers num="5.0.5.0.21" />
-        <vers num="5.0.50" />
-        <vers num="5.0.51" />
-        <vers num="5.0.51a" />
-        <vers num="5.0.51b" />
-        <vers num="5.0.52" />
-        <vers num="5.0.54" />
-        <vers num="5.0.56" />
-        <vers num="5.0.6" />
-        <vers num="5.0.60" />
-        <vers num="5.0.66" />
-        <vers num="5.0.67" />
-        <vers num="5.0.7" />
-        <vers num="5.0.75" />
-        <vers num="5.0.77" />
-        <vers num="5.0.8" />
-        <vers num="5.0.81" />
-        <vers num="5.0.82" />
-        <vers num="5.0.83" />
-        <vers num="5.0.84" />
-        <vers num="5.0.85" />
-        <vers num="5.0.86" />
-        <vers num="5.0.87" />
-        <vers num="5.0.88" />
-        <vers num="5.0.89" />
-        <vers num="5.0.9" />
-        <vers num="5.0.90" />
-        <vers num="5.0.91" />
-        <vers num="5.0.92" />
-        <vers num="5.0.93" />
-        <vers num="5.0.94" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0491" published="2012-01-18" name="CVE-2012-0491" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0493, and CVE-2012-0495.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72532" source="XF">mysql-serveruns10-dos(72532)</ref>
-      <ref url="http://www.securityfocus.com/bid/51518" source="BID">51518</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78389" source="OSVDB">78389</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0492" published="2012-01-18" name="CVE-2012-0492" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, and CVE-2012-0485.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72537" source="XF">mysql-serveruns14-dos(72537)</ref>
-      <ref url="http://www.securityfocus.com/bid/51516" source="BID">51516</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78393" source="OSVDB">78393</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0493" published="2012-01-18" name="CVE-2012-0493" modified="2012-01-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, and CVE-2012-0495.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72538" source="XF">mysql-serveruns15-dos(72538)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78394" source="OSVDB">78394</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0494" published="2012-01-18" name="CVE-2012-0494" modified="2012-01-26" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="1.7" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.1" CVSS_base_score="1.7">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows local users to affect availability via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72540" source="XF">mysql-serveruns16-dos(72540)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78375" source="OSVDB">78375</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0495" published="2012-01-18" name="CVE-2012-0495" modified="2012-02-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, and CVE-2012-0493.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72533" source="XF">mysql-serveruns11-dos(72533)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78390" source="OSVDB">78390</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0496" published="2012-01-18" name="CVE-2012-0496" modified="2012-01-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:M/C:P/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="5.5" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72518" source="XF">mysql-server-cve20120496(72518)</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html</ref>
-      <ref url="http://osvdb.org/78371" source="OSVDB">78371</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0497" published="2012-02-15" name="CVE-2012-0497" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
-
-'Applies to client and server deployments of Java. This vulnerability can be exploited through Untrusted Java Web Start applications and Untrusted Java applets. It can also be exploited by supplying data to APIs in the specified Component without using untrusted Java Web Start applications or untrusted Java applets, such as through a web service.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-      <ref url="http://secunia.com/advisories/48589" source="SECUNIA">48589</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14772" source="OVAL">oval:org.mitre.oval:def:14772</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers num="1.6.0" edition="update_1" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_2" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0498" published="2012-02-15" name="CVE-2012-0498" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
-
-'Applies to client and server deployments of Java. This vulnerability can be exploited through Untrusted Java Web Start applications and Untrusted Java applets. It can also be exploited by supplying data to APIs in the specified Component without using untrusted Java Web Start applications or untrusted Java applets, such as through a web service.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-      <ref url="http://secunia.com/advisories/48589" source="SECUNIA">48589</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15075" source="OVAL">oval:org.mitre.oval:def:15075</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers prev="1" num="1.5.0" edition="update1" />
-        <vers prev="1" num="1.5.0" edition="update10" />
-        <vers prev="1" num="1.5.0" edition="update11" />
-        <vers prev="1" num="1.5.0" edition="update12" />
-        <vers prev="1" num="1.5.0" edition="update13" />
-        <vers prev="1" num="1.5.0" edition="update14" />
-        <vers prev="1" num="1.5.0" edition="update15" />
-        <vers prev="1" num="1.5.0" edition="update16" />
-        <vers prev="1" num="1.5.0" edition="update17" />
-        <vers prev="1" num="1.5.0" edition="update18" />
-        <vers prev="1" num="1.5.0" edition="update19" />
-        <vers prev="1" num="1.5.0" edition="update2" />
-        <vers prev="1" num="1.5.0" edition="update20" />
-        <vers prev="1" num="1.5.0" edition="update21" />
-        <vers prev="1" num="1.5.0" edition="update22" />
-        <vers prev="1" num="1.5.0" edition="update23" />
-        <vers prev="1" num="1.5.0" edition="update24" />
-        <vers prev="1" num="1.5.0" edition="update25" />
-        <vers prev="1" num="1.5.0" edition="update26" />
-        <vers prev="1" num="1.5.0" edition="update27" />
-        <vers prev="1" num="1.5.0" edition="update28" />
-        <vers prev="1" num="1.5.0" edition="update29" />
-        <vers prev="1" num="1.5.0" edition="update3" />
-        <vers prev="1" num="1.5.0" edition="update31" />
-        <vers prev="1" num="1.5.0" edition="update33" />
-        <vers prev="1" num="1.5.0" edition="update4" />
-        <vers prev="1" num="1.5.0" edition="update5" />
-        <vers prev="1" num="1.5.0" edition="update6" />
-        <vers prev="1" num="1.5.0" edition="update7" />
-        <vers prev="1" num="1.5.0" edition="update8" />
-        <vers prev="1" num="1.5.0" edition="update9" />
-        <vers num="1.6.0" edition="update_1" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_2" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0499" published="2012-02-15" name="CVE-2012-0499" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier; and JavaFX 2.0.2 and earlier; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
-
-'Applies to client and server deployments of Java. This vulnerability can be exploited through Untrusted Java Web Start applications and Untrusted Java applets. It can also be exploited by supplying data to APIs in the specified Component without using untrusted Java Web Start applications or untrusted Java applets, such as through a web service.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-      <ref url="http://secunia.com/advisories/48589" source="SECUNIA">48589</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14878" source="OVAL">oval:org.mitre.oval:def:14878</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="javafx">
-        <vers num="1.2" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers prev="1" num="2.0.2" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers num="1.4.2" />
-        <vers num="1.4.2_1" />
-        <vers num="1.4.2_10" />
-        <vers num="1.4.2_11" />
-        <vers num="1.4.2_12" />
-        <vers num="1.4.2_13" />
-        <vers num="1.4.2_14" />
-        <vers num="1.4.2_15" />
-        <vers num="1.4.2_16" />
-        <vers num="1.4.2_17" />
-        <vers num="1.4.2_18" />
-        <vers num="1.4.2_19" />
-        <vers num="1.4.2_2" />
-        <vers num="1.4.2_20" />
-        <vers num="1.4.2_21" />
-        <vers num="1.4.2_22" />
-        <vers num="1.4.2_23" />
-        <vers num="1.4.2_24" />
-        <vers num="1.4.2_25" />
-        <vers num="1.4.2_26" />
-        <vers num="1.4.2_27" />
-        <vers num="1.4.2_28" />
-        <vers num="1.4.2_29" />
-        <vers num="1.4.2_3" />
-        <vers num="1.4.2_30" />
-        <vers num="1.4.2_31" />
-        <vers num="1.4.2_32" />
-        <vers num="1.4.2_33" />
-        <vers num="1.4.2_34" />
-        <vers prev="1" num="1.4.2_35" />
-        <vers num="1.4.2_4" />
-        <vers num="1.4.2_5" />
-        <vers num="1.4.2_6" />
-        <vers num="1.4.2_7" />
-        <vers num="1.4.2_8" />
-        <vers num="1.4.2_9" />
-        <vers prev="1" num="1.5.0" edition="update1" />
-        <vers prev="1" num="1.5.0" edition="update10" />
-        <vers prev="1" num="1.5.0" edition="update11" />
-        <vers prev="1" num="1.5.0" edition="update12" />
-        <vers prev="1" num="1.5.0" edition="update13" />
-        <vers prev="1" num="1.5.0" edition="update14" />
-        <vers prev="1" num="1.5.0" edition="update15" />
-        <vers prev="1" num="1.5.0" edition="update16" />
-        <vers prev="1" num="1.5.0" edition="update17" />
-        <vers prev="1" num="1.5.0" edition="update18" />
-        <vers prev="1" num="1.5.0" edition="update19" />
-        <vers prev="1" num="1.5.0" edition="update2" />
-        <vers prev="1" num="1.5.0" edition="update20" />
-        <vers prev="1" num="1.5.0" edition="update21" />
-        <vers prev="1" num="1.5.0" edition="update22" />
-        <vers prev="1" num="1.5.0" edition="update23" />
-        <vers prev="1" num="1.5.0" edition="update24" />
-        <vers prev="1" num="1.5.0" edition="update25" />
-        <vers prev="1" num="1.5.0" edition="update26" />
-        <vers prev="1" num="1.5.0" edition="update27" />
-        <vers prev="1" num="1.5.0" edition="update28" />
-        <vers prev="1" num="1.5.0" edition="update29" />
-        <vers prev="1" num="1.5.0" edition="update3" />
-        <vers prev="1" num="1.5.0" edition="update31" />
-        <vers prev="1" num="1.5.0" edition="update33" />
-        <vers prev="1" num="1.5.0" edition="update4" />
-        <vers prev="1" num="1.5.0" edition="update5" />
-        <vers prev="1" num="1.5.0" edition="update6" />
-        <vers prev="1" num="1.5.0" edition="update7" />
-        <vers prev="1" num="1.5.0" edition="update8" />
-        <vers prev="1" num="1.5.0" edition="update9" />
-        <vers num="1.6.0" edition="update_1" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_2" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0500" published="2012-02-15" name="CVE-2012-0500" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
-
-'Applies to client deployments of Java. This vulnerability can be exploited only through Untrusted Java Web Start applications and Untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html</ref>
-      <ref url="http://secunia.com/advisories/48589" source="SECUNIA">48589</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14844" source="OVAL">oval:org.mitre.oval:def:14844</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="javafx">
-        <vers num="1.2" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers prev="1" num="2.0.2" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers num="1.6.0" edition="update_1" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_2" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0501" published="2012-02-15" name="CVE-2012-0501" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect availability via unknown vectors.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
-
-'Applies to client deployments of Java. This vulnerability can be exploited only through Untrusted Java Web Start applications and Untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-      <ref url="http://secunia.com/advisories/48589" source="SECUNIA">48589</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15069" source="OVAL">oval:org.mitre.oval:def:15069</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers prev="1" num="1.5.0" edition="update1" />
-        <vers prev="1" num="1.5.0" edition="update10" />
-        <vers prev="1" num="1.5.0" edition="update11" />
-        <vers prev="1" num="1.5.0" edition="update12" />
-        <vers prev="1" num="1.5.0" edition="update13" />
-        <vers prev="1" num="1.5.0" edition="update14" />
-        <vers prev="1" num="1.5.0" edition="update15" />
-        <vers prev="1" num="1.5.0" edition="update16" />
-        <vers prev="1" num="1.5.0" edition="update17" />
-        <vers prev="1" num="1.5.0" edition="update18" />
-        <vers prev="1" num="1.5.0" edition="update19" />
-        <vers prev="1" num="1.5.0" edition="update2" />
-        <vers prev="1" num="1.5.0" edition="update20" />
-        <vers prev="1" num="1.5.0" edition="update21" />
-        <vers prev="1" num="1.5.0" edition="update22" />
-        <vers prev="1" num="1.5.0" edition="update23" />
-        <vers prev="1" num="1.5.0" edition="update24" />
-        <vers prev="1" num="1.5.0" edition="update25" />
-        <vers prev="1" num="1.5.0" edition="update26" />
-        <vers prev="1" num="1.5.0" edition="update27" />
-        <vers prev="1" num="1.5.0" edition="update28" />
-        <vers prev="1" num="1.5.0" edition="update29" />
-        <vers prev="1" num="1.5.0" edition="update3" />
-        <vers prev="1" num="1.5.0" edition="update31" />
-        <vers prev="1" num="1.5.0" edition="update33" />
-        <vers prev="1" num="1.5.0" edition="update4" />
-        <vers prev="1" num="1.5.0" edition="update5" />
-        <vers prev="1" num="1.5.0" edition="update6" />
-        <vers prev="1" num="1.5.0" edition="update7" />
-        <vers prev="1" num="1.5.0" edition="update8" />
-        <vers prev="1" num="1.5.0" edition="update9" />
-        <vers num="1.6.0" edition="update_1" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_2" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0502" published="2012-02-15" name="CVE-2012-0502" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and availability, related to AWT.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
-
-'Applies to client deployments of Java. This vulnerability can be exploited only through Untrusted Java Web Start applications and Untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html</ref>
-      <ref url="http://secunia.com/advisories/48589" source="SECUNIA">48589</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14900" source="OVAL">oval:org.mitre.oval:def:14900</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers num="1.4.2" />
-        <vers num="1.4.2_1" />
-        <vers num="1.4.2_10" />
-        <vers num="1.4.2_11" />
-        <vers num="1.4.2_12" />
-        <vers num="1.4.2_13" />
-        <vers num="1.4.2_14" />
-        <vers num="1.4.2_15" />
-        <vers num="1.4.2_16" />
-        <vers num="1.4.2_17" />
-        <vers num="1.4.2_18" />
-        <vers num="1.4.2_19" />
-        <vers num="1.4.2_2" />
-        <vers num="1.4.2_20" />
-        <vers num="1.4.2_21" />
-        <vers num="1.4.2_22" />
-        <vers num="1.4.2_23" />
-        <vers num="1.4.2_24" />
-        <vers num="1.4.2_25" />
-        <vers num="1.4.2_26" />
-        <vers num="1.4.2_27" />
-        <vers num="1.4.2_28" />
-        <vers num="1.4.2_29" />
-        <vers num="1.4.2_3" />
-        <vers num="1.4.2_30" />
-        <vers num="1.4.2_31" />
-        <vers num="1.4.2_32" />
-        <vers num="1.4.2_33" />
-        <vers num="1.4.2_34" />
-        <vers prev="1" num="1.4.2_35" />
-        <vers num="1.4.2_4" />
-        <vers num="1.4.2_5" />
-        <vers num="1.4.2_6" />
-        <vers num="1.4.2_7" />
-        <vers num="1.4.2_8" />
-        <vers num="1.4.2_9" />
-        <vers prev="1" num="1.5.0" edition="update1" />
-        <vers prev="1" num="1.5.0" edition="update10" />
-        <vers prev="1" num="1.5.0" edition="update11" />
-        <vers prev="1" num="1.5.0" edition="update12" />
-        <vers prev="1" num="1.5.0" edition="update13" />
-        <vers prev="1" num="1.5.0" edition="update14" />
-        <vers prev="1" num="1.5.0" edition="update15" />
-        <vers prev="1" num="1.5.0" edition="update16" />
-        <vers prev="1" num="1.5.0" edition="update17" />
-        <vers prev="1" num="1.5.0" edition="update18" />
-        <vers prev="1" num="1.5.0" edition="update19" />
-        <vers prev="1" num="1.5.0" edition="update2" />
-        <vers prev="1" num="1.5.0" edition="update20" />
-        <vers prev="1" num="1.5.0" edition="update21" />
-        <vers prev="1" num="1.5.0" edition="update22" />
-        <vers prev="1" num="1.5.0" edition="update23" />
-        <vers prev="1" num="1.5.0" edition="update24" />
-        <vers prev="1" num="1.5.0" edition="update25" />
-        <vers prev="1" num="1.5.0" edition="update26" />
-        <vers prev="1" num="1.5.0" edition="update27" />
-        <vers prev="1" num="1.5.0" edition="update28" />
-        <vers prev="1" num="1.5.0" edition="update29" />
-        <vers prev="1" num="1.5.0" edition="update3" />
-        <vers prev="1" num="1.5.0" edition="update31" />
-        <vers prev="1" num="1.5.0" edition="update33" />
-        <vers prev="1" num="1.5.0" edition="update4" />
-        <vers prev="1" num="1.5.0" edition="update5" />
-        <vers prev="1" num="1.5.0" edition="update6" />
-        <vers prev="1" num="1.5.0" edition="update7" />
-        <vers prev="1" num="1.5.0" edition="update8" />
-        <vers prev="1" num="1.5.0" edition="update9" />
-        <vers num="1.6.0" edition="update_1" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_2" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0503" published="2012-02-15" name="CVE-2012-0503" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to I18n.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
-
-'Applies to client deployments of Java. This vulnerability can be exploited only through Untrusted Java Web Start applications and Untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html</ref>
-      <ref url="http://secunia.com/advisories/48589" source="SECUNIA">48589</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14813" source="OVAL">oval:org.mitre.oval:def:14813</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers num="1.4.2" />
-        <vers num="1.4.2_1" />
-        <vers num="1.4.2_10" />
-        <vers num="1.4.2_11" />
-        <vers num="1.4.2_12" />
-        <vers num="1.4.2_13" />
-        <vers num="1.4.2_14" />
-        <vers num="1.4.2_15" />
-        <vers num="1.4.2_16" />
-        <vers num="1.4.2_17" />
-        <vers num="1.4.2_18" />
-        <vers num="1.4.2_19" />
-        <vers num="1.4.2_2" />
-        <vers num="1.4.2_20" />
-        <vers num="1.4.2_21" />
-        <vers num="1.4.2_22" />
-        <vers num="1.4.2_23" />
-        <vers num="1.4.2_24" />
-        <vers num="1.4.2_25" />
-        <vers num="1.4.2_26" />
-        <vers num="1.4.2_27" />
-        <vers num="1.4.2_28" />
-        <vers num="1.4.2_29" />
-        <vers num="1.4.2_3" />
-        <vers num="1.4.2_30" />
-        <vers num="1.4.2_31" />
-        <vers num="1.4.2_32" />
-        <vers num="1.4.2_33" />
-        <vers num="1.4.2_34" />
-        <vers prev="1" num="1.4.2_35" />
-        <vers num="1.4.2_4" />
-        <vers num="1.4.2_5" />
-        <vers num="1.4.2_6" />
-        <vers num="1.4.2_7" />
-        <vers num="1.4.2_8" />
-        <vers num="1.4.2_9" />
-        <vers prev="1" num="1.5.0" edition="update1" />
-        <vers prev="1" num="1.5.0" edition="update10" />
-        <vers prev="1" num="1.5.0" edition="update11" />
-        <vers prev="1" num="1.5.0" edition="update12" />
-        <vers prev="1" num="1.5.0" edition="update13" />
-        <vers prev="1" num="1.5.0" edition="update14" />
-        <vers prev="1" num="1.5.0" edition="update15" />
-        <vers prev="1" num="1.5.0" edition="update16" />
-        <vers prev="1" num="1.5.0" edition="update17" />
-        <vers prev="1" num="1.5.0" edition="update18" />
-        <vers prev="1" num="1.5.0" edition="update19" />
-        <vers prev="1" num="1.5.0" edition="update2" />
-        <vers prev="1" num="1.5.0" edition="update20" />
-        <vers prev="1" num="1.5.0" edition="update21" />
-        <vers prev="1" num="1.5.0" edition="update22" />
-        <vers prev="1" num="1.5.0" edition="update23" />
-        <vers prev="1" num="1.5.0" edition="update24" />
-        <vers prev="1" num="1.5.0" edition="update25" />
-        <vers prev="1" num="1.5.0" edition="update26" />
-        <vers prev="1" num="1.5.0" edition="update27" />
-        <vers prev="1" num="1.5.0" edition="update28" />
-        <vers prev="1" num="1.5.0" edition="update29" />
-        <vers prev="1" num="1.5.0" edition="update3" />
-        <vers prev="1" num="1.5.0" edition="update31" />
-        <vers prev="1" num="1.5.0" edition="update33" />
-        <vers prev="1" num="1.5.0" edition="update4" />
-        <vers prev="1" num="1.5.0" edition="update5" />
-        <vers prev="1" num="1.5.0" edition="update6" />
-        <vers prev="1" num="1.5.0" edition="update7" />
-        <vers prev="1" num="1.5.0" edition="update8" />
-        <vers prev="1" num="1.5.0" edition="update9" />
-        <vers num="1.6.0" edition="update_1" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_2" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0504" published="2012-02-15" name="CVE-2012-0504" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install and the Java Update mechanism.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
-
-'Applies to client deployments of Java. This vulnerability is in the Java Update mechanism.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html</ref>
-      <ref url="http://secunia.com/advisories/48589" source="SECUNIA">48589</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14890" source="OVAL">oval:org.mitre.oval:def:14890</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers num="1.6.0" edition="update_1" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_2" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0505" published="2012-02-15" name="CVE-2012-0505" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Serialization.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
-
-'Applies to client deployments of Java. This vulnerability can be exploited only through Untrusted Java Web Start applications and Untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html</ref>
-      <ref url="http://secunia.com/advisories/48589" source="SECUNIA">48589</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:13976" source="OVAL">oval:org.mitre.oval:def:13976</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers num="1.4.2" />
-        <vers num="1.4.2_1" />
-        <vers num="1.4.2_10" />
-        <vers num="1.4.2_11" />
-        <vers num="1.4.2_12" />
-        <vers num="1.4.2_13" />
-        <vers num="1.4.2_14" />
-        <vers num="1.4.2_15" />
-        <vers num="1.4.2_16" />
-        <vers num="1.4.2_17" />
-        <vers num="1.4.2_18" />
-        <vers num="1.4.2_19" />
-        <vers num="1.4.2_2" />
-        <vers num="1.4.2_20" />
-        <vers num="1.4.2_21" />
-        <vers num="1.4.2_22" />
-        <vers num="1.4.2_23" />
-        <vers num="1.4.2_24" />
-        <vers num="1.4.2_25" />
-        <vers num="1.4.2_26" />
-        <vers num="1.4.2_27" />
-        <vers num="1.4.2_28" />
-        <vers num="1.4.2_29" />
-        <vers num="1.4.2_3" />
-        <vers num="1.4.2_30" />
-        <vers num="1.4.2_31" />
-        <vers num="1.4.2_32" />
-        <vers num="1.4.2_33" />
-        <vers num="1.4.2_34" />
-        <vers prev="1" num="1.4.2_35" />
-        <vers num="1.4.2_4" />
-        <vers num="1.4.2_5" />
-        <vers num="1.4.2_6" />
-        <vers num="1.4.2_7" />
-        <vers num="1.4.2_8" />
-        <vers num="1.4.2_9" />
-        <vers prev="1" num="1.5.0" edition="update1" />
-        <vers prev="1" num="1.5.0" edition="update10" />
-        <vers prev="1" num="1.5.0" edition="update11" />
-        <vers prev="1" num="1.5.0" edition="update12" />
-        <vers prev="1" num="1.5.0" edition="update13" />
-        <vers prev="1" num="1.5.0" edition="update14" />
-        <vers prev="1" num="1.5.0" edition="update15" />
-        <vers prev="1" num="1.5.0" edition="update16" />
-        <vers prev="1" num="1.5.0" edition="update17" />
-        <vers prev="1" num="1.5.0" edition="update18" />
-        <vers prev="1" num="1.5.0" edition="update19" />
-        <vers prev="1" num="1.5.0" edition="update2" />
-        <vers prev="1" num="1.5.0" edition="update20" />
-        <vers prev="1" num="1.5.0" edition="update21" />
-        <vers prev="1" num="1.5.0" edition="update22" />
-        <vers prev="1" num="1.5.0" edition="update23" />
-        <vers prev="1" num="1.5.0" edition="update24" />
-        <vers prev="1" num="1.5.0" edition="update25" />
-        <vers prev="1" num="1.5.0" edition="update26" />
-        <vers prev="1" num="1.5.0" edition="update27" />
-        <vers prev="1" num="1.5.0" edition="update28" />
-        <vers prev="1" num="1.5.0" edition="update29" />
-        <vers prev="1" num="1.5.0" edition="update3" />
-        <vers prev="1" num="1.5.0" edition="update31" />
-        <vers prev="1" num="1.5.0" edition="update33" />
-        <vers prev="1" num="1.5.0" edition="update4" />
-        <vers prev="1" num="1.5.0" edition="update5" />
-        <vers prev="1" num="1.5.0" edition="update6" />
-        <vers prev="1" num="1.5.0" edition="update7" />
-        <vers prev="1" num="1.5.0" edition="update8" />
-        <vers prev="1" num="1.5.0" edition="update9" />
-        <vers num="1.6.0" edition="update_1" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_2" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0506" published="2012-02-15" name="CVE-2012-0506" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors related to CORBA.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
-
-'Applies to client deployments of Java. This vulnerability can be exploited only through Untrusted Java Web Start applications and Untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)'</impact>
-    </impacts>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html</ref>
-      <ref url="http://secunia.com/advisories/48589" source="SECUNIA">48589</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14082" source="OVAL">oval:org.mitre.oval:def:14082</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers num="1.4.2" />
-        <vers num="1.4.2_1" />
-        <vers num="1.4.2_10" />
-        <vers num="1.4.2_11" />
-        <vers num="1.4.2_12" />
-        <vers num="1.4.2_13" />
-        <vers num="1.4.2_14" />
-        <vers num="1.4.2_15" />
-        <vers num="1.4.2_16" />
-        <vers num="1.4.2_17" />
-        <vers num="1.4.2_18" />
-        <vers num="1.4.2_19" />
-        <vers num="1.4.2_2" />
-        <vers num="1.4.2_20" />
-        <vers num="1.4.2_21" />
-        <vers num="1.4.2_22" />
-        <vers num="1.4.2_23" />
-        <vers num="1.4.2_24" />
-        <vers num="1.4.2_25" />
-        <vers num="1.4.2_26" />
-        <vers num="1.4.2_27" />
-        <vers num="1.4.2_28" />
-        <vers num="1.4.2_29" />
-        <vers num="1.4.2_3" />
-        <vers num="1.4.2_30" />
-        <vers num="1.4.2_31" />
-        <vers num="1.4.2_32" />
-        <vers num="1.4.2_33" />
-        <vers num="1.4.2_34" />
-        <vers prev="1" num="1.4.2_35" />
-        <vers num="1.4.2_4" />
-        <vers num="1.4.2_5" />
-        <vers num="1.4.2_6" />
-        <vers num="1.4.2_7" />
-        <vers num="1.4.2_8" />
-        <vers num="1.4.2_9" />
-        <vers prev="1" num="1.5.0" edition="update1" />
-        <vers prev="1" num="1.5.0" edition="update10" />
-        <vers prev="1" num="1.5.0" edition="update11" />
-        <vers prev="1" num="1.5.0" edition="update12" />
-        <vers prev="1" num="1.5.0" edition="update13" />
-        <vers prev="1" num="1.5.0" edition="update14" />
-        <vers prev="1" num="1.5.0" edition="update15" />
-        <vers prev="1" num="1.5.0" edition="update16" />
-        <vers prev="1" num="1.5.0" edition="update17" />
-        <vers prev="1" num="1.5.0" edition="update18" />
-        <vers prev="1" num="1.5.0" edition="update19" />
-        <vers prev="1" num="1.5.0" edition="update2" />
-        <vers prev="1" num="1.5.0" edition="update20" />
-        <vers prev="1" num="1.5.0" edition="update21" />
-        <vers prev="1" num="1.5.0" edition="update22" />
-        <vers prev="1" num="1.5.0" edition="update23" />
-        <vers prev="1" num="1.5.0" edition="update24" />
-        <vers prev="1" num="1.5.0" edition="update25" />
-        <vers prev="1" num="1.5.0" edition="update26" />
-        <vers prev="1" num="1.5.0" edition="update27" />
-        <vers prev="1" num="1.5.0" edition="update28" />
-        <vers prev="1" num="1.5.0" edition="update29" />
-        <vers prev="1" num="1.5.0" edition="update3" />
-        <vers prev="1" num="1.5.0" edition="update31" />
-        <vers prev="1" num="1.5.0" edition="update33" />
-        <vers prev="1" num="1.5.0" edition="update4" />
-        <vers prev="1" num="1.5.0" edition="update5" />
-        <vers prev="1" num="1.5.0" edition="update6" />
-        <vers prev="1" num="1.5.0" edition="update7" />
-        <vers prev="1" num="1.5.0" edition="update8" />
-        <vers prev="1" num="1.5.0" edition="update9" />
-        <vers num="1.6.0" edition="update_1" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_2" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0507" published="2012-06-07" name="CVE-2012-0507" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency.  NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions.  NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html 'Applies to client deployments of Java. This vulnerability can be exploited only through Untrusted Java Web Start applications and Untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=788994" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=788994</ref>
-      <ref url="http://www.securityfocus.com/bid/52161" source="BID">52161</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html</ref>
-      <ref url="http://weblog.ikvm.net/PermaLink.aspx?guid=cd48169a-9405-4f63-9087-798c4a1866d3" source="MISC">http://weblog.ikvm.net/PermaLink.aspx?guid=cd48169a-9405-4f63-9087-798c4a1866d3</ref>
-      <ref url="http://secunia.com/advisories/48589" source="SECUNIA">48589</ref>
-      <ref url="http://krebsonsecurity.com/2012/03/new-java-attack-rolled-into-exploit-packs/" source="MISC">http://krebsonsecurity.com/2012/03/new-java-attack-rolled-into-exploit-packs/</ref>
-      <ref url="http://blogs.technet.com/b/mmpc/archive/2012/03/20/an-interesting-case-of-jre-sandbox-breach-cve-2012-0507.aspx" source="MISC">http://blogs.technet.com/b/mmpc/archive/2012/03/20/an-interesting-case-of-jre-sandbox-breach-cve-2012-0507.aspx</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers prev="1" num="1.5.0" edition="update1" />
-        <vers prev="1" num="1.5.0" edition="update10" />
-        <vers prev="1" num="1.5.0" edition="update11" />
-        <vers prev="1" num="1.5.0" edition="update12" />
-        <vers prev="1" num="1.5.0" edition="update13" />
-        <vers prev="1" num="1.5.0" edition="update14" />
-        <vers prev="1" num="1.5.0" edition="update15" />
-        <vers prev="1" num="1.5.0" edition="update16" />
-        <vers prev="1" num="1.5.0" edition="update17" />
-        <vers prev="1" num="1.5.0" edition="update18" />
-        <vers prev="1" num="1.5.0" edition="update19" />
-        <vers prev="1" num="1.5.0" edition="update2" />
-        <vers prev="1" num="1.5.0" edition="update20" />
-        <vers prev="1" num="1.5.0" edition="update21" />
-        <vers prev="1" num="1.5.0" edition="update22" />
-        <vers prev="1" num="1.5.0" edition="update23" />
-        <vers prev="1" num="1.5.0" edition="update24" />
-        <vers prev="1" num="1.5.0" edition="update25" />
-        <vers prev="1" num="1.5.0" edition="update26" />
-        <vers prev="1" num="1.5.0" edition="update27" />
-        <vers prev="1" num="1.5.0" edition="update28" />
-        <vers prev="1" num="1.5.0" edition="update29" />
-        <vers prev="1" num="1.5.0" edition="update3" />
-        <vers prev="1" num="1.5.0" edition="update31" />
-        <vers prev="1" num="1.5.0" edition="update33" />
-        <vers prev="1" num="1.5.0" edition="update4" />
-        <vers prev="1" num="1.5.0" edition="update5" />
-        <vers prev="1" num="1.5.0" edition="update6" />
-        <vers prev="1" num="1.5.0" edition="update7" />
-        <vers prev="1" num="1.5.0" edition="update8" />
-        <vers prev="1" num="1.5.0" edition="update9" />
-        <vers num="1.6.0" edition="update_1" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_2" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0508" published="2012-02-15" name="CVE-2012-0508" modified="2012-02-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX, 1.3.0 and earlier, and 1.2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
-
-'Applies to client deployments of Java.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="javafx">
-        <vers num="1.2" />
-        <vers prev="1" num="1.2.2" />
-        <vers prev="1" num="1.3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0509" published="2012-05-03" name="CVE-2012-0509" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2 and 5.3.0 through 5.3.4 allows remote authenticated users to affect integrity via unknown vectors related to Core-Base.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026953" source="SECTRACK">1026953</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="financial_services_software">
-        <vers num="5.0.2" />
-        <vers num="5.3.0" />
-        <vers num="5.3.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0510" published="2012-05-03" name="CVE-2012-0510" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, and 11.1.0.7 allows remote attackers to affect integrity and availability via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026929" source="SECTRACK">1026929</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="10.2.0.3" />
-        <vers num="10.2.0.4" />
-        <vers num="10.2.0.5" />
-        <vers num="11.1.0.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0511" published="2012-05-03" name="CVE-2012-0511" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the OCI component in Oracle Database Server 10.2.0.3, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect confidentiality and integrity via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026929" source="SECTRACK">1026929</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="10.2.0.4" />
-        <vers num="11.1.0.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0512" published="2012-05-03" name="CVE-2012-0512" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:N)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 11.1.0.7 and 11.2.0.2 and Oracle Enterprise Manager Grid Control allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Enterprise Config Management.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026929" source="SECTRACK">1026929</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="11.1.0.7" />
-        <vers num="11.2.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0513" published="2012-05-03" name="CVE-2012-0513" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity, related to REST Services.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="e-business_suite">
-        <vers num="12.0.6" />
-        <vers num="12.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0514" published="2012-05-03" name="CVE-2012-0514" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality, related to SEC.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0515" published="2012-05-03" name="CVE-2012-0515" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Identity Manager Connector component in Oracle Fusion Middleware 9.1.0.4 allows remote authenticated users to affect integrity via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="9.1.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0516" published="2012-05-03" name="CVE-2012-0516" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration Console.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="sun_products_suite">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0517" published="2012-05-03" name="CVE-2012-0517" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:N)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to eCompensation Manager Desktop.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0519" published="2012-05-03" name="CVE-2012-0519" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:C/I:C/A:C)" CVSS_score="7.1" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.2.0.2, when running on Windows, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026929" source="SECTRACK">1026929</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="11.2.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0520" published="2012-05-03" name="CVE-2012-0520" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2, and in Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1, allows remote attackers to affect integrity via unknown vectors related to Security Framework.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026929" source="SECTRACK">1026929</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="10.2.0.3" />
-        <vers num="10.2.0.4" />
-        <vers num="10.2.0.5" />
-        <vers num="11.1.0.7" />
-        <vers num="11.2.0.2" />
-      </prod>
-      <prod vendor="oracle" name="enterprise_manager_grid_control">
-        <vers num="10.2.0.5" />
-        <vers num="11.1.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0521" published="2012-05-03" name="CVE-2012-0521" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 Bundle #9 allows remote authenticated users to affect confidentiality via unknown vectors related to Human Resources.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="9.1" edition="bundle9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0522" published="2012-05-03" name="CVE-2012-0522" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via unknown vectors related to Java Business Objects.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="10.1.3.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0523" published="2012-05-03" name="CVE-2012-0523" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to sgepasswd.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026950" source="SECTRACK">1026950</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="sun_products_suite">
-        <vers num="6.1" />
-        <vers num="6.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0524" published="2012-05-03" name="CVE-2012-0524" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:S/C:P/I:P/A:N)" CVSS_score="3.2" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.1" CVSS_base_score="3.2">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows local users to affect confidentiality and integrity via unknown vectors related to File Processing.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0525" published="2012-05-03" name="CVE-2012-0525" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:N)" CVSS_score="4.9" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="6.8" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Enterprise Config Management.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026929" source="SECTRACK">1026929</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="11.1.0.7" />
-        <vers num="11.2.0.2" />
-        <vers num="11.2.0.3" />
-      </prod>
-      <prod vendor="oracle" name="enterprise_manager_grid_control">
-        <vers num="10.2.0.5" />
-        <vers num="11.1.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0526" published="2012-05-03" name="CVE-2012-0526" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5, allows remote attackers to affect integrity via unknown vectors related to Schema Management.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026929" source="SECTRACK">1026929</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="10.2.0.3" />
-        <vers num="10.2.0.4" />
-        <vers num="10.2.0.5" />
-        <vers num="11.1.0.7" />
-        <vers num="11.2.0.2" />
-        <vers num="11.2.0.3" />
-      </prod>
-      <prod vendor="oracle" name="enterprise_manager_grid_control">
-        <vers num="10.2.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0527" published="2012-05-03" name="CVE-2012-0527" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5, allows remote attackers to affect integrity via unknown vectors related to Schema Management.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026929" source="SECTRACK">1026929</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="10.2.0.3" />
-        <vers num="10.2.0.4" />
-        <vers num="10.2.0.5" />
-        <vers num="11.1.0.7" />
-        <vers num="11.2.0.2" />
-        <vers num="11.2.0.3" />
-      </prod>
-      <prod vendor="oracle" name="enterprise_manager_grid_control">
-        <vers num="10.2.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0528" published="2012-05-03" name="CVE-2012-0528" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, and 11.1.0.7, and Oracle Enterprise Manager Grid Control, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security Framework.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026929" source="SECTRACK">1026929</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="10.2.0.3" />
-        <vers num="10.2.0.4" />
-        <vers num="10.2.0.5" />
-        <vers num="11.1.0.7" />
-      </prod>
-      <prod vendor="oracle" name="enterprise_manager_grid_control">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0529" published="2012-05-03" name="CVE-2012-0529" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51 allows remote authenticated users to affect integrity via unknown vectors related to core.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="8.51" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0530" published="2012-05-03" name="CVE-2012-0530" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect integrity via unknown vectors related to eProcurement.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="9.0" />
-        <vers num="9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0531" published="2012-05-03" name="CVE-2012-0531" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise Portal component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect integrity via unknown vectors related to Enterprise Portal.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0532" published="2012-05-03" name="CVE-2012-0532" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:N)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Identity Manager component in Oracle Fusion Middleware 11.1.1.3 and 11.1.1.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to User Config Management.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="11.1.1.3.0" />
-        <vers num="11.1.1.5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0533" published="2012-05-03" name="CVE-2012-0533" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise FCSM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Receivables.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="9.0" />
-        <vers num="9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0534" published="2012-05-03" name="CVE-2012-0534" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity via unknown vectors related to Create Session.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026929" source="SECTRACK">1026929</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="10.2.0.3" />
-        <vers num="10.2.0.4" />
-        <vers num="10.2.0.5" />
-        <vers num="11.1.0.7" />
-        <vers num="11.2.0.2" />
-        <vers num="11.2.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0535" published="2012-05-03" name="CVE-2012-0535" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Change Password Page.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="e-business_suite">
-        <vers num="12.0.6" />
-        <vers num="12.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0536" published="2012-05-03" name="CVE-2012-0536" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9 through Bundle #26 allows remote authenticated users to affect confidentiality via unknown vectors related to eCompensation.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="8.9" edition="bundle24" />
-        <vers num="8.9" edition="bundle26" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0537" published="2012-05-03" name="CVE-2012-0537" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity, related to HTML pages.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="e-business_suite">
-        <vers num="12.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0538" published="2012-05-03" name="CVE-2012-0538" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:N)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Search.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0539" published="2012-05-03" name="CVE-2012-0539" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="6.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="1.9" CVSS_base_score="6.2">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to (1) bsmconv and (2) bsmunconv.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-        <vers num="5.8" />
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0540" published="2012-07-17" name="CVE-2012-0540" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier and 5.5.23 and earlier allows remote authenticated users to affect availability, related to GIS Extension.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-        <vers num="5.5.1" />
-        <vers num="5.5.2" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers prev="1" num="5.1.62" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.22" />
-        <vers prev="1" num="5.5.23" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0541" published="2012-05-03" name="CVE-2012-0541" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:N/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Core-My Services.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026953" source="SECTRACK">1026953</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="financial_services_software">
-        <vers num="5.0.2" />
-        <vers num="5.3.0" />
-        <vers num="5.3.4" />
-        <vers num="6.0.1" />
-        <vers num="6.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0542" published="2012-05-03" name="CVE-2012-0542" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Runtime Catalog.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="e-business_suite">
-        <vers num="11.5.10.2" />
-        <vers num="12.0.4" />
-        <vers num="12.0.6" />
-        <vers num="12.1.1" />
-        <vers num="12.1.2" />
-        <vers num="12.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0543" published="2012-05-03" name="CVE-2012-0543" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 10.1.3.4.1 and 10.1.3.4.2 allows remote attackers to affect integrity via unknown vectors related to Administration.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="10.1.3.4.1" />
-        <vers num="10.1.3.4.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0544" published="2012-05-03" name="CVE-2012-0544" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.4.0 allows remote authenticated users to affect integrity via unknown vectors related to Core.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026953" source="SECTRACK">1026953</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="financial_services_software">
-        <vers num="10.0.0" />
-        <vers num="10.5.0" />
-        <vers num="11.0.0" />
-        <vers num="11.2.0" />
-        <vers num="11.4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0545" published="2012-05-03" name="CVE-2012-0545" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:P/I:P/A:N)" CVSS_score="3.6" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.9" CVSS_base_score="3.6">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.2.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Core.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026953" source="SECTRACK">1026953</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="financial_services_software">
-        <vers num="10.0.0" />
-        <vers num="10.5.0" />
-        <vers num="11.0.0" />
-        <vers num="11.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0546" published="2012-05-03" name="CVE-2012-0546" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:P/I:P/A:N)" CVSS_score="3.6" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.9" CVSS_base_score="3.6">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.2.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Core.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026953" source="SECTRACK">1026953</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="financial_services_software">
-        <vers num="10.0.0" />
-        <vers num="10.5.0" />
-        <vers num="11.0.0" />
-        <vers num="11.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0547" published="2012-08-30" name="CVE-2012-0547" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:N)" CVSS_score="0.0" CVSS_impact_subscore="0.0" CVSS_exploit_subscore="10.0" CVSS_base_score="0.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and "a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited." NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities.</descript>
-    </desc>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jdk">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.6.0" edition="update_31" />
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.6.0" edition="update_33" />
-        <vers prev="1" num="1.6.0" edition="update_34" />
-        <vers num="1.7.0" edition="update1" />
-        <vers num="1.7.0" edition="update2" />
-        <vers num="1.7.0" edition="update3" />
-        <vers num="1.7.0" edition="update4" />
-        <vers num="1.7.0" edition="update5" />
-        <vers num="1.7.0" edition="update6" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.6.0" edition="update_31" />
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.6.0" edition="update_33" />
-        <vers prev="1" num="1.6.0" edition="update_34" />
-        <vers prev="1" num="1.6.0" edition="update_35" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-        <vers prev="1" num="1.7.0" edition="update5" />
-        <vers prev="1" num="1.7.0" edition="update6" />
-      </prod>
-      <prod vendor="sun" name="jdk">
-        <vers num="1.6.0" edition="update1" />
-        <vers num="1.6.0" edition="update1_b06" />
-        <vers num="1.6.0" edition="update2" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers num="1.6.0" edition="update_1" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_2" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0548" published="2012-05-03" name="CVE-2012-0548" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle SPARC Enterprise M Series Servers XCP 1110 and earlier allows local users to affect confidentiality, related to XSCF Control Package (XCP).</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="xcp">
-        <vers prev="1" num="1100" />
-      </prod>
-      <prod vendor="oracle" name="sparc_enterprise_m3000_server">
-        <vers prev="1" num="-" />
-      </prod>
-      <prod vendor="oracle" name="sparc_enterprise_m4000_server">
-        <vers prev="1" num="-" />
-      </prod>
-      <prod vendor="oracle" name="sparc_enterprise_m5000_server">
-        <vers prev="1" num="-" />
-      </prod>
-      <prod vendor="oracle" name="sparc_enterprise_m8000_server">
-        <vers prev="1" num="-" />
-      </prod>
-      <prod vendor="oracle" name="sparc_enterprise_m9000_server">
-        <vers prev="1" num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0549" published="2012-05-03" name="CVE-2012-0549" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle AutoVue Office component in Oracle Supply Chain Products Suite 20.0.2 allows remote attackers to affect confidentiality, integrity, and availability, related to Desktop API.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026937" source="SECTRACK">1026937</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="supply_chain_products_suite">
-        <vers num="20.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0550" published="2012-05-03" name="CVE-2012-0550" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="glassfish_server">
-        <vers num="3.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0551" published="2012-05-03" name="CVE-2012-0551" modified="2012-06-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html" source="CONFIRM">http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="glassfish_server">
-        <vers num="3.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0552" published="2012-05-03" name="CVE-2012-0552" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Spatial component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026929" source="SECTRACK">1026929</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="10.2.0.3" />
-        <vers num="10.2.0.4" />
-        <vers num="10.2.0.5" />
-        <vers num="11.1.0.7" />
-        <vers num="11.2.0.2" />
-        <vers num="11.2.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0554" published="2012-05-03" name="CVE-2012-0554" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows remote attackers to affect confidentiality, integrity, and availability, related to Outside In Image Export SDK.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.5.0" />
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0555" published="2012-05-03" name="CVE-2012-0555" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows remote attackers to affect confidentiality, integrity, and availability, related to Outside In Image Export SDK.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.5.0" />
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0556" published="2012-05-03" name="CVE-2012-0556" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows remote attackers to affect confidentiality, integrity, and availability, related to Outside In Image Export SDK.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.5.0" />
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0557" published="2012-05-03" name="CVE-2012-0557" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows remote attackers to affect confidentiality, integrity, and availability, related to Outside In Image Export SDK.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.5.0" />
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0558" published="2012-05-03" name="CVE-2012-0558" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 6.2.1, 8.0, 8.1, and 8.2 allows remote attackers to affect integrity via unknown vectors related to Web application.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="primavera_products_suite">
-        <vers num="6.2.1" />
-        <vers num="8.0" />
-        <vers num="8.1" />
-        <vers num="8.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0559" published="2012-05-03" name="CVE-2012-0559" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Billing.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="9.0" />
-        <vers num="9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0560" published="2012-05-03" name="CVE-2012-0560" modified="2012-05-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote attackers to affect integrity via unknown vectors related to Portal.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0561" published="2012-05-03" name="CVE-2012-0561" modified="2012-05-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect integrity, related to PIA Core Technology.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0562" published="2012-05-03" name="CVE-2012-0562" modified="2012-05-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Candidate Gateway.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0563" published="2012-07-17" name="CVE-2012-0563" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Solaris 9, 10, and 11 allows local users to affect availability via unknown vectors related to Kerberos/klist.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027274" source="SECTRACK">1027274</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0564" published="2012-05-03" name="CVE-2012-0564" modified="2012-05-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50 and 8.51 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Query.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="8.50" />
-        <vers num="8.51" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0565" published="2012-05-03" name="CVE-2012-0565" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:N)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 6.0.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Install.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026937" source="SECTRACK">1026937</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="supply_chain_products_suite">
-        <vers num="6.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0566" published="2012-05-03" name="CVE-2012-0566" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 6.0.0 allows remote attackers to affect integrity via unknown vectors related to Supplier Portal.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026937" source="SECTRACK">1026937</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="supply_chain_products_suite">
-        <vers num="6.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0567" published="2012-05-03" name="CVE-2012-0567" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:N)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.2.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Core.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026953" source="SECTRACK">1026953</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="financial_services_software">
-        <vers num="10.0.0" />
-        <vers num="10.5.0" />
-        <vers num="11.0.0" />
-        <vers num="11.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0571" published="2012-05-03" name="CVE-2012-0571" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.4.0 allows remote authenticated users to affect integrity via unknown vectors related to Core.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026953" source="SECTRACK">1026953</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="financial_services_software">
-        <vers num="10.0.0" />
-        <vers num="10.5.0" />
-        <vers num="11.0.0" />
-        <vers num="11.2.0" />
-        <vers num="11.4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0573" published="2012-05-03" name="CVE-2012-0573" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:N)" CVSS_score="4.9" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="6.8" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.4.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Core.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026953" source="SECTRACK">1026953</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="financial_services_software">
-        <vers num="10.0.0" />
-        <vers num="10.5.0" />
-        <vers num="11.0.0" />
-        <vers num="11.2.0" />
-        <vers num="11.4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0575" published="2012-05-03" name="CVE-2012-0575" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Core.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026953" source="SECTRACK">1026953</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="financial_services_software">
-        <vers num="10.0.0" />
-        <vers num="10.5.0" />
-        <vers num="11.0.0" />
-        <vers num="11.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0576" published="2012-05-03" name="CVE-2012-0576" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 6.0.1 and 6.2.0 allows remote authenticated users to affect integrity via unknown vectors related to Core-Help.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026953" source="SECTRACK">1026953</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="financial_services_software">
-        <vers num="6.0.1" />
-        <vers num="6.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0577" published="2012-05-03" name="CVE-2012-0577" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:P)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.4.0 allows remote authenticated users to affect availability via unknown vectors related to Core.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026953" source="SECTRACK">1026953</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="financial_services_software">
-        <vers num="10.0.0" />
-        <vers num="10.5.0" />
-        <vers num="11.0.0" />
-        <vers num="11.2.0" />
-        <vers num="11.4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0579" published="2012-05-03" name="CVE-2012-0579" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:N/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.4.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Core.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026953" source="SECTRACK">1026953</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="financial_services_software">
-        <vers num="10.0.0" />
-        <vers num="10.5.0" />
-        <vers num="11.0.0" />
-        <vers num="11.2.0" />
-        <vers num="11.4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0580" published="2012-05-03" name="CVE-2012-0580" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 6.0.0 allows remote attackers to affect integrity via unknown vectors related to Supplier Portal.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026937" source="SECTRACK">1026937</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="supply_chain_products_suite">
-        <vers num="6.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0581" published="2012-05-03" name="CVE-2012-0581" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 6.0.0 allows remote attackers to affect integrity, related to SCRM - Company Profiles.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026937" source="SECTRACK">1026937</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="supply_chain_products_suite">
-        <vers num="6.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0582" published="2012-05-03" name="CVE-2012-0582" modified="2012-05-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="industry_applications">
-        <vers num="7.7" />
-        <vers num="7.8" />
-        <vers num="8.0.0.0" />
-        <vers num="8.1.1.0" />
-        <vers num="8.2.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0583" published="2012-05-03" name="CVE-2012-0583" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.60 and earlier, and 5.5.19 and earlier, allows remote authenticated users to affect availability, related to MyISAM.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53061" source="BID">53061</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.1" />
-        <vers num="5.5.2" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers prev="1" num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers prev="1" num="5.5.19" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0584" published="2012-03-12" name="CVE-2012-0584" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The Internationalized Domain Name (IDN) feature in Apple Safari before 5.1.4 on Windows does not properly restrict the characters in URLs, which allows remote attackers to spoof a domain name via unspecified homoglyphs.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers prev="1" num="5.1.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0585" published="2012-03-08" name="CVE-2012-0585" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the (1) pushState or (2) replaceState method.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0586" published="2012-03-08" name="CVE-2012-0586" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0587, CVE-2012-0588, and CVE-2012-0589.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0587" published="2012-03-08" name="CVE-2012-0587" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0586, CVE-2012-0588, and CVE-2012-0589.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0588" published="2012-03-08" name="CVE-2012-0588" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0586, CVE-2012-0587, and CVE-2012-0589.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0589" published="2012-03-08" name="CVE-2012-0589" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0586, CVE-2012-0587, and CVE-2012-0588.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0590" published="2012-03-08" name="CVE-2012-0590" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5.1, allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a drag-and-drop operation.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0591" published="2012-03-08" name="CVE-2012-0591" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0592" published="2012-03-08" name="CVE-2012-0592" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0593" published="2012-03-08" name="CVE-2012-0593" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0594" published="2012-03-08" name="CVE-2012-0594" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0595" published="2012-03-08" name="CVE-2012-0595" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0596" published="2012-03-08" name="CVE-2012-0596" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0597" published="2012-03-08" name="CVE-2012-0597" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0598" published="2012-03-08" name="CVE-2012-0598" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0599" published="2012-03-08" name="CVE-2012-0599" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0600" published="2012-03-08" name="CVE-2012-0600" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0601" published="2012-03-08" name="CVE-2012-0601" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0602" published="2012-03-08" name="CVE-2012-0602" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0603" published="2012-03-08" name="CVE-2012-0603" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0604" published="2012-03-08" name="CVE-2012-0604" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0605" published="2012-03-08" name="CVE-2012-0605" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0606" published="2012-03-08" name="CVE-2012-0606" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0607" published="2012-03-08" name="CVE-2012-0607" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0608" published="2012-03-08" name="CVE-2012-0608" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0609" published="2012-03-08" name="CVE-2012-0609" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0610" published="2012-03-08" name="CVE-2012-0610" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0611" published="2012-03-08" name="CVE-2012-0611" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0612" published="2012-03-08" name="CVE-2012-0612" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0613" published="2012-03-08" name="CVE-2012-0613" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0614" published="2012-03-08" name="CVE-2012-0614" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0615" published="2012-03-08" name="CVE-2012-0615" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0616" published="2012-03-08" name="CVE-2012-0616" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0617" published="2012-03-08" name="CVE-2012-0617" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0618" published="2012-03-08" name="CVE-2012-0618" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0619" published="2012-03-08" name="CVE-2012-0619" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0620" published="2012-03-08" name="CVE-2012-0620" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0621" published="2012-03-08" name="CVE-2012-0621" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0622" published="2012-03-08" name="CVE-2012-0622" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0623" published="2012-03-08" name="CVE-2012-0623" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0624" published="2012-03-08" name="CVE-2012-0624" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0625" published="2012-03-08" name="CVE-2012-0625" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0626" published="2012-03-08" name="CVE-2012-0626" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0627" published="2012-03-08" name="CVE-2012-0627" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0628" published="2012-03-08" name="CVE-2012-0628" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0629" published="2012-03-08" name="CVE-2012-0629" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0630" published="2012-03-08" name="CVE-2012-0630" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0631" published="2012-03-08" name="CVE-2012-0631" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0632" published="2012-03-08" name="CVE-2012-0632" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0633" published="2012-03-08" name="CVE-2012-0633" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0634" published="2012-03-08" name="CVE-2012-0634" modified="2012-03-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="7.6" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="4.9" CVSS_base_score="7.6">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="webkit">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0635" published="2012-03-08" name="CVE-2012-0635" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0636" published="2012-03-08" name="CVE-2012-0636" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="7.6" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="4.9" CVSS_base_score="7.6">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="webkit">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0637" published="2012-03-08" name="CVE-2012-0637" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="7.6" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="4.9" CVSS_base_score="7.6">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="webkit">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0638" published="2012-03-08" name="CVE-2012-0638" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="7.6" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="4.9" CVSS_base_score="7.6">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="webkit">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0639" published="2012-03-08" name="CVE-2012-0639" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="7.6" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="4.9" CVSS_base_score="7.6">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="webkit">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0640" published="2012-03-12" name="CVE-2012-0640" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">WebKit in Apple Safari before 5.1.4 does not properly implement "From third parties and advertisers" cookie blocking, which makes it easier for remote web servers to track users via a cookie.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers prev="1" num="5.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0641" published="2012-03-08" name="CVE-2012-0641" modified="2012-03-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">CFNetwork in Apple iOS before 5.1 does not properly construct request headers during parsing of URLs, which allows remote attackers to obtain sensitive information via a malformed URL, a different vulnerability than CVE-2011-3447.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0642" published="2012-03-08" name="CVE-2012-0642" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Integer underflow in Apple iOS before 5.1 allows remote attackers to execute arbitrary code or cause a denial of service (device crash) via a crafted catalog file in an HFS disk image.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE">APPLE-SA-2012-05-09-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0643" published="2012-03-08" name="CVE-2012-0643" modified="2012-03-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The kernel in Apple iOS before 5.1 does not properly handle debug system calls, which allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a crafted program.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0644" published="2012-03-08" name="CVE-2012-0644" modified="2012-03-09" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Race condition in the Passcode Lock feature in Apple iOS before 5.1 allows physically proximate attackers to bypass intended passcode requirements via a slide-to-dial gesture.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0645" published="2012-03-08" name="CVE-2012-0645" modified="2012-03-09" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="1.2" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="1.9" CVSS_base_score="1.2">
-    <desc>
-      <descript source="cve">Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that forwards an active e-mail message to an arbitrary recipient.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0646" published="2012-03-08" name="CVE-2012-0646" modified="2012-03-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Format string vulnerability in VPN in Apple iOS before 5.1 allows remote attackers to execute arbitrary code via a crafted racoon configuration file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-" />
-        <vers prev="1" num="5.0.1" edition="-:ipodtouch" />
-        <vers prev="1" num="5.0.1" edition="-:ipad" />
-        <vers prev="1" num="5.0.1" edition="-:iphone" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0647" published="2012-03-12" name="CVE-2012-0647" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers prev="1" num="5.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0648" published="2012-03-08" name="CVE-2012-0648" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="7.6" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="4.9" CVSS_base_score="7.6">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html" source="APPLE">APPLE-SA-2012-03-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-03-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.1" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers prev="1" num="10.5.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.9.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.2.0" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.2" />
-        <vers num="7.4.3" />
-        <vers num="7.5.0" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.7.0" />
-        <vers num="7.7.1" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-      <prod vendor="apple" name="webkit">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0649" published="2012-05-10" name="CVE-2012-0649" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Race condition in the initialization routine in blued in Bluetooth in Apple Mac OS X before 10.7.4 allows local users to gain privileges via vectors involving a temporary file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53445" source="BID">53445</ref>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-05-09-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="mac_os_x">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-      <prod vendor="apple" name="mac_os_x_server">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0651" published="2012-05-10" name="CVE-2012-0651" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The directory server in Directory Service in Apple Mac OS X 10.6.8 allows remote attackers to obtain sensitive information from process memory via a crafted message.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53445" source="BID">53445</ref>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-05-09-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="mac_os_x">
-        <vers num="10.6.8" />
-      </prod>
-      <prod vendor="apple" name="mac_os_x_server">
-        <vers num="10.6.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0652" published="2012-05-10" name="CVE-2012-0652" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:N/A:N)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Login Window in Apple Mac OS X 10.7.3, when Legacy File Vault or networked home directories are enabled, does not properly restrict what is written to the system log for network logins, which allows local users to obtain sensitive information by reading the log.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53445" source="BID">53445</ref>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-05-09-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="mac_os_x">
-        <vers num="10.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0654" published="2012-05-10" name="CVE-2012-0654" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">libsecurity in Apple Mac OS X before 10.7.4 accesses uninitialized memory locations during the processing of X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted certificate.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53445" source="BID">53445</ref>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-05-09-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="mac_os_x">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-      <prod vendor="apple" name="mac_os_x_server">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0655" published="2012-05-10" name="CVE-2012-0655" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">libsecurity in Apple Mac OS X before 10.7.4 does not properly restrict the length of RSA keys within X.509 certificates, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by conducting a spoofing or network-sniffing attack during communication with a site that uses a short key.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53445" source="BID">53445</ref>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-05-09-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="mac_os_x">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-      <prod vendor="apple" name="mac_os_x_server">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0656" published="2012-05-10" name="CVE-2012-0656" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="6.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="1.9" CVSS_base_score="6.2">
-    <desc>
-      <descript source="cve">Race condition in LoginUIFramework in Apple Mac OS X 10.7.x before 10.7.4, when the Guest account is enabled, allows physically proximate attackers to login to arbitrary accounts by entering the account name and no password.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53445" source="BID">53445</ref>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-05-09-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="mac_os_x">
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers num="10.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0657" published="2012-05-10" name="CVE-2012-0657" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically proximate attackers to bypass screen locking and launch a Safari process via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53473" source="BID">53473</ref>
-      <ref url="http://www.securityfocus.com/bid/53445" source="BID">53445</ref>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-05-09-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="mac_os_x">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-      <prod vendor="apple" name="mac_os_x_server">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0658" published="2012-05-10" name="CVE-2012-0658" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Buffer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted audio sample tables in a movie file that is progressively downloaded.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53465" source="BID">53465</ref>
-      <ref url="http://www.securityfocus.com/bid/53445" source="BID">53445</ref>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://support.apple.com/kb/HT5261" source="CONFIRM">http://support.apple.com/kb/HT5261</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00005.html" source="APPLE">APPLE-SA-2012-05-15-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-05-09-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="mac_os_x">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-      <prod vendor="apple" name="mac_os_x_server">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0659" published="2012-05-10" name="CVE-2012-0659" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Integer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53467" source="BID">53467</ref>
-      <ref url="http://www.securityfocus.com/bid/53445" source="BID">53445</ref>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://support.apple.com/kb/HT5261" source="CONFIRM">http://support.apple.com/kb/HT5261</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00005.html" source="APPLE">APPLE-SA-2012-05-15-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-05-09-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="mac_os_x">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-      <prod vendor="apple" name="mac_os_x_server">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0660" published="2012-05-10" name="CVE-2012-0660" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Buffer underflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53469" source="BID">53469</ref>
-      <ref url="http://www.securityfocus.com/bid/53445" source="BID">53445</ref>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://support.apple.com/kb/HT5261" source="CONFIRM">http://support.apple.com/kb/HT5261</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00005.html" source="APPLE">APPLE-SA-2012-05-15-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-05-09-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="mac_os_x">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-      <prod vendor="apple" name="mac_os_x_server">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0661" published="2012-05-10" name="CVE-2012-0661" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in QuickTime in Apple Mac OS X 10.7.x before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with JPEG2000 encoding.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53445" source="BID">53445</ref>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://support.apple.com/kb/HT5261" source="CONFIRM">http://support.apple.com/kb/HT5261</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00005.html" source="APPLE">APPLE-SA-2012-05-15-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-05-09-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="mac_os_x">
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-      </prod>
-      <prod vendor="apple" name="mac_os_x_server">
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0662" published="2012-05-10" name="CVE-2012-0662" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Integer overflow in the Security Framework in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted input.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53468" source="BID">53468</ref>
-      <ref url="http://www.securityfocus.com/bid/53445" source="BID">53445</ref>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-05-09-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="mac_os_x">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-      <prod vendor="apple" name="mac_os_x_server">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0663" published="2012-05-16" name="CVE-2012-0663" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TeXML file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53571" source="BID">53571</ref>
-      <ref url="http://support.apple.com/kb/HT5261" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5261</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00005.html" source="APPLE" adv="1">APPLE-SA-2012-05-15-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="quicktime">
-        <vers num="3.0" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="6.0" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.1" />
-        <vers num="6.1.0" />
-        <vers num="6.1.1" />
-        <vers num="6.2.0" />
-        <vers num="6.3.0" />
-        <vers num="6.4.0" />
-        <vers num="6.5" />
-        <vers num="6.5.0" />
-        <vers num="6.5.1" />
-        <vers num="6.5.2" />
-        <vers num="7.0" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.0.3" />
-        <vers num="7.0.4" />
-        <vers num="7.1" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.1.2" />
-        <vers num="7.1.3" />
-        <vers num="7.1.4" />
-        <vers num="7.1.5" />
-        <vers num="7.1.6" />
-        <vers num="7.2" />
-        <vers num="7.2.0" />
-        <vers num="7.2.1" />
-        <vers num="7.3" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.1.70" />
-        <vers num="7.4" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.5" />
-        <vers num="7.5.0" />
-        <vers num="7.5.5" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.6.5" />
-        <vers num="7.6.6" />
-        <vers num="7.6.7" />
-        <vers num="7.6.8" />
-        <vers num="7.6.9" />
-        <vers num="7.60.92.0" />
-        <vers num="7.62.14.0" />
-        <vers num="7.64.17.73" />
-        <vers num="7.65.17.80" />
-        <vers num="7.66.71.0" />
-        <vers num="7.67.75.0" />
-        <vers num="7.68.75.0" />
-        <vers num="7.69.80.9" />
-        <vers num="7.7.0" />
-        <vers prev="1" num="7.7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0664" published="2012-05-16" name="CVE-2012-0664" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted text track in a movie file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53574" source="BID">53574</ref>
-      <ref url="http://support.apple.com/kb/HT5261" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5261</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00005.html" source="APPLE" adv="1">APPLE-SA-2012-05-15-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="quicktime">
-        <vers num="3.0" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="6.0" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.1" />
-        <vers num="6.1.0" />
-        <vers num="6.1.1" />
-        <vers num="6.2.0" />
-        <vers num="6.3.0" />
-        <vers num="6.4.0" />
-        <vers num="6.5" />
-        <vers num="6.5.0" />
-        <vers num="6.5.1" />
-        <vers num="6.5.2" />
-        <vers num="7.0" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.0.3" />
-        <vers num="7.0.4" />
-        <vers num="7.1" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.1.2" />
-        <vers num="7.1.3" />
-        <vers num="7.1.4" />
-        <vers num="7.1.5" />
-        <vers num="7.1.6" />
-        <vers num="7.2" />
-        <vers num="7.2.0" />
-        <vers num="7.2.1" />
-        <vers num="7.3" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.1.70" />
-        <vers num="7.4" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.5" />
-        <vers num="7.5.0" />
-        <vers num="7.5.5" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.6.5" />
-        <vers num="7.6.6" />
-        <vers num="7.6.7" />
-        <vers num="7.6.8" />
-        <vers num="7.6.9" />
-        <vers num="7.60.92.0" />
-        <vers num="7.62.14.0" />
-        <vers num="7.64.17.73" />
-        <vers num="7.65.17.80" />
-        <vers num="7.66.71.0" />
-        <vers num="7.67.75.0" />
-        <vers num="7.68.75.0" />
-        <vers num="7.69.80.9" />
-        <vers num="7.7.0" />
-        <vers prev="1" num="7.7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0665" published="2012-05-16" name="CVE-2012-0665" modified="2012-05-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5261" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5261</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00005.html" source="APPLE" adv="1">APPLE-SA-2012-05-15-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="quicktime">
-        <vers num="3.0" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="6.0" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.1" />
-        <vers num="6.1.0" />
-        <vers num="6.1.1" />
-        <vers num="6.2.0" />
-        <vers num="6.3.0" />
-        <vers num="6.4.0" />
-        <vers num="6.5" />
-        <vers num="6.5.0" />
-        <vers num="6.5.1" />
-        <vers num="6.5.2" />
-        <vers num="7.0" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.0.3" />
-        <vers num="7.0.4" />
-        <vers num="7.1" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.1.2" />
-        <vers num="7.1.3" />
-        <vers num="7.1.4" />
-        <vers num="7.1.5" />
-        <vers num="7.1.6" />
-        <vers num="7.2" />
-        <vers num="7.2.0" />
-        <vers num="7.2.1" />
-        <vers num="7.3" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.1.70" />
-        <vers num="7.4" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.5" />
-        <vers num="7.5.0" />
-        <vers num="7.5.5" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.6.5" />
-        <vers num="7.6.6" />
-        <vers num="7.6.7" />
-        <vers num="7.6.8" />
-        <vers num="7.6.9" />
-        <vers num="7.60.92.0" />
-        <vers num="7.62.14.0" />
-        <vers num="7.64.17.73" />
-        <vers num="7.65.17.80" />
-        <vers num="7.66.71.0" />
-        <vers num="7.67.75.0" />
-        <vers num="7.68.75.0" />
-        <vers num="7.69.80.9" />
-        <vers num="7.7.0" />
-        <vers prev="1" num="7.7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0666" published="2012-05-16" name="CVE-2012-0666" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in the plugin in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTMovie object.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53577" source="BID">53577</ref>
-      <ref url="http://support.apple.com/kb/HT5261" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5261</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00005.html" source="APPLE" adv="1">APPLE-SA-2012-05-15-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="quicktime">
-        <vers num="3.0" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="6.0" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.1" />
-        <vers num="6.1.0" />
-        <vers num="6.1.1" />
-        <vers num="6.2.0" />
-        <vers num="6.3.0" />
-        <vers num="6.4.0" />
-        <vers num="6.5" />
-        <vers num="6.5.0" />
-        <vers num="6.5.1" />
-        <vers num="6.5.2" />
-        <vers num="7.0" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.0.3" />
-        <vers num="7.0.4" />
-        <vers num="7.1" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.1.2" />
-        <vers num="7.1.3" />
-        <vers num="7.1.4" />
-        <vers num="7.1.5" />
-        <vers num="7.1.6" />
-        <vers num="7.2" />
-        <vers num="7.2.0" />
-        <vers num="7.2.1" />
-        <vers num="7.3" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.1.70" />
-        <vers num="7.4" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.5" />
-        <vers num="7.5.0" />
-        <vers num="7.5.5" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.6.5" />
-        <vers num="7.6.6" />
-        <vers num="7.6.7" />
-        <vers num="7.6.8" />
-        <vers num="7.6.9" />
-        <vers num="7.60.92.0" />
-        <vers num="7.62.14.0" />
-        <vers num="7.64.17.73" />
-        <vers num="7.65.17.80" />
-        <vers num="7.66.71.0" />
-        <vers num="7.67.75.0" />
-        <vers num="7.68.75.0" />
-        <vers num="7.69.80.9" />
-        <vers num="7.7.0" />
-        <vers prev="1" num="7.7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0667" published="2012-05-16" name="CVE-2012-0667" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Integer signedness error in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTVR movie file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53583" source="BID">53583</ref>
-      <ref url="http://support.apple.com/kb/HT5261" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5261</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00005.html" source="APPLE" adv="1">APPLE-SA-2012-05-15-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="quicktime">
-        <vers num="3.0" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="6.0" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.1" />
-        <vers num="6.1.0" />
-        <vers num="6.1.1" />
-        <vers num="6.2.0" />
-        <vers num="6.3.0" />
-        <vers num="6.4.0" />
-        <vers num="6.5" />
-        <vers num="6.5.0" />
-        <vers num="6.5.1" />
-        <vers num="6.5.2" />
-        <vers num="7.0" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.0.3" />
-        <vers num="7.0.4" />
-        <vers num="7.1" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.1.2" />
-        <vers num="7.1.3" />
-        <vers num="7.1.4" />
-        <vers num="7.1.5" />
-        <vers num="7.1.6" />
-        <vers num="7.2" />
-        <vers num="7.2.0" />
-        <vers num="7.2.1" />
-        <vers num="7.3" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.1.70" />
-        <vers num="7.4" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.5" />
-        <vers num="7.5.0" />
-        <vers num="7.5.5" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.6.5" />
-        <vers num="7.6.6" />
-        <vers num="7.6.7" />
-        <vers num="7.6.8" />
-        <vers num="7.6.9" />
-        <vers num="7.60.92.0" />
-        <vers num="7.62.14.0" />
-        <vers num="7.64.17.73" />
-        <vers num="7.65.17.80" />
-        <vers num="7.66.71.0" />
-        <vers num="7.67.75.0" />
-        <vers num="7.68.75.0" />
-        <vers num="7.69.80.9" />
-        <vers num="7.7.0" />
-        <vers prev="1" num="7.7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0668" published="2012-05-16" name="CVE-2012-0668" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53579" source="BID">53579</ref>
-      <ref url="http://support.apple.com/kb/HT5261" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5261</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00005.html" source="APPLE" adv="1">APPLE-SA-2012-05-15-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="quicktime">
-        <vers num="3.0" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="6.0" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.1" />
-        <vers num="6.1.0" />
-        <vers num="6.1.1" />
-        <vers num="6.2.0" />
-        <vers num="6.3.0" />
-        <vers num="6.4.0" />
-        <vers num="6.5" />
-        <vers num="6.5.0" />
-        <vers num="6.5.1" />
-        <vers num="6.5.2" />
-        <vers num="7.0" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.0.3" />
-        <vers num="7.0.4" />
-        <vers num="7.1" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.1.2" />
-        <vers num="7.1.3" />
-        <vers num="7.1.4" />
-        <vers num="7.1.5" />
-        <vers num="7.1.6" />
-        <vers num="7.2" />
-        <vers num="7.2.0" />
-        <vers num="7.2.1" />
-        <vers num="7.3" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.1.70" />
-        <vers num="7.4" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.5" />
-        <vers num="7.5.0" />
-        <vers num="7.5.5" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.6.5" />
-        <vers num="7.6.6" />
-        <vers num="7.6.7" />
-        <vers num="7.6.8" />
-        <vers num="7.6.9" />
-        <vers num="7.60.92.0" />
-        <vers num="7.62.14.0" />
-        <vers num="7.64.17.73" />
-        <vers num="7.65.17.80" />
-        <vers num="7.66.71.0" />
-        <vers num="7.67.75.0" />
-        <vers num="7.68.75.0" />
-        <vers num="7.69.80.9" />
-        <vers num="7.7.0" />
-        <vers prev="1" num="7.7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0669" published="2012-05-16" name="CVE-2012-0669" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53580" source="BID">53580</ref>
-      <ref url="http://support.apple.com/kb/HT5261" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5261</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00005.html" source="APPLE" adv="1">APPLE-SA-2012-05-15-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="quicktime">
-        <vers num="3.0" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="6.0" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.1" />
-        <vers num="6.1.0" />
-        <vers num="6.1.1" />
-        <vers num="6.2.0" />
-        <vers num="6.3.0" />
-        <vers num="6.4.0" />
-        <vers num="6.5" />
-        <vers num="6.5.0" />
-        <vers num="6.5.1" />
-        <vers num="6.5.2" />
-        <vers num="7.0" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.0.3" />
-        <vers num="7.0.4" />
-        <vers num="7.1" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.1.2" />
-        <vers num="7.1.3" />
-        <vers num="7.1.4" />
-        <vers num="7.1.5" />
-        <vers num="7.1.6" />
-        <vers num="7.2" />
-        <vers num="7.2.0" />
-        <vers num="7.2.1" />
-        <vers num="7.3" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.1.70" />
-        <vers num="7.4" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.5" />
-        <vers num="7.5.0" />
-        <vers num="7.5.5" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.6.5" />
-        <vers num="7.6.6" />
-        <vers num="7.6.7" />
-        <vers num="7.6.8" />
-        <vers num="7.6.9" />
-        <vers num="7.60.92.0" />
-        <vers num="7.62.14.0" />
-        <vers num="7.64.17.73" />
-        <vers num="7.65.17.80" />
-        <vers num="7.66.71.0" />
-        <vers num="7.67.75.0" />
-        <vers num="7.68.75.0" />
-        <vers num="7.69.80.9" />
-        <vers num="7.7.0" />
-        <vers prev="1" num="7.7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0670" published="2012-05-16" name="CVE-2012-0670" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Integer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted sean atom in a movie file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53582" source="BID">53582</ref>
-      <ref url="http://support.apple.com/kb/HT5261" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5261</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00005.html" source="APPLE" adv="1">APPLE-SA-2012-05-15-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="quicktime">
-        <vers num="3.0" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="6.0" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.1" />
-        <vers num="6.1.0" />
-        <vers num="6.1.1" />
-        <vers num="6.2.0" />
-        <vers num="6.3.0" />
-        <vers num="6.4.0" />
-        <vers num="6.5" />
-        <vers num="6.5.0" />
-        <vers num="6.5.1" />
-        <vers num="6.5.2" />
-        <vers num="7.0" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.0.3" />
-        <vers num="7.0.4" />
-        <vers num="7.1" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.1.2" />
-        <vers num="7.1.3" />
-        <vers num="7.1.4" />
-        <vers num="7.1.5" />
-        <vers num="7.1.6" />
-        <vers num="7.2" />
-        <vers num="7.2.0" />
-        <vers num="7.2.1" />
-        <vers num="7.3" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.1.70" />
-        <vers num="7.4" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.5" />
-        <vers num="7.5.0" />
-        <vers num="7.5.5" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.6.5" />
-        <vers num="7.6.6" />
-        <vers num="7.6.7" />
-        <vers num="7.6.8" />
-        <vers num="7.6.9" />
-        <vers num="7.60.92.0" />
-        <vers num="7.62.14.0" />
-        <vers num="7.64.17.73" />
-        <vers num="7.65.17.80" />
-        <vers num="7.66.71.0" />
-        <vers num="7.67.75.0" />
-        <vers num="7.68.75.0" />
-        <vers num="7.69.80.9" />
-        <vers num="7.7.0" />
-        <vers prev="1" num="7.7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0671" published="2012-05-16" name="CVE-2012-0671" modified="2012-05-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .pict file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5261" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5261</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00005.html" source="APPLE" adv="1">APPLE-SA-2012-05-15-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="quicktime">
-        <vers num="3.0" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="6.0" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.1" />
-        <vers num="6.1.0" />
-        <vers num="6.1.1" />
-        <vers num="6.2.0" />
-        <vers num="6.3.0" />
-        <vers num="6.4.0" />
-        <vers num="6.5" />
-        <vers num="6.5.0" />
-        <vers num="6.5.1" />
-        <vers num="6.5.2" />
-        <vers num="7.0" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.0.3" />
-        <vers num="7.0.4" />
-        <vers num="7.1" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.1.2" />
-        <vers num="7.1.3" />
-        <vers num="7.1.4" />
-        <vers num="7.1.5" />
-        <vers num="7.1.6" />
-        <vers num="7.2" />
-        <vers num="7.2.0" />
-        <vers num="7.2.1" />
-        <vers num="7.3" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.1.70" />
-        <vers num="7.4" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.4.5" />
-        <vers num="7.5.0" />
-        <vers num="7.5.5" />
-        <vers num="7.6.0" />
-        <vers num="7.6.1" />
-        <vers num="7.6.2" />
-        <vers num="7.6.5" />
-        <vers num="7.6.6" />
-        <vers num="7.6.7" />
-        <vers num="7.6.8" />
-        <vers num="7.6.9" />
-        <vers num="7.60.92.0" />
-        <vers num="7.62.14.0" />
-        <vers num="7.64.17.73" />
-        <vers num="7.65.17.80" />
-        <vers num="7.66.71.0" />
-        <vers num="7.67.75.0" />
-        <vers num="7.68.75.0" />
-        <vers num="7.69.80.9" />
-        <vers num="7.7.0" />
-        <vers prev="1" num="7.7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0672" published="2012-05-08" name="CVE-2012-0672" modified="2012-06-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit in Apple iOS before 5.1.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5282" source="CONFIRM">http://support.apple.com/kb/HT5282</ref>
-      <ref url="http://secunia.com/advisories/47292" source="SECUNIA">47292</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00002.html" source="APPLE">APPLE-SA-2012-05-09-2</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-05-07-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jun/msg00000.html" source="APPLE">APPLE-SA-2012-06-11-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:ipodtouch" />
-        <vers num="5.0.1" edition="-:ipad" />
-        <vers num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.1" edition="-" />
-        <vers prev="1" num="5.1" edition="-:ipodtouch" />
-        <vers prev="1" num="5.1" edition="-:iphone" />
-        <vers prev="1" num="5.1" edition="-:ipad" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0674" published="2012-05-08" name="CVE-2012-0674" modified="2012-05-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Safari in Apple iOS before 5.1.1 allows remote attackers to spoof the location bar's URL via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-05-07-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="iphone_os">
-        <vers num="3.0" edition="-" />
-        <vers num="3.0" edition="-:iphone" />
-        <vers num="3.1" edition="-" />
-        <vers num="3.1" edition="-:iphone" />
-        <vers num="3.1" edition="-:ipodtouch" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:iphone" />
-        <vers num="3.1.3" edition="-" />
-        <vers num="3.1.3" edition="-:iphone" />
-        <vers num="3.2" edition="-" />
-        <vers num="3.2" edition="-:ipodtouch" />
-        <vers num="3.2" edition="-:iphone" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:ipad" />
-        <vers num="3.2.2" />
-        <vers num="4.0" edition="-" />
-        <vers num="4.0" edition="-:ipodtouch" />
-        <vers num="4.0" edition="-:iphone" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:ipodtouch" />
-        <vers num="4.0.1" edition="-:iphone" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2.1" />
-        <vers num="4.2.5" />
-        <vers num="4.2.8" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.5" edition="-" />
-        <vers num="4.3.5" edition="-:ipodtouch" />
-        <vers num="4.3.5" edition="-:ipad" />
-        <vers num="5.0" edition="-" />
-        <vers num="5.0" edition="-:iphone" />
-        <vers num="5.0" edition="-:ipad" />
-        <vers num="5.0" edition="-:ipodtouch" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:ipodtouch" />
-        <vers num="5.0.1" edition="-:ipad" />
-        <vers num="5.0.1" edition="-:iphone" />
-        <vers prev="1" num="5.1" edition="-" />
-        <vers prev="1" num="5.1" edition="-:ipodtouch" />
-        <vers prev="1" num="5.1" edition="-:iphone" />
-        <vers prev="1" num="5.1" edition="-:ipad" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0675" published="2012-05-10" name="CVE-2012-0675" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Time Machine in Apple Mac OS X before 10.7.4 does not require continued use of SRP-based authentication after this authentication method is first used, which allows remote attackers to read Time Capsule credentials by spoofing the backup volume.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53445" source="BID">53445</ref>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-05-09-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="mac_os_x">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-      <prod vendor="apple" name="mac_os_x_server">
-        <vers num="10.0" />
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.1" />
-        <vers num="10.1.0" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="10.1.5" />
-        <vers num="10.2" />
-        <vers num="10.2.0" />
-        <vers num="10.2.1" />
-        <vers num="10.2.2" />
-        <vers num="10.2.3" />
-        <vers num="10.2.4" />
-        <vers num="10.2.5" />
-        <vers num="10.2.6" />
-        <vers num="10.2.7" />
-        <vers num="10.2.8" />
-        <vers num="10.3" />
-        <vers num="10.3.0" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="10.3.6" />
-        <vers num="10.3.7" />
-        <vers num="10.3.8" />
-        <vers num="10.3.9" />
-        <vers num="10.4" />
-        <vers num="10.4.0" />
-        <vers num="10.4.1" />
-        <vers num="10.4.10" />
-        <vers num="10.4.11" />
-        <vers num="10.4.2" />
-        <vers num="10.4.3" />
-        <vers num="10.4.4" />
-        <vers num="10.4.5" />
-        <vers num="10.4.6" />
-        <vers num="10.4.7" />
-        <vers num="10.4.8" />
-        <vers num="10.4.9" />
-        <vers num="10.5" />
-        <vers num="10.5.0" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.5.4" />
-        <vers num="10.5.5" />
-        <vers num="10.5.6" />
-        <vers num="10.5.7" />
-        <vers num="10.5.8" />
-        <vers num="10.6.0" />
-        <vers num="10.6.1" />
-        <vers num="10.6.2" />
-        <vers num="10.6.3" />
-        <vers num="10.6.4" />
-        <vers num="10.6.5" />
-        <vers num="10.6.6" />
-        <vers num="10.6.7" />
-        <vers num="10.6.8" />
-        <vers num="10.7.0" />
-        <vers num="10.7.1" />
-        <vers num="10.7.2" />
-        <vers prev="1" num="10.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0676" published="2012-05-10" name="CVE-2012-0676" modified="2012-06-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">WebKit in Apple Safari before 5.1.7 does not properly track state information during the processing of form input, which allows remote attackers to fill in form fields on the pages of arbitrary web sites via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5282" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5282</ref>
-      <ref url="http://secunia.com/advisories/47292" source="SECUNIA">47292</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00002.html" source="APPLE" adv="1">APPLE-SA-2012-05-09-2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers prev="1" num="5.1.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0677" published="2012-06-12" name="CVE-2012-0677" modified="2012-06-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .m3u playlist.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jun/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-06-11-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers prev="1" num="10.6.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0678" published="2012-07-25" name="CVE-2012-0678" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Apple Safari before 6.0 allows remote attackers to inject arbitrary web script or HTML via a feed:// URL.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0679" published="2012-07-25" name="CVE-2012-0679" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Apple Safari before 6.0 allows remote attackers to read arbitrary files via a feed:// URL.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0680" published="2012-07-25" name="CVE-2012-0680" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Apple Safari before 6.0 does not properly handle the autocomplete attribute of a password input element, which allows remote attackers to bypass authentication by leveraging an unattended workstation.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0681" published="2012-08-22" name="CVE-2012-0681" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Apple Remote Desktop before 3.6.1 does not recognize the "Encrypt all network data" setting during connections to third-party VNC servers, which allows remote attackers to obtain cleartext VNC session content by sniffing the network.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5433" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5433</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Aug/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-08-20-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="apple_remote_desktop">
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0682" published="2012-07-25" name="CVE-2012-0682" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0683" published="2012-07-25" name="CVE-2012-0683" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0684" published="2012-05-09" name="CVE-2012-0684" modified="2012-05-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted file containing PSD record types, a different vulnerability than CVE-2012-0685.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/en-us/security/msvr/msvr12-001" source="MISC" patch="1">http://technet.microsoft.com/en-us/security/msvr/msvr12-001</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="xnview" name="xnview">
-        <vers num="1.0" edition="a" />
-        <vers num="1.01" />
-        <vers num="1.02" />
-        <vers num="1.03" />
-        <vers num="1.04" />
-        <vers num="1.05" edition="b" />
-        <vers num="1.05" edition="c" />
-        <vers num="1.06" />
-        <vers num="1.07" />
-        <vers num="1.08" />
-        <vers num="1.09" />
-        <vers num="1.10" />
-        <vers num="1.11" />
-        <vers num="1.12" />
-        <vers num="1.13" />
-        <vers num="1.14" />
-        <vers num="1.15" />
-        <vers num="1.16" />
-        <vers num="1.17" edition="a" />
-        <vers num="1.18" />
-        <vers num="1.18.1" />
-        <vers num="1.19" />
-        <vers num="1.20" />
-        <vers num="1.21" />
-        <vers num="1.22" />
-        <vers num="1.23" />
-        <vers num="1.24" />
-        <vers num="1.25" edition="a" />
-        <vers num="1.30" />
-        <vers num="1.31" />
-        <vers num="1.32" />
-        <vers num="1.33" />
-        <vers num="1.34" />
-        <vers num="1.35" />
-        <vers num="1.36" />
-        <vers num="1.37" />
-        <vers num="1.40" />
-        <vers num="1.41" />
-        <vers num="1.45" />
-        <vers num="1.46" />
-        <vers num="1.50" />
-        <vers num="1.50.1" />
-        <vers num="1.55" />
-        <vers num="1.60" />
-        <vers num="1.61" />
-        <vers num="1.65" />
-        <vers num="1.66" />
-        <vers num="1.67" />
-        <vers num="1.68" />
-        <vers num="1.68.1" />
-        <vers num="1.70" />
-        <vers num="1.70.2" />
-        <vers num="1.70.3" />
-        <vers num="1.70.4" />
-        <vers num="1.74" />
-        <vers num="1.80" />
-        <vers num="1.80.1" />
-        <vers num="1.80.2" />
-        <vers num="1.80.3" />
-        <vers num="1.82" />
-        <vers num="1.82.2" />
-        <vers num="1.82.3" />
-        <vers num="1.82.4" />
-        <vers num="1.90" />
-        <vers num="1.90.1" />
-        <vers num="1.90.3" />
-        <vers num="1.91" />
-        <vers num="1.91.1" />
-        <vers num="1.91.2" />
-        <vers num="1.91.3" />
-        <vers num="1.91.4" />
-        <vers num="1.91.5" />
-        <vers num="1.91.6" />
-        <vers num="1.92" />
-        <vers num="1.92.1" />
-        <vers num="1.93" />
-        <vers num="1.93.1" />
-        <vers num="1.93.2" />
-        <vers num="1.93.3" />
-        <vers num="1.93.4" />
-        <vers num="1.93.6" />
-        <vers num="1.94" />
-        <vers num="1.94.1" />
-        <vers num="1.94.2" />
-        <vers num="1.95" />
-        <vers num="1.95.1" />
-        <vers num="1.95.2" />
-        <vers num="1.95.3" />
-        <vers num="1.95.4" />
-        <vers num="1.96" />
-        <vers num="1.96.1" />
-        <vers num="1.96.2" />
-        <vers num="1.96.5" />
-        <vers num="1.97" />
-        <vers num="1.97.1" />
-        <vers num="1.97.2" />
-        <vers num="1.97.4" />
-        <vers prev="1" num="1.98.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0685" published="2012-05-09" name="CVE-2012-0685" modified="2012-05-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted file containing PSD record types, a different vulnerability than CVE-2012-0684.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/en-us/security/msvr/msvr12-001" source="MISC" patch="1">http://technet.microsoft.com/en-us/security/msvr/msvr12-001</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="xnview" name="xnview">
-        <vers num="1.0" edition="a" />
-        <vers num="1.01" />
-        <vers num="1.02" />
-        <vers num="1.03" />
-        <vers num="1.04" />
-        <vers num="1.05" edition="b" />
-        <vers num="1.05" edition="c" />
-        <vers num="1.06" />
-        <vers num="1.07" />
-        <vers num="1.08" />
-        <vers num="1.09" />
-        <vers num="1.10" />
-        <vers num="1.11" />
-        <vers num="1.12" />
-        <vers num="1.13" />
-        <vers num="1.14" />
-        <vers num="1.15" />
-        <vers num="1.16" />
-        <vers num="1.17" edition="a" />
-        <vers num="1.18" />
-        <vers num="1.18.1" />
-        <vers num="1.19" />
-        <vers num="1.20" />
-        <vers num="1.21" />
-        <vers num="1.22" />
-        <vers num="1.23" />
-        <vers num="1.24" />
-        <vers num="1.25" edition="a" />
-        <vers num="1.30" />
-        <vers num="1.31" />
-        <vers num="1.32" />
-        <vers num="1.33" />
-        <vers num="1.34" />
-        <vers num="1.35" />
-        <vers num="1.36" />
-        <vers num="1.37" />
-        <vers num="1.40" />
-        <vers num="1.41" />
-        <vers num="1.45" />
-        <vers num="1.46" />
-        <vers num="1.50" />
-        <vers num="1.50.1" />
-        <vers num="1.55" />
-        <vers num="1.60" />
-        <vers num="1.61" />
-        <vers num="1.65" />
-        <vers num="1.66" />
-        <vers num="1.67" />
-        <vers num="1.68" />
-        <vers num="1.68.1" />
-        <vers num="1.70" />
-        <vers num="1.70.2" />
-        <vers num="1.70.3" />
-        <vers num="1.70.4" />
-        <vers num="1.74" />
-        <vers num="1.80" />
-        <vers num="1.80.1" />
-        <vers num="1.80.2" />
-        <vers num="1.80.3" />
-        <vers num="1.82" />
-        <vers num="1.82.2" />
-        <vers num="1.82.3" />
-        <vers num="1.82.4" />
-        <vers num="1.90" />
-        <vers num="1.90.1" />
-        <vers num="1.90.3" />
-        <vers num="1.91" />
-        <vers num="1.91.1" />
-        <vers num="1.91.2" />
-        <vers num="1.91.3" />
-        <vers num="1.91.4" />
-        <vers num="1.91.5" />
-        <vers num="1.91.6" />
-        <vers num="1.92" />
-        <vers num="1.92.1" />
-        <vers num="1.93" />
-        <vers num="1.93.1" />
-        <vers num="1.93.2" />
-        <vers num="1.93.3" />
-        <vers num="1.93.4" />
-        <vers num="1.93.6" />
-        <vers num="1.94" />
-        <vers num="1.94.1" />
-        <vers num="1.94.2" />
-        <vers num="1.95" />
-        <vers num="1.95.1" />
-        <vers num="1.95.2" />
-        <vers num="1.95.3" />
-        <vers num="1.95.4" />
-        <vers num="1.96" />
-        <vers num="1.96.1" />
-        <vers num="1.96.2" />
-        <vers num="1.96.5" />
-        <vers num="1.97" />
-        <vers num="1.97.1" />
-        <vers num="1.97.2" />
-        <vers num="1.97.4" />
-        <vers prev="1" num="1.98.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0687" published="2012-03-13" name="CVE-2012-0687" modified="2012-03-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0; TIBCO BusinessEvents Runtime in Enterprise and Inference Editions 3.x before 3.0.3, Standard Edition 4.x before 4.0.2, and Standard Edition and Express 5.0.0; and TIBCO BusinessWorks Engine in TIBCO Silver Fabric ActiveMatrix BusinessWorks Distribution 5.9.2 and ActiveMatrix BusinessWorks before 5.9.3 allow remote attackers to obtain sensitive information via a crafted URL.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp" source="CONFIRM" adv="1">http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp</ref>
-      <ref url="http://www.tibco.com/multimedia/businessworks_advisory_20120308_tcm8-15730.txt" source="CONFIRM" adv="1">http://www.tibco.com/multimedia/businessworks_advisory_20120308_tcm8-15730.txt</ref>
-      <ref url="http://www.tibco.com/multimedia/businessevents_advisory_20120308_tcm8-15729.txt" source="CONFIRM" adv="1">http://www.tibco.com/multimedia/businessevents_advisory_20120308_tcm8-15729.txt</ref>
-      <ref url="http://www.tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15728.txt" source="CONFIRM" adv="1">http://www.tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15728.txt</ref>
-      <ref url="http://www.tibco.com/multimedia/activematrix2_advisory_20120308_tcm8-15726.txt" source="CONFIRM" adv="1">http://www.tibco.com/multimedia/activematrix2_advisory_20120308_tcm8-15726.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tibco" name="activematrix_bpm">
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers prev="1" num="1.2.0" />
-      </prod>
-      <prod vendor="tibco" name="activematrix_businessworks">
-        <vers prev="1" num="5.9.2" />
-      </prod>
-      <prod vendor="tibco" name="activematrix_businessworks_service_engine">
-        <vers num="5.6.0" />
-        <vers num="5.6.3" />
-        <vers num="5.6.4" />
-        <vers num="5.7" />
-        <vers num="5.7.1" />
-        <vers num="5.7.2" />
-        <vers num="5.8" />
-        <vers prev="1" num="5.8.1" />
-        <vers num="5.9.0" />
-        <vers num="5.9.1" />
-        <vers num="5.9.2" />
-      </prod>
-      <prod vendor="tibco" name="activematrix_service_bus">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.1.0" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-      </prod>
-      <prod vendor="tibco" name="activematrix_service_grid">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.1.0" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.1.0" />
-        <vers num="3.1.2" />
-      </prod>
-      <prod vendor="tibco" name="businessevents">
-        <vers num="3.0" edition="" />
-        <vers num="3.0" edition=":enterprise" />
-        <vers num="3.0" edition=":inference" />
-        <vers num="3.0.1" edition="" />
-        <vers num="3.0.1" edition=":enterprise" />
-        <vers num="3.0.2" edition="" />
-        <vers num="3.0.2" edition=":enterprise" />
-        <vers num="3.0.2" edition=":inference" />
-        <vers num="4.0" edition="" />
-        <vers num="4.0" edition=":standard" />
-        <vers num="4.0.1" edition="" />
-        <vers num="4.0.1" edition=":standard" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":standard" />
-        <vers num="5.0" edition=":express" />
-      </prod>
-      <prod vendor="tibco" name="silver_fabric_activematrix_service_grid_distribution">
-        <vers num="3.1.3" />
-        <vers num="5.9.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0688" published="2012-03-13" name="CVE-2012-0688" modified="2012-03-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp" source="CONFIRM" adv="1">http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp</ref>
-      <ref url="http://www.tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15728.txt" source="CONFIRM" adv="1">http://www.tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15728.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tibco" name="activematrix_bpm">
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers prev="1" num="1.2.0" />
-      </prod>
-      <prod vendor="tibco" name="activematrix_businessworks_service_engine">
-        <vers num="5.9.0" />
-        <vers num="5.9.1" />
-        <vers num="5.9.2" />
-      </prod>
-      <prod vendor="tibco" name="activematrix_service_bus">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-      </prod>
-      <prod vendor="tibco" name="activematrix_service_grid">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.1.0" />
-        <vers num="3.1.2" />
-      </prod>
-      <prod vendor="tibco" name="silver_fabric_activematrix_service_grid_distribution">
-        <vers num="3.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0689" published="2012-03-13" name="CVE-2012-0689" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to discover credentials via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp" source="CONFIRM" adv="1">http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp</ref>
-      <ref url="http://www.tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15728.txt" source="CONFIRM" adv="1">http://www.tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15728.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tibco" name="activematrix_bpm">
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-      </prod>
-      <prod vendor="tibco" name="activematrix_businessworks_service_engine">
-        <vers num="5.9.0" />
-      </prod>
-      <prod vendor="tibco" name="activematrix_service_bus">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-      </prod>
-      <prod vendor="tibco" name="activematrix_service_grid">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.1.0" />
-      </prod>
-      <prod vendor="tibco" name="silver_fabric_activematrix_service_grid_distribution">
-        <vers num="3.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0690" published="2012-03-13" name="CVE-2012-0690" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server before 10.1.2; Server before 3.3.3; and Web Player, Automation Services, and Professional before 4.0.2 allow remote attackers to obtain sensitive information via a crafted URL.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp" source="CONFIRM" adv="1">http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp</ref>
-      <ref url="http://www.tibco.com/multimedia/spotfire_advisory_20120308_tcm8-15731.txt" source="CONFIRM" adv="1">http://www.tibco.com/multimedia/spotfire_advisory_20120308_tcm8-15731.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tibco" name="spotfire_analytics_server">
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-      </prod>
-      <prod vendor="tibco" name="spotfire_professional">
-        <vers prev="1" num="4.0.1" />
-      </prod>
-      <prod vendor="tibco" name="spotfire_server">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.2.0" />
-        <vers num="3.3.0" />
-      </prod>
-      <prod vendor="tibco" name="web_player_automation_services">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0693" published="2012-01-13" name="CVE-2012-0693" modified="2012-04-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">** DISPUTED ** submitticket.php in WHMCompleteSolution (WHMCS) 5.03 allows remote attackers to inject arbitrary code into a subject field via crafted ticket data, a different vulnerability than CVE-2011-5061. NOTE: the vendor disputes this issue, noting that some of the details overlap CVE-2011-5061, but that it "says it affects V5.0.3, and the submitticket.php file, both of which are wrong."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oscommerceuniversity.com/lounge/index.php/topic,1209.0.html" source="MISC">http://www.oscommerceuniversity.com/lounge/index.php/topic,1209.0.html</ref>
-      <ref url="http://www.oscommerceuniversity.com/lounge/index.php/board,23.0.html" source="MISC">http://www.oscommerceuniversity.com/lounge/index.php/board,23.0.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="whmcs" name="whmcompletesolution">
-        <vers num="5.03" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0695" published="2012-01-12" name="CVE-2012-0695" modified="2012-02-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.27 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14268" source="OVAL">oval:org.mitre.oval:def:14268</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/01/beta-channel-update-for-chromebooks.html" source="CONFIRM">http://googlechromereleases.blogspot.com/2012/01/beta-channel-update-for-chromebooks.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="acer" name="ac700_chromebook">
-        <vers num="" />
-      </prod>
-      <prod vendor="google" name="cr-48_chromebook">
-        <vers num="" />
-      </prod>
-      <prod vendor="samsung" name="series_5_chromebook">
-        <vers num="" />
-      </prod>
-      <prod vendor="google" name="chrome_os">
-        <vers prev="1" num="17.0.963.26" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0696" published="2012-01-12" name="CVE-2012-0696" modified="2012-02-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the Executive Viewer (EV) in IBM Cognos TM1 before 9.5 FP1 allow remote attackers to inject arbitrary web script or HTML via unspecified requests to (1) aspnet_client or (2) evserver/createcontrol.js.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72198" source="XF">cevtm1-aspnetclient-createcontrol-xss(72198)</ref>
-      <ref url="http://www.securityfocus.com/bid/51326" source="BID">51326</ref>
-      <ref url="http://www.osvdb.org/78217" source="OSVDB">78217</ref>
-      <ref url="http://www.osvdb.org/78216" source="OSVDB">78216</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1PM26682" source="AIXAPAR" adv="1">PM26682</ref>
-      <ref url="http://securitytracker.com/id?1026491" source="SECTRACK">1026491</ref>
-      <ref url="http://secunia.com/advisories/47487" source="SECUNIA" adv="1">47487</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="cognos_executive_viewer">
-        <vers num="" />
-      </prod>
-      <prod vendor="ibm" name="cognos_tm1">
-        <vers num="9.4.0" />
-        <vers num="9.4.1" />
-        <vers prev="1" num="9.4.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0697" published="2012-01-12" name="CVE-2012-0697" modified="2012-01-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">HP StorageWorks P2000 G3 MSA array systems have a default account, which makes it easier for remote attackers to perform administrative tasks via unspecified vectors, a different vulnerability than CVE-2011-4788.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-      <sec_prot admin="1" />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://zerodayinitiative.com/advisories/ZDI-12-015/" source="MISC">http://zerodayinitiative.com/advisories/ZDI-12-015/</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72372" source="XF">storageworks-array-default-account(72372)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="storageworks_p2000_g3_msa">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0707" published="2012-02-23" name="CVE-2012-0707" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in IBM WebSphere Lombardi Edition 7.2 allows remote attackers to inject arbitrary web script or HTML via crafted text input to a coach that is configured with a document attachment control section.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73376" source="XF">wle-coach-xss(73376)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC79890" source="AIXAPAR">IC79890</ref>
-      <ref url="http://secunia.com/advisories/48055" source="SECUNIA">48055</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="websphere_application_server">
-        <vers num="7.2" edition="" />
-        <vers num="7.2" edition=":lombardi" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0708" published="2012-04-22" name="CVE-2012-0708" modified="2012-04-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and 8.0.0 before 8.0.0.2 allows remote attackers to execute arbitrary code via a crafted web page that leverages a RegisterSchemaRepoFromFileByDbSet function-prototype mismatch.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73492" source="XF">rcq-cqole-activex-bo(73492)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21591705" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21591705</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="rational_clearquest">
-        <vers num="7.1.1" />
-        <vers num="7.1.1.1" />
-        <vers num="7.1.1.2" />
-        <vers num="7.1.1.3" />
-        <vers num="7.1.1.4" />
-        <vers num="7.1.2" />
-        <vers num="7.1.2.1" />
-        <vers num="7.1.2.2" />
-        <vers num="7.1.2.3" />
-        <vers num="7.1.2.4" />
-        <vers num="7.1.2.5" />
-        <vers num="7.1.2.6" />
-        <vers num="8.0.0" />
-        <vers num="8.0.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0709" published="2012-03-20" name="CVE-2012-0709" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 does not properly check variables, which allows remote authenticated users to bypass intended restrictions on viewing table data by leveraging the CREATEIN privilege to execute crafted SQL CREATE VARIABLE statements.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73493" source="XF">db2-createvariable-security-bypass(73493)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21588100" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg21588100</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC81836" source="AIXAPAR">IC81836</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC81390" source="AIXAPAR">IC81390</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC81387" source="AIXAPAR">IC81387</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15004" source="OVAL">oval:org.mitre.oval:def:15004</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="db2">
-        <vers num="9.5" edition="fp1" />
-        <vers num="9.5" edition="fp2" />
-        <vers num="9.5" edition="fp2a" />
-        <vers num="9.5" edition="fp3" />
-        <vers num="9.5" edition="fp3a" />
-        <vers num="9.5" edition="fp3b" />
-        <vers num="9.5" edition="fp4" />
-        <vers num="9.5" edition="fp4a" />
-        <vers num="9.5" edition="fp5" />
-        <vers num="9.5" edition="fp6" />
-        <vers num="9.5" edition="fp6a" />
-        <vers num="9.5" edition="fp7" />
-        <vers num="9.5" edition="fp8" />
-        <vers num="9.7" edition="fp1" />
-        <vers num="9.7" edition="fp2" />
-        <vers num="9.7" edition="fp3" />
-        <vers num="9.7" edition="fp3a" />
-        <vers num="9.7" edition="fp4" />
-        <vers num="9.7" edition="fp5" />
-        <vers num="9.8" edition="fp3" />
-        <vers num="9.8" edition="fp4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0710" published="2012-03-20" name="CVE-2012-0710" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">IBM DB2 9.1 before FP11, 9.5 before FP9, 9.7 before FP5, and 9.8 before FP4 allows remote attackers to cause a denial of service (daemon crash) via a crafted Distributed Relational Database Architecture (DRDA) request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73494" source="XF">db2-drda-dos(73494)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21588090" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg21588090</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC76902" source="AIXAPAR">IC76902</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC76901" source="AIXAPAR">IC76901</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC76899" source="AIXAPAR">IC76899</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC76781" source="AIXAPAR">IC76781</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15078" source="OVAL">oval:org.mitre.oval:def:15078</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="db2">
-        <vers num="9.1" edition="fp1" />
-        <vers num="9.1" edition="fp10" />
-        <vers num="9.1" edition="fp2" />
-        <vers num="9.1" edition="fp2a" />
-        <vers num="9.1" edition="fp3" />
-        <vers num="9.1" edition="fp3a" />
-        <vers num="9.1" edition="fp4" />
-        <vers num="9.1" edition="fp4a" />
-        <vers num="9.1" edition="fp5" />
-        <vers num="9.1" edition="fp6" />
-        <vers num="9.1" edition="fp6a" />
-        <vers num="9.1" edition="fp7" />
-        <vers num="9.1" edition="fp7a" />
-        <vers num="9.1" edition="fp8" />
-        <vers num="9.1" edition="fp9" />
-        <vers num="9.5" edition="fp1" />
-        <vers num="9.5" edition="fp2" />
-        <vers num="9.5" edition="fp2a" />
-        <vers num="9.5" edition="fp3" />
-        <vers num="9.5" edition="fp3a" />
-        <vers num="9.5" edition="fp3b" />
-        <vers num="9.5" edition="fp4" />
-        <vers num="9.5" edition="fp4a" />
-        <vers num="9.5" edition="fp5" />
-        <vers num="9.5" edition="fp6" />
-        <vers num="9.5" edition="fp6a" />
-        <vers num="9.5" edition="fp7" />
-        <vers num="9.5" edition="fp8" />
-        <vers num="9.7" edition="fp1" />
-        <vers num="9.7" edition="fp2" />
-        <vers num="9.7" edition="fp3" />
-        <vers num="9.7" edition="fp3a" />
-        <vers num="9.7" edition="fp4" />
-        <vers num="9.8" edition="fp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0711" published="2012-03-20" name="CVE-2012-0711" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73495" source="XF">db2-db2dasrrm-bo(73495)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21588093" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg21588093</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC80729" source="AIXAPAR">IC80729</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC80728" source="AIXAPAR">IC80728</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC80561" source="AIXAPAR">IC80561</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14842" source="OVAL">oval:org.mitre.oval:def:14842</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="db2">
-        <vers num="9.1" edition="fp1" />
-        <vers num="9.1" edition="fp10" />
-        <vers num="9.1" edition="fp11" />
-        <vers num="9.1" edition="fp2" />
-        <vers num="9.1" edition="fp2a" />
-        <vers num="9.1" edition="fp3" />
-        <vers num="9.1" edition="fp3a" />
-        <vers num="9.1" edition="fp4" />
-        <vers num="9.1" edition="fp4a" />
-        <vers num="9.1" edition="fp5" />
-        <vers num="9.1" edition="fp6" />
-        <vers num="9.1" edition="fp6a" />
-        <vers num="9.1" edition="fp7" />
-        <vers num="9.1" edition="fp7a" />
-        <vers num="9.1" edition="fp8" />
-        <vers num="9.1" edition="fp9" />
-        <vers num="9.5" edition="fp1" />
-        <vers num="9.5" edition="fp2" />
-        <vers num="9.5" edition="fp2a" />
-        <vers num="9.5" edition="fp3" />
-        <vers num="9.5" edition="fp3a" />
-        <vers num="9.5" edition="fp3b" />
-        <vers num="9.5" edition="fp4" />
-        <vers num="9.5" edition="fp4a" />
-        <vers num="9.5" edition="fp5" />
-        <vers num="9.5" edition="fp6" />
-        <vers num="9.5" edition="fp6a" />
-        <vers num="9.5" edition="fp7" />
-        <vers num="9.5" edition="fp8" />
-        <vers num="9.7" edition="fp1" />
-        <vers num="9.7" edition="fp2" />
-        <vers num="9.7" edition="fp3" />
-        <vers num="9.7" edition="fp3a" />
-        <vers num="9.7" edition="fp4" />
-        <vers num="9.7" edition="fp5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0712" published="2012-03-20" name="CVE-2012-0712" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">The XML feature in IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 allows remote authenticated users to cause a denial of service (infinite loop) by calling the XMLPARSE function with a crafted string expression.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73496" source="XF">db2-xmlfeature-dos(73496)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21588098" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg21588098</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC81837" source="AIXAPAR">IC81837</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC81380" source="AIXAPAR">IC81380</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC81379" source="AIXAPAR">IC81379</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14450" source="OVAL">oval:org.mitre.oval:def:14450</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="db2">
-        <vers num="9.5" edition="fp1" />
-        <vers num="9.5" edition="fp2" />
-        <vers num="9.5" edition="fp2a" />
-        <vers num="9.5" edition="fp3" />
-        <vers num="9.5" edition="fp3a" />
-        <vers num="9.5" edition="fp3b" />
-        <vers num="9.5" edition="fp4" />
-        <vers num="9.5" edition="fp4a" />
-        <vers num="9.5" edition="fp5" />
-        <vers num="9.5" edition="fp6" />
-        <vers num="9.5" edition="fp6a" />
-        <vers num="9.5" edition="fp7" />
-        <vers num="9.5" edition="fp8" />
-        <vers num="9.7" edition="fp1" />
-        <vers num="9.7" edition="fp2" />
-        <vers num="9.7" edition="fp3" />
-        <vers num="9.7" edition="fp3a" />
-        <vers num="9.7" edition="fp4" />
-        <vers num="9.7" edition="fp5" />
-        <vers num="9.8" edition="fp3" />
-        <vers num="9.8" edition="fp4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0713" published="2012-08-24" name="CVE-2012-0713" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:N/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the XML feature in IBM DB2 9.7 before FP6 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrary XML files via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC81462" source="AIXAPAR" adv="1">IC81462</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="db2">
-        <vers num="9.7" />
-        <vers num="9.7.0.1" />
-        <vers num="9.7.0.2" />
-        <vers num="9.7.0.3" />
-        <vers num="9.7.0.4" />
-        <vers num="9.7.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0714" published="2012-09-10" name="CVE-2012-0714" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73534" source="XF">ibm-maximo-csrf(73534)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21610081" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21610081</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IV16497" source="AIXAPAR">IV16497</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IV16085" source="AIXAPAR">IV16085</ref>
-      <ref url="http://secunia.com/advisories/50551" source="SECUNIA" adv="1">50551</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="change_and_configuration_management_database">
-        <vers num="6.0" />
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_asset_management">
-        <vers num="6.2.0.0" />
-        <vers num="7.1.0.0" />
-        <vers num="7.5.0.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_service_desk">
-        <vers num="6.2" />
-      </prod>
-      <prod vendor="ibm" name="smartcloud_control_desk">
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_asset_management_for_it">
-        <vers num="6.0" />
-        <vers num="6.2" />
-        <vers num="7.0" />
-        <vers num="7.1" />
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_service_request_manager">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0715" published="2012-03-02" name="CVE-2012-0715" modified="2012-03-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Gantt applet viewer in IBM Tivoli Change and Configuration Management Database (CCMDB) 7.2.1 and IBM ILOG JViews Gantt allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73587" source="XF">ijg-gav-xss(73587)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IV16174" source="AIXAPAR">IV16174</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?crawler=1&amp;uid=swg1IV16174" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?crawler=1&amp;uid=swg1IV16174</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="ilog_jviews_gantt">
-        <vers num="-" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_change_and_configuration_management_database">
-        <vers num="7.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0716" published="2012-06-20" name="CVE-2012-0716" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52722" source="BID">52722</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21595172" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21595172</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="websphere_application_server">
-        <vers num="7.0" />
-        <vers num="7.0.0.1" />
-        <vers num="7.0.0.11" />
-        <vers num="7.0.0.13" />
-        <vers num="7.0.0.15" />
-        <vers num="7.0.0.17" />
-        <vers num="7.0.0.19" />
-        <vers num="7.0.0.2" />
-        <vers num="7.0.0.21" />
-        <vers num="7.0.0.3" />
-        <vers num="7.0.0.4" />
-        <vers num="7.0.0.5" />
-        <vers num="7.0.0.6" />
-        <vers num="7.0.0.7" />
-        <vers num="7.0.0.8" />
-        <vers num="7.0.0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0717" published="2012-06-20" name="CVE-2012-0717" modified="2012-06-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">IBM WebSphere Application Server 7.0 before 7.0.0.23, when a certain SSLv2 configuration with client authentication is used, allows remote attackers to bypass X.509 client-certificate authentication via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21595172" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21595172</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg1PM52351" source="AIXAPAR">PM52351</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="websphere_application_server">
-        <vers num="7.0" />
-        <vers num="7.0.0.1" />
-        <vers num="7.0.0.11" />
-        <vers num="7.0.0.13" />
-        <vers num="7.0.0.15" />
-        <vers num="7.0.0.17" />
-        <vers num="7.0.0.19" />
-        <vers num="7.0.0.2" />
-        <vers num="7.0.0.21" />
-        <vers num="7.0.0.3" />
-        <vers num="7.0.0.4" />
-        <vers num="7.0.0.5" />
-        <vers num="7.0.0.6" />
-        <vers num="7.0.0.7" />
-        <vers num="7.0.0.8" />
-        <vers num="7.0.0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0719" published="2012-03-21" name="CVE-2012-0719" modified="2012-04-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in IBM Tivoli Endpoint Manager (TEM) 8 before 8.2 patch 3 allows remote attackers to inject arbitrary web script or HTML via the ScheduleParam parameter to the webreports program.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74039" source="XF">tem-scheduleparam-xss(74039)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21587743" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21587743</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="tivoli_endpoint_manager">
-        <vers num="8.0" />
-        <vers num="8.1" />
-        <vers num="8.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0720" published="2012-06-20" name="CVE-2012-0720" modified="2012-06-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Integration Solution Console in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74044" source="XF">was-isc-xss(74044)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21595172" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21595172</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg1PM52274" source="AIXAPAR">PM52274</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="websphere_application_server">
-        <vers num="7.0" />
-        <vers num="7.0.0.1" />
-        <vers num="7.0.0.11" />
-        <vers num="7.0.0.13" />
-        <vers num="7.0.0.15" />
-        <vers num="7.0.0.17" />
-        <vers num="7.0.0.19" />
-        <vers num="7.0.0.2" />
-        <vers num="7.0.0.21" />
-        <vers num="7.0.0.3" />
-        <vers num="7.0.0.4" />
-        <vers num="7.0.0.5" />
-        <vers num="7.0.0.6" />
-        <vers num="7.0.0.7" />
-        <vers num="7.0.0.8" />
-        <vers num="7.0.0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0723" published="2012-07-30" name="CVE-2012-0723" modified="2012-08-01" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">The kernel in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly implement the dupmsg system call, which allows local users to cause a denial of service (system crash) via a crafted application.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74134" source="XF">aix-dupmsg-dos(74134)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV22697" source="AIXAPAR">IV22697</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV22696" source="AIXAPAR">IV22696</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV22695" source="AIXAPAR">IV22695</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV22694" source="AIXAPAR">IV22694</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV22693" source="AIXAPAR">IV22693</ref>
-      <ref url="http://aix.software.ibm.com/aix/efixes/security/syscall_advisory.asc" source="CONFIRM" adv="1">http://aix.software.ibm.com/aix/efixes/security/syscall_advisory.asc</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="aix">
-        <vers num="5.3" />
-        <vers num="6.1" />
-        <vers num="7.1" />
-      </prod>
-      <prod vendor="ibm" name="vios">
-        <vers num="2.2.1.4" edition="fp-25_sp-02" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0724" published="2012-04-06" name="CVE-2012-0724" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2012-0725.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-07.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-07.html</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15533" source="OVAL">oval:org.mitre.oval:def:15533</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html" source="CONFIRM">http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="0.1.38.1" />
-        <vers num="0.1.38.2" />
-        <vers num="0.1.38.4" />
-        <vers num="0.1.40.1" />
-        <vers num="0.1.42.2" />
-        <vers num="0.1.42.3" />
-        <vers num="0.2.149.27" />
-        <vers num="0.2.149.29" />
-        <vers num="0.2.149.30" />
-        <vers num="0.2.152.1" />
-        <vers num="0.2.153.1" />
-        <vers num="0.3.154.0" />
-        <vers num="0.3.154.3" />
-        <vers num="0.4.154.18" />
-        <vers num="0.4.154.22" />
-        <vers num="0.4.154.31" />
-        <vers num="0.4.154.33" />
-        <vers num="1.0.154.36" />
-        <vers num="1.0.154.39" />
-        <vers num="1.0.154.42" />
-        <vers num="1.0.154.43" />
-        <vers num="1.0.154.46" />
-        <vers num="1.0.154.48" />
-        <vers num="1.0.154.52" />
-        <vers num="1.0.154.53" />
-        <vers num="1.0.154.59" />
-        <vers num="1.0.154.64" />
-        <vers num="1.0.154.65" />
-        <vers num="10.0.601.0" />
-        <vers num="10.0.602.0" />
-        <vers num="10.0.603.0" />
-        <vers num="10.0.603.2" />
-        <vers num="10.0.603.3" />
-        <vers num="10.0.604.0" />
-        <vers num="10.0.605.0" />
-        <vers num="10.0.606.0" />
-        <vers num="10.0.607.0" />
-        <vers num="10.0.608.0" />
-        <vers num="10.0.609.0" />
-        <vers num="10.0.610.0" />
-        <vers num="10.0.611.0" />
-        <vers num="10.0.611.1" />
-        <vers num="10.0.612.0" />
-        <vers num="10.0.612.1" />
-        <vers num="10.0.612.2" />
-        <vers num="10.0.612.3" />
-        <vers num="10.0.613.0" />
-        <vers num="10.0.614.0" />
-        <vers num="10.0.615.0" />
-        <vers num="10.0.616.0" />
-        <vers num="10.0.617.0" />
-        <vers num="10.0.618.0" />
-        <vers num="10.0.619.0" />
-        <vers num="10.0.620.0" />
-        <vers num="10.0.621.0" />
-        <vers num="10.0.622.0" />
-        <vers num="10.0.622.1" />
-        <vers num="10.0.623.0" />
-        <vers num="10.0.624.0" />
-        <vers num="10.0.625.0" />
-        <vers num="10.0.626.0" />
-        <vers num="10.0.627.0" />
-        <vers num="10.0.628.0" />
-        <vers num="10.0.629.0" />
-        <vers num="10.0.630.0" />
-        <vers num="10.0.631.0" />
-        <vers num="10.0.632.0" />
-        <vers num="10.0.633.0" />
-        <vers num="10.0.634.0" />
-        <vers num="10.0.634.1" />
-        <vers num="10.0.635.0" />
-        <vers num="10.0.636.0" />
-        <vers num="10.0.638.0" />
-        <vers num="10.0.638.1" />
-        <vers num="10.0.639.0" />
-        <vers num="10.0.640.0" />
-        <vers num="10.0.642.0" />
-        <vers num="10.0.642.1" />
-        <vers num="10.0.642.2" />
-        <vers num="10.0.643.0" />
-        <vers num="10.0.644.0" />
-        <vers num="10.0.645.0" />
-        <vers num="10.0.646.0" />
-        <vers num="10.0.647.0" />
-        <vers num="10.0.648.0" />
-        <vers num="10.0.648.1" />
-        <vers num="10.0.648.10" />
-        <vers num="10.0.648.101" />
-        <vers num="10.0.648.103" />
-        <vers num="10.0.648.105" />
-        <vers num="10.0.648.107" />
-        <vers num="10.0.648.11" />
-        <vers num="10.0.648.114" />
-        <vers num="10.0.648.116" />
-        <vers num="10.0.648.118" />
-        <vers num="10.0.648.119" />
-        <vers num="10.0.648.12" />
-        <vers num="10.0.648.120" />
-        <vers num="10.0.648.121" />
-        <vers num="10.0.648.122" />
-        <vers num="10.0.648.123" />
-        <vers num="10.0.648.124" />
-        <vers num="10.0.648.125" />
-        <vers num="10.0.648.126" />
-        <vers num="10.0.648.127" />
-        <vers num="10.0.648.128" />
-        <vers num="10.0.648.129" />
-        <vers num="10.0.648.13" />
-        <vers num="10.0.648.130" />
-        <vers num="10.0.648.131" />
-        <vers num="10.0.648.132" />
-        <vers num="10.0.648.133" />
-        <vers num="10.0.648.134" />
-        <vers num="10.0.648.135" />
-        <vers num="10.0.648.151" />
-        <vers num="10.0.648.18" />
-        <vers num="10.0.648.2" />
-        <vers num="10.0.648.201" />
-        <vers num="10.0.648.203" />
-        <vers num="10.0.648.204" />
-        <vers num="10.0.648.205" />
-        <vers num="10.0.648.23" />
-        <vers num="10.0.648.26" />
-        <vers num="10.0.648.28" />
-        <vers num="10.0.648.3" />
-        <vers num="10.0.648.32" />
-        <vers num="10.0.648.35" />
-        <vers num="10.0.648.38" />
-        <vers num="10.0.648.4" />
-        <vers num="10.0.648.42" />
-        <vers num="10.0.648.45" />
-        <vers num="10.0.648.49" />
-        <vers num="10.0.648.5" />
-        <vers num="10.0.648.54" />
-        <vers num="10.0.648.56" />
-        <vers num="10.0.648.59" />
-        <vers num="10.0.648.6" />
-        <vers num="10.0.648.62" />
-        <vers num="10.0.648.66" />
-        <vers num="10.0.648.68" />
-        <vers num="10.0.648.7" />
-        <vers num="10.0.648.70" />
-        <vers num="10.0.648.72" />
-        <vers num="10.0.648.76" />
-        <vers num="10.0.648.79" />
-        <vers num="10.0.648.8" />
-        <vers num="10.0.648.82" />
-        <vers num="10.0.648.84" />
-        <vers num="10.0.648.87" />
-        <vers num="10.0.648.9" />
-        <vers num="10.0.648.90" />
-        <vers num="10.0.649.0" />
-        <vers num="10.0.650.0" />
-        <vers num="10.0.651.0" />
-        <vers num="11.0.652.0" />
-        <vers num="11.0.653.0" />
-        <vers num="11.0.654.0" />
-        <vers num="11.0.655.0" />
-        <vers num="11.0.656.0" />
-        <vers num="11.0.657.0" />
-        <vers num="11.0.658.0" />
-        <vers num="11.0.658.1" />
-        <vers num="11.0.659.0" />
-        <vers num="11.0.660.0" />
-        <vers num="11.0.661.0" />
-        <vers num="11.0.662.0" />
-        <vers num="11.0.663.0" />
-        <vers num="11.0.664.1" />
-        <vers num="11.0.665.0" />
-        <vers num="11.0.666.0" />
-        <vers num="11.0.667.0" />
-        <vers num="11.0.667.2" />
-        <vers num="11.0.667.3" />
-        <vers num="11.0.667.4" />
-        <vers num="11.0.668.0" />
-        <vers num="11.0.669.0" />
-        <vers num="11.0.670.0" />
-        <vers num="11.0.671.0" />
-        <vers num="11.0.672.0" />
-        <vers num="11.0.672.1" />
-        <vers num="11.0.672.2" />
-        <vers num="11.0.673.0" />
-        <vers num="11.0.674.0" />
-        <vers num="11.0.675.0" />
-        <vers num="11.0.676.0" />
-        <vers num="11.0.677.0" />
-        <vers num="11.0.678.0" />
-        <vers num="11.0.679.0" />
-        <vers num="11.0.680.0" />
-        <vers num="11.0.681.0" />
-        <vers num="11.0.682.0" />
-        <vers num="11.0.683.0" />
-        <vers num="11.0.684.0" />
-        <vers num="11.0.685.0" />
-        <vers num="11.0.686.0" />
-        <vers num="11.0.686.1" />
-        <vers num="11.0.686.2" />
-        <vers num="11.0.686.3" />
-        <vers num="11.0.687.0" />
-        <vers num="11.0.687.1" />
-        <vers num="11.0.688.0" />
-        <vers num="11.0.689.0" />
-        <vers num="11.0.690.0" />
-        <vers num="11.0.690.1" />
-        <vers num="11.0.691.0" />
-        <vers num="11.0.692.0" />
-        <vers num="11.0.693.0" />
-        <vers num="11.0.694.0" />
-        <vers num="11.0.695.0" />
-        <vers num="11.0.696.0" />
-        <vers num="11.0.696.1" />
-        <vers num="11.0.696.10" />
-        <vers num="11.0.696.11" />
-        <vers num="11.0.696.12" />
-        <vers num="11.0.696.13" />
-        <vers num="11.0.696.14" />
-        <vers num="11.0.696.15" />
-        <vers num="11.0.696.16" />
-        <vers num="11.0.696.17" />
-        <vers num="11.0.696.18" />
-        <vers num="11.0.696.19" />
-        <vers num="11.0.696.2" />
-        <vers num="11.0.696.20" />
-        <vers num="11.0.696.21" />
-        <vers num="11.0.696.22" />
-        <vers num="11.0.696.23" />
-        <vers num="11.0.696.24" />
-        <vers num="11.0.696.25" />
-        <vers num="11.0.696.26" />
-        <vers num="11.0.696.27" />
-        <vers num="11.0.696.28" />
-        <vers num="11.0.696.29" />
-        <vers num="11.0.696.3" />
-        <vers num="11.0.696.30" />
-        <vers num="11.0.696.31" />
-        <vers num="11.0.696.32" />
-        <vers num="11.0.696.33" />
-        <vers num="11.0.696.34" />
-        <vers num="11.0.696.35" />
-        <vers num="11.0.696.36" />
-        <vers num="11.0.696.37" />
-        <vers num="11.0.696.38" />
-        <vers num="11.0.696.39" />
-        <vers num="11.0.696.4" />
-        <vers num="11.0.696.40" />
-        <vers num="11.0.696.41" />
-        <vers num="11.0.696.42" />
-        <vers num="11.0.696.43" />
-        <vers num="11.0.696.44" />
-        <vers num="11.0.696.45" />
-        <vers num="11.0.696.46" />
-        <vers num="11.0.696.47" />
-        <vers num="11.0.696.48" />
-        <vers num="11.0.696.49" />
-        <vers num="11.0.696.5" />
-        <vers num="11.0.696.50" />
-        <vers num="11.0.696.51" />
-        <vers num="11.0.696.52" />
-        <vers num="11.0.696.53" />
-        <vers num="11.0.696.54" />
-        <vers num="11.0.696.55" />
-        <vers num="11.0.696.56" />
-        <vers num="11.0.696.57" />
-        <vers num="11.0.696.58" />
-        <vers num="11.0.696.59" />
-        <vers num="11.0.696.60" />
-        <vers num="11.0.696.61" />
-        <vers num="11.0.696.62" />
-        <vers num="11.0.696.63" />
-        <vers num="11.0.696.64" />
-        <vers num="11.0.696.65" />
-        <vers num="11.0.696.66" />
-        <vers num="11.0.696.67" />
-        <vers num="11.0.696.68" />
-        <vers num="11.0.696.69" />
-        <vers num="11.0.696.7" />
-        <vers num="11.0.696.70" />
-        <vers num="11.0.696.71" />
-        <vers num="11.0.696.72" />
-        <vers num="11.0.696.77" />
-        <vers num="11.0.696.8" />
-        <vers num="11.0.696.9" />
-        <vers num="11.0.697.0" />
-        <vers num="11.0.698.0" />
-        <vers num="11.0.699.0" />
-        <vers num="12.0.700.0" />
-        <vers num="12.0.701.0" />
-        <vers num="12.0.702.0" />
-        <vers num="12.0.702.1" />
-        <vers num="12.0.702.2" />
-        <vers num="12.0.703.0" />
-        <vers num="12.0.704.0" />
-        <vers num="12.0.705.0" />
-        <vers num="12.0.706.0" />
-        <vers num="12.0.707.0" />
-        <vers num="12.0.708.0" />
-        <vers num="12.0.709.0" />
-        <vers num="12.0.710.0" />
-        <vers num="12.0.711.0" />
-        <vers num="12.0.712.0" />
-        <vers num="12.0.713.0" />
-        <vers num="12.0.714.0" />
-        <vers num="12.0.715.0" />
-        <vers num="12.0.716.0" />
-        <vers num="12.0.717.0" />
-        <vers num="12.0.718.0" />
-        <vers num="12.0.719.0" />
-        <vers num="12.0.719.1" />
-        <vers num="12.0.720.0" />
-        <vers num="12.0.721.0" />
-        <vers num="12.0.721.1" />
-        <vers num="12.0.722.0" />
-        <vers num="12.0.723.0" />
-        <vers num="12.0.723.1" />
-        <vers num="12.0.724.0" />
-        <vers num="12.0.725.0" />
-        <vers num="12.0.726.0" />
-        <vers num="12.0.727.0" />
-        <vers num="12.0.728.0" />
-        <vers num="12.0.729.0" />
-        <vers num="12.0.730.0" />
-        <vers num="12.0.731.0" />
-        <vers num="12.0.732.0" />
-        <vers num="12.0.733.0" />
-        <vers num="12.0.734.0" />
-        <vers num="12.0.735.0" />
-        <vers num="12.0.736.0" />
-        <vers num="12.0.737.0" />
-        <vers num="12.0.738.0" />
-        <vers num="12.0.739.0" />
-        <vers num="12.0.740.0" />
-        <vers num="12.0.741.0" />
-        <vers num="12.0.742.0" />
-        <vers num="12.0.742.1" />
-        <vers num="12.0.742.10" />
-        <vers num="12.0.742.100" />
-        <vers num="12.0.742.105" />
-        <vers num="12.0.742.11" />
-        <vers num="12.0.742.111" />
-        <vers num="12.0.742.112" />
-        <vers num="12.0.742.113" />
-        <vers num="12.0.742.114" />
-        <vers num="12.0.742.115" />
-        <vers num="12.0.742.12" />
-        <vers num="12.0.742.120" />
-        <vers num="12.0.742.121" />
-        <vers num="12.0.742.122" />
-        <vers num="12.0.742.123" />
-        <vers num="12.0.742.124" />
-        <vers num="12.0.742.13" />
-        <vers num="12.0.742.14" />
-        <vers num="12.0.742.15" />
-        <vers num="12.0.742.16" />
-        <vers num="12.0.742.17" />
-        <vers num="12.0.742.18" />
-        <vers num="12.0.742.19" />
-        <vers num="12.0.742.2" />
-        <vers num="12.0.742.20" />
-        <vers num="12.0.742.21" />
-        <vers num="12.0.742.22" />
-        <vers num="12.0.742.3" />
-        <vers num="12.0.742.30" />
-        <vers num="12.0.742.4" />
-        <vers num="12.0.742.41" />
-        <vers num="12.0.742.42" />
-        <vers num="12.0.742.43" />
-        <vers num="12.0.742.44" />
-        <vers num="12.0.742.45" />
-        <vers num="12.0.742.46" />
-        <vers num="12.0.742.47" />
-        <vers num="12.0.742.48" />
-        <vers num="12.0.742.49" />
-        <vers num="12.0.742.5" />
-        <vers num="12.0.742.50" />
-        <vers num="12.0.742.51" />
-        <vers num="12.0.742.52" />
-        <vers num="12.0.742.53" />
-        <vers num="12.0.742.54" />
-        <vers num="12.0.742.55" />
-        <vers num="12.0.742.56" />
-        <vers num="12.0.742.57" />
-        <vers num="12.0.742.58" />
-        <vers num="12.0.742.59" />
-        <vers num="12.0.742.6" />
-        <vers num="12.0.742.60" />
-        <vers num="12.0.742.61" />
-        <vers num="12.0.742.63" />
-        <vers num="12.0.742.64" />
-        <vers num="12.0.742.65" />
-        <vers num="12.0.742.66" />
-        <vers num="12.0.742.67" />
-        <vers num="12.0.742.68" />
-        <vers num="12.0.742.69" />
-        <vers num="12.0.742.70" />
-        <vers num="12.0.742.71" />
-        <vers num="12.0.742.72" />
-        <vers num="12.0.742.73" />
-        <vers num="12.0.742.74" />
-        <vers num="12.0.742.75" />
-        <vers num="12.0.742.77" />
-        <vers num="12.0.742.8" />
-        <vers num="12.0.742.82" />
-        <vers num="12.0.742.9" />
-        <vers num="12.0.742.91" />
-        <vers num="12.0.742.92" />
-        <vers num="12.0.742.93" />
-        <vers num="12.0.742.94" />
-        <vers num="12.0.743.0" />
-        <vers num="12.0.744.0" />
-        <vers num="12.0.745.0" />
-        <vers num="12.0.746.0" />
-        <vers num="12.0.747.0" />
-        <vers num="13.0.748.0" />
-        <vers num="13.0.749.0" />
-        <vers num="13.0.750.0" />
-        <vers num="13.0.751.0" />
-        <vers num="13.0.752.0" />
-        <vers num="13.0.753.0" />
-        <vers num="13.0.754.0" />
-        <vers num="13.0.755.0" />
-        <vers num="13.0.756.0" />
-        <vers num="13.0.757.0" />
-        <vers num="13.0.758.0" />
-        <vers num="13.0.759.0" />
-        <vers num="13.0.760.0" />
-        <vers num="13.0.761.0" />
-        <vers num="13.0.761.1" />
-        <vers num="13.0.762.0" />
-        <vers num="13.0.762.1" />
-        <vers num="13.0.763.0" />
-        <vers num="13.0.764.0" />
-        <vers num="13.0.765.0" />
-        <vers num="13.0.766.0" />
-        <vers num="13.0.767.0" />
-        <vers num="13.0.767.1" />
-        <vers num="13.0.768.0" />
-        <vers num="13.0.769.0" />
-        <vers num="13.0.770.0" />
-        <vers num="13.0.771.0" />
-        <vers num="13.0.772.0" />
-        <vers num="13.0.773.0" />
-        <vers num="13.0.774.0" />
-        <vers num="13.0.775.0" />
-        <vers num="13.0.775.1" />
-        <vers num="13.0.775.2" />
-        <vers num="13.0.775.4" />
-        <vers num="13.0.776.0" />
-        <vers num="13.0.776.1" />
-        <vers num="13.0.777.0" />
-        <vers num="13.0.777.1" />
-        <vers num="13.0.777.2" />
-        <vers num="13.0.777.3" />
-        <vers num="13.0.777.4" />
-        <vers num="13.0.777.5" />
-        <vers num="13.0.777.6" />
-        <vers num="13.0.778.0" />
-        <vers num="13.0.779.0" />
-        <vers num="13.0.780.0" />
-        <vers num="13.0.781.0" />
-        <vers num="13.0.782.0" />
-        <vers num="13.0.782.1" />
-        <vers num="13.0.782.10" />
-        <vers num="13.0.782.100" />
-        <vers num="13.0.782.101" />
-        <vers num="13.0.782.102" />
-        <vers num="13.0.782.103" />
-        <vers num="13.0.782.104" />
-        <vers num="13.0.782.105" />
-        <vers num="13.0.782.106" />
-        <vers num="13.0.782.107" />
-        <vers num="13.0.782.108" />
-        <vers num="13.0.782.109" />
-        <vers num="13.0.782.11" />
-        <vers num="13.0.782.112" />
-        <vers num="13.0.782.12" />
-        <vers num="13.0.782.13" />
-        <vers num="13.0.782.14" />
-        <vers num="13.0.782.15" />
-        <vers num="13.0.782.16" />
-        <vers num="13.0.782.17" />
-        <vers num="13.0.782.18" />
-        <vers num="13.0.782.19" />
-        <vers num="13.0.782.20" />
-        <vers num="13.0.782.21" />
-        <vers num="13.0.782.210" />
-        <vers num="13.0.782.211" />
-        <vers num="13.0.782.212" />
-        <vers num="13.0.782.213" />
-        <vers num="13.0.782.214" />
-        <vers num="13.0.782.215" />
-        <vers num="13.0.782.216" />
-        <vers num="13.0.782.217" />
-        <vers num="13.0.782.218" />
-        <vers num="13.0.782.219" />
-        <vers num="13.0.782.220" />
-        <vers num="13.0.782.23" />
-        <vers num="13.0.782.237" />
-        <vers num="13.0.782.238" />
-        <vers num="13.0.782.24" />
-        <vers num="13.0.782.25" />
-        <vers num="13.0.782.26" />
-        <vers num="13.0.782.27" />
-        <vers num="13.0.782.28" />
-        <vers num="13.0.782.29" />
-        <vers num="13.0.782.3" />
-        <vers num="13.0.782.30" />
-        <vers num="13.0.782.31" />
-        <vers num="13.0.782.32" />
-        <vers num="13.0.782.33" />
-        <vers num="13.0.782.34" />
-        <vers num="13.0.782.35" />
-        <vers num="13.0.782.36" />
-        <vers num="13.0.782.37" />
-        <vers num="13.0.782.38" />
-        <vers num="13.0.782.39" />
-        <vers num="13.0.782.4" />
-        <vers num="13.0.782.40" />
-        <vers num="13.0.782.41" />
-        <vers num="13.0.782.42" />
-        <vers num="13.0.782.43" />
-        <vers num="13.0.782.44" />
-        <vers num="13.0.782.45" />
-        <vers num="13.0.782.46" />
-        <vers num="13.0.782.47" />
-        <vers num="13.0.782.48" />
-        <vers num="13.0.782.49" />
-        <vers num="13.0.782.50" />
-        <vers num="13.0.782.51" />
-        <vers num="13.0.782.52" />
-        <vers num="13.0.782.53" />
-        <vers num="13.0.782.55" />
-        <vers num="13.0.782.56" />
-        <vers num="13.0.782.6" />
-        <vers num="13.0.782.7" />
-        <vers num="13.0.782.81" />
-        <vers num="13.0.782.82" />
-        <vers num="13.0.782.83" />
-        <vers num="13.0.782.84" />
-        <vers num="13.0.782.85" />
-        <vers num="13.0.782.86" />
-        <vers num="13.0.782.87" />
-        <vers num="13.0.782.88" />
-        <vers num="13.0.782.89" />
-        <vers num="13.0.782.90" />
-        <vers num="13.0.782.91" />
-        <vers num="13.0.782.92" />
-        <vers num="13.0.782.93" />
-        <vers num="13.0.782.94" />
-        <vers num="13.0.782.95" />
-        <vers num="13.0.782.96" />
-        <vers num="13.0.782.97" />
-        <vers num="13.0.782.98" />
-        <vers num="13.0.782.99" />
-        <vers num="14.0.783.0" />
-        <vers num="14.0.784.0" />
-        <vers num="14.0.785.0" />
-        <vers num="14.0.786.0" />
-        <vers num="14.0.787.0" />
-        <vers num="14.0.788.0" />
-        <vers num="14.0.789.0" />
-        <vers num="14.0.790.0" />
-        <vers num="14.0.791.0" />
-        <vers num="14.0.792.0" />
-        <vers num="14.0.793.0" />
-        <vers num="14.0.794.0" />
-        <vers num="14.0.795.0" />
-        <vers num="14.0.796.0" />
-        <vers num="14.0.797.0" />
-        <vers num="14.0.798.0" />
-        <vers num="14.0.799.0" />
-        <vers num="14.0.800.0" />
-        <vers num="14.0.801.0" />
-        <vers num="14.0.802.0" />
-        <vers num="14.0.803.0" />
-        <vers num="14.0.804.0" />
-        <vers num="14.0.805.0" />
-        <vers num="14.0.806.0" />
-        <vers num="14.0.807.0" />
-        <vers num="14.0.808.0" />
-        <vers num="14.0.809.0" />
-        <vers num="14.0.810.0" />
-        <vers num="14.0.811.0" />
-        <vers num="14.0.812.0" />
-        <vers num="14.0.813.0" />
-        <vers num="14.0.814.0" />
-        <vers num="14.0.815.0" />
-        <vers num="14.0.816.0" />
-        <vers num="14.0.818.0" />
-        <vers num="14.0.819.0" />
-        <vers num="14.0.820.0" />
-        <vers num="14.0.821.0" />
-        <vers num="14.0.822.0" />
-        <vers num="14.0.823.0" />
-        <vers num="14.0.824.0" />
-        <vers num="14.0.825.0" />
-        <vers num="14.0.826.0" />
-        <vers num="14.0.827.0" />
-        <vers num="14.0.827.10" />
-        <vers num="14.0.827.12" />
-        <vers num="14.0.829.1" />
-        <vers num="14.0.830.0" />
-        <vers num="14.0.831.0" />
-        <vers num="14.0.832.0" />
-        <vers num="14.0.833.0" />
-        <vers num="14.0.834.0" />
-        <vers num="14.0.835.0" />
-        <vers num="14.0.835.1" />
-        <vers num="14.0.835.100" />
-        <vers num="14.0.835.101" />
-        <vers num="14.0.835.102" />
-        <vers num="14.0.835.103" />
-        <vers num="14.0.835.104" />
-        <vers num="14.0.835.105" />
-        <vers num="14.0.835.106" />
-        <vers num="14.0.835.107" />
-        <vers num="14.0.835.108" />
-        <vers num="14.0.835.109" />
-        <vers num="14.0.835.11" />
-        <vers num="14.0.835.110" />
-        <vers num="14.0.835.111" />
-        <vers num="14.0.835.112" />
-        <vers num="14.0.835.113" />
-        <vers num="14.0.835.114" />
-        <vers num="14.0.835.115" />
-        <vers num="14.0.835.116" />
-        <vers num="14.0.835.117" />
-        <vers num="14.0.835.118" />
-        <vers num="14.0.835.119" />
-        <vers num="14.0.835.120" />
-        <vers num="14.0.835.121" />
-        <vers num="14.0.835.122" />
-        <vers num="14.0.835.123" />
-        <vers num="14.0.835.124" />
-        <vers num="14.0.835.125" />
-        <vers num="14.0.835.126" />
-        <vers num="14.0.835.127" />
-        <vers num="14.0.835.128" />
-        <vers num="14.0.835.13" />
-        <vers num="14.0.835.14" />
-        <vers num="14.0.835.149" />
-        <vers num="14.0.835.15" />
-        <vers num="14.0.835.150" />
-        <vers num="14.0.835.151" />
-        <vers num="14.0.835.152" />
-        <vers num="14.0.835.153" />
-        <vers num="14.0.835.154" />
-        <vers num="14.0.835.155" />
-        <vers num="14.0.835.156" />
-        <vers num="14.0.835.157" />
-        <vers num="14.0.835.158" />
-        <vers num="14.0.835.159" />
-        <vers num="14.0.835.16" />
-        <vers num="14.0.835.160" />
-        <vers num="14.0.835.161" />
-        <vers num="14.0.835.162" />
-        <vers num="14.0.835.163" />
-        <vers num="14.0.835.18" />
-        <vers num="14.0.835.184" />
-        <vers num="14.0.835.186" />
-        <vers num="14.0.835.187" />
-        <vers num="14.0.835.2" />
-        <vers num="14.0.835.20" />
-        <vers num="14.0.835.202" />
-        <vers num="14.0.835.203" />
-        <vers num="14.0.835.204" />
-        <vers num="14.0.835.21" />
-        <vers num="14.0.835.22" />
-        <vers num="14.0.835.23" />
-        <vers num="14.0.835.24" />
-        <vers num="14.0.835.25" />
-        <vers num="14.0.835.26" />
-        <vers num="14.0.835.27" />
-        <vers num="14.0.835.28" />
-        <vers num="14.0.835.29" />
-        <vers num="14.0.835.30" />
-        <vers num="14.0.835.31" />
-        <vers num="14.0.835.32" />
-        <vers num="14.0.835.33" />
-        <vers num="14.0.835.34" />
-        <vers num="14.0.835.35" />
-        <vers num="14.0.835.4" />
-        <vers num="14.0.835.8" />
-        <vers num="14.0.835.86" />
-        <vers num="14.0.835.87" />
-        <vers num="14.0.835.88" />
-        <vers num="14.0.835.89" />
-        <vers num="14.0.835.9" />
-        <vers num="14.0.835.90" />
-        <vers num="14.0.835.91" />
-        <vers num="14.0.835.92" />
-        <vers num="14.0.835.93" />
-        <vers num="14.0.835.94" />
-        <vers num="14.0.835.95" />
-        <vers num="14.0.835.96" />
-        <vers num="14.0.835.97" />
-        <vers num="14.0.835.98" />
-        <vers num="14.0.835.99" />
-        <vers num="14.0.836.0" />
-        <vers num="14.0.837.0" />
-        <vers num="14.0.838.0" />
-        <vers num="14.0.839.0" />
-        <vers num="15.0.859.0" />
-        <vers num="15.0.860.0" />
-        <vers num="15.0.861.0" />
-        <vers num="15.0.862.0" />
-        <vers num="15.0.862.1" />
-        <vers num="15.0.863.0" />
-        <vers num="15.0.864.0" />
-        <vers num="15.0.865.0" />
-        <vers num="15.0.866.0" />
-        <vers num="15.0.867.0" />
-        <vers num="15.0.868.0" />
-        <vers num="15.0.868.1" />
-        <vers num="15.0.869.0" />
-        <vers num="15.0.870.0" />
-        <vers num="15.0.871.0" />
-        <vers num="15.0.871.1" />
-        <vers num="15.0.872.0" />
-        <vers num="15.0.873.0" />
-        <vers num="15.0.874.0" />
-        <vers num="15.0.874.1" />
-        <vers num="15.0.874.10" />
-        <vers num="15.0.874.101" />
-        <vers num="15.0.874.102" />
-        <vers num="15.0.874.103" />
-        <vers num="15.0.874.104" />
-        <vers num="15.0.874.106" />
-        <vers num="15.0.874.11" />
-        <vers num="15.0.874.116" />
-        <vers num="15.0.874.117" />
-        <vers num="15.0.874.119" />
-        <vers num="15.0.874.12" />
-        <vers num="15.0.874.120" />
-        <vers num="15.0.874.121" />
-        <vers num="15.0.874.13" />
-        <vers num="15.0.874.14" />
-        <vers num="15.0.874.15" />
-        <vers num="15.0.874.16" />
-        <vers num="15.0.874.17" />
-        <vers num="15.0.874.18" />
-        <vers num="15.0.874.19" />
-        <vers num="15.0.874.2" />
-        <vers num="15.0.874.20" />
-        <vers num="15.0.874.21" />
-        <vers num="15.0.874.22" />
-        <vers num="15.0.874.23" />
-        <vers num="15.0.874.24" />
-        <vers num="15.0.874.3" />
-        <vers num="15.0.874.4" />
-        <vers num="15.0.874.44" />
-        <vers num="15.0.874.45" />
-        <vers num="15.0.874.46" />
-        <vers num="15.0.874.47" />
-        <vers num="15.0.874.48" />
-        <vers num="15.0.874.49" />
-        <vers num="15.0.874.5" />
-        <vers num="15.0.874.6" />
-        <vers num="15.0.874.7" />
-        <vers num="15.0.874.8" />
-        <vers num="15.0.874.9" />
-        <vers num="16.0.877.0" />
-        <vers num="16.0.878.0" />
-        <vers num="16.0.879.0" />
-        <vers num="16.0.880.0" />
-        <vers num="16.0.881.0" />
-        <vers num="16.0.882.0" />
-        <vers num="16.0.883.0" />
-        <vers num="16.0.884.0" />
-        <vers num="16.0.885.0" />
-        <vers num="16.0.886.0" />
-        <vers num="16.0.886.1" />
-        <vers num="16.0.887.0" />
-        <vers num="16.0.888.0" />
-        <vers num="16.0.889.0" />
-        <vers num="16.0.889.2" />
-        <vers num="16.0.889.3" />
-        <vers num="16.0.890.0" />
-        <vers num="16.0.890.1" />
-        <vers num="16.0.891.0" />
-        <vers num="16.0.891.1" />
-        <vers num="16.0.892.0" />
-        <vers num="16.0.893.0" />
-        <vers num="16.0.893.1" />
-        <vers num="16.0.894.0" />
-        <vers num="16.0.895.0" />
-        <vers num="16.0.896.0" />
-        <vers num="16.0.897.0" />
-        <vers num="16.0.898.0" />
-        <vers num="16.0.899.0" />
-        <vers num="16.0.900.0" />
-        <vers num="16.0.901.0" />
-        <vers num="16.0.902.0" />
-        <vers num="16.0.903.0" />
-        <vers num="16.0.904.0" />
-        <vers num="16.0.905.0" />
-        <vers num="16.0.906.0" />
-        <vers num="16.0.906.1" />
-        <vers num="16.0.907.0" />
-        <vers num="16.0.908.0" />
-        <vers num="16.0.909.0" />
-        <vers num="16.0.910.0" />
-        <vers num="16.0.911.0" />
-        <vers num="16.0.911.1" />
-        <vers num="16.0.911.2" />
-        <vers num="16.0.912.0" />
-        <vers num="16.0.912.1" />
-        <vers num="16.0.912.10" />
-        <vers num="16.0.912.11" />
-        <vers num="16.0.912.12" />
-        <vers num="16.0.912.13" />
-        <vers num="16.0.912.14" />
-        <vers num="16.0.912.15" />
-        <vers num="16.0.912.19" />
-        <vers num="16.0.912.2" />
-        <vers num="16.0.912.20" />
-        <vers num="16.0.912.21" />
-        <vers num="16.0.912.22" />
-        <vers num="16.0.912.23" />
-        <vers num="16.0.912.24" />
-        <vers num="16.0.912.25" />
-        <vers num="16.0.912.26" />
-        <vers num="16.0.912.27" />
-        <vers num="16.0.912.28" />
-        <vers num="16.0.912.29" />
-        <vers num="16.0.912.3" />
-        <vers num="16.0.912.30" />
-        <vers num="16.0.912.31" />
-        <vers num="16.0.912.32" />
-        <vers num="16.0.912.33" />
-        <vers num="16.0.912.34" />
-        <vers num="16.0.912.35" />
-        <vers num="16.0.912.36" />
-        <vers num="16.0.912.37" />
-        <vers num="16.0.912.38" />
-        <vers num="16.0.912.39" />
-        <vers num="16.0.912.4" />
-        <vers num="16.0.912.40" />
-        <vers num="16.0.912.41" />
-        <vers num="16.0.912.42" />
-        <vers num="16.0.912.43" />
-        <vers num="16.0.912.5" />
-        <vers num="16.0.912.6" />
-        <vers num="16.0.912.62" />
-        <vers num="16.0.912.63" />
-        <vers num="16.0.912.66" />
-        <vers num="16.0.912.7" />
-        <vers num="16.0.912.74" />
-        <vers num="16.0.912.75" />
-        <vers num="16.0.912.76" />
-        <vers num="16.0.912.77" />
-        <vers num="16.0.912.8" />
-        <vers num="16.0.912.9" />
-        <vers num="17.0.921.3" />
-        <vers num="17.0.922.0" />
-        <vers num="17.0.923.0" />
-        <vers num="17.0.923.1" />
-        <vers num="17.0.924.0" />
-        <vers num="17.0.925.0" />
-        <vers num="17.0.926.0" />
-        <vers num="17.0.927.0" />
-        <vers num="17.0.928.0" />
-        <vers num="17.0.928.1" />
-        <vers num="17.0.928.2" />
-        <vers num="17.0.928.3" />
-        <vers num="17.0.929.0" />
-        <vers num="17.0.930.0" />
-        <vers num="17.0.931.0" />
-        <vers num="17.0.932.0" />
-        <vers num="17.0.933.0" />
-        <vers num="17.0.933.1" />
-        <vers num="17.0.934.0" />
-        <vers num="17.0.935.0" />
-        <vers num="17.0.935.1" />
-        <vers num="17.0.936.0" />
-        <vers num="17.0.936.1" />
-        <vers num="17.0.937.0" />
-        <vers num="17.0.938.0" />
-        <vers num="17.0.939.0" />
-        <vers num="17.0.939.1" />
-        <vers num="17.0.940.0" />
-        <vers num="17.0.941.0" />
-        <vers num="17.0.942.0" />
-        <vers num="17.0.943.0" />
-        <vers num="17.0.944.0" />
-        <vers num="17.0.945.0" />
-        <vers num="17.0.946.0" />
-        <vers num="17.0.947.0" />
-        <vers num="17.0.948.0" />
-        <vers num="17.0.949.0" />
-        <vers num="17.0.950.0" />
-        <vers num="17.0.951.0" />
-        <vers num="17.0.952.0" />
-        <vers num="17.0.953.0" />
-        <vers num="17.0.954.0" />
-        <vers num="17.0.954.1" />
-        <vers num="17.0.954.2" />
-        <vers num="17.0.954.3" />
-        <vers num="17.0.955.0" />
-        <vers num="17.0.956.0" />
-        <vers num="17.0.957.0" />
-        <vers num="17.0.958.0" />
-        <vers num="17.0.958.1" />
-        <vers num="17.0.959.0" />
-        <vers num="17.0.960.0" />
-        <vers num="17.0.961.0" />
-        <vers num="17.0.962.0" />
-        <vers num="17.0.963.0" />
-        <vers num="17.0.963.1" />
-        <vers num="17.0.963.10" />
-        <vers num="17.0.963.11" />
-        <vers num="17.0.963.12" />
-        <vers num="17.0.963.13" />
-        <vers num="17.0.963.14" />
-        <vers num="17.0.963.15" />
-        <vers num="17.0.963.16" />
-        <vers num="17.0.963.17" />
-        <vers num="17.0.963.18" />
-        <vers num="17.0.963.19" />
-        <vers num="17.0.963.2" />
-        <vers num="17.0.963.20" />
-        <vers num="17.0.963.21" />
-        <vers num="17.0.963.22" />
-        <vers num="17.0.963.23" />
-        <vers num="17.0.963.24" />
-        <vers num="17.0.963.25" />
-        <vers num="17.0.963.26" />
-        <vers num="17.0.963.27" />
-        <vers num="17.0.963.28" />
-        <vers num="17.0.963.29" />
-        <vers num="17.0.963.3" />
-        <vers num="17.0.963.30" />
-        <vers num="17.0.963.31" />
-        <vers num="17.0.963.32" />
-        <vers num="17.0.963.33" />
-        <vers num="17.0.963.34" />
-        <vers num="17.0.963.35" />
-        <vers num="17.0.963.36" />
-        <vers num="17.0.963.37" />
-        <vers num="17.0.963.38" />
-        <vers num="17.0.963.39" />
-        <vers num="17.0.963.4" />
-        <vers num="17.0.963.40" />
-        <vers num="17.0.963.41" />
-        <vers num="17.0.963.42" />
-        <vers num="17.0.963.43" />
-        <vers num="17.0.963.44" />
-        <vers num="17.0.963.45" />
-        <vers num="17.0.963.46" />
-        <vers num="17.0.963.47" />
-        <vers num="17.0.963.48" />
-        <vers num="17.0.963.49" />
-        <vers num="17.0.963.5" />
-        <vers num="17.0.963.50" />
-        <vers num="17.0.963.51" />
-        <vers num="17.0.963.52" />
-        <vers num="17.0.963.53" />
-        <vers num="17.0.963.54" />
-        <vers num="17.0.963.55" />
-        <vers num="17.0.963.56" />
-        <vers num="17.0.963.57" />
-        <vers num="17.0.963.59" />
-        <vers num="17.0.963.6" />
-        <vers num="17.0.963.60" />
-        <vers num="17.0.963.61" />
-        <vers num="17.0.963.62" />
-        <vers num="17.0.963.63" />
-        <vers num="17.0.963.64" />
-        <vers num="17.0.963.65" />
-        <vers num="17.0.963.66" />
-        <vers num="17.0.963.67" />
-        <vers num="17.0.963.69" />
-        <vers num="17.0.963.7" />
-        <vers num="17.0.963.70" />
-        <vers num="17.0.963.74" />
-        <vers num="17.0.963.75" />
-        <vers num="17.0.963.76" />
-        <vers num="17.0.963.77" />
-        <vers num="17.0.963.78" />
-        <vers num="17.0.963.79" />
-        <vers num="17.0.963.8" />
-        <vers num="17.0.963.80" />
-        <vers num="17.0.963.81" />
-        <vers num="17.0.963.82" />
-        <vers num="17.0.963.83" />
-        <vers num="17.0.963.84" />
-        <vers num="17.0.963.9" />
-        <vers num="18.0.1000.0" />
-        <vers num="18.0.1001.0" />
-        <vers num="18.0.1001.1" />
-        <vers num="18.0.1002.0" />
-        <vers num="18.0.1003.0" />
-        <vers num="18.0.1003.1" />
-        <vers num="18.0.1004.0" />
-        <vers num="18.0.1005.0" />
-        <vers num="18.0.1006.0" />
-        <vers num="18.0.1007.0" />
-        <vers num="18.0.1008.0" />
-        <vers num="18.0.1009.0" />
-        <vers num="18.0.1010.0" />
-        <vers num="18.0.1010.1" />
-        <vers num="18.0.1010.2" />
-        <vers num="18.0.1011.1" />
-        <vers num="18.0.1012.0" />
-        <vers num="18.0.1012.1" />
-        <vers num="18.0.1012.2" />
-        <vers num="18.0.1013.0" />
-        <vers num="18.0.1014.0" />
-        <vers num="18.0.1015.0" />
-        <vers num="18.0.1016.0" />
-        <vers num="18.0.1017.0" />
-        <vers num="18.0.1017.1" />
-        <vers num="18.0.1017.2" />
-        <vers num="18.0.1017.3" />
-        <vers num="18.0.1018.0" />
-        <vers num="18.0.1019.0" />
-        <vers num="18.0.1019.1" />
-        <vers num="18.0.1020.0" />
-        <vers num="18.0.1021.0" />
-        <vers num="18.0.1022.0" />
-        <vers num="18.0.1023.0" />
-        <vers num="18.0.1024.0" />
-        <vers num="18.0.1025.0" />
-        <vers num="18.0.1025.1" />
-        <vers num="18.0.1025.10" />
-        <vers num="18.0.1025.100" />
-        <vers num="18.0.1025.102" />
-        <vers num="18.0.1025.107" />
-        <vers num="18.0.1025.108" />
-        <vers num="18.0.1025.109" />
-        <vers num="18.0.1025.110" />
-        <vers num="18.0.1025.111" />
-        <vers num="18.0.1025.112" />
-        <vers num="18.0.1025.113" />
-        <vers num="18.0.1025.114" />
-        <vers num="18.0.1025.116" />
-        <vers num="18.0.1025.117" />
-        <vers num="18.0.1025.118" />
-        <vers num="18.0.1025.120" />
-        <vers num="18.0.1025.129" />
-        <vers num="18.0.1025.130" />
-        <vers num="18.0.1025.131" />
-        <vers num="18.0.1025.132" />
-        <vers num="18.0.1025.133" />
-        <vers num="18.0.1025.134" />
-        <vers num="18.0.1025.135" />
-        <vers num="18.0.1025.136" />
-        <vers num="18.0.1025.137" />
-        <vers num="18.0.1025.139" />
-        <vers num="18.0.1025.140" />
-        <vers num="18.0.1025.142" />
-        <vers num="18.0.1025.145" />
-        <vers num="18.0.1025.146" />
-        <vers num="18.0.1025.147" />
-        <vers num="18.0.1025.148" />
-        <vers num="18.0.1025.149" />
-        <vers prev="1" num="18.0.1025.150" />
-        <vers num="18.0.1025.2" />
-        <vers num="18.0.1025.29" />
-        <vers num="18.0.1025.3" />
-        <vers num="18.0.1025.30" />
-        <vers num="18.0.1025.31" />
-        <vers num="18.0.1025.32" />
-        <vers num="18.0.1025.33" />
-        <vers num="18.0.1025.35" />
-        <vers num="18.0.1025.36" />
-        <vers num="18.0.1025.37" />
-        <vers num="18.0.1025.38" />
-        <vers num="18.0.1025.39" />
-        <vers num="18.0.1025.4" />
-        <vers num="18.0.1025.40" />
-        <vers num="18.0.1025.41" />
-        <vers num="18.0.1025.42" />
-        <vers num="18.0.1025.43" />
-        <vers num="18.0.1025.44" />
-        <vers num="18.0.1025.45" />
-        <vers num="18.0.1025.46" />
-        <vers num="18.0.1025.47" />
-        <vers num="18.0.1025.48" />
-        <vers num="18.0.1025.49" />
-        <vers num="18.0.1025.5" />
-        <vers num="18.0.1025.50" />
-        <vers num="18.0.1025.51" />
-        <vers num="18.0.1025.52" />
-        <vers num="18.0.1025.54" />
-        <vers num="18.0.1025.55" />
-        <vers num="18.0.1025.56" />
-        <vers num="18.0.1025.57" />
-        <vers num="18.0.1025.58" />
-        <vers num="18.0.1025.6" />
-        <vers num="18.0.1025.60" />
-        <vers num="18.0.1025.7" />
-        <vers num="18.0.1025.73" />
-        <vers num="18.0.1025.74" />
-        <vers num="18.0.1025.8" />
-        <vers num="18.0.1025.9" />
-        <vers num="18.0.1025.95" />
-        <vers num="18.0.1025.96" />
-        <vers num="18.0.1025.97" />
-        <vers num="18.0.1025.98" />
-        <vers num="18.0.1025.99" />
-        <vers num="2.0.156.1" />
-        <vers num="2.0.157.0" />
-        <vers num="2.0.157.2" />
-        <vers num="2.0.158.0" />
-        <vers num="2.0.159.0" />
-        <vers num="2.0.169.0" />
-        <vers num="2.0.169.1" />
-        <vers num="2.0.170.0" />
-        <vers num="2.0.172" />
-        <vers num="2.0.172.2" />
-        <vers num="2.0.172.27" />
-        <vers num="2.0.172.28" />
-        <vers num="2.0.172.30" />
-        <vers num="2.0.172.31" />
-        <vers num="2.0.172.33" />
-        <vers num="2.0.172.37" />
-        <vers num="2.0.172.38" />
-        <vers num="2.0.172.8" />
-        <vers num="3.0.182.2" />
-        <vers num="3.0.190.2" />
-        <vers num="3.0.193.2" edition="beta" />
-        <vers num="3.0.195.2" />
-        <vers num="3.0.195.21" />
-        <vers num="3.0.195.24" />
-        <vers num="3.0.195.25" />
-        <vers num="3.0.195.27" />
-        <vers num="3.0.195.32" />
-        <vers num="3.0.195.33" />
-        <vers num="3.0.195.36" />
-        <vers num="3.0.195.37" />
-        <vers num="3.0.195.38" />
-        <vers num="4.0.212.0" />
-        <vers num="4.0.212.1" />
-        <vers num="4.0.221.8" />
-        <vers num="4.0.222.0" />
-        <vers num="4.0.222.1" />
-        <vers num="4.0.222.12" />
-        <vers num="4.0.222.5" />
-        <vers num="4.0.223.0" />
-        <vers num="4.0.223.1" />
-        <vers num="4.0.223.2" />
-        <vers num="4.0.223.4" />
-        <vers num="4.0.223.5" />
-        <vers num="4.0.223.7" />
-        <vers num="4.0.223.8" />
-        <vers num="4.0.223.9" />
-        <vers num="4.0.224.0" />
-        <vers num="4.0.229.1" />
-        <vers num="4.0.235.0" />
-        <vers num="4.0.236.0" />
-        <vers num="4.0.237.0" />
-        <vers num="4.0.237.1" />
-        <vers num="4.0.239.0" />
-        <vers num="4.0.240.0" />
-        <vers num="4.0.241.0" />
-        <vers num="4.0.242.0" />
-        <vers num="4.0.243.0" />
-        <vers num="4.0.244.0" />
-        <vers num="4.0.245.0" />
-        <vers num="4.0.245.1" />
-        <vers num="4.0.246.0" />
-        <vers num="4.0.247.0" />
-        <vers num="4.0.248.0" />
-        <vers num="4.0.249.0" />
-        <vers num="4.0.249.1" />
-        <vers num="4.0.249.10" />
-        <vers num="4.0.249.11" />
-        <vers num="4.0.249.12" />
-        <vers num="4.0.249.14" />
-        <vers num="4.0.249.16" />
-        <vers num="4.0.249.17" />
-        <vers num="4.0.249.18" />
-        <vers num="4.0.249.19" />
-        <vers num="4.0.249.2" />
-        <vers num="4.0.249.20" />
-        <vers num="4.0.249.21" />
-        <vers num="4.0.249.22" />
-        <vers num="4.0.249.23" />
-        <vers num="4.0.249.24" />
-        <vers num="4.0.249.25" />
-        <vers num="4.0.249.26" />
-        <vers num="4.0.249.27" />
-        <vers num="4.0.249.28" />
-        <vers num="4.0.249.29" />
-        <vers num="4.0.249.3" />
-        <vers num="4.0.249.30" />
-        <vers num="4.0.249.31" />
-        <vers num="4.0.249.32" />
-        <vers num="4.0.249.33" />
-        <vers num="4.0.249.34" />
-        <vers num="4.0.249.35" />
-        <vers num="4.0.249.36" />
-        <vers num="4.0.249.37" />
-        <vers num="4.0.249.38" />
-        <vers num="4.0.249.39" />
-        <vers num="4.0.249.4" />
-        <vers num="4.0.249.40" />
-        <vers num="4.0.249.41" />
-        <vers num="4.0.249.42" />
-        <vers num="4.0.249.43" />
-        <vers num="4.0.249.44" />
-        <vers num="4.0.249.45" />
-        <vers num="4.0.249.46" />
-        <vers num="4.0.249.47" />
-        <vers num="4.0.249.48" />
-        <vers num="4.0.249.49" />
-        <vers num="4.0.249.5" />
-        <vers num="4.0.249.50" />
-        <vers num="4.0.249.51" />
-        <vers num="4.0.249.52" />
-        <vers num="4.0.249.53" />
-        <vers num="4.0.249.54" />
-        <vers num="4.0.249.55" />
-        <vers num="4.0.249.56" />
-        <vers num="4.0.249.57" />
-        <vers num="4.0.249.58" />
-        <vers num="4.0.249.59" />
-        <vers num="4.0.249.6" />
-        <vers num="4.0.249.60" />
-        <vers num="4.0.249.61" />
-        <vers num="4.0.249.62" />
-        <vers num="4.0.249.63" />
-        <vers num="4.0.249.64" />
-        <vers num="4.0.249.65" />
-        <vers num="4.0.249.66" />
-        <vers num="4.0.249.67" />
-        <vers num="4.0.249.68" />
-        <vers num="4.0.249.69" />
-        <vers num="4.0.249.7" />
-        <vers num="4.0.249.70" />
-        <vers num="4.0.249.71" />
-        <vers num="4.0.249.72" />
-        <vers num="4.0.249.73" />
-        <vers num="4.0.249.74" />
-        <vers num="4.0.249.75" />
-        <vers num="4.0.249.76" />
-        <vers num="4.0.249.77" />
-        <vers num="4.0.249.78" edition="beta" />
-        <vers num="4.0.249.79" />
-        <vers num="4.0.249.8" />
-        <vers num="4.0.249.80" />
-        <vers num="4.0.249.81" />
-        <vers num="4.0.249.82" />
-        <vers num="4.0.249.89" />
-        <vers num="4.0.249.9" />
-        <vers num="4.0.250.0" />
-        <vers num="4.0.250.2" />
-        <vers num="4.0.251.0" />
-        <vers num="4.0.252.0" />
-        <vers num="4.0.254.0" />
-        <vers num="4.0.255.0" />
-        <vers num="4.0.256.0" />
-        <vers num="4.0.257.0" />
-        <vers num="4.0.258.0" />
-        <vers num="4.0.259.0" />
-        <vers num="4.0.260.0" />
-        <vers num="4.0.261.0" />
-        <vers num="4.0.262.0" />
-        <vers num="4.0.263.0" />
-        <vers num="4.0.264.0" />
-        <vers num="4.0.265.0" />
-        <vers num="4.0.266.0" />
-        <vers num="4.0.267.0" />
-        <vers num="4.0.268.0" />
-        <vers num="4.0.269.0" />
-        <vers num="4.0.271.0" />
-        <vers num="4.0.272.0" />
-        <vers num="4.0.275.0" />
-        <vers num="4.0.275.1" />
-        <vers num="4.0.276.0" />
-        <vers num="4.0.277.0" />
-        <vers num="4.0.278.0" />
-        <vers num="4.0.286.0" />
-        <vers num="4.0.287.0" />
-        <vers num="4.0.288.0" />
-        <vers num="4.0.288.1" />
-        <vers num="4.0.289.0" />
-        <vers num="4.0.290.0" />
-        <vers num="4.0.292.0" />
-        <vers num="4.0.294.0" />
-        <vers num="4.0.295.0" />
-        <vers num="4.0.296.0" />
-        <vers num="4.0.299.0" />
-        <vers num="4.0.300.0" />
-        <vers num="4.0.301.0" />
-        <vers num="4.0.302.0" />
-        <vers num="4.0.302.1" />
-        <vers num="4.0.302.2" />
-        <vers num="4.0.302.3" />
-        <vers num="4.0.303.0" />
-        <vers num="4.0.304.0" />
-        <vers num="4.0.305.0" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.1.249.0" />
-        <vers num="4.1.249.1001" />
-        <vers num="4.1.249.1004" />
-        <vers num="4.1.249.1006" />
-        <vers num="4.1.249.1007" />
-        <vers num="4.1.249.1008" />
-        <vers num="4.1.249.1009" />
-        <vers num="4.1.249.1010" />
-        <vers num="4.1.249.1011" />
-        <vers num="4.1.249.1012" />
-        <vers num="4.1.249.1013" />
-        <vers num="4.1.249.1014" />
-        <vers num="4.1.249.1015" />
-        <vers num="4.1.249.1016" />
-        <vers num="4.1.249.1017" />
-        <vers num="4.1.249.1018" />
-        <vers num="4.1.249.1019" />
-        <vers num="4.1.249.1020" />
-        <vers num="4.1.249.1021" />
-        <vers num="4.1.249.1022" />
-        <vers num="4.1.249.1023" />
-        <vers num="4.1.249.1024" />
-        <vers num="4.1.249.1025" />
-        <vers num="4.1.249.1026" />
-        <vers num="4.1.249.1027" />
-        <vers num="4.1.249.1028" />
-        <vers num="4.1.249.1029" />
-        <vers num="4.1.249.1030" />
-        <vers num="4.1.249.1031" />
-        <vers num="4.1.249.1032" />
-        <vers num="4.1.249.1033" />
-        <vers num="4.1.249.1034" />
-        <vers num="4.1.249.1035" />
-        <vers num="4.1.249.1036" />
-        <vers num="4.1.249.1037" />
-        <vers num="4.1.249.1038" />
-        <vers num="4.1.249.1039" />
-        <vers num="4.1.249.1040" />
-        <vers num="4.1.249.1041" />
-        <vers num="4.1.249.1042" />
-        <vers num="4.1.249.1043" />
-        <vers num="4.1.249.1044" />
-        <vers num="4.1.249.1045" />
-        <vers num="4.1.249.1046" />
-        <vers num="4.1.249.1047" />
-        <vers num="4.1.249.1048" />
-        <vers num="4.1.249.1049" />
-        <vers num="4.1.249.1050" />
-        <vers num="4.1.249.1051" />
-        <vers num="4.1.249.1052" />
-        <vers num="4.1.249.1053" />
-        <vers num="4.1.249.1054" />
-        <vers num="4.1.249.1055" />
-        <vers num="4.1.249.1056" />
-        <vers num="4.1.249.1057" />
-        <vers num="4.1.249.1058" />
-        <vers num="4.1.249.1059" />
-        <vers num="4.1.249.1060" />
-        <vers num="4.1.249.1061" />
-        <vers num="4.1.249.1062" />
-        <vers num="4.1.249.1063" />
-        <vers num="4.1.249.1064" />
-        <vers num="5.0.306.0" />
-        <vers num="5.0.306.1" />
-        <vers num="5.0.307.1" />
-        <vers num="5.0.307.10" />
-        <vers num="5.0.307.11" />
-        <vers num="5.0.307.3" />
-        <vers num="5.0.307.4" />
-        <vers num="5.0.307.5" />
-        <vers num="5.0.307.6" />
-        <vers num="5.0.307.7" />
-        <vers num="5.0.307.8" />
-        <vers num="5.0.307.9" />
-        <vers num="5.0.308.0" />
-        <vers num="5.0.309.0" />
-        <vers num="5.0.313.0" />
-        <vers num="5.0.314.0" />
-        <vers num="5.0.314.1" />
-        <vers num="5.0.315.0" />
-        <vers num="5.0.316.0" />
-        <vers num="5.0.317.0" />
-        <vers num="5.0.317.1" />
-        <vers num="5.0.317.2" />
-        <vers num="5.0.318.0" />
-        <vers num="5.0.319.0" />
-        <vers num="5.0.320.0" />
-        <vers num="5.0.321.0" />
-        <vers num="5.0.322.0" />
-        <vers num="5.0.322.1" />
-        <vers num="5.0.322.2" />
-        <vers num="5.0.323.0" />
-        <vers num="5.0.324.0" />
-        <vers num="5.0.325.0" />
-        <vers num="5.0.326.0" />
-        <vers num="5.0.327.0" />
-        <vers num="5.0.328.0" />
-        <vers num="5.0.329.0" />
-        <vers num="5.0.330.0" />
-        <vers num="5.0.332.0" />
-        <vers num="5.0.333.0" />
-        <vers num="5.0.334.0" />
-        <vers num="5.0.335.0" />
-        <vers num="5.0.335.1" />
-        <vers num="5.0.335.2" />
-        <vers num="5.0.335.3" />
-        <vers num="5.0.335.4" />
-        <vers num="5.0.336.0" />
-        <vers num="5.0.337.0" />
-        <vers num="5.0.338.0" />
-        <vers num="5.0.339.0" />
-        <vers num="5.0.340.0" />
-        <vers num="5.0.341.0" />
-        <vers num="5.0.342.0" />
-        <vers num="5.0.342.1" />
-        <vers num="5.0.342.2" />
-        <vers num="5.0.342.3" />
-        <vers num="5.0.342.4" />
-        <vers num="5.0.342.5" />
-        <vers num="5.0.342.6" />
-        <vers num="5.0.342.7" />
-        <vers num="5.0.342.8" />
-        <vers num="5.0.342.9" />
-        <vers num="5.0.343.0" />
-        <vers num="5.0.344.0" />
-        <vers num="5.0.345.0" />
-        <vers num="5.0.346.0" />
-        <vers num="5.0.347.0" />
-        <vers num="5.0.348.0" />
-        <vers num="5.0.349.0" />
-        <vers num="5.0.350.0" />
-        <vers num="5.0.350.1" />
-        <vers num="5.0.351.0" />
-        <vers num="5.0.353.0" />
-        <vers num="5.0.354.0" />
-        <vers num="5.0.354.1" />
-        <vers num="5.0.355.0" />
-        <vers num="5.0.356.0" />
-        <vers num="5.0.356.1" />
-        <vers num="5.0.356.2" />
-        <vers num="5.0.357.0" />
-        <vers num="5.0.358.0" />
-        <vers num="5.0.359.0" />
-        <vers num="5.0.360.0" />
-        <vers num="5.0.360.3" />
-        <vers num="5.0.360.4" />
-        <vers num="5.0.360.5" />
-        <vers num="5.0.361.0" />
-        <vers num="5.0.362.0" />
-        <vers num="5.0.363.0" />
-        <vers num="5.0.364.0" />
-        <vers num="5.0.365.0" />
-        <vers num="5.0.366.0" />
-        <vers num="5.0.366.1" />
-        <vers num="5.0.366.2" />
-        <vers num="5.0.366.3" />
-        <vers num="5.0.366.4" />
-        <vers num="5.0.367.0" />
-        <vers num="5.0.368.0" />
-        <vers num="5.0.369.0" />
-        <vers num="5.0.369.1" />
-        <vers num="5.0.369.2" />
-        <vers num="5.0.370.0" />
-        <vers num="5.0.371.0" />
-        <vers num="5.0.372.0" />
-        <vers num="5.0.373.0" />
-        <vers num="5.0.374.0" />
-        <vers num="5.0.375.0" />
-        <vers num="5.0.375.1" />
-        <vers num="5.0.375.10" />
-        <vers num="5.0.375.11" />
-        <vers num="5.0.375.12" />
-        <vers num="5.0.375.125" />
-        <vers num="5.0.375.126" />
-        <vers num="5.0.375.127" />
-        <vers num="5.0.375.13" />
-        <vers num="5.0.375.14" />
-        <vers num="5.0.375.15" />
-        <vers num="5.0.375.16" />
-        <vers num="5.0.375.17" />
-        <vers num="5.0.375.18" />
-        <vers num="5.0.375.19" />
-        <vers num="5.0.375.2" />
-        <vers num="5.0.375.20" />
-        <vers num="5.0.375.21" />
-        <vers num="5.0.375.22" />
-        <vers num="5.0.375.23" />
-        <vers num="5.0.375.25" />
-        <vers num="5.0.375.26" />
-        <vers num="5.0.375.27" />
-        <vers num="5.0.375.28" />
-        <vers num="5.0.375.29" />
-        <vers num="5.0.375.3" />
-        <vers num="5.0.375.30" />
-        <vers num="5.0.375.31" />
-        <vers num="5.0.375.32" />
-        <vers num="5.0.375.33" />
-        <vers num="5.0.375.34" />
-        <vers num="5.0.375.35" />
-        <vers num="5.0.375.36" />
-        <vers num="5.0.375.37" />
-        <vers num="5.0.375.38" />
-        <vers num="5.0.375.39" />
-        <vers num="5.0.375.4" />
-        <vers num="5.0.375.40" />
-        <vers num="5.0.375.41" />
-        <vers num="5.0.375.42" />
-        <vers num="5.0.375.43" />
-        <vers num="5.0.375.44" />
-        <vers num="5.0.375.45" />
-        <vers num="5.0.375.46" />
-        <vers num="5.0.375.47" />
-        <vers num="5.0.375.48" />
-        <vers num="5.0.375.49" />
-        <vers num="5.0.375.5" />
-        <vers num="5.0.375.50" />
-        <vers num="5.0.375.51" />
-        <vers num="5.0.375.52" />
-        <vers num="5.0.375.53" />
-        <vers num="5.0.375.54" />
-        <vers num="5.0.375.55" />
-        <vers num="5.0.375.56" />
-        <vers num="5.0.375.57" />
-        <vers num="5.0.375.58" />
-        <vers num="5.0.375.59" />
-        <vers num="5.0.375.6" />
-        <vers num="5.0.375.60" />
-        <vers num="5.0.375.61" />
-        <vers num="5.0.375.62" />
-        <vers num="5.0.375.63" />
-        <vers num="5.0.375.64" />
-        <vers num="5.0.375.65" />
-        <vers num="5.0.375.66" />
-        <vers num="5.0.375.67" />
-        <vers num="5.0.375.68" />
-        <vers num="5.0.375.69" />
-        <vers num="5.0.375.7" />
-        <vers num="5.0.375.70" />
-        <vers num="5.0.375.71" />
-        <vers num="5.0.375.72" />
-        <vers num="5.0.375.73" />
-        <vers num="5.0.375.74" />
-        <vers num="5.0.375.75" />
-        <vers num="5.0.375.76" />
-        <vers num="5.0.375.77" />
-        <vers num="5.0.375.78" />
-        <vers num="5.0.375.79" />
-        <vers num="5.0.375.8" />
-        <vers num="5.0.375.80" />
-        <vers num="5.0.375.81" />
-        <vers num="5.0.375.82" />
-        <vers num="5.0.375.83" />
-        <vers num="5.0.375.84" />
-        <vers num="5.0.375.85" />
-        <vers num="5.0.375.86" />
-        <vers num="5.0.375.87" />
-        <vers num="5.0.375.88" />
-        <vers num="5.0.375.89" />
-        <vers num="5.0.375.9" />
-        <vers num="5.0.375.90" />
-        <vers num="5.0.375.91" />
-        <vers num="5.0.375.92" />
-        <vers num="5.0.375.93" />
-        <vers num="5.0.375.94" />
-        <vers num="5.0.375.95" />
-        <vers num="5.0.375.96" />
-        <vers num="5.0.375.97" />
-        <vers num="5.0.375.98" />
-        <vers num="5.0.375.99" />
-        <vers num="5.0.376.0" />
-        <vers num="5.0.378.0" />
-        <vers num="5.0.379.0" />
-        <vers num="5.0.380.0" />
-        <vers num="5.0.381.0" />
-        <vers num="5.0.382.0" />
-        <vers num="5.0.382.3" />
-        <vers num="5.0.383.0" />
-        <vers num="5.0.384.0" />
-        <vers num="5.0.385.0" />
-        <vers num="5.0.386.0" />
-        <vers num="5.0.387.0" />
-        <vers num="5.0.390.0" />
-        <vers num="5.0.391.0" />
-        <vers num="5.0.392.0" />
-        <vers num="5.0.393.0" />
-        <vers num="5.0.394.0" />
-        <vers num="5.0.395.0" />
-        <vers num="5.0.396.0" />
-        <vers num="6.0.397.0" />
-        <vers num="6.0.398.0" />
-        <vers num="6.0.399.0" />
-        <vers num="6.0.400.0" />
-        <vers num="6.0.401.0" />
-        <vers num="6.0.401.1" />
-        <vers num="6.0.403.0" />
-        <vers num="6.0.404.0" />
-        <vers num="6.0.404.1" />
-        <vers num="6.0.404.2" />
-        <vers num="6.0.405.0" />
-        <vers num="6.0.406.0" />
-        <vers num="6.0.407.0" />
-        <vers num="6.0.408.0" />
-        <vers num="6.0.408.1" />
-        <vers num="6.0.408.10" />
-        <vers num="6.0.408.2" />
-        <vers num="6.0.408.3" />
-        <vers num="6.0.408.4" />
-        <vers num="6.0.408.5" />
-        <vers num="6.0.408.6" />
-        <vers num="6.0.408.7" />
-        <vers num="6.0.408.8" />
-        <vers num="6.0.408.9" />
-        <vers num="6.0.409.0" />
-        <vers num="6.0.410.0" />
-        <vers num="6.0.411.0" />
-        <vers num="6.0.412.0" />
-        <vers num="6.0.413.0" />
-        <vers num="6.0.414.0" />
-        <vers num="6.0.415.0" />
-        <vers num="6.0.415.1" />
-        <vers num="6.0.416.0" />
-        <vers num="6.0.416.1" />
-        <vers num="6.0.417.0" />
-        <vers num="6.0.418.0" />
-        <vers num="6.0.418.1" />
-        <vers num="6.0.418.2" />
-        <vers num="6.0.418.3" />
-        <vers num="6.0.418.4" />
-        <vers num="6.0.418.5" />
-        <vers num="6.0.418.6" />
-        <vers num="6.0.418.7" />
-        <vers num="6.0.418.8" />
-        <vers num="6.0.418.9" />
-        <vers num="6.0.419.0" />
-        <vers num="6.0.421.0" />
-        <vers num="6.0.422.0" />
-        <vers num="6.0.423.0" />
-        <vers num="6.0.424.0" />
-        <vers num="6.0.425.0" />
-        <vers num="6.0.426.0" />
-        <vers num="6.0.427.0" />
-        <vers num="6.0.428.0" />
-        <vers num="6.0.430.0" />
-        <vers num="6.0.431.0" />
-        <vers num="6.0.432.0" />
-        <vers num="6.0.433.0" />
-        <vers num="6.0.434.0" />
-        <vers num="6.0.435.0" />
-        <vers num="6.0.436.0" />
-        <vers num="6.0.437.0" />
-        <vers num="6.0.437.1" />
-        <vers num="6.0.437.2" />
-        <vers num="6.0.437.3" />
-        <vers num="6.0.438.0" />
-        <vers num="6.0.440.0" />
-        <vers num="6.0.441.0" />
-        <vers num="6.0.443.0" />
-        <vers num="6.0.444.0" />
-        <vers num="6.0.445.0" />
-        <vers num="6.0.445.1" />
-        <vers num="6.0.446.0" />
-        <vers num="6.0.447.0" />
-        <vers num="6.0.447.1" />
-        <vers num="6.0.447.2" />
-        <vers num="6.0.449.0" />
-        <vers num="6.0.450.0" />
-        <vers num="6.0.450.1" />
-        <vers num="6.0.450.2" />
-        <vers num="6.0.450.3" />
-        <vers num="6.0.450.4" />
-        <vers num="6.0.451.0" />
-        <vers num="6.0.452.0" />
-        <vers num="6.0.452.1" />
-        <vers num="6.0.453.0" />
-        <vers num="6.0.453.1" />
-        <vers num="6.0.454.0" />
-        <vers num="6.0.455.0" />
-        <vers num="6.0.456.0" />
-        <vers num="6.0.457.0" />
-        <vers num="6.0.458.0" />
-        <vers num="6.0.458.1" />
-        <vers num="6.0.458.2" />
-        <vers num="6.0.459.0" />
-        <vers num="6.0.460.0" />
-        <vers num="6.0.461.0" />
-        <vers num="6.0.462.0" />
-        <vers num="6.0.464.1" />
-        <vers num="6.0.465.1" />
-        <vers num="6.0.465.2" />
-        <vers num="6.0.466.0" />
-        <vers num="6.0.466.1" />
-        <vers num="6.0.466.2" />
-        <vers num="6.0.466.3" />
-        <vers num="6.0.466.4" />
-        <vers num="6.0.466.5" />
-        <vers num="6.0.466.6" />
-        <vers num="6.0.467.0" />
-        <vers num="6.0.469.0" />
-        <vers num="6.0.470.0" />
-        <vers num="6.0.471.0" />
-        <vers num="6.0.472.0" />
-        <vers num="6.0.472.1" />
-        <vers num="6.0.472.10" />
-        <vers num="6.0.472.11" />
-        <vers num="6.0.472.12" />
-        <vers num="6.0.472.13" />
-        <vers num="6.0.472.14" />
-        <vers num="6.0.472.15" />
-        <vers num="6.0.472.16" />
-        <vers num="6.0.472.17" />
-        <vers num="6.0.472.18" />
-        <vers num="6.0.472.19" />
-        <vers num="6.0.472.2" />
-        <vers num="6.0.472.20" />
-        <vers num="6.0.472.21" />
-        <vers num="6.0.472.22" />
-        <vers num="6.0.472.23" />
-        <vers num="6.0.472.24" />
-        <vers num="6.0.472.25" />
-        <vers num="6.0.472.26" />
-        <vers num="6.0.472.27" />
-        <vers num="6.0.472.28" />
-        <vers num="6.0.472.29" />
-        <vers num="6.0.472.3" />
-        <vers num="6.0.472.30" />
-        <vers num="6.0.472.31" />
-        <vers num="6.0.472.32" />
-        <vers num="6.0.472.33" />
-        <vers num="6.0.472.34" />
-        <vers num="6.0.472.35" />
-        <vers num="6.0.472.36" />
-        <vers num="6.0.472.37" />
-        <vers num="6.0.472.38" />
-        <vers num="6.0.472.39" />
-        <vers num="6.0.472.4" />
-        <vers num="6.0.472.40" />
-        <vers num="6.0.472.41" />
-        <vers num="6.0.472.42" />
-        <vers num="6.0.472.43" />
-        <vers num="6.0.472.44" />
-        <vers num="6.0.472.45" />
-        <vers num="6.0.472.46" />
-        <vers num="6.0.472.47" />
-        <vers num="6.0.472.48" />
-        <vers num="6.0.472.49" />
-        <vers num="6.0.472.5" />
-        <vers num="6.0.472.50" />
-        <vers num="6.0.472.51" />
-        <vers num="6.0.472.52" />
-        <vers num="6.0.472.53" />
-        <vers num="6.0.472.54" />
-        <vers num="6.0.472.55" />
-        <vers num="6.0.472.56" />
-        <vers num="6.0.472.57" />
-        <vers num="6.0.472.58" />
-        <vers num="6.0.472.59" />
-        <vers num="6.0.472.6" />
-        <vers num="6.0.472.60" />
-        <vers num="6.0.472.61" />
-        <vers num="6.0.472.62" />
-        <vers num="6.0.472.63" />
-        <vers num="6.0.472.7" />
-        <vers num="6.0.472.8" />
-        <vers num="6.0.472.9" />
-        <vers num="6.0.473.0" />
-        <vers num="6.0.474.0" />
-        <vers num="6.0.475.0" />
-        <vers num="6.0.476.0" />
-        <vers num="6.0.477.0" />
-        <vers num="6.0.478.0" />
-        <vers num="6.0.479.0" />
-        <vers num="6.0.480.0" />
-        <vers num="6.0.481.0" />
-        <vers num="6.0.482.0" />
-        <vers num="6.0.483.0" />
-        <vers num="6.0.484.0" />
-        <vers num="6.0.485.0" />
-        <vers num="6.0.486.0" />
-        <vers num="6.0.487.0" />
-        <vers num="6.0.488.0" />
-        <vers num="6.0.489.0" />
-        <vers num="6.0.490.0" />
-        <vers num="6.0.490.1" />
-        <vers num="6.0.491.0" />
-        <vers num="6.0.492.0" />
-        <vers num="6.0.493.0" />
-        <vers num="6.0.494.0" />
-        <vers num="6.0.495.0" />
-        <vers num="6.0.495.1" />
-        <vers num="6.0.496.0" />
-        <vers num="7.0.497.0" />
-        <vers num="7.0.498.0" />
-        <vers num="7.0.499.0" />
-        <vers num="7.0.499.1" />
-        <vers num="7.0.500.0" />
-        <vers num="7.0.500.1" />
-        <vers num="7.0.503.0" />
-        <vers num="7.0.503.1" />
-        <vers num="7.0.504.0" />
-        <vers num="7.0.505.0" />
-        <vers num="7.0.506.0" />
-        <vers num="7.0.507.0" />
-        <vers num="7.0.507.1" />
-        <vers num="7.0.507.2" />
-        <vers num="7.0.507.3" />
-        <vers num="7.0.509.0" />
-        <vers num="7.0.510.0" />
-        <vers num="7.0.511.1" />
-        <vers num="7.0.511.2" />
-        <vers num="7.0.511.4" />
-        <vers num="7.0.512.0" />
-        <vers num="7.0.513.0" />
-        <vers num="7.0.514.0" />
-        <vers num="7.0.514.1" />
-        <vers num="7.0.515.0" />
-        <vers num="7.0.516.0" />
-        <vers num="7.0.517.0" />
-        <vers num="7.0.517.10" />
-        <vers num="7.0.517.11" />
-        <vers num="7.0.517.12" />
-        <vers num="7.0.517.13" />
-        <vers num="7.0.517.14" />
-        <vers num="7.0.517.16" />
-        <vers num="7.0.517.17" />
-        <vers num="7.0.517.18" />
-        <vers num="7.0.517.19" />
-        <vers num="7.0.517.2" />
-        <vers num="7.0.517.20" />
-        <vers num="7.0.517.21" />
-        <vers num="7.0.517.22" />
-        <vers num="7.0.517.23" />
-        <vers num="7.0.517.24" />
-        <vers num="7.0.517.25" />
-        <vers num="7.0.517.26" />
-        <vers num="7.0.517.27" />
-        <vers num="7.0.517.28" />
-        <vers num="7.0.517.29" />
-        <vers num="7.0.517.30" />
-        <vers num="7.0.517.31" />
-        <vers num="7.0.517.32" />
-        <vers num="7.0.517.33" />
-        <vers num="7.0.517.34" />
-        <vers num="7.0.517.35" />
-        <vers num="7.0.517.36" />
-        <vers num="7.0.517.37" />
-        <vers num="7.0.517.38" />
-        <vers num="7.0.517.39" />
-        <vers num="7.0.517.4" />
-        <vers num="7.0.517.40" />
-        <vers num="7.0.517.41" />
-        <vers num="7.0.517.42" />
-        <vers num="7.0.517.43" />
-        <vers num="7.0.517.44" />
-        <vers num="7.0.517.5" />
-        <vers num="7.0.517.6" />
-        <vers num="7.0.517.7" />
-        <vers num="7.0.517.8" />
-        <vers num="7.0.517.9" />
-        <vers num="7.0.518.0" />
-        <vers num="7.0.519.0" />
-        <vers num="7.0.520.0" />
-        <vers num="7.0.521.0" />
-        <vers num="7.0.522.0" />
-        <vers num="7.0.524.0" />
-        <vers num="7.0.525.0" />
-        <vers num="7.0.526.0" />
-        <vers num="7.0.528.0" />
-        <vers num="7.0.529.0" />
-        <vers num="7.0.529.1" />
-        <vers num="7.0.529.2" />
-        <vers num="7.0.530.0" />
-        <vers num="7.0.531.0" />
-        <vers num="7.0.531.1" />
-        <vers num="7.0.531.2" />
-        <vers num="7.0.535.1" />
-        <vers num="7.0.535.2" />
-        <vers num="7.0.536.0" />
-        <vers num="7.0.536.1" />
-        <vers num="7.0.536.2" />
-        <vers num="7.0.536.3" />
-        <vers num="7.0.536.4" />
-        <vers num="7.0.537.0" />
-        <vers num="7.0.538.0" />
-        <vers num="7.0.539.0" />
-        <vers num="7.0.540.0" />
-        <vers num="7.0.541.0" />
-        <vers num="7.0.542.0" />
-        <vers num="7.0.544.0" />
-        <vers num="7.0.547.0" />
-        <vers num="7.0.547.1" />
-        <vers num="7.0.548.0" />
-        <vers num="8.0.549.0" />
-        <vers num="8.0.550.0" />
-        <vers num="8.0.551.0" />
-        <vers num="8.0.551.1" />
-        <vers num="8.0.552.0" />
-        <vers num="8.0.552.1" />
-        <vers num="8.0.552.10" />
-        <vers num="8.0.552.100" />
-        <vers num="8.0.552.101" />
-        <vers num="8.0.552.102" />
-        <vers num="8.0.552.103" />
-        <vers num="8.0.552.104" />
-        <vers num="8.0.552.105" />
-        <vers num="8.0.552.11" />
-        <vers num="8.0.552.12" />
-        <vers num="8.0.552.13" />
-        <vers num="8.0.552.14" />
-        <vers num="8.0.552.15" />
-        <vers num="8.0.552.16" />
-        <vers num="8.0.552.17" />
-        <vers num="8.0.552.18" />
-        <vers num="8.0.552.19" />
-        <vers num="8.0.552.2" />
-        <vers num="8.0.552.20" />
-        <vers num="8.0.552.200" />
-        <vers num="8.0.552.201" />
-        <vers num="8.0.552.202" />
-        <vers num="8.0.552.203" />
-        <vers num="8.0.552.204" />
-        <vers num="8.0.552.205" />
-        <vers num="8.0.552.206" />
-        <vers num="8.0.552.207" />
-        <vers num="8.0.552.208" />
-        <vers num="8.0.552.209" />
-        <vers num="8.0.552.21" />
-        <vers num="8.0.552.210" />
-        <vers num="8.0.552.211" />
-        <vers num="8.0.552.212" />
-        <vers num="8.0.552.213" />
-        <vers num="8.0.552.214" />
-        <vers num="8.0.552.215" />
-        <vers num="8.0.552.216" />
-        <vers num="8.0.552.217" />
-        <vers num="8.0.552.218" />
-        <vers num="8.0.552.219" />
-        <vers num="8.0.552.220" />
-        <vers num="8.0.552.221" />
-        <vers num="8.0.552.222" />
-        <vers num="8.0.552.223" />
-        <vers num="8.0.552.224" />
-        <vers num="8.0.552.225" />
-        <vers num="8.0.552.226" />
-        <vers num="8.0.552.227" />
-        <vers num="8.0.552.228" />
-        <vers num="8.0.552.229" />
-        <vers num="8.0.552.23" />
-        <vers num="8.0.552.230" />
-        <vers num="8.0.552.231" />
-        <vers num="8.0.552.232" />
-        <vers num="8.0.552.233" />
-        <vers num="8.0.552.234" />
-        <vers num="8.0.552.235" />
-        <vers num="8.0.552.237" />
-        <vers num="8.0.552.24" />
-        <vers num="8.0.552.25" />
-        <vers num="8.0.552.26" />
-        <vers num="8.0.552.27" />
-        <vers num="8.0.552.28" />
-        <vers num="8.0.552.29" />
-        <vers num="8.0.552.300" />
-        <vers num="8.0.552.301" />
-        <vers num="8.0.552.302" />
-        <vers num="8.0.552.303" />
-        <vers num="8.0.552.304" />
-        <vers num="8.0.552.305" />
-        <vers num="8.0.552.306" />
-        <vers num="8.0.552.307" />
-        <vers num="8.0.552.308" />
-        <vers num="8.0.552.309" />
-        <vers num="8.0.552.310" />
-        <vers num="8.0.552.311" />
-        <vers num="8.0.552.312" />
-        <vers num="8.0.552.313" />
-        <vers num="8.0.552.315" />
-        <vers num="8.0.552.316" />
-        <vers num="8.0.552.317" />
-        <vers num="8.0.552.318" />
-        <vers num="8.0.552.319" />
-        <vers num="8.0.552.320" />
-        <vers num="8.0.552.321" />
-        <vers num="8.0.552.322" />
-        <vers num="8.0.552.323" />
-        <vers num="8.0.552.324" />
-        <vers num="8.0.552.325" />
-        <vers num="8.0.552.326" />
-        <vers num="8.0.552.327" />
-        <vers num="8.0.552.328" />
-        <vers num="8.0.552.329" />
-        <vers num="8.0.552.330" />
-        <vers num="8.0.552.331" />
-        <vers num="8.0.552.332" />
-        <vers num="8.0.552.333" />
-        <vers num="8.0.552.334" />
-        <vers num="8.0.552.335" />
-        <vers num="8.0.552.336" />
-        <vers num="8.0.552.337" />
-        <vers num="8.0.552.338" />
-        <vers num="8.0.552.339" />
-        <vers num="8.0.552.340" />
-        <vers num="8.0.552.341" />
-        <vers num="8.0.552.342" />
-        <vers num="8.0.552.343" />
-        <vers num="8.0.552.344" />
-        <vers num="8.0.552.35" />
-        <vers num="8.0.552.4" />
-        <vers num="8.0.552.40" />
-        <vers num="8.0.552.41" />
-        <vers num="8.0.552.42" />
-        <vers num="8.0.552.43" />
-        <vers num="8.0.552.44" />
-        <vers num="8.0.552.45" />
-        <vers num="8.0.552.47" />
-        <vers num="8.0.552.48" />
-        <vers num="8.0.552.49" />
-        <vers num="8.0.552.5" />
-        <vers num="8.0.552.50" />
-        <vers num="8.0.552.51" />
-        <vers num="8.0.552.52" />
-        <vers num="8.0.552.6" />
-        <vers num="8.0.552.7" />
-        <vers num="8.0.552.8" />
-        <vers num="8.0.552.9" />
-        <vers num="8.0.553.0" />
-        <vers num="8.0.554.0" />
-        <vers num="8.0.555.0" />
-        <vers num="8.0.556.0" />
-        <vers num="8.0.557.0" />
-        <vers num="8.0.558.0" />
-        <vers num="8.0.559.0" />
-        <vers num="8.0.560.0" />
-        <vers num="8.0.561.0" />
-        <vers num="9.0.562.0" />
-        <vers num="9.0.563.0" />
-        <vers num="9.0.564.0" />
-        <vers num="9.0.565.0" />
-        <vers num="9.0.566.0" />
-        <vers num="9.0.567.0" />
-        <vers num="9.0.568.0" />
-        <vers num="9.0.569.0" />
-        <vers num="9.0.570.0" />
-        <vers num="9.0.570.1" />
-        <vers num="9.0.571.0" />
-        <vers num="9.0.572.0" />
-        <vers num="9.0.572.1" />
-        <vers num="9.0.573.0" />
-        <vers num="9.0.574.0" />
-        <vers num="9.0.575.0" />
-        <vers num="9.0.576.0" />
-        <vers num="9.0.577.0" />
-        <vers num="9.0.578.0" />
-        <vers num="9.0.579.0" />
-        <vers num="9.0.580.0" />
-        <vers num="9.0.581.0" />
-        <vers num="9.0.582.0" />
-        <vers num="9.0.583.0" />
-        <vers num="9.0.584.0" />
-        <vers num="9.0.585.0" />
-        <vers num="9.0.586.0" />
-        <vers num="9.0.587.0" />
-        <vers num="9.0.587.1" />
-        <vers num="9.0.588.0" />
-        <vers num="9.0.589.0" />
-        <vers num="9.0.590.0" />
-        <vers num="9.0.591.0" />
-        <vers num="9.0.592.0" />
-        <vers num="9.0.593.0" />
-        <vers num="9.0.594.0" />
-        <vers num="9.0.595.0" />
-        <vers num="9.0.596.0" />
-        <vers num="9.0.597.0" />
-        <vers num="9.0.597.1" />
-        <vers num="9.0.597.10" />
-        <vers num="9.0.597.100" />
-        <vers num="9.0.597.101" />
-        <vers num="9.0.597.102" />
-        <vers num="9.0.597.106" />
-        <vers num="9.0.597.107" />
-        <vers num="9.0.597.11" />
-        <vers num="9.0.597.12" />
-        <vers num="9.0.597.14" />
-        <vers num="9.0.597.15" />
-        <vers num="9.0.597.16" />
-        <vers num="9.0.597.17" />
-        <vers num="9.0.597.18" />
-        <vers num="9.0.597.19" />
-        <vers num="9.0.597.2" />
-        <vers num="9.0.597.20" />
-        <vers num="9.0.597.21" />
-        <vers num="9.0.597.22" />
-        <vers num="9.0.597.23" />
-        <vers num="9.0.597.24" />
-        <vers num="9.0.597.25" />
-        <vers num="9.0.597.26" />
-        <vers num="9.0.597.27" />
-        <vers num="9.0.597.28" />
-        <vers num="9.0.597.29" />
-        <vers num="9.0.597.30" />
-        <vers num="9.0.597.31" />
-        <vers num="9.0.597.32" />
-        <vers num="9.0.597.33" />
-        <vers num="9.0.597.34" />
-        <vers num="9.0.597.35" />
-        <vers num="9.0.597.36" />
-        <vers num="9.0.597.37" />
-        <vers num="9.0.597.38" />
-        <vers num="9.0.597.39" />
-        <vers num="9.0.597.4" />
-        <vers num="9.0.597.40" />
-        <vers num="9.0.597.41" />
-        <vers num="9.0.597.42" />
-        <vers num="9.0.597.44" />
-        <vers num="9.0.597.45" />
-        <vers num="9.0.597.46" />
-        <vers num="9.0.597.47" />
-        <vers num="9.0.597.5" />
-        <vers num="9.0.597.54" />
-        <vers num="9.0.597.55" />
-        <vers num="9.0.597.56" />
-        <vers num="9.0.597.57" />
-        <vers num="9.0.597.58" />
-        <vers num="9.0.597.59" />
-        <vers num="9.0.597.60" />
-        <vers num="9.0.597.62" />
-        <vers num="9.0.597.63" />
-        <vers num="9.0.597.64" />
-        <vers num="9.0.597.65" />
-        <vers num="9.0.597.66" />
-        <vers num="9.0.597.67" />
-        <vers num="9.0.597.68" />
-        <vers num="9.0.597.69" />
-        <vers num="9.0.597.7" />
-        <vers num="9.0.597.70" />
-        <vers num="9.0.597.71" />
-        <vers num="9.0.597.72" />
-        <vers num="9.0.597.73" />
-        <vers num="9.0.597.74" />
-        <vers num="9.0.597.75" />
-        <vers num="9.0.597.76" />
-        <vers num="9.0.597.77" />
-        <vers num="9.0.597.78" />
-        <vers num="9.0.597.79" />
-        <vers num="9.0.597.8" />
-        <vers num="9.0.597.80" />
-        <vers num="9.0.597.81" />
-        <vers num="9.0.597.82" />
-        <vers num="9.0.597.83" />
-        <vers num="9.0.597.84" />
-        <vers num="9.0.597.85" />
-        <vers num="9.0.597.86" />
-        <vers num="9.0.597.88" />
-        <vers num="9.0.597.9" />
-        <vers num="9.0.597.90" />
-        <vers num="9.0.597.92" />
-        <vers num="9.0.597.94" />
-        <vers num="9.0.597.96" />
-        <vers num="9.0.597.97" />
-        <vers num="9.0.597.98" />
-        <vers num="9.0.597.99" />
-        <vers num="9.0.598.0" />
-        <vers num="9.0.599.0" />
-        <vers num="9.0.600.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0725" published="2012-04-06" name="CVE-2012-0725" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2012-0724.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-07.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-07.html</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14628" source="OVAL">oval:org.mitre.oval:def:14628</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html" source="CONFIRM">http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="0.1.38.1" />
-        <vers num="0.1.38.2" />
-        <vers num="0.1.38.4" />
-        <vers num="0.1.40.1" />
-        <vers num="0.1.42.2" />
-        <vers num="0.1.42.3" />
-        <vers num="0.2.149.27" />
-        <vers num="0.2.149.29" />
-        <vers num="0.2.149.30" />
-        <vers num="0.2.152.1" />
-        <vers num="0.2.153.1" />
-        <vers num="0.3.154.0" />
-        <vers num="0.3.154.3" />
-        <vers num="0.4.154.18" />
-        <vers num="0.4.154.22" />
-        <vers num="0.4.154.31" />
-        <vers num="0.4.154.33" />
-        <vers num="1.0.154.36" />
-        <vers num="1.0.154.39" />
-        <vers num="1.0.154.42" />
-        <vers num="1.0.154.43" />
-        <vers num="1.0.154.46" />
-        <vers num="1.0.154.48" />
-        <vers num="1.0.154.52" />
-        <vers num="1.0.154.53" />
-        <vers num="1.0.154.59" />
-        <vers num="1.0.154.64" />
-        <vers num="1.0.154.65" />
-        <vers num="10.0.601.0" />
-        <vers num="10.0.602.0" />
-        <vers num="10.0.603.0" />
-        <vers num="10.0.603.2" />
-        <vers num="10.0.603.3" />
-        <vers num="10.0.604.0" />
-        <vers num="10.0.605.0" />
-        <vers num="10.0.606.0" />
-        <vers num="10.0.607.0" />
-        <vers num="10.0.608.0" />
-        <vers num="10.0.609.0" />
-        <vers num="10.0.610.0" />
-        <vers num="10.0.611.0" />
-        <vers num="10.0.611.1" />
-        <vers num="10.0.612.0" />
-        <vers num="10.0.612.1" />
-        <vers num="10.0.612.2" />
-        <vers num="10.0.612.3" />
-        <vers num="10.0.613.0" />
-        <vers num="10.0.614.0" />
-        <vers num="10.0.615.0" />
-        <vers num="10.0.616.0" />
-        <vers num="10.0.617.0" />
-        <vers num="10.0.618.0" />
-        <vers num="10.0.619.0" />
-        <vers num="10.0.620.0" />
-        <vers num="10.0.621.0" />
-        <vers num="10.0.622.0" />
-        <vers num="10.0.622.1" />
-        <vers num="10.0.623.0" />
-        <vers num="10.0.624.0" />
-        <vers num="10.0.625.0" />
-        <vers num="10.0.626.0" />
-        <vers num="10.0.627.0" />
-        <vers num="10.0.628.0" />
-        <vers num="10.0.629.0" />
-        <vers num="10.0.630.0" />
-        <vers num="10.0.631.0" />
-        <vers num="10.0.632.0" />
-        <vers num="10.0.633.0" />
-        <vers num="10.0.634.0" />
-        <vers num="10.0.634.1" />
-        <vers num="10.0.635.0" />
-        <vers num="10.0.636.0" />
-        <vers num="10.0.638.0" />
-        <vers num="10.0.638.1" />
-        <vers num="10.0.639.0" />
-        <vers num="10.0.640.0" />
-        <vers num="10.0.642.0" />
-        <vers num="10.0.642.1" />
-        <vers num="10.0.642.2" />
-        <vers num="10.0.643.0" />
-        <vers num="10.0.644.0" />
-        <vers num="10.0.645.0" />
-        <vers num="10.0.646.0" />
-        <vers num="10.0.647.0" />
-        <vers num="10.0.648.0" />
-        <vers num="10.0.648.1" />
-        <vers num="10.0.648.10" />
-        <vers num="10.0.648.101" />
-        <vers num="10.0.648.103" />
-        <vers num="10.0.648.105" />
-        <vers num="10.0.648.107" />
-        <vers num="10.0.648.11" />
-        <vers num="10.0.648.114" />
-        <vers num="10.0.648.116" />
-        <vers num="10.0.648.118" />
-        <vers num="10.0.648.119" />
-        <vers num="10.0.648.12" />
-        <vers num="10.0.648.120" />
-        <vers num="10.0.648.121" />
-        <vers num="10.0.648.122" />
-        <vers num="10.0.648.123" />
-        <vers num="10.0.648.124" />
-        <vers num="10.0.648.125" />
-        <vers num="10.0.648.126" />
-        <vers num="10.0.648.127" />
-        <vers num="10.0.648.128" />
-        <vers num="10.0.648.129" />
-        <vers num="10.0.648.13" />
-        <vers num="10.0.648.130" />
-        <vers num="10.0.648.131" />
-        <vers num="10.0.648.132" />
-        <vers num="10.0.648.133" />
-        <vers num="10.0.648.134" />
-        <vers num="10.0.648.135" />
-        <vers num="10.0.648.151" />
-        <vers num="10.0.648.18" />
-        <vers num="10.0.648.2" />
-        <vers num="10.0.648.201" />
-        <vers num="10.0.648.203" />
-        <vers num="10.0.648.204" />
-        <vers num="10.0.648.205" />
-        <vers num="10.0.648.23" />
-        <vers num="10.0.648.26" />
-        <vers num="10.0.648.28" />
-        <vers num="10.0.648.3" />
-        <vers num="10.0.648.32" />
-        <vers num="10.0.648.35" />
-        <vers num="10.0.648.38" />
-        <vers num="10.0.648.4" />
-        <vers num="10.0.648.42" />
-        <vers num="10.0.648.45" />
-        <vers num="10.0.648.49" />
-        <vers num="10.0.648.5" />
-        <vers num="10.0.648.54" />
-        <vers num="10.0.648.56" />
-        <vers num="10.0.648.59" />
-        <vers num="10.0.648.6" />
-        <vers num="10.0.648.62" />
-        <vers num="10.0.648.66" />
-        <vers num="10.0.648.68" />
-        <vers num="10.0.648.7" />
-        <vers num="10.0.648.70" />
-        <vers num="10.0.648.72" />
-        <vers num="10.0.648.76" />
-        <vers num="10.0.648.79" />
-        <vers num="10.0.648.8" />
-        <vers num="10.0.648.82" />
-        <vers num="10.0.648.84" />
-        <vers num="10.0.648.87" />
-        <vers num="10.0.648.9" />
-        <vers num="10.0.648.90" />
-        <vers num="10.0.649.0" />
-        <vers num="10.0.650.0" />
-        <vers num="10.0.651.0" />
-        <vers num="11.0.652.0" />
-        <vers num="11.0.653.0" />
-        <vers num="11.0.654.0" />
-        <vers num="11.0.655.0" />
-        <vers num="11.0.656.0" />
-        <vers num="11.0.657.0" />
-        <vers num="11.0.658.0" />
-        <vers num="11.0.658.1" />
-        <vers num="11.0.659.0" />
-        <vers num="11.0.660.0" />
-        <vers num="11.0.661.0" />
-        <vers num="11.0.662.0" />
-        <vers num="11.0.663.0" />
-        <vers num="11.0.664.1" />
-        <vers num="11.0.665.0" />
-        <vers num="11.0.666.0" />
-        <vers num="11.0.667.0" />
-        <vers num="11.0.667.2" />
-        <vers num="11.0.667.3" />
-        <vers num="11.0.667.4" />
-        <vers num="11.0.668.0" />
-        <vers num="11.0.669.0" />
-        <vers num="11.0.670.0" />
-        <vers num="11.0.671.0" />
-        <vers num="11.0.672.0" />
-        <vers num="11.0.672.1" />
-        <vers num="11.0.672.2" />
-        <vers num="11.0.673.0" />
-        <vers num="11.0.674.0" />
-        <vers num="11.0.675.0" />
-        <vers num="11.0.676.0" />
-        <vers num="11.0.677.0" />
-        <vers num="11.0.678.0" />
-        <vers num="11.0.679.0" />
-        <vers num="11.0.680.0" />
-        <vers num="11.0.681.0" />
-        <vers num="11.0.682.0" />
-        <vers num="11.0.683.0" />
-        <vers num="11.0.684.0" />
-        <vers num="11.0.685.0" />
-        <vers num="11.0.686.0" />
-        <vers num="11.0.686.1" />
-        <vers num="11.0.686.2" />
-        <vers num="11.0.686.3" />
-        <vers num="11.0.687.0" />
-        <vers num="11.0.687.1" />
-        <vers num="11.0.688.0" />
-        <vers num="11.0.689.0" />
-        <vers num="11.0.690.0" />
-        <vers num="11.0.690.1" />
-        <vers num="11.0.691.0" />
-        <vers num="11.0.692.0" />
-        <vers num="11.0.693.0" />
-        <vers num="11.0.694.0" />
-        <vers num="11.0.695.0" />
-        <vers num="11.0.696.0" />
-        <vers num="11.0.696.1" />
-        <vers num="11.0.696.10" />
-        <vers num="11.0.696.11" />
-        <vers num="11.0.696.12" />
-        <vers num="11.0.696.13" />
-        <vers num="11.0.696.14" />
-        <vers num="11.0.696.15" />
-        <vers num="11.0.696.16" />
-        <vers num="11.0.696.17" />
-        <vers num="11.0.696.18" />
-        <vers num="11.0.696.19" />
-        <vers num="11.0.696.2" />
-        <vers num="11.0.696.20" />
-        <vers num="11.0.696.21" />
-        <vers num="11.0.696.22" />
-        <vers num="11.0.696.23" />
-        <vers num="11.0.696.24" />
-        <vers num="11.0.696.25" />
-        <vers num="11.0.696.26" />
-        <vers num="11.0.696.27" />
-        <vers num="11.0.696.28" />
-        <vers num="11.0.696.29" />
-        <vers num="11.0.696.3" />
-        <vers num="11.0.696.30" />
-        <vers num="11.0.696.31" />
-        <vers num="11.0.696.32" />
-        <vers num="11.0.696.33" />
-        <vers num="11.0.696.34" />
-        <vers num="11.0.696.35" />
-        <vers num="11.0.696.36" />
-        <vers num="11.0.696.37" />
-        <vers num="11.0.696.38" />
-        <vers num="11.0.696.39" />
-        <vers num="11.0.696.4" />
-        <vers num="11.0.696.40" />
-        <vers num="11.0.696.41" />
-        <vers num="11.0.696.42" />
-        <vers num="11.0.696.43" />
-        <vers num="11.0.696.44" />
-        <vers num="11.0.696.45" />
-        <vers num="11.0.696.46" />
-        <vers num="11.0.696.47" />
-        <vers num="11.0.696.48" />
-        <vers num="11.0.696.49" />
-        <vers num="11.0.696.5" />
-        <vers num="11.0.696.50" />
-        <vers num="11.0.696.51" />
-        <vers num="11.0.696.52" />
-        <vers num="11.0.696.53" />
-        <vers num="11.0.696.54" />
-        <vers num="11.0.696.55" />
-        <vers num="11.0.696.56" />
-        <vers num="11.0.696.57" />
-        <vers num="11.0.696.58" />
-        <vers num="11.0.696.59" />
-        <vers num="11.0.696.60" />
-        <vers num="11.0.696.61" />
-        <vers num="11.0.696.62" />
-        <vers num="11.0.696.63" />
-        <vers num="11.0.696.64" />
-        <vers num="11.0.696.65" />
-        <vers num="11.0.696.66" />
-        <vers num="11.0.696.67" />
-        <vers num="11.0.696.68" />
-        <vers num="11.0.696.69" />
-        <vers num="11.0.696.7" />
-        <vers num="11.0.696.70" />
-        <vers num="11.0.696.71" />
-        <vers num="11.0.696.72" />
-        <vers num="11.0.696.77" />
-        <vers num="11.0.696.8" />
-        <vers num="11.0.696.9" />
-        <vers num="11.0.697.0" />
-        <vers num="11.0.698.0" />
-        <vers num="11.0.699.0" />
-        <vers num="12.0.700.0" />
-        <vers num="12.0.701.0" />
-        <vers num="12.0.702.0" />
-        <vers num="12.0.702.1" />
-        <vers num="12.0.702.2" />
-        <vers num="12.0.703.0" />
-        <vers num="12.0.704.0" />
-        <vers num="12.0.705.0" />
-        <vers num="12.0.706.0" />
-        <vers num="12.0.707.0" />
-        <vers num="12.0.708.0" />
-        <vers num="12.0.709.0" />
-        <vers num="12.0.710.0" />
-        <vers num="12.0.711.0" />
-        <vers num="12.0.712.0" />
-        <vers num="12.0.713.0" />
-        <vers num="12.0.714.0" />
-        <vers num="12.0.715.0" />
-        <vers num="12.0.716.0" />
-        <vers num="12.0.717.0" />
-        <vers num="12.0.718.0" />
-        <vers num="12.0.719.0" />
-        <vers num="12.0.719.1" />
-        <vers num="12.0.720.0" />
-        <vers num="12.0.721.0" />
-        <vers num="12.0.721.1" />
-        <vers num="12.0.722.0" />
-        <vers num="12.0.723.0" />
-        <vers num="12.0.723.1" />
-        <vers num="12.0.724.0" />
-        <vers num="12.0.725.0" />
-        <vers num="12.0.726.0" />
-        <vers num="12.0.727.0" />
-        <vers num="12.0.728.0" />
-        <vers num="12.0.729.0" />
-        <vers num="12.0.730.0" />
-        <vers num="12.0.731.0" />
-        <vers num="12.0.732.0" />
-        <vers num="12.0.733.0" />
-        <vers num="12.0.734.0" />
-        <vers num="12.0.735.0" />
-        <vers num="12.0.736.0" />
-        <vers num="12.0.737.0" />
-        <vers num="12.0.738.0" />
-        <vers num="12.0.739.0" />
-        <vers num="12.0.740.0" />
-        <vers num="12.0.741.0" />
-        <vers num="12.0.742.0" />
-        <vers num="12.0.742.1" />
-        <vers num="12.0.742.10" />
-        <vers num="12.0.742.100" />
-        <vers num="12.0.742.105" />
-        <vers num="12.0.742.11" />
-        <vers num="12.0.742.111" />
-        <vers num="12.0.742.112" />
-        <vers num="12.0.742.113" />
-        <vers num="12.0.742.114" />
-        <vers num="12.0.742.115" />
-        <vers num="12.0.742.12" />
-        <vers num="12.0.742.120" />
-        <vers num="12.0.742.121" />
-        <vers num="12.0.742.122" />
-        <vers num="12.0.742.123" />
-        <vers num="12.0.742.124" />
-        <vers num="12.0.742.13" />
-        <vers num="12.0.742.14" />
-        <vers num="12.0.742.15" />
-        <vers num="12.0.742.16" />
-        <vers num="12.0.742.17" />
-        <vers num="12.0.742.18" />
-        <vers num="12.0.742.19" />
-        <vers num="12.0.742.2" />
-        <vers num="12.0.742.20" />
-        <vers num="12.0.742.21" />
-        <vers num="12.0.742.22" />
-        <vers num="12.0.742.3" />
-        <vers num="12.0.742.30" />
-        <vers num="12.0.742.4" />
-        <vers num="12.0.742.41" />
-        <vers num="12.0.742.42" />
-        <vers num="12.0.742.43" />
-        <vers num="12.0.742.44" />
-        <vers num="12.0.742.45" />
-        <vers num="12.0.742.46" />
-        <vers num="12.0.742.47" />
-        <vers num="12.0.742.48" />
-        <vers num="12.0.742.49" />
-        <vers num="12.0.742.5" />
-        <vers num="12.0.742.50" />
-        <vers num="12.0.742.51" />
-        <vers num="12.0.742.52" />
-        <vers num="12.0.742.53" />
-        <vers num="12.0.742.54" />
-        <vers num="12.0.742.55" />
-        <vers num="12.0.742.56" />
-        <vers num="12.0.742.57" />
-        <vers num="12.0.742.58" />
-        <vers num="12.0.742.59" />
-        <vers num="12.0.742.6" />
-        <vers num="12.0.742.60" />
-        <vers num="12.0.742.61" />
-        <vers num="12.0.742.63" />
-        <vers num="12.0.742.64" />
-        <vers num="12.0.742.65" />
-        <vers num="12.0.742.66" />
-        <vers num="12.0.742.67" />
-        <vers num="12.0.742.68" />
-        <vers num="12.0.742.69" />
-        <vers num="12.0.742.70" />
-        <vers num="12.0.742.71" />
-        <vers num="12.0.742.72" />
-        <vers num="12.0.742.73" />
-        <vers num="12.0.742.74" />
-        <vers num="12.0.742.75" />
-        <vers num="12.0.742.77" />
-        <vers num="12.0.742.8" />
-        <vers num="12.0.742.82" />
-        <vers num="12.0.742.9" />
-        <vers num="12.0.742.91" />
-        <vers num="12.0.742.92" />
-        <vers num="12.0.742.93" />
-        <vers num="12.0.742.94" />
-        <vers num="12.0.743.0" />
-        <vers num="12.0.744.0" />
-        <vers num="12.0.745.0" />
-        <vers num="12.0.746.0" />
-        <vers num="12.0.747.0" />
-        <vers num="13.0.748.0" />
-        <vers num="13.0.749.0" />
-        <vers num="13.0.750.0" />
-        <vers num="13.0.751.0" />
-        <vers num="13.0.752.0" />
-        <vers num="13.0.753.0" />
-        <vers num="13.0.754.0" />
-        <vers num="13.0.755.0" />
-        <vers num="13.0.756.0" />
-        <vers num="13.0.757.0" />
-        <vers num="13.0.758.0" />
-        <vers num="13.0.759.0" />
-        <vers num="13.0.760.0" />
-        <vers num="13.0.761.0" />
-        <vers num="13.0.761.1" />
-        <vers num="13.0.762.0" />
-        <vers num="13.0.762.1" />
-        <vers num="13.0.763.0" />
-        <vers num="13.0.764.0" />
-        <vers num="13.0.765.0" />
-        <vers num="13.0.766.0" />
-        <vers num="13.0.767.0" />
-        <vers num="13.0.767.1" />
-        <vers num="13.0.768.0" />
-        <vers num="13.0.769.0" />
-        <vers num="13.0.770.0" />
-        <vers num="13.0.771.0" />
-        <vers num="13.0.772.0" />
-        <vers num="13.0.773.0" />
-        <vers num="13.0.774.0" />
-        <vers num="13.0.775.0" />
-        <vers num="13.0.775.1" />
-        <vers num="13.0.775.2" />
-        <vers num="13.0.775.4" />
-        <vers num="13.0.776.0" />
-        <vers num="13.0.776.1" />
-        <vers num="13.0.777.0" />
-        <vers num="13.0.777.1" />
-        <vers num="13.0.777.2" />
-        <vers num="13.0.777.3" />
-        <vers num="13.0.777.4" />
-        <vers num="13.0.777.5" />
-        <vers num="13.0.777.6" />
-        <vers num="13.0.778.0" />
-        <vers num="13.0.779.0" />
-        <vers num="13.0.780.0" />
-        <vers num="13.0.781.0" />
-        <vers num="13.0.782.0" />
-        <vers num="13.0.782.1" />
-        <vers num="13.0.782.10" />
-        <vers num="13.0.782.100" />
-        <vers num="13.0.782.101" />
-        <vers num="13.0.782.102" />
-        <vers num="13.0.782.103" />
-        <vers num="13.0.782.104" />
-        <vers num="13.0.782.105" />
-        <vers num="13.0.782.106" />
-        <vers num="13.0.782.107" />
-        <vers num="13.0.782.108" />
-        <vers num="13.0.782.109" />
-        <vers num="13.0.782.11" />
-        <vers num="13.0.782.112" />
-        <vers num="13.0.782.12" />
-        <vers num="13.0.782.13" />
-        <vers num="13.0.782.14" />
-        <vers num="13.0.782.15" />
-        <vers num="13.0.782.16" />
-        <vers num="13.0.782.17" />
-        <vers num="13.0.782.18" />
-        <vers num="13.0.782.19" />
-        <vers num="13.0.782.20" />
-        <vers num="13.0.782.21" />
-        <vers num="13.0.782.210" />
-        <vers num="13.0.782.211" />
-        <vers num="13.0.782.212" />
-        <vers num="13.0.782.213" />
-        <vers num="13.0.782.214" />
-        <vers num="13.0.782.215" />
-        <vers num="13.0.782.216" />
-        <vers num="13.0.782.217" />
-        <vers num="13.0.782.218" />
-        <vers num="13.0.782.219" />
-        <vers num="13.0.782.220" />
-        <vers num="13.0.782.23" />
-        <vers num="13.0.782.237" />
-        <vers num="13.0.782.238" />
-        <vers num="13.0.782.24" />
-        <vers num="13.0.782.25" />
-        <vers num="13.0.782.26" />
-        <vers num="13.0.782.27" />
-        <vers num="13.0.782.28" />
-        <vers num="13.0.782.29" />
-        <vers num="13.0.782.3" />
-        <vers num="13.0.782.30" />
-        <vers num="13.0.782.31" />
-        <vers num="13.0.782.32" />
-        <vers num="13.0.782.33" />
-        <vers num="13.0.782.34" />
-        <vers num="13.0.782.35" />
-        <vers num="13.0.782.36" />
-        <vers num="13.0.782.37" />
-        <vers num="13.0.782.38" />
-        <vers num="13.0.782.39" />
-        <vers num="13.0.782.4" />
-        <vers num="13.0.782.40" />
-        <vers num="13.0.782.41" />
-        <vers num="13.0.782.42" />
-        <vers num="13.0.782.43" />
-        <vers num="13.0.782.44" />
-        <vers num="13.0.782.45" />
-        <vers num="13.0.782.46" />
-        <vers num="13.0.782.47" />
-        <vers num="13.0.782.48" />
-        <vers num="13.0.782.49" />
-        <vers num="13.0.782.50" />
-        <vers num="13.0.782.51" />
-        <vers num="13.0.782.52" />
-        <vers num="13.0.782.53" />
-        <vers num="13.0.782.55" />
-        <vers num="13.0.782.56" />
-        <vers num="13.0.782.6" />
-        <vers num="13.0.782.7" />
-        <vers num="13.0.782.81" />
-        <vers num="13.0.782.82" />
-        <vers num="13.0.782.83" />
-        <vers num="13.0.782.84" />
-        <vers num="13.0.782.85" />
-        <vers num="13.0.782.86" />
-        <vers num="13.0.782.87" />
-        <vers num="13.0.782.88" />
-        <vers num="13.0.782.89" />
-        <vers num="13.0.782.90" />
-        <vers num="13.0.782.91" />
-        <vers num="13.0.782.92" />
-        <vers num="13.0.782.93" />
-        <vers num="13.0.782.94" />
-        <vers num="13.0.782.95" />
-        <vers num="13.0.782.96" />
-        <vers num="13.0.782.97" />
-        <vers num="13.0.782.98" />
-        <vers num="13.0.782.99" />
-        <vers num="14.0.783.0" />
-        <vers num="14.0.784.0" />
-        <vers num="14.0.785.0" />
-        <vers num="14.0.786.0" />
-        <vers num="14.0.787.0" />
-        <vers num="14.0.788.0" />
-        <vers num="14.0.789.0" />
-        <vers num="14.0.790.0" />
-        <vers num="14.0.791.0" />
-        <vers num="14.0.792.0" />
-        <vers num="14.0.793.0" />
-        <vers num="14.0.794.0" />
-        <vers num="14.0.795.0" />
-        <vers num="14.0.796.0" />
-        <vers num="14.0.797.0" />
-        <vers num="14.0.798.0" />
-        <vers num="14.0.799.0" />
-        <vers num="14.0.800.0" />
-        <vers num="14.0.801.0" />
-        <vers num="14.0.802.0" />
-        <vers num="14.0.803.0" />
-        <vers num="14.0.804.0" />
-        <vers num="14.0.805.0" />
-        <vers num="14.0.806.0" />
-        <vers num="14.0.807.0" />
-        <vers num="14.0.808.0" />
-        <vers num="14.0.809.0" />
-        <vers num="14.0.810.0" />
-        <vers num="14.0.811.0" />
-        <vers num="14.0.812.0" />
-        <vers num="14.0.813.0" />
-        <vers num="14.0.814.0" />
-        <vers num="14.0.815.0" />
-        <vers num="14.0.816.0" />
-        <vers num="14.0.818.0" />
-        <vers num="14.0.819.0" />
-        <vers num="14.0.820.0" />
-        <vers num="14.0.821.0" />
-        <vers num="14.0.822.0" />
-        <vers num="14.0.823.0" />
-        <vers num="14.0.824.0" />
-        <vers num="14.0.825.0" />
-        <vers num="14.0.826.0" />
-        <vers num="14.0.827.0" />
-        <vers num="14.0.827.10" />
-        <vers num="14.0.827.12" />
-        <vers num="14.0.829.1" />
-        <vers num="14.0.830.0" />
-        <vers num="14.0.831.0" />
-        <vers num="14.0.832.0" />
-        <vers num="14.0.833.0" />
-        <vers num="14.0.834.0" />
-        <vers num="14.0.835.0" />
-        <vers num="14.0.835.1" />
-        <vers num="14.0.835.100" />
-        <vers num="14.0.835.101" />
-        <vers num="14.0.835.102" />
-        <vers num="14.0.835.103" />
-        <vers num="14.0.835.104" />
-        <vers num="14.0.835.105" />
-        <vers num="14.0.835.106" />
-        <vers num="14.0.835.107" />
-        <vers num="14.0.835.108" />
-        <vers num="14.0.835.109" />
-        <vers num="14.0.835.11" />
-        <vers num="14.0.835.110" />
-        <vers num="14.0.835.111" />
-        <vers num="14.0.835.112" />
-        <vers num="14.0.835.113" />
-        <vers num="14.0.835.114" />
-        <vers num="14.0.835.115" />
-        <vers num="14.0.835.116" />
-        <vers num="14.0.835.117" />
-        <vers num="14.0.835.118" />
-        <vers num="14.0.835.119" />
-        <vers num="14.0.835.120" />
-        <vers num="14.0.835.121" />
-        <vers num="14.0.835.122" />
-        <vers num="14.0.835.123" />
-        <vers num="14.0.835.124" />
-        <vers num="14.0.835.125" />
-        <vers num="14.0.835.126" />
-        <vers num="14.0.835.127" />
-        <vers num="14.0.835.128" />
-        <vers num="14.0.835.13" />
-        <vers num="14.0.835.14" />
-        <vers num="14.0.835.149" />
-        <vers num="14.0.835.15" />
-        <vers num="14.0.835.150" />
-        <vers num="14.0.835.151" />
-        <vers num="14.0.835.152" />
-        <vers num="14.0.835.153" />
-        <vers num="14.0.835.154" />
-        <vers num="14.0.835.155" />
-        <vers num="14.0.835.156" />
-        <vers num="14.0.835.157" />
-        <vers num="14.0.835.158" />
-        <vers num="14.0.835.159" />
-        <vers num="14.0.835.16" />
-        <vers num="14.0.835.160" />
-        <vers num="14.0.835.161" />
-        <vers num="14.0.835.162" />
-        <vers num="14.0.835.163" />
-        <vers num="14.0.835.18" />
-        <vers num="14.0.835.184" />
-        <vers num="14.0.835.186" />
-        <vers num="14.0.835.187" />
-        <vers num="14.0.835.2" />
-        <vers num="14.0.835.20" />
-        <vers num="14.0.835.202" />
-        <vers num="14.0.835.203" />
-        <vers num="14.0.835.204" />
-        <vers num="14.0.835.21" />
-        <vers num="14.0.835.22" />
-        <vers num="14.0.835.23" />
-        <vers num="14.0.835.24" />
-        <vers num="14.0.835.25" />
-        <vers num="14.0.835.26" />
-        <vers num="14.0.835.27" />
-        <vers num="14.0.835.28" />
-        <vers num="14.0.835.29" />
-        <vers num="14.0.835.30" />
-        <vers num="14.0.835.31" />
-        <vers num="14.0.835.32" />
-        <vers num="14.0.835.33" />
-        <vers num="14.0.835.34" />
-        <vers num="14.0.835.35" />
-        <vers num="14.0.835.4" />
-        <vers num="14.0.835.8" />
-        <vers num="14.0.835.86" />
-        <vers num="14.0.835.87" />
-        <vers num="14.0.835.88" />
-        <vers num="14.0.835.89" />
-        <vers num="14.0.835.9" />
-        <vers num="14.0.835.90" />
-        <vers num="14.0.835.91" />
-        <vers num="14.0.835.92" />
-        <vers num="14.0.835.93" />
-        <vers num="14.0.835.94" />
-        <vers num="14.0.835.95" />
-        <vers num="14.0.835.96" />
-        <vers num="14.0.835.97" />
-        <vers num="14.0.835.98" />
-        <vers num="14.0.835.99" />
-        <vers num="14.0.836.0" />
-        <vers num="14.0.837.0" />
-        <vers num="14.0.838.0" />
-        <vers num="14.0.839.0" />
-        <vers num="15.0.859.0" />
-        <vers num="15.0.860.0" />
-        <vers num="15.0.861.0" />
-        <vers num="15.0.862.0" />
-        <vers num="15.0.862.1" />
-        <vers num="15.0.863.0" />
-        <vers num="15.0.864.0" />
-        <vers num="15.0.865.0" />
-        <vers num="15.0.866.0" />
-        <vers num="15.0.867.0" />
-        <vers num="15.0.868.0" />
-        <vers num="15.0.868.1" />
-        <vers num="15.0.869.0" />
-        <vers num="15.0.870.0" />
-        <vers num="15.0.871.0" />
-        <vers num="15.0.871.1" />
-        <vers num="15.0.872.0" />
-        <vers num="15.0.873.0" />
-        <vers num="15.0.874.0" />
-        <vers num="15.0.874.1" />
-        <vers num="15.0.874.10" />
-        <vers num="15.0.874.101" />
-        <vers num="15.0.874.102" />
-        <vers num="15.0.874.103" />
-        <vers num="15.0.874.104" />
-        <vers num="15.0.874.106" />
-        <vers num="15.0.874.11" />
-        <vers num="15.0.874.116" />
-        <vers num="15.0.874.117" />
-        <vers num="15.0.874.119" />
-        <vers num="15.0.874.12" />
-        <vers num="15.0.874.120" />
-        <vers num="15.0.874.121" />
-        <vers num="15.0.874.13" />
-        <vers num="15.0.874.14" />
-        <vers num="15.0.874.15" />
-        <vers num="15.0.874.16" />
-        <vers num="15.0.874.17" />
-        <vers num="15.0.874.18" />
-        <vers num="15.0.874.19" />
-        <vers num="15.0.874.2" />
-        <vers num="15.0.874.20" />
-        <vers num="15.0.874.21" />
-        <vers num="15.0.874.22" />
-        <vers num="15.0.874.23" />
-        <vers num="15.0.874.24" />
-        <vers num="15.0.874.3" />
-        <vers num="15.0.874.4" />
-        <vers num="15.0.874.44" />
-        <vers num="15.0.874.45" />
-        <vers num="15.0.874.46" />
-        <vers num="15.0.874.47" />
-        <vers num="15.0.874.48" />
-        <vers num="15.0.874.49" />
-        <vers num="15.0.874.5" />
-        <vers num="15.0.874.6" />
-        <vers num="15.0.874.7" />
-        <vers num="15.0.874.8" />
-        <vers num="15.0.874.9" />
-        <vers num="16.0.877.0" />
-        <vers num="16.0.878.0" />
-        <vers num="16.0.879.0" />
-        <vers num="16.0.880.0" />
-        <vers num="16.0.881.0" />
-        <vers num="16.0.882.0" />
-        <vers num="16.0.883.0" />
-        <vers num="16.0.884.0" />
-        <vers num="16.0.885.0" />
-        <vers num="16.0.886.0" />
-        <vers num="16.0.886.1" />
-        <vers num="16.0.887.0" />
-        <vers num="16.0.888.0" />
-        <vers num="16.0.889.0" />
-        <vers num="16.0.889.2" />
-        <vers num="16.0.889.3" />
-        <vers num="16.0.890.0" />
-        <vers num="16.0.890.1" />
-        <vers num="16.0.891.0" />
-        <vers num="16.0.891.1" />
-        <vers num="16.0.892.0" />
-        <vers num="16.0.893.0" />
-        <vers num="16.0.893.1" />
-        <vers num="16.0.894.0" />
-        <vers num="16.0.895.0" />
-        <vers num="16.0.896.0" />
-        <vers num="16.0.897.0" />
-        <vers num="16.0.898.0" />
-        <vers num="16.0.899.0" />
-        <vers num="16.0.900.0" />
-        <vers num="16.0.901.0" />
-        <vers num="16.0.902.0" />
-        <vers num="16.0.903.0" />
-        <vers num="16.0.904.0" />
-        <vers num="16.0.905.0" />
-        <vers num="16.0.906.0" />
-        <vers num="16.0.906.1" />
-        <vers num="16.0.907.0" />
-        <vers num="16.0.908.0" />
-        <vers num="16.0.909.0" />
-        <vers num="16.0.910.0" />
-        <vers num="16.0.911.0" />
-        <vers num="16.0.911.1" />
-        <vers num="16.0.911.2" />
-        <vers num="16.0.912.0" />
-        <vers num="16.0.912.1" />
-        <vers num="16.0.912.10" />
-        <vers num="16.0.912.11" />
-        <vers num="16.0.912.12" />
-        <vers num="16.0.912.13" />
-        <vers num="16.0.912.14" />
-        <vers num="16.0.912.15" />
-        <vers num="16.0.912.19" />
-        <vers num="16.0.912.2" />
-        <vers num="16.0.912.20" />
-        <vers num="16.0.912.21" />
-        <vers num="16.0.912.22" />
-        <vers num="16.0.912.23" />
-        <vers num="16.0.912.24" />
-        <vers num="16.0.912.25" />
-        <vers num="16.0.912.26" />
-        <vers num="16.0.912.27" />
-        <vers num="16.0.912.28" />
-        <vers num="16.0.912.29" />
-        <vers num="16.0.912.3" />
-        <vers num="16.0.912.30" />
-        <vers num="16.0.912.31" />
-        <vers num="16.0.912.32" />
-        <vers num="16.0.912.33" />
-        <vers num="16.0.912.34" />
-        <vers num="16.0.912.35" />
-        <vers num="16.0.912.36" />
-        <vers num="16.0.912.37" />
-        <vers num="16.0.912.38" />
-        <vers num="16.0.912.39" />
-        <vers num="16.0.912.4" />
-        <vers num="16.0.912.40" />
-        <vers num="16.0.912.41" />
-        <vers num="16.0.912.42" />
-        <vers num="16.0.912.43" />
-        <vers num="16.0.912.5" />
-        <vers num="16.0.912.6" />
-        <vers num="16.0.912.62" />
-        <vers num="16.0.912.63" />
-        <vers num="16.0.912.66" />
-        <vers num="16.0.912.7" />
-        <vers num="16.0.912.74" />
-        <vers num="16.0.912.75" />
-        <vers num="16.0.912.76" />
-        <vers num="16.0.912.77" />
-        <vers num="16.0.912.8" />
-        <vers num="16.0.912.9" />
-        <vers num="17.0.921.3" />
-        <vers num="17.0.922.0" />
-        <vers num="17.0.923.0" />
-        <vers num="17.0.923.1" />
-        <vers num="17.0.924.0" />
-        <vers num="17.0.925.0" />
-        <vers num="17.0.926.0" />
-        <vers num="17.0.927.0" />
-        <vers num="17.0.928.0" />
-        <vers num="17.0.928.1" />
-        <vers num="17.0.928.2" />
-        <vers num="17.0.928.3" />
-        <vers num="17.0.929.0" />
-        <vers num="17.0.930.0" />
-        <vers num="17.0.931.0" />
-        <vers num="17.0.932.0" />
-        <vers num="17.0.933.0" />
-        <vers num="17.0.933.1" />
-        <vers num="17.0.934.0" />
-        <vers num="17.0.935.0" />
-        <vers num="17.0.935.1" />
-        <vers num="17.0.936.0" />
-        <vers num="17.0.936.1" />
-        <vers num="17.0.937.0" />
-        <vers num="17.0.938.0" />
-        <vers num="17.0.939.0" />
-        <vers num="17.0.939.1" />
-        <vers num="17.0.940.0" />
-        <vers num="17.0.941.0" />
-        <vers num="17.0.942.0" />
-        <vers num="17.0.943.0" />
-        <vers num="17.0.944.0" />
-        <vers num="17.0.945.0" />
-        <vers num="17.0.946.0" />
-        <vers num="17.0.947.0" />
-        <vers num="17.0.948.0" />
-        <vers num="17.0.949.0" />
-        <vers num="17.0.950.0" />
-        <vers num="17.0.951.0" />
-        <vers num="17.0.952.0" />
-        <vers num="17.0.953.0" />
-        <vers num="17.0.954.0" />
-        <vers num="17.0.954.1" />
-        <vers num="17.0.954.2" />
-        <vers num="17.0.954.3" />
-        <vers num="17.0.955.0" />
-        <vers num="17.0.956.0" />
-        <vers num="17.0.957.0" />
-        <vers num="17.0.958.0" />
-        <vers num="17.0.958.1" />
-        <vers num="17.0.959.0" />
-        <vers num="17.0.960.0" />
-        <vers num="17.0.961.0" />
-        <vers num="17.0.962.0" />
-        <vers num="17.0.963.0" />
-        <vers num="17.0.963.1" />
-        <vers num="17.0.963.10" />
-        <vers num="17.0.963.11" />
-        <vers num="17.0.963.12" />
-        <vers num="17.0.963.13" />
-        <vers num="17.0.963.14" />
-        <vers num="17.0.963.15" />
-        <vers num="17.0.963.16" />
-        <vers num="17.0.963.17" />
-        <vers num="17.0.963.18" />
-        <vers num="17.0.963.19" />
-        <vers num="17.0.963.2" />
-        <vers num="17.0.963.20" />
-        <vers num="17.0.963.21" />
-        <vers num="17.0.963.22" />
-        <vers num="17.0.963.23" />
-        <vers num="17.0.963.24" />
-        <vers num="17.0.963.25" />
-        <vers num="17.0.963.26" />
-        <vers num="17.0.963.27" />
-        <vers num="17.0.963.28" />
-        <vers num="17.0.963.29" />
-        <vers num="17.0.963.3" />
-        <vers num="17.0.963.30" />
-        <vers num="17.0.963.31" />
-        <vers num="17.0.963.32" />
-        <vers num="17.0.963.33" />
-        <vers num="17.0.963.34" />
-        <vers num="17.0.963.35" />
-        <vers num="17.0.963.36" />
-        <vers num="17.0.963.37" />
-        <vers num="17.0.963.38" />
-        <vers num="17.0.963.39" />
-        <vers num="17.0.963.4" />
-        <vers num="17.0.963.40" />
-        <vers num="17.0.963.41" />
-        <vers num="17.0.963.42" />
-        <vers num="17.0.963.43" />
-        <vers num="17.0.963.44" />
-        <vers num="17.0.963.45" />
-        <vers num="17.0.963.46" />
-        <vers num="17.0.963.47" />
-        <vers num="17.0.963.48" />
-        <vers num="17.0.963.49" />
-        <vers num="17.0.963.5" />
-        <vers num="17.0.963.50" />
-        <vers num="17.0.963.51" />
-        <vers num="17.0.963.52" />
-        <vers num="17.0.963.53" />
-        <vers num="17.0.963.54" />
-        <vers num="17.0.963.55" />
-        <vers num="17.0.963.56" />
-        <vers num="17.0.963.57" />
-        <vers num="17.0.963.59" />
-        <vers num="17.0.963.6" />
-        <vers num="17.0.963.60" />
-        <vers num="17.0.963.61" />
-        <vers num="17.0.963.62" />
-        <vers num="17.0.963.63" />
-        <vers num="17.0.963.64" />
-        <vers num="17.0.963.65" />
-        <vers num="17.0.963.66" />
-        <vers num="17.0.963.67" />
-        <vers num="17.0.963.69" />
-        <vers num="17.0.963.7" />
-        <vers num="17.0.963.70" />
-        <vers num="17.0.963.74" />
-        <vers num="17.0.963.75" />
-        <vers num="17.0.963.76" />
-        <vers num="17.0.963.77" />
-        <vers num="17.0.963.78" />
-        <vers num="17.0.963.79" />
-        <vers num="17.0.963.8" />
-        <vers num="17.0.963.80" />
-        <vers num="17.0.963.81" />
-        <vers num="17.0.963.82" />
-        <vers num="17.0.963.83" />
-        <vers num="17.0.963.84" />
-        <vers num="17.0.963.9" />
-        <vers num="18.0.1000.0" />
-        <vers num="18.0.1001.0" />
-        <vers num="18.0.1001.1" />
-        <vers num="18.0.1002.0" />
-        <vers num="18.0.1003.0" />
-        <vers num="18.0.1003.1" />
-        <vers num="18.0.1004.0" />
-        <vers num="18.0.1005.0" />
-        <vers num="18.0.1006.0" />
-        <vers num="18.0.1007.0" />
-        <vers num="18.0.1008.0" />
-        <vers num="18.0.1009.0" />
-        <vers num="18.0.1010.0" />
-        <vers num="18.0.1010.1" />
-        <vers num="18.0.1010.2" />
-        <vers num="18.0.1011.1" />
-        <vers num="18.0.1012.0" />
-        <vers num="18.0.1012.1" />
-        <vers num="18.0.1012.2" />
-        <vers num="18.0.1013.0" />
-        <vers num="18.0.1014.0" />
-        <vers num="18.0.1015.0" />
-        <vers num="18.0.1016.0" />
-        <vers num="18.0.1017.0" />
-        <vers num="18.0.1017.1" />
-        <vers num="18.0.1017.2" />
-        <vers num="18.0.1017.3" />
-        <vers num="18.0.1018.0" />
-        <vers num="18.0.1019.0" />
-        <vers num="18.0.1019.1" />
-        <vers num="18.0.1020.0" />
-        <vers num="18.0.1021.0" />
-        <vers num="18.0.1022.0" />
-        <vers num="18.0.1023.0" />
-        <vers num="18.0.1024.0" />
-        <vers num="18.0.1025.0" />
-        <vers num="18.0.1025.1" />
-        <vers num="18.0.1025.10" />
-        <vers num="18.0.1025.100" />
-        <vers num="18.0.1025.102" />
-        <vers num="18.0.1025.107" />
-        <vers num="18.0.1025.108" />
-        <vers num="18.0.1025.109" />
-        <vers num="18.0.1025.110" />
-        <vers num="18.0.1025.111" />
-        <vers num="18.0.1025.112" />
-        <vers num="18.0.1025.113" />
-        <vers num="18.0.1025.114" />
-        <vers num="18.0.1025.116" />
-        <vers num="18.0.1025.117" />
-        <vers num="18.0.1025.118" />
-        <vers num="18.0.1025.120" />
-        <vers num="18.0.1025.129" />
-        <vers num="18.0.1025.130" />
-        <vers num="18.0.1025.131" />
-        <vers num="18.0.1025.132" />
-        <vers num="18.0.1025.133" />
-        <vers num="18.0.1025.134" />
-        <vers num="18.0.1025.135" />
-        <vers num="18.0.1025.136" />
-        <vers num="18.0.1025.137" />
-        <vers num="18.0.1025.139" />
-        <vers num="18.0.1025.140" />
-        <vers num="18.0.1025.142" />
-        <vers num="18.0.1025.145" />
-        <vers num="18.0.1025.146" />
-        <vers num="18.0.1025.147" />
-        <vers num="18.0.1025.148" />
-        <vers num="18.0.1025.149" />
-        <vers prev="1" num="18.0.1025.150" />
-        <vers num="18.0.1025.2" />
-        <vers num="18.0.1025.29" />
-        <vers num="18.0.1025.3" />
-        <vers num="18.0.1025.30" />
-        <vers num="18.0.1025.31" />
-        <vers num="18.0.1025.32" />
-        <vers num="18.0.1025.33" />
-        <vers num="18.0.1025.35" />
-        <vers num="18.0.1025.36" />
-        <vers num="18.0.1025.37" />
-        <vers num="18.0.1025.38" />
-        <vers num="18.0.1025.39" />
-        <vers num="18.0.1025.4" />
-        <vers num="18.0.1025.40" />
-        <vers num="18.0.1025.41" />
-        <vers num="18.0.1025.42" />
-        <vers num="18.0.1025.43" />
-        <vers num="18.0.1025.44" />
-        <vers num="18.0.1025.45" />
-        <vers num="18.0.1025.46" />
-        <vers num="18.0.1025.47" />
-        <vers num="18.0.1025.48" />
-        <vers num="18.0.1025.49" />
-        <vers num="18.0.1025.5" />
-        <vers num="18.0.1025.50" />
-        <vers num="18.0.1025.51" />
-        <vers num="18.0.1025.52" />
-        <vers num="18.0.1025.54" />
-        <vers num="18.0.1025.55" />
-        <vers num="18.0.1025.56" />
-        <vers num="18.0.1025.57" />
-        <vers num="18.0.1025.58" />
-        <vers num="18.0.1025.6" />
-        <vers num="18.0.1025.60" />
-        <vers num="18.0.1025.7" />
-        <vers num="18.0.1025.73" />
-        <vers num="18.0.1025.74" />
-        <vers num="18.0.1025.8" />
-        <vers num="18.0.1025.9" />
-        <vers num="18.0.1025.95" />
-        <vers num="18.0.1025.96" />
-        <vers num="18.0.1025.97" />
-        <vers num="18.0.1025.98" />
-        <vers num="18.0.1025.99" />
-        <vers num="2.0.156.1" />
-        <vers num="2.0.157.0" />
-        <vers num="2.0.157.2" />
-        <vers num="2.0.158.0" />
-        <vers num="2.0.159.0" />
-        <vers num="2.0.169.0" />
-        <vers num="2.0.169.1" />
-        <vers num="2.0.170.0" />
-        <vers num="2.0.172" />
-        <vers num="2.0.172.2" />
-        <vers num="2.0.172.27" />
-        <vers num="2.0.172.28" />
-        <vers num="2.0.172.30" />
-        <vers num="2.0.172.31" />
-        <vers num="2.0.172.33" />
-        <vers num="2.0.172.37" />
-        <vers num="2.0.172.38" />
-        <vers num="2.0.172.8" />
-        <vers num="3.0.182.2" />
-        <vers num="3.0.190.2" />
-        <vers num="3.0.193.2" edition="beta" />
-        <vers num="3.0.195.2" />
-        <vers num="3.0.195.21" />
-        <vers num="3.0.195.24" />
-        <vers num="3.0.195.25" />
-        <vers num="3.0.195.27" />
-        <vers num="3.0.195.32" />
-        <vers num="3.0.195.33" />
-        <vers num="3.0.195.36" />
-        <vers num="3.0.195.37" />
-        <vers num="3.0.195.38" />
-        <vers num="4.0.212.0" />
-        <vers num="4.0.212.1" />
-        <vers num="4.0.221.8" />
-        <vers num="4.0.222.0" />
-        <vers num="4.0.222.1" />
-        <vers num="4.0.222.12" />
-        <vers num="4.0.222.5" />
-        <vers num="4.0.223.0" />
-        <vers num="4.0.223.1" />
-        <vers num="4.0.223.2" />
-        <vers num="4.0.223.4" />
-        <vers num="4.0.223.5" />
-        <vers num="4.0.223.7" />
-        <vers num="4.0.223.8" />
-        <vers num="4.0.223.9" />
-        <vers num="4.0.224.0" />
-        <vers num="4.0.229.1" />
-        <vers num="4.0.235.0" />
-        <vers num="4.0.236.0" />
-        <vers num="4.0.237.0" />
-        <vers num="4.0.237.1" />
-        <vers num="4.0.239.0" />
-        <vers num="4.0.240.0" />
-        <vers num="4.0.241.0" />
-        <vers num="4.0.242.0" />
-        <vers num="4.0.243.0" />
-        <vers num="4.0.244.0" />
-        <vers num="4.0.245.0" />
-        <vers num="4.0.245.1" />
-        <vers num="4.0.246.0" />
-        <vers num="4.0.247.0" />
-        <vers num="4.0.248.0" />
-        <vers num="4.0.249.0" />
-        <vers num="4.0.249.1" />
-        <vers num="4.0.249.10" />
-        <vers num="4.0.249.11" />
-        <vers num="4.0.249.12" />
-        <vers num="4.0.249.14" />
-        <vers num="4.0.249.16" />
-        <vers num="4.0.249.17" />
-        <vers num="4.0.249.18" />
-        <vers num="4.0.249.19" />
-        <vers num="4.0.249.2" />
-        <vers num="4.0.249.20" />
-        <vers num="4.0.249.21" />
-        <vers num="4.0.249.22" />
-        <vers num="4.0.249.23" />
-        <vers num="4.0.249.24" />
-        <vers num="4.0.249.25" />
-        <vers num="4.0.249.26" />
-        <vers num="4.0.249.27" />
-        <vers num="4.0.249.28" />
-        <vers num="4.0.249.29" />
-        <vers num="4.0.249.3" />
-        <vers num="4.0.249.30" />
-        <vers num="4.0.249.31" />
-        <vers num="4.0.249.32" />
-        <vers num="4.0.249.33" />
-        <vers num="4.0.249.34" />
-        <vers num="4.0.249.35" />
-        <vers num="4.0.249.36" />
-        <vers num="4.0.249.37" />
-        <vers num="4.0.249.38" />
-        <vers num="4.0.249.39" />
-        <vers num="4.0.249.4" />
-        <vers num="4.0.249.40" />
-        <vers num="4.0.249.41" />
-        <vers num="4.0.249.42" />
-        <vers num="4.0.249.43" />
-        <vers num="4.0.249.44" />
-        <vers num="4.0.249.45" />
-        <vers num="4.0.249.46" />
-        <vers num="4.0.249.47" />
-        <vers num="4.0.249.48" />
-        <vers num="4.0.249.49" />
-        <vers num="4.0.249.5" />
-        <vers num="4.0.249.50" />
-        <vers num="4.0.249.51" />
-        <vers num="4.0.249.52" />
-        <vers num="4.0.249.53" />
-        <vers num="4.0.249.54" />
-        <vers num="4.0.249.55" />
-        <vers num="4.0.249.56" />
-        <vers num="4.0.249.57" />
-        <vers num="4.0.249.58" />
-        <vers num="4.0.249.59" />
-        <vers num="4.0.249.6" />
-        <vers num="4.0.249.60" />
-        <vers num="4.0.249.61" />
-        <vers num="4.0.249.62" />
-        <vers num="4.0.249.63" />
-        <vers num="4.0.249.64" />
-        <vers num="4.0.249.65" />
-        <vers num="4.0.249.66" />
-        <vers num="4.0.249.67" />
-        <vers num="4.0.249.68" />
-        <vers num="4.0.249.69" />
-        <vers num="4.0.249.7" />
-        <vers num="4.0.249.70" />
-        <vers num="4.0.249.71" />
-        <vers num="4.0.249.72" />
-        <vers num="4.0.249.73" />
-        <vers num="4.0.249.74" />
-        <vers num="4.0.249.75" />
-        <vers num="4.0.249.76" />
-        <vers num="4.0.249.77" />
-        <vers num="4.0.249.78" edition="beta" />
-        <vers num="4.0.249.79" />
-        <vers num="4.0.249.8" />
-        <vers num="4.0.249.80" />
-        <vers num="4.0.249.81" />
-        <vers num="4.0.249.82" />
-        <vers num="4.0.249.89" />
-        <vers num="4.0.249.9" />
-        <vers num="4.0.250.0" />
-        <vers num="4.0.250.2" />
-        <vers num="4.0.251.0" />
-        <vers num="4.0.252.0" />
-        <vers num="4.0.254.0" />
-        <vers num="4.0.255.0" />
-        <vers num="4.0.256.0" />
-        <vers num="4.0.257.0" />
-        <vers num="4.0.258.0" />
-        <vers num="4.0.259.0" />
-        <vers num="4.0.260.0" />
-        <vers num="4.0.261.0" />
-        <vers num="4.0.262.0" />
-        <vers num="4.0.263.0" />
-        <vers num="4.0.264.0" />
-        <vers num="4.0.265.0" />
-        <vers num="4.0.266.0" />
-        <vers num="4.0.267.0" />
-        <vers num="4.0.268.0" />
-        <vers num="4.0.269.0" />
-        <vers num="4.0.271.0" />
-        <vers num="4.0.272.0" />
-        <vers num="4.0.275.0" />
-        <vers num="4.0.275.1" />
-        <vers num="4.0.276.0" />
-        <vers num="4.0.277.0" />
-        <vers num="4.0.278.0" />
-        <vers num="4.0.286.0" />
-        <vers num="4.0.287.0" />
-        <vers num="4.0.288.0" />
-        <vers num="4.0.288.1" />
-        <vers num="4.0.289.0" />
-        <vers num="4.0.290.0" />
-        <vers num="4.0.292.0" />
-        <vers num="4.0.294.0" />
-        <vers num="4.0.295.0" />
-        <vers num="4.0.296.0" />
-        <vers num="4.0.299.0" />
-        <vers num="4.0.300.0" />
-        <vers num="4.0.301.0" />
-        <vers num="4.0.302.0" />
-        <vers num="4.0.302.1" />
-        <vers num="4.0.302.2" />
-        <vers num="4.0.302.3" />
-        <vers num="4.0.303.0" />
-        <vers num="4.0.304.0" />
-        <vers num="4.0.305.0" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.1.249.0" />
-        <vers num="4.1.249.1001" />
-        <vers num="4.1.249.1004" />
-        <vers num="4.1.249.1006" />
-        <vers num="4.1.249.1007" />
-        <vers num="4.1.249.1008" />
-        <vers num="4.1.249.1009" />
-        <vers num="4.1.249.1010" />
-        <vers num="4.1.249.1011" />
-        <vers num="4.1.249.1012" />
-        <vers num="4.1.249.1013" />
-        <vers num="4.1.249.1014" />
-        <vers num="4.1.249.1015" />
-        <vers num="4.1.249.1016" />
-        <vers num="4.1.249.1017" />
-        <vers num="4.1.249.1018" />
-        <vers num="4.1.249.1019" />
-        <vers num="4.1.249.1020" />
-        <vers num="4.1.249.1021" />
-        <vers num="4.1.249.1022" />
-        <vers num="4.1.249.1023" />
-        <vers num="4.1.249.1024" />
-        <vers num="4.1.249.1025" />
-        <vers num="4.1.249.1026" />
-        <vers num="4.1.249.1027" />
-        <vers num="4.1.249.1028" />
-        <vers num="4.1.249.1029" />
-        <vers num="4.1.249.1030" />
-        <vers num="4.1.249.1031" />
-        <vers num="4.1.249.1032" />
-        <vers num="4.1.249.1033" />
-        <vers num="4.1.249.1034" />
-        <vers num="4.1.249.1035" />
-        <vers num="4.1.249.1036" />
-        <vers num="4.1.249.1037" />
-        <vers num="4.1.249.1038" />
-        <vers num="4.1.249.1039" />
-        <vers num="4.1.249.1040" />
-        <vers num="4.1.249.1041" />
-        <vers num="4.1.249.1042" />
-        <vers num="4.1.249.1043" />
-        <vers num="4.1.249.1044" />
-        <vers num="4.1.249.1045" />
-        <vers num="4.1.249.1046" />
-        <vers num="4.1.249.1047" />
-        <vers num="4.1.249.1048" />
-        <vers num="4.1.249.1049" />
-        <vers num="4.1.249.1050" />
-        <vers num="4.1.249.1051" />
-        <vers num="4.1.249.1052" />
-        <vers num="4.1.249.1053" />
-        <vers num="4.1.249.1054" />
-        <vers num="4.1.249.1055" />
-        <vers num="4.1.249.1056" />
-        <vers num="4.1.249.1057" />
-        <vers num="4.1.249.1058" />
-        <vers num="4.1.249.1059" />
-        <vers num="4.1.249.1060" />
-        <vers num="4.1.249.1061" />
-        <vers num="4.1.249.1062" />
-        <vers num="4.1.249.1063" />
-        <vers num="4.1.249.1064" />
-        <vers num="5.0.306.0" />
-        <vers num="5.0.306.1" />
-        <vers num="5.0.307.1" />
-        <vers num="5.0.307.10" />
-        <vers num="5.0.307.11" />
-        <vers num="5.0.307.3" />
-        <vers num="5.0.307.4" />
-        <vers num="5.0.307.5" />
-        <vers num="5.0.307.6" />
-        <vers num="5.0.307.7" />
-        <vers num="5.0.307.8" />
-        <vers num="5.0.307.9" />
-        <vers num="5.0.308.0" />
-        <vers num="5.0.309.0" />
-        <vers num="5.0.313.0" />
-        <vers num="5.0.314.0" />
-        <vers num="5.0.314.1" />
-        <vers num="5.0.315.0" />
-        <vers num="5.0.316.0" />
-        <vers num="5.0.317.0" />
-        <vers num="5.0.317.1" />
-        <vers num="5.0.317.2" />
-        <vers num="5.0.318.0" />
-        <vers num="5.0.319.0" />
-        <vers num="5.0.320.0" />
-        <vers num="5.0.321.0" />
-        <vers num="5.0.322.0" />
-        <vers num="5.0.322.1" />
-        <vers num="5.0.322.2" />
-        <vers num="5.0.323.0" />
-        <vers num="5.0.324.0" />
-        <vers num="5.0.325.0" />
-        <vers num="5.0.326.0" />
-        <vers num="5.0.327.0" />
-        <vers num="5.0.328.0" />
-        <vers num="5.0.329.0" />
-        <vers num="5.0.330.0" />
-        <vers num="5.0.332.0" />
-        <vers num="5.0.333.0" />
-        <vers num="5.0.334.0" />
-        <vers num="5.0.335.0" />
-        <vers num="5.0.335.1" />
-        <vers num="5.0.335.2" />
-        <vers num="5.0.335.3" />
-        <vers num="5.0.335.4" />
-        <vers num="5.0.336.0" />
-        <vers num="5.0.337.0" />
-        <vers num="5.0.338.0" />
-        <vers num="5.0.339.0" />
-        <vers num="5.0.340.0" />
-        <vers num="5.0.341.0" />
-        <vers num="5.0.342.0" />
-        <vers num="5.0.342.1" />
-        <vers num="5.0.342.2" />
-        <vers num="5.0.342.3" />
-        <vers num="5.0.342.4" />
-        <vers num="5.0.342.5" />
-        <vers num="5.0.342.6" />
-        <vers num="5.0.342.7" />
-        <vers num="5.0.342.8" />
-        <vers num="5.0.342.9" />
-        <vers num="5.0.343.0" />
-        <vers num="5.0.344.0" />
-        <vers num="5.0.345.0" />
-        <vers num="5.0.346.0" />
-        <vers num="5.0.347.0" />
-        <vers num="5.0.348.0" />
-        <vers num="5.0.349.0" />
-        <vers num="5.0.350.0" />
-        <vers num="5.0.350.1" />
-        <vers num="5.0.351.0" />
-        <vers num="5.0.353.0" />
-        <vers num="5.0.354.0" />
-        <vers num="5.0.354.1" />
-        <vers num="5.0.355.0" />
-        <vers num="5.0.356.0" />
-        <vers num="5.0.356.1" />
-        <vers num="5.0.356.2" />
-        <vers num="5.0.357.0" />
-        <vers num="5.0.358.0" />
-        <vers num="5.0.359.0" />
-        <vers num="5.0.360.0" />
-        <vers num="5.0.360.3" />
-        <vers num="5.0.360.4" />
-        <vers num="5.0.360.5" />
-        <vers num="5.0.361.0" />
-        <vers num="5.0.362.0" />
-        <vers num="5.0.363.0" />
-        <vers num="5.0.364.0" />
-        <vers num="5.0.365.0" />
-        <vers num="5.0.366.0" />
-        <vers num="5.0.366.1" />
-        <vers num="5.0.366.2" />
-        <vers num="5.0.366.3" />
-        <vers num="5.0.366.4" />
-        <vers num="5.0.367.0" />
-        <vers num="5.0.368.0" />
-        <vers num="5.0.369.0" />
-        <vers num="5.0.369.1" />
-        <vers num="5.0.369.2" />
-        <vers num="5.0.370.0" />
-        <vers num="5.0.371.0" />
-        <vers num="5.0.372.0" />
-        <vers num="5.0.373.0" />
-        <vers num="5.0.374.0" />
-        <vers num="5.0.375.0" />
-        <vers num="5.0.375.1" />
-        <vers num="5.0.375.10" />
-        <vers num="5.0.375.11" />
-        <vers num="5.0.375.12" />
-        <vers num="5.0.375.125" />
-        <vers num="5.0.375.126" />
-        <vers num="5.0.375.127" />
-        <vers num="5.0.375.13" />
-        <vers num="5.0.375.14" />
-        <vers num="5.0.375.15" />
-        <vers num="5.0.375.16" />
-        <vers num="5.0.375.17" />
-        <vers num="5.0.375.18" />
-        <vers num="5.0.375.19" />
-        <vers num="5.0.375.2" />
-        <vers num="5.0.375.20" />
-        <vers num="5.0.375.21" />
-        <vers num="5.0.375.22" />
-        <vers num="5.0.375.23" />
-        <vers num="5.0.375.25" />
-        <vers num="5.0.375.26" />
-        <vers num="5.0.375.27" />
-        <vers num="5.0.375.28" />
-        <vers num="5.0.375.29" />
-        <vers num="5.0.375.3" />
-        <vers num="5.0.375.30" />
-        <vers num="5.0.375.31" />
-        <vers num="5.0.375.32" />
-        <vers num="5.0.375.33" />
-        <vers num="5.0.375.34" />
-        <vers num="5.0.375.35" />
-        <vers num="5.0.375.36" />
-        <vers num="5.0.375.37" />
-        <vers num="5.0.375.38" />
-        <vers num="5.0.375.39" />
-        <vers num="5.0.375.4" />
-        <vers num="5.0.375.40" />
-        <vers num="5.0.375.41" />
-        <vers num="5.0.375.42" />
-        <vers num="5.0.375.43" />
-        <vers num="5.0.375.44" />
-        <vers num="5.0.375.45" />
-        <vers num="5.0.375.46" />
-        <vers num="5.0.375.47" />
-        <vers num="5.0.375.48" />
-        <vers num="5.0.375.49" />
-        <vers num="5.0.375.5" />
-        <vers num="5.0.375.50" />
-        <vers num="5.0.375.51" />
-        <vers num="5.0.375.52" />
-        <vers num="5.0.375.53" />
-        <vers num="5.0.375.54" />
-        <vers num="5.0.375.55" />
-        <vers num="5.0.375.56" />
-        <vers num="5.0.375.57" />
-        <vers num="5.0.375.58" />
-        <vers num="5.0.375.59" />
-        <vers num="5.0.375.6" />
-        <vers num="5.0.375.60" />
-        <vers num="5.0.375.61" />
-        <vers num="5.0.375.62" />
-        <vers num="5.0.375.63" />
-        <vers num="5.0.375.64" />
-        <vers num="5.0.375.65" />
-        <vers num="5.0.375.66" />
-        <vers num="5.0.375.67" />
-        <vers num="5.0.375.68" />
-        <vers num="5.0.375.69" />
-        <vers num="5.0.375.7" />
-        <vers num="5.0.375.70" />
-        <vers num="5.0.375.71" />
-        <vers num="5.0.375.72" />
-        <vers num="5.0.375.73" />
-        <vers num="5.0.375.74" />
-        <vers num="5.0.375.75" />
-        <vers num="5.0.375.76" />
-        <vers num="5.0.375.77" />
-        <vers num="5.0.375.78" />
-        <vers num="5.0.375.79" />
-        <vers num="5.0.375.8" />
-        <vers num="5.0.375.80" />
-        <vers num="5.0.375.81" />
-        <vers num="5.0.375.82" />
-        <vers num="5.0.375.83" />
-        <vers num="5.0.375.84" />
-        <vers num="5.0.375.85" />
-        <vers num="5.0.375.86" />
-        <vers num="5.0.375.87" />
-        <vers num="5.0.375.88" />
-        <vers num="5.0.375.89" />
-        <vers num="5.0.375.9" />
-        <vers num="5.0.375.90" />
-        <vers num="5.0.375.91" />
-        <vers num="5.0.375.92" />
-        <vers num="5.0.375.93" />
-        <vers num="5.0.375.94" />
-        <vers num="5.0.375.95" />
-        <vers num="5.0.375.96" />
-        <vers num="5.0.375.97" />
-        <vers num="5.0.375.98" />
-        <vers num="5.0.375.99" />
-        <vers num="5.0.376.0" />
-        <vers num="5.0.378.0" />
-        <vers num="5.0.379.0" />
-        <vers num="5.0.380.0" />
-        <vers num="5.0.381.0" />
-        <vers num="5.0.382.0" />
-        <vers num="5.0.382.3" />
-        <vers num="5.0.383.0" />
-        <vers num="5.0.384.0" />
-        <vers num="5.0.385.0" />
-        <vers num="5.0.386.0" />
-        <vers num="5.0.387.0" />
-        <vers num="5.0.390.0" />
-        <vers num="5.0.391.0" />
-        <vers num="5.0.392.0" />
-        <vers num="5.0.393.0" />
-        <vers num="5.0.394.0" />
-        <vers num="5.0.395.0" />
-        <vers num="5.0.396.0" />
-        <vers num="6.0.397.0" />
-        <vers num="6.0.398.0" />
-        <vers num="6.0.399.0" />
-        <vers num="6.0.400.0" />
-        <vers num="6.0.401.0" />
-        <vers num="6.0.401.1" />
-        <vers num="6.0.403.0" />
-        <vers num="6.0.404.0" />
-        <vers num="6.0.404.1" />
-        <vers num="6.0.404.2" />
-        <vers num="6.0.405.0" />
-        <vers num="6.0.406.0" />
-        <vers num="6.0.407.0" />
-        <vers num="6.0.408.0" />
-        <vers num="6.0.408.1" />
-        <vers num="6.0.408.10" />
-        <vers num="6.0.408.2" />
-        <vers num="6.0.408.3" />
-        <vers num="6.0.408.4" />
-        <vers num="6.0.408.5" />
-        <vers num="6.0.408.6" />
-        <vers num="6.0.408.7" />
-        <vers num="6.0.408.8" />
-        <vers num="6.0.408.9" />
-        <vers num="6.0.409.0" />
-        <vers num="6.0.410.0" />
-        <vers num="6.0.411.0" />
-        <vers num="6.0.412.0" />
-        <vers num="6.0.413.0" />
-        <vers num="6.0.414.0" />
-        <vers num="6.0.415.0" />
-        <vers num="6.0.415.1" />
-        <vers num="6.0.416.0" />
-        <vers num="6.0.416.1" />
-        <vers num="6.0.417.0" />
-        <vers num="6.0.418.0" />
-        <vers num="6.0.418.1" />
-        <vers num="6.0.418.2" />
-        <vers num="6.0.418.3" />
-        <vers num="6.0.418.4" />
-        <vers num="6.0.418.5" />
-        <vers num="6.0.418.6" />
-        <vers num="6.0.418.7" />
-        <vers num="6.0.418.8" />
-        <vers num="6.0.418.9" />
-        <vers num="6.0.419.0" />
-        <vers num="6.0.421.0" />
-        <vers num="6.0.422.0" />
-        <vers num="6.0.423.0" />
-        <vers num="6.0.424.0" />
-        <vers num="6.0.425.0" />
-        <vers num="6.0.426.0" />
-        <vers num="6.0.427.0" />
-        <vers num="6.0.428.0" />
-        <vers num="6.0.430.0" />
-        <vers num="6.0.431.0" />
-        <vers num="6.0.432.0" />
-        <vers num="6.0.433.0" />
-        <vers num="6.0.434.0" />
-        <vers num="6.0.435.0" />
-        <vers num="6.0.436.0" />
-        <vers num="6.0.437.0" />
-        <vers num="6.0.437.1" />
-        <vers num="6.0.437.2" />
-        <vers num="6.0.437.3" />
-        <vers num="6.0.438.0" />
-        <vers num="6.0.440.0" />
-        <vers num="6.0.441.0" />
-        <vers num="6.0.443.0" />
-        <vers num="6.0.444.0" />
-        <vers num="6.0.445.0" />
-        <vers num="6.0.445.1" />
-        <vers num="6.0.446.0" />
-        <vers num="6.0.447.0" />
-        <vers num="6.0.447.1" />
-        <vers num="6.0.447.2" />
-        <vers num="6.0.449.0" />
-        <vers num="6.0.450.0" />
-        <vers num="6.0.450.1" />
-        <vers num="6.0.450.2" />
-        <vers num="6.0.450.3" />
-        <vers num="6.0.450.4" />
-        <vers num="6.0.451.0" />
-        <vers num="6.0.452.0" />
-        <vers num="6.0.452.1" />
-        <vers num="6.0.453.0" />
-        <vers num="6.0.453.1" />
-        <vers num="6.0.454.0" />
-        <vers num="6.0.455.0" />
-        <vers num="6.0.456.0" />
-        <vers num="6.0.457.0" />
-        <vers num="6.0.458.0" />
-        <vers num="6.0.458.1" />
-        <vers num="6.0.458.2" />
-        <vers num="6.0.459.0" />
-        <vers num="6.0.460.0" />
-        <vers num="6.0.461.0" />
-        <vers num="6.0.462.0" />
-        <vers num="6.0.464.1" />
-        <vers num="6.0.465.1" />
-        <vers num="6.0.465.2" />
-        <vers num="6.0.466.0" />
-        <vers num="6.0.466.1" />
-        <vers num="6.0.466.2" />
-        <vers num="6.0.466.3" />
-        <vers num="6.0.466.4" />
-        <vers num="6.0.466.5" />
-        <vers num="6.0.466.6" />
-        <vers num="6.0.467.0" />
-        <vers num="6.0.469.0" />
-        <vers num="6.0.470.0" />
-        <vers num="6.0.471.0" />
-        <vers num="6.0.472.0" />
-        <vers num="6.0.472.1" />
-        <vers num="6.0.472.10" />
-        <vers num="6.0.472.11" />
-        <vers num="6.0.472.12" />
-        <vers num="6.0.472.13" />
-        <vers num="6.0.472.14" />
-        <vers num="6.0.472.15" />
-        <vers num="6.0.472.16" />
-        <vers num="6.0.472.17" />
-        <vers num="6.0.472.18" />
-        <vers num="6.0.472.19" />
-        <vers num="6.0.472.2" />
-        <vers num="6.0.472.20" />
-        <vers num="6.0.472.21" />
-        <vers num="6.0.472.22" />
-        <vers num="6.0.472.23" />
-        <vers num="6.0.472.24" />
-        <vers num="6.0.472.25" />
-        <vers num="6.0.472.26" />
-        <vers num="6.0.472.27" />
-        <vers num="6.0.472.28" />
-        <vers num="6.0.472.29" />
-        <vers num="6.0.472.3" />
-        <vers num="6.0.472.30" />
-        <vers num="6.0.472.31" />
-        <vers num="6.0.472.32" />
-        <vers num="6.0.472.33" />
-        <vers num="6.0.472.34" />
-        <vers num="6.0.472.35" />
-        <vers num="6.0.472.36" />
-        <vers num="6.0.472.37" />
-        <vers num="6.0.472.38" />
-        <vers num="6.0.472.39" />
-        <vers num="6.0.472.4" />
-        <vers num="6.0.472.40" />
-        <vers num="6.0.472.41" />
-        <vers num="6.0.472.42" />
-        <vers num="6.0.472.43" />
-        <vers num="6.0.472.44" />
-        <vers num="6.0.472.45" />
-        <vers num="6.0.472.46" />
-        <vers num="6.0.472.47" />
-        <vers num="6.0.472.48" />
-        <vers num="6.0.472.49" />
-        <vers num="6.0.472.5" />
-        <vers num="6.0.472.50" />
-        <vers num="6.0.472.51" />
-        <vers num="6.0.472.52" />
-        <vers num="6.0.472.53" />
-        <vers num="6.0.472.54" />
-        <vers num="6.0.472.55" />
-        <vers num="6.0.472.56" />
-        <vers num="6.0.472.57" />
-        <vers num="6.0.472.58" />
-        <vers num="6.0.472.59" />
-        <vers num="6.0.472.6" />
-        <vers num="6.0.472.60" />
-        <vers num="6.0.472.61" />
-        <vers num="6.0.472.62" />
-        <vers num="6.0.472.63" />
-        <vers num="6.0.472.7" />
-        <vers num="6.0.472.8" />
-        <vers num="6.0.472.9" />
-        <vers num="6.0.473.0" />
-        <vers num="6.0.474.0" />
-        <vers num="6.0.475.0" />
-        <vers num="6.0.476.0" />
-        <vers num="6.0.477.0" />
-        <vers num="6.0.478.0" />
-        <vers num="6.0.479.0" />
-        <vers num="6.0.480.0" />
-        <vers num="6.0.481.0" />
-        <vers num="6.0.482.0" />
-        <vers num="6.0.483.0" />
-        <vers num="6.0.484.0" />
-        <vers num="6.0.485.0" />
-        <vers num="6.0.486.0" />
-        <vers num="6.0.487.0" />
-        <vers num="6.0.488.0" />
-        <vers num="6.0.489.0" />
-        <vers num="6.0.490.0" />
-        <vers num="6.0.490.1" />
-        <vers num="6.0.491.0" />
-        <vers num="6.0.492.0" />
-        <vers num="6.0.493.0" />
-        <vers num="6.0.494.0" />
-        <vers num="6.0.495.0" />
-        <vers num="6.0.495.1" />
-        <vers num="6.0.496.0" />
-        <vers num="7.0.497.0" />
-        <vers num="7.0.498.0" />
-        <vers num="7.0.499.0" />
-        <vers num="7.0.499.1" />
-        <vers num="7.0.500.0" />
-        <vers num="7.0.500.1" />
-        <vers num="7.0.503.0" />
-        <vers num="7.0.503.1" />
-        <vers num="7.0.504.0" />
-        <vers num="7.0.505.0" />
-        <vers num="7.0.506.0" />
-        <vers num="7.0.507.0" />
-        <vers num="7.0.507.1" />
-        <vers num="7.0.507.2" />
-        <vers num="7.0.507.3" />
-        <vers num="7.0.509.0" />
-        <vers num="7.0.510.0" />
-        <vers num="7.0.511.1" />
-        <vers num="7.0.511.2" />
-        <vers num="7.0.511.4" />
-        <vers num="7.0.512.0" />
-        <vers num="7.0.513.0" />
-        <vers num="7.0.514.0" />
-        <vers num="7.0.514.1" />
-        <vers num="7.0.515.0" />
-        <vers num="7.0.516.0" />
-        <vers num="7.0.517.0" />
-        <vers num="7.0.517.10" />
-        <vers num="7.0.517.11" />
-        <vers num="7.0.517.12" />
-        <vers num="7.0.517.13" />
-        <vers num="7.0.517.14" />
-        <vers num="7.0.517.16" />
-        <vers num="7.0.517.17" />
-        <vers num="7.0.517.18" />
-        <vers num="7.0.517.19" />
-        <vers num="7.0.517.2" />
-        <vers num="7.0.517.20" />
-        <vers num="7.0.517.21" />
-        <vers num="7.0.517.22" />
-        <vers num="7.0.517.23" />
-        <vers num="7.0.517.24" />
-        <vers num="7.0.517.25" />
-        <vers num="7.0.517.26" />
-        <vers num="7.0.517.27" />
-        <vers num="7.0.517.28" />
-        <vers num="7.0.517.29" />
-        <vers num="7.0.517.30" />
-        <vers num="7.0.517.31" />
-        <vers num="7.0.517.32" />
-        <vers num="7.0.517.33" />
-        <vers num="7.0.517.34" />
-        <vers num="7.0.517.35" />
-        <vers num="7.0.517.36" />
-        <vers num="7.0.517.37" />
-        <vers num="7.0.517.38" />
-        <vers num="7.0.517.39" />
-        <vers num="7.0.517.4" />
-        <vers num="7.0.517.40" />
-        <vers num="7.0.517.41" />
-        <vers num="7.0.517.42" />
-        <vers num="7.0.517.43" />
-        <vers num="7.0.517.44" />
-        <vers num="7.0.517.5" />
-        <vers num="7.0.517.6" />
-        <vers num="7.0.517.7" />
-        <vers num="7.0.517.8" />
-        <vers num="7.0.517.9" />
-        <vers num="7.0.518.0" />
-        <vers num="7.0.519.0" />
-        <vers num="7.0.520.0" />
-        <vers num="7.0.521.0" />
-        <vers num="7.0.522.0" />
-        <vers num="7.0.524.0" />
-        <vers num="7.0.525.0" />
-        <vers num="7.0.526.0" />
-        <vers num="7.0.528.0" />
-        <vers num="7.0.529.0" />
-        <vers num="7.0.529.1" />
-        <vers num="7.0.529.2" />
-        <vers num="7.0.530.0" />
-        <vers num="7.0.531.0" />
-        <vers num="7.0.531.1" />
-        <vers num="7.0.531.2" />
-        <vers num="7.0.535.1" />
-        <vers num="7.0.535.2" />
-        <vers num="7.0.536.0" />
-        <vers num="7.0.536.1" />
-        <vers num="7.0.536.2" />
-        <vers num="7.0.536.3" />
-        <vers num="7.0.536.4" />
-        <vers num="7.0.537.0" />
-        <vers num="7.0.538.0" />
-        <vers num="7.0.539.0" />
-        <vers num="7.0.540.0" />
-        <vers num="7.0.541.0" />
-        <vers num="7.0.542.0" />
-        <vers num="7.0.544.0" />
-        <vers num="7.0.547.0" />
-        <vers num="7.0.547.1" />
-        <vers num="7.0.548.0" />
-        <vers num="8.0.549.0" />
-        <vers num="8.0.550.0" />
-        <vers num="8.0.551.0" />
-        <vers num="8.0.551.1" />
-        <vers num="8.0.552.0" />
-        <vers num="8.0.552.1" />
-        <vers num="8.0.552.10" />
-        <vers num="8.0.552.100" />
-        <vers num="8.0.552.101" />
-        <vers num="8.0.552.102" />
-        <vers num="8.0.552.103" />
-        <vers num="8.0.552.104" />
-        <vers num="8.0.552.105" />
-        <vers num="8.0.552.11" />
-        <vers num="8.0.552.12" />
-        <vers num="8.0.552.13" />
-        <vers num="8.0.552.14" />
-        <vers num="8.0.552.15" />
-        <vers num="8.0.552.16" />
-        <vers num="8.0.552.17" />
-        <vers num="8.0.552.18" />
-        <vers num="8.0.552.19" />
-        <vers num="8.0.552.2" />
-        <vers num="8.0.552.20" />
-        <vers num="8.0.552.200" />
-        <vers num="8.0.552.201" />
-        <vers num="8.0.552.202" />
-        <vers num="8.0.552.203" />
-        <vers num="8.0.552.204" />
-        <vers num="8.0.552.205" />
-        <vers num="8.0.552.206" />
-        <vers num="8.0.552.207" />
-        <vers num="8.0.552.208" />
-        <vers num="8.0.552.209" />
-        <vers num="8.0.552.21" />
-        <vers num="8.0.552.210" />
-        <vers num="8.0.552.211" />
-        <vers num="8.0.552.212" />
-        <vers num="8.0.552.213" />
-        <vers num="8.0.552.214" />
-        <vers num="8.0.552.215" />
-        <vers num="8.0.552.216" />
-        <vers num="8.0.552.217" />
-        <vers num="8.0.552.218" />
-        <vers num="8.0.552.219" />
-        <vers num="8.0.552.220" />
-        <vers num="8.0.552.221" />
-        <vers num="8.0.552.222" />
-        <vers num="8.0.552.223" />
-        <vers num="8.0.552.224" />
-        <vers num="8.0.552.225" />
-        <vers num="8.0.552.226" />
-        <vers num="8.0.552.227" />
-        <vers num="8.0.552.228" />
-        <vers num="8.0.552.229" />
-        <vers num="8.0.552.23" />
-        <vers num="8.0.552.230" />
-        <vers num="8.0.552.231" />
-        <vers num="8.0.552.232" />
-        <vers num="8.0.552.233" />
-        <vers num="8.0.552.234" />
-        <vers num="8.0.552.235" />
-        <vers num="8.0.552.237" />
-        <vers num="8.0.552.24" />
-        <vers num="8.0.552.25" />
-        <vers num="8.0.552.26" />
-        <vers num="8.0.552.27" />
-        <vers num="8.0.552.28" />
-        <vers num="8.0.552.29" />
-        <vers num="8.0.552.300" />
-        <vers num="8.0.552.301" />
-        <vers num="8.0.552.302" />
-        <vers num="8.0.552.303" />
-        <vers num="8.0.552.304" />
-        <vers num="8.0.552.305" />
-        <vers num="8.0.552.306" />
-        <vers num="8.0.552.307" />
-        <vers num="8.0.552.308" />
-        <vers num="8.0.552.309" />
-        <vers num="8.0.552.310" />
-        <vers num="8.0.552.311" />
-        <vers num="8.0.552.312" />
-        <vers num="8.0.552.313" />
-        <vers num="8.0.552.315" />
-        <vers num="8.0.552.316" />
-        <vers num="8.0.552.317" />
-        <vers num="8.0.552.318" />
-        <vers num="8.0.552.319" />
-        <vers num="8.0.552.320" />
-        <vers num="8.0.552.321" />
-        <vers num="8.0.552.322" />
-        <vers num="8.0.552.323" />
-        <vers num="8.0.552.324" />
-        <vers num="8.0.552.325" />
-        <vers num="8.0.552.326" />
-        <vers num="8.0.552.327" />
-        <vers num="8.0.552.328" />
-        <vers num="8.0.552.329" />
-        <vers num="8.0.552.330" />
-        <vers num="8.0.552.331" />
-        <vers num="8.0.552.332" />
-        <vers num="8.0.552.333" />
-        <vers num="8.0.552.334" />
-        <vers num="8.0.552.335" />
-        <vers num="8.0.552.336" />
-        <vers num="8.0.552.337" />
-        <vers num="8.0.552.338" />
-        <vers num="8.0.552.339" />
-        <vers num="8.0.552.340" />
-        <vers num="8.0.552.341" />
-        <vers num="8.0.552.342" />
-        <vers num="8.0.552.343" />
-        <vers num="8.0.552.344" />
-        <vers num="8.0.552.35" />
-        <vers num="8.0.552.4" />
-        <vers num="8.0.552.40" />
-        <vers num="8.0.552.41" />
-        <vers num="8.0.552.42" />
-        <vers num="8.0.552.43" />
-        <vers num="8.0.552.44" />
-        <vers num="8.0.552.45" />
-        <vers num="8.0.552.47" />
-        <vers num="8.0.552.48" />
-        <vers num="8.0.552.49" />
-        <vers num="8.0.552.5" />
-        <vers num="8.0.552.50" />
-        <vers num="8.0.552.51" />
-        <vers num="8.0.552.52" />
-        <vers num="8.0.552.6" />
-        <vers num="8.0.552.7" />
-        <vers num="8.0.552.8" />
-        <vers num="8.0.552.9" />
-        <vers num="8.0.553.0" />
-        <vers num="8.0.554.0" />
-        <vers num="8.0.555.0" />
-        <vers num="8.0.556.0" />
-        <vers num="8.0.557.0" />
-        <vers num="8.0.558.0" />
-        <vers num="8.0.559.0" />
-        <vers num="8.0.560.0" />
-        <vers num="8.0.561.0" />
-        <vers num="9.0.562.0" />
-        <vers num="9.0.563.0" />
-        <vers num="9.0.564.0" />
-        <vers num="9.0.565.0" />
-        <vers num="9.0.566.0" />
-        <vers num="9.0.567.0" />
-        <vers num="9.0.568.0" />
-        <vers num="9.0.569.0" />
-        <vers num="9.0.570.0" />
-        <vers num="9.0.570.1" />
-        <vers num="9.0.571.0" />
-        <vers num="9.0.572.0" />
-        <vers num="9.0.572.1" />
-        <vers num="9.0.573.0" />
-        <vers num="9.0.574.0" />
-        <vers num="9.0.575.0" />
-        <vers num="9.0.576.0" />
-        <vers num="9.0.577.0" />
-        <vers num="9.0.578.0" />
-        <vers num="9.0.579.0" />
-        <vers num="9.0.580.0" />
-        <vers num="9.0.581.0" />
-        <vers num="9.0.582.0" />
-        <vers num="9.0.583.0" />
-        <vers num="9.0.584.0" />
-        <vers num="9.0.585.0" />
-        <vers num="9.0.586.0" />
-        <vers num="9.0.587.0" />
-        <vers num="9.0.587.1" />
-        <vers num="9.0.588.0" />
-        <vers num="9.0.589.0" />
-        <vers num="9.0.590.0" />
-        <vers num="9.0.591.0" />
-        <vers num="9.0.592.0" />
-        <vers num="9.0.593.0" />
-        <vers num="9.0.594.0" />
-        <vers num="9.0.595.0" />
-        <vers num="9.0.596.0" />
-        <vers num="9.0.597.0" />
-        <vers num="9.0.597.1" />
-        <vers num="9.0.597.10" />
-        <vers num="9.0.597.100" />
-        <vers num="9.0.597.101" />
-        <vers num="9.0.597.102" />
-        <vers num="9.0.597.106" />
-        <vers num="9.0.597.107" />
-        <vers num="9.0.597.11" />
-        <vers num="9.0.597.12" />
-        <vers num="9.0.597.14" />
-        <vers num="9.0.597.15" />
-        <vers num="9.0.597.16" />
-        <vers num="9.0.597.17" />
-        <vers num="9.0.597.18" />
-        <vers num="9.0.597.19" />
-        <vers num="9.0.597.2" />
-        <vers num="9.0.597.20" />
-        <vers num="9.0.597.21" />
-        <vers num="9.0.597.22" />
-        <vers num="9.0.597.23" />
-        <vers num="9.0.597.24" />
-        <vers num="9.0.597.25" />
-        <vers num="9.0.597.26" />
-        <vers num="9.0.597.27" />
-        <vers num="9.0.597.28" />
-        <vers num="9.0.597.29" />
-        <vers num="9.0.597.30" />
-        <vers num="9.0.597.31" />
-        <vers num="9.0.597.32" />
-        <vers num="9.0.597.33" />
-        <vers num="9.0.597.34" />
-        <vers num="9.0.597.35" />
-        <vers num="9.0.597.36" />
-        <vers num="9.0.597.37" />
-        <vers num="9.0.597.38" />
-        <vers num="9.0.597.39" />
-        <vers num="9.0.597.4" />
-        <vers num="9.0.597.40" />
-        <vers num="9.0.597.41" />
-        <vers num="9.0.597.42" />
-        <vers num="9.0.597.44" />
-        <vers num="9.0.597.45" />
-        <vers num="9.0.597.46" />
-        <vers num="9.0.597.47" />
-        <vers num="9.0.597.5" />
-        <vers num="9.0.597.54" />
-        <vers num="9.0.597.55" />
-        <vers num="9.0.597.56" />
-        <vers num="9.0.597.57" />
-        <vers num="9.0.597.58" />
-        <vers num="9.0.597.59" />
-        <vers num="9.0.597.60" />
-        <vers num="9.0.597.62" />
-        <vers num="9.0.597.63" />
-        <vers num="9.0.597.64" />
-        <vers num="9.0.597.65" />
-        <vers num="9.0.597.66" />
-        <vers num="9.0.597.67" />
-        <vers num="9.0.597.68" />
-        <vers num="9.0.597.69" />
-        <vers num="9.0.597.7" />
-        <vers num="9.0.597.70" />
-        <vers num="9.0.597.71" />
-        <vers num="9.0.597.72" />
-        <vers num="9.0.597.73" />
-        <vers num="9.0.597.74" />
-        <vers num="9.0.597.75" />
-        <vers num="9.0.597.76" />
-        <vers num="9.0.597.77" />
-        <vers num="9.0.597.78" />
-        <vers num="9.0.597.79" />
-        <vers num="9.0.597.8" />
-        <vers num="9.0.597.80" />
-        <vers num="9.0.597.81" />
-        <vers num="9.0.597.82" />
-        <vers num="9.0.597.83" />
-        <vers num="9.0.597.84" />
-        <vers num="9.0.597.85" />
-        <vers num="9.0.597.86" />
-        <vers num="9.0.597.88" />
-        <vers num="9.0.597.9" />
-        <vers num="9.0.597.90" />
-        <vers num="9.0.597.92" />
-        <vers num="9.0.597.94" />
-        <vers num="9.0.597.96" />
-        <vers num="9.0.597.97" />
-        <vers num="9.0.597.98" />
-        <vers num="9.0.597.99" />
-        <vers num="9.0.598.0" />
-        <vers num="9.0.599.0" />
-        <vers num="9.0.600.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0726" published="2012-04-22" name="CVE-2012-0726" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The default configuration of TLS in IBM Tivoli Directory Server (TDS) 6.3 and earlier supports the (1) NULL-MD5 and (2) NULL-SHA ciphers, which allows remote attackers to trigger unencrypted communication via the TLS Handshake Protocol.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026939" source="SECTRACK">1026939</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg1IO16036" source="AIXAPAR">IO16036</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg1IO16035" source="AIXAPAR">IO16035</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg1IO15761" source="AIXAPAR">IO15761</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21591272" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21591272</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="tivoli_directory_server">
-        <vers num="3.2.2" />
-        <vers num="4.1" />
-        <vers num="5.2.0" />
-        <vers num="6.0" />
-        <vers num="6.0.0" />
-        <vers num="6.0.0.69" />
-        <vers num="6.0.0.7" />
-        <vers num="6.0.0.8" />
-        <vers num="6.1.0" />
-        <vers num="6.1.0.45" />
-        <vers num="6.1.0.46" />
-        <vers num="6.1.0.47" />
-        <vers num="6.1.0.48" />
-        <vers num="6.2.0" />
-        <vers num="6.2.0.19" />
-        <vers num="6.2.0.20" />
-        <vers num="6.2.0.21" />
-        <vers num="6.2.0.22" />
-        <vers prev="1" num="6.3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0727" published="2012-09-10" name="CVE-2012-0727" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74306" source="XF">ibm-maximo-sql-injection-iv17963(74306)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21610081" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21610081</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IV17963" source="AIXAPAR">IV17963</ref>
-      <ref url="http://secunia.com/advisories/50551" source="SECUNIA" adv="1">50551</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="change_and_configuration_management_database">
-        <vers num="6.0" />
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_asset_management">
-        <vers num="7.5.0.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_service_desk">
-        <vers num="6.2" />
-      </prod>
-      <prod vendor="ibm" name="smartcloud_control_desk">
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_asset_management_for_it">
-        <vers num="6.0" />
-        <vers num="6.2" />
-        <vers num="7.0" />
-        <vers num="7.1" />
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_service_request_manager">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0728" published="2012-09-10" name="CVE-2012-0728" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74307" source="XF">ibm-maximo-sql-injection-iv17964(74307)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21610081" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21610081</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IV17964" source="AIXAPAR">IV17964</ref>
-      <ref url="http://secunia.com/advisories/50551" source="SECUNIA" adv="1">50551</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="change_and_configuration_management_database">
-        <vers num="6.0" />
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_asset_management">
-        <vers num="7.1.0.0" />
-        <vers num="7.5.0.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_service_desk">
-        <vers num="6.2" />
-      </prod>
-      <prod vendor="ibm" name="smartcloud_control_desk">
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_asset_management_for_it">
-        <vers num="6.0" />
-        <vers num="6.2" />
-        <vers num="7.0" />
-        <vers num="7.1" />
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_service_request_manager">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0729" published="2012-05-03" name="CVE-2012-0729" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">Unrestricted file upload vulnerability in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allows remote authenticated users to execute arbitrary ASP.NET code by uploading a .aspx file, and then accessing it via unspecified vectors.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/434.html
-
-'Unrestricted Upload of File with Dangerous Type'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74366" source="XF">appscan-file-upload(74366)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21592188" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21592188</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="rational_appscan">
-        <vers num="5.2" edition="" />
-        <vers num="5.2" edition=":enterprise" />
-        <vers num="5.4" edition="" />
-        <vers num="5.4" edition=":enterprise" />
-        <vers num="5.5.0" edition="" />
-        <vers num="5.5.0" edition=":enterprise" />
-        <vers num="5.5.0.1" edition="" />
-        <vers num="5.5.0.1" edition=":enterprise" />
-        <vers num="5.5.0.2" edition="" />
-        <vers num="5.5.0.2" edition=":enterprise" />
-        <vers num="5.6.0" edition="" />
-        <vers num="5.6.0" edition=":enterprise" />
-        <vers num="5.6.0.3" edition="" />
-        <vers num="5.6.0.3" edition=":enterprise" />
-        <vers num="8.0.0" edition="" />
-        <vers num="8.0.0" edition=":enterprise" />
-        <vers num="8.0.0.1" edition="" />
-        <vers num="8.0.0.1" edition=":enterprise" />
-        <vers num="8.0.0.2" edition="" />
-        <vers num="8.0.0.2" edition=":enterprise" />
-        <vers num="8.0.0.3" edition="" />
-        <vers num="8.0.0.3" edition=":enterprise" />
-        <vers num="8.0.1" edition="" />
-        <vers num="8.0.1" edition=":enterprise" />
-        <vers num="8.0.1.1" edition="" />
-        <vers num="8.0.1.1" edition=":enterprise" />
-        <vers num="8.5.0" edition="" />
-        <vers num="8.5.0" edition=":enterprise" />
-        <vers num="8.5.0.0" edition="" />
-        <vers num="8.5.0.0" edition=":enterprise" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0730" published="2012-05-03" name="CVE-2012-0730" modified="2012-05-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allow remote attackers to hijack the authentication of administrators for requests that create administrative accounts.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74370" source="XF">ae-multiple-csrf(74370)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21592188" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21592188</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="rational_appscan">
-        <vers num="5.2" edition="" />
-        <vers num="5.2" edition=":enterprise" />
-        <vers num="5.4" edition="" />
-        <vers num="5.4" edition=":enterprise" />
-        <vers num="5.5.0" edition="" />
-        <vers num="5.5.0" edition=":enterprise" />
-        <vers num="5.5.0.1" edition="" />
-        <vers num="5.5.0.1" edition=":enterprise" />
-        <vers num="5.5.0.2" edition="" />
-        <vers num="5.5.0.2" edition=":enterprise" />
-        <vers num="5.6.0" edition="" />
-        <vers num="5.6.0" edition=":enterprise" />
-        <vers num="5.6.0.3" edition="" />
-        <vers num="5.6.0.3" edition=":enterprise" />
-        <vers num="8.0.0" edition="" />
-        <vers num="8.0.0" edition=":enterprise" />
-        <vers num="8.0.0.1" edition="" />
-        <vers num="8.0.0.1" edition=":enterprise" />
-        <vers num="8.0.0.2" edition="" />
-        <vers num="8.0.0.2" edition=":enterprise" />
-        <vers num="8.0.0.3" edition="" />
-        <vers num="8.0.0.3" edition=":enterprise" />
-        <vers num="8.0.1" edition="" />
-        <vers num="8.0.1" edition=":enterprise" />
-        <vers num="8.0.1.1" edition="" />
-        <vers num="8.0.1.1" edition=":enterprise" />
-        <vers num="8.5.0" edition="" />
-        <vers num="8.5.0" edition=":enterprise" />
-        <vers num="8.5.0.0" edition="" />
-        <vers num="8.5.0.0" edition=":enterprise" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0731" published="2012-05-03" name="CVE-2012-0731" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:N/A:N)" CVSS_score="6.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="8.0" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not prevent service-account impersonation, which allows remote authenticated users to read arbitrary files via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74371" source="XF">ae-config-info-disclosure(74371)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21592188" source="CONFIRM">http://www.ibm.com/support/docview.wss?uid=swg21592188</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="rational_appscan">
-        <vers num="5.2" edition="" />
-        <vers num="5.2" edition=":enterprise" />
-        <vers num="5.4" edition="" />
-        <vers num="5.4" edition=":enterprise" />
-        <vers num="5.5.0" edition="" />
-        <vers num="5.5.0" edition=":enterprise" />
-        <vers num="5.5.0.1" edition="" />
-        <vers num="5.5.0.1" edition=":enterprise" />
-        <vers num="5.5.0.2" edition="" />
-        <vers num="5.5.0.2" edition=":enterprise" />
-        <vers num="5.6.0" edition="" />
-        <vers num="5.6.0" edition=":enterprise" />
-        <vers num="5.6.0.3" edition="" />
-        <vers num="5.6.0.3" edition=":enterprise" />
-        <vers num="8.0.0" edition="" />
-        <vers num="8.0.0" edition=":enterprise" />
-        <vers num="8.0.0.1" edition="" />
-        <vers num="8.0.0.1" edition=":enterprise" />
-        <vers num="8.0.0.2" edition="" />
-        <vers num="8.0.0.2" edition=":enterprise" />
-        <vers num="8.0.0.3" edition="" />
-        <vers num="8.0.0.3" edition=":enterprise" />
-        <vers num="8.0.1" edition="" />
-        <vers num="8.0.1" edition=":enterprise" />
-        <vers num="8.0.1.1" edition="" />
-        <vers num="8.0.1.1" edition=":enterprise" />
-        <vers num="8.5.0" edition="" />
-        <vers num="8.5.0" edition=":enterprise" />
-        <vers num="8.5.0.0" edition="" />
-        <vers num="8.5.0.0" edition=":enterprise" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0732" published="2012-05-03" name="CVE-2012-0732" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The Enterprise Console client in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74389" source="XF">ae-ecc-spoofing(74389)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21592188" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21592188</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="rational_appscan">
-        <vers num="5.2" edition="" />
-        <vers num="5.2" edition=":enterprise" />
-        <vers num="5.4" edition="" />
-        <vers num="5.4" edition=":enterprise" />
-        <vers num="5.5.0" edition="" />
-        <vers num="5.5.0" edition=":enterprise" />
-        <vers num="5.5.0.1" edition="" />
-        <vers num="5.5.0.1" edition=":enterprise" />
-        <vers num="5.5.0.2" edition="" />
-        <vers num="5.5.0.2" edition=":enterprise" />
-        <vers num="5.6.0" edition="" />
-        <vers num="5.6.0" edition=":enterprise" />
-        <vers num="5.6.0.3" edition="" />
-        <vers num="5.6.0.3" edition=":enterprise" />
-        <vers num="8.0.0" edition="" />
-        <vers num="8.0.0" edition=":enterprise" />
-        <vers num="8.0.0.1" edition="" />
-        <vers num="8.0.0.1" edition=":enterprise" />
-        <vers num="8.0.0.2" edition="" />
-        <vers num="8.0.0.2" edition=":enterprise" />
-        <vers num="8.0.0.3" edition="" />
-        <vers num="8.0.0.3" edition=":enterprise" />
-        <vers num="8.0.1" edition="" />
-        <vers num="8.0.1" edition=":enterprise" />
-        <vers num="8.0.1.1" edition="" />
-        <vers num="8.0.1.1" edition=":enterprise" />
-        <vers num="8.5.0" edition="" />
-        <vers num="8.5.0" edition=":enterprise" />
-        <vers num="8.5.0.0" edition="" />
-        <vers num="8.5.0.0" edition=":enterprise" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0733" published="2012-05-03" name="CVE-2012-0733" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1, when Integrated Windows authentication is used, allows remote authenticated users to obtain administrative privileges by hijacking a session associated with the service account.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-      <sec_prot other="1" />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74374" source="XF">ae-serviceacct-session-hijacking(74374)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21592188" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21592188</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="rational_appscan">
-        <vers num="5.2" edition="" />
-        <vers num="5.2" edition=":enterprise" />
-        <vers num="5.4" edition="" />
-        <vers num="5.4" edition=":enterprise" />
-        <vers num="5.5.0" edition="" />
-        <vers num="5.5.0" edition=":enterprise" />
-        <vers num="5.5.0.1" edition="" />
-        <vers num="5.5.0.1" edition=":enterprise" />
-        <vers num="5.5.0.2" edition="" />
-        <vers num="5.5.0.2" edition=":enterprise" />
-        <vers num="5.6.0" edition="" />
-        <vers num="5.6.0" edition=":enterprise" />
-        <vers num="5.6.0.3" edition="" />
-        <vers num="5.6.0.3" edition=":enterprise" />
-        <vers num="8.0.0" edition="" />
-        <vers num="8.0.0" edition=":enterprise" />
-        <vers num="8.0.0.1" edition="" />
-        <vers num="8.0.0.1" edition=":enterprise" />
-        <vers num="8.0.0.2" edition="" />
-        <vers num="8.0.0.2" edition=":enterprise" />
-        <vers num="8.0.0.3" edition="" />
-        <vers num="8.0.0.3" edition=":enterprise" />
-        <vers num="8.0.1" edition="" />
-        <vers num="8.0.1" edition=":enterprise" />
-        <vers num="8.0.1.1" edition="" />
-        <vers num="8.0.1.1" edition=":enterprise" />
-        <vers num="8.5.0" edition="" />
-        <vers num="8.5.0" edition=":enterprise" />
-        <vers num="8.5.0.0" edition="" />
-        <vers num="8.5.0.0" edition=":enterprise" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0734" published="2012-05-03" name="CVE-2012-0734" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="7.6" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="4.9" CVSS_base_score="7.6">
-    <desc>
-      <descript source="cve">IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly import jobs, which allows man-in-the-middle attackers to obtain sensitive information or possibly have unspecified other impact via a crafted job.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74557" source="XF">ae-importjob-info-disclosure(74557)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21592188" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21592188</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="rational_appscan">
-        <vers num="5.2" edition="" />
-        <vers num="5.2" edition=":enterprise" />
-        <vers num="5.4" edition="" />
-        <vers num="5.4" edition=":enterprise" />
-        <vers num="5.5.0" edition="" />
-        <vers num="5.5.0" edition=":enterprise" />
-        <vers num="5.5.0.1" edition="" />
-        <vers num="5.5.0.1" edition=":enterprise" />
-        <vers num="5.5.0.2" edition="" />
-        <vers num="5.5.0.2" edition=":enterprise" />
-        <vers num="5.6.0" edition="" />
-        <vers num="5.6.0" edition=":enterprise" />
-        <vers num="5.6.0.3" edition="" />
-        <vers num="5.6.0.3" edition=":enterprise" />
-        <vers num="8.0.0" edition="" />
-        <vers num="8.0.0" edition=":enterprise" />
-        <vers num="8.0.0.1" edition="" />
-        <vers num="8.0.0.1" edition=":enterprise" />
-        <vers num="8.0.0.2" edition="" />
-        <vers num="8.0.0.2" edition=":enterprise" />
-        <vers num="8.0.0.3" edition="" />
-        <vers num="8.0.0.3" edition=":enterprise" />
-        <vers num="8.0.1" edition="" />
-        <vers num="8.0.1" edition=":enterprise" />
-        <vers num="8.0.1.1" edition="" />
-        <vers num="8.0.1.1" edition=":enterprise" />
-        <vers num="8.5.0" edition="" />
-        <vers num="8.5.0" edition=":enterprise" />
-        <vers num="8.5.0.0" edition="" />
-        <vers num="8.5.0.0" edition=":enterprise" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0735" published="2012-05-03" name="CVE-2012-0735" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="7.6" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="4.9" CVSS_base_score="7.6">
-    <desc>
-      <descript source="cve">IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly scan file: URLs, which allows man-in-the-middle attackers to obtain sensitive information or possibly have unspecified other impact via a crafted URI.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74558" source="XF">ae-fileuri-info-disclosure(74558)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21592188" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21592188</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="rational_appscan">
-        <vers num="5.2" edition="" />
-        <vers num="5.2" edition=":enterprise" />
-        <vers num="5.4" edition="" />
-        <vers num="5.4" edition=":enterprise" />
-        <vers num="5.5.0" edition="" />
-        <vers num="5.5.0" edition=":enterprise" />
-        <vers num="5.5.0.1" edition="" />
-        <vers num="5.5.0.1" edition=":enterprise" />
-        <vers num="5.5.0.2" edition="" />
-        <vers num="5.5.0.2" edition=":enterprise" />
-        <vers num="5.6.0" edition="" />
-        <vers num="5.6.0" edition=":enterprise" />
-        <vers num="5.6.0.3" edition="" />
-        <vers num="5.6.0.3" edition=":enterprise" />
-        <vers num="8.0.0" edition="" />
-        <vers num="8.0.0" edition=":enterprise" />
-        <vers num="8.0.0.1" edition="" />
-        <vers num="8.0.0.1" edition=":enterprise" />
-        <vers num="8.0.0.2" edition="" />
-        <vers num="8.0.0.2" edition=":enterprise" />
-        <vers num="8.0.0.3" edition="" />
-        <vers num="8.0.0.3" edition=":enterprise" />
-        <vers num="8.0.1" edition="" />
-        <vers num="8.0.1" edition=":enterprise" />
-        <vers num="8.0.1.1" edition="" />
-        <vers num="8.0.1.1" edition=":enterprise" />
-        <vers num="8.5.0" edition="" />
-        <vers num="8.5.0" edition=":enterprise" />
-        <vers num="8.5.0.0" edition="" />
-        <vers num="8.5.0.0" edition=":enterprise" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0736" published="2012-05-03" name="CVE-2012-0736" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly create scan jobs, which allows remote attackers to execute arbitrary code via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74559" source="XF">ae-platformauth-code-execution(74559)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21592188" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21592188</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="rational_appscan">
-        <vers num="5.2" edition="" />
-        <vers num="5.2" edition=":enterprise" />
-        <vers num="5.4" edition="" />
-        <vers num="5.4" edition=":enterprise" />
-        <vers num="5.5.0" edition="" />
-        <vers num="5.5.0" edition=":enterprise" />
-        <vers num="5.5.0.1" edition="" />
-        <vers num="5.5.0.1" edition=":enterprise" />
-        <vers num="5.5.0.2" edition="" />
-        <vers num="5.5.0.2" edition=":enterprise" />
-        <vers num="5.6.0" edition="" />
-        <vers num="5.6.0" edition=":enterprise" />
-        <vers num="5.6.0.3" edition="" />
-        <vers num="5.6.0.3" edition=":enterprise" />
-        <vers num="8.0.0" edition="" />
-        <vers num="8.0.0" edition=":enterprise" />
-        <vers num="8.0.0.1" edition="" />
-        <vers num="8.0.0.1" edition=":enterprise" />
-        <vers num="8.0.0.2" edition="" />
-        <vers num="8.0.0.2" edition=":enterprise" />
-        <vers num="8.0.0.3" edition="" />
-        <vers num="8.0.0.3" edition=":enterprise" />
-        <vers num="8.0.1" edition="" />
-        <vers num="8.0.1" edition=":enterprise" />
-        <vers num="8.0.1.1" edition="" />
-        <vers num="8.0.1.1" edition=":enterprise" />
-        <vers num="8.5.0" edition="" />
-        <vers num="8.5.0" edition=":enterprise" />
-        <vers num="8.5.0.0" edition="" />
-        <vers num="8.5.0.0" edition=":enterprise" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0737" published="2012-05-03" name="CVE-2012-0737" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74560" source="XF">appscan-enterprise-xss(74560)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21592188" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21592188</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="rational_appscan">
-        <vers num="5.2" edition="" />
-        <vers num="5.2" edition=":enterprise" />
-        <vers num="5.4" edition="" />
-        <vers num="5.4" edition=":enterprise" />
-        <vers num="5.5.0" edition="" />
-        <vers num="5.5.0" edition=":enterprise" />
-        <vers num="5.5.0.1" edition="" />
-        <vers num="5.5.0.1" edition=":enterprise" />
-        <vers num="5.5.0.2" edition="" />
-        <vers num="5.5.0.2" edition=":enterprise" />
-        <vers num="5.6.0" edition="" />
-        <vers num="5.6.0" edition=":enterprise" />
-        <vers num="5.6.0.3" edition="" />
-        <vers num="5.6.0.3" edition=":enterprise" />
-        <vers num="8.0.0" edition="" />
-        <vers num="8.0.0" edition=":enterprise" />
-        <vers num="8.0.0.1" edition="" />
-        <vers num="8.0.0.1" edition=":enterprise" />
-        <vers num="8.0.0.2" edition="" />
-        <vers num="8.0.0.2" edition=":enterprise" />
-        <vers num="8.0.0.3" edition="" />
-        <vers num="8.0.0.3" edition=":enterprise" />
-        <vers num="8.0.1" edition="" />
-        <vers num="8.0.1" edition=":enterprise" />
-        <vers num="8.0.1.1" edition="" />
-        <vers num="8.0.1.1" edition=":enterprise" />
-        <vers num="8.5.0" edition="" />
-        <vers num="8.5.0" edition=":enterprise" />
-        <vers num="8.5.0.0" edition="" />
-        <vers num="8.5.0.0" edition=":enterprise" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0740" published="2012-04-22" name="CVE-2012-0740" modified="2012-04-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Web Admin Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.22 and 6.3 before 6.3.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74610" source="XF">tds-wat-xss(74610)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg1IO16016" source="AIXAPAR">IO16016</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg1IO14508" source="AIXAPAR">IO14508</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg24032291" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg24032291</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg24032290" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg24032290</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="tivoli_directory_server">
-        <vers num="6.2" />
-        <vers num="6.2.0.19" />
-        <vers num="6.2.0.20" />
-        <vers num="6.2.0.21" />
-        <vers num="6.3.0" />
-        <vers num="6.3.0.0" />
-        <vers num="6.3.0.10" />
-        <vers num="6.3.0.8" />
-        <vers num="6.3.0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0742" published="2012-04-09" name="CVE-2012-0742" modified="2012-04-10" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="1.9" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.4" CVSS_base_score="1.9">
-    <desc>
-      <descript source="cve">IBM Tivoli Event Pump 4.2.2, when the LOG_REQUESTS and VALIDATE_SOAP_USERS options are enabled, places credentials into the AOPSCLOG (aka AOPLOG) data set, which allows local users to obtain sensitive information by reading the data.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74641" source="XF">tep-aopsclog-info-disclosure(74641)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1OA38586" source="AIXAPAR" adv="1">OA38586</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="tivoli_event_pump">
-        <vers num="4.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0743" published="2012-04-22" name="CVE-2012-0743" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">IBM Tivoli Directory Server (TDS) 6.3 and earlier allows remote attackers to cause a denial of service (daemon crash) via a malformed LDAP paged search request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026938" source="SECTRACK">1026938</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg1IO16002" source="AIXAPAR">IO16002</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg1IO16001" source="AIXAPAR">IO16001</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg1IO15707" source="AIXAPAR">IO15707</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21591267" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21591267</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="tivoli_directory_server">
-        <vers num="3.2.2" />
-        <vers num="4.1" />
-        <vers num="5.2.0" />
-        <vers num="6.0" />
-        <vers num="6.0.0" />
-        <vers num="6.0.0.69" />
-        <vers num="6.0.0.7" />
-        <vers num="6.0.0.8" />
-        <vers num="6.1.0" />
-        <vers num="6.1.0.45" />
-        <vers num="6.1.0.46" />
-        <vers num="6.1.0.47" />
-        <vers num="6.1.0.48" />
-        <vers num="6.2.0" />
-        <vers num="6.2.0.19" />
-        <vers num="6.2.0.20" />
-        <vers num="6.2.0.21" />
-        <vers num="6.2.0.22" />
-        <vers prev="1" num="6.3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0744" published="2012-08-17" name="CVE-2012-0744" modified="2012-08-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">IBM Rational ClearQuest 7.1.x through 7.1.2.7 and 8.x through 8.0.0.3 allows remote attackers to obtain potentially sensitive information via a request to a (1) snoop, (2) hello, (3) ivt/, (4) hitcount, (5) HitCount.jsp, (6) HelloHTMLError.jsp, (7) HelloHTML.jsp, (8) HelloVXMLError.jsp, (9) HelloVXML.jsp, (10) HelloWMLError.jsp, (11) HelloWML.jsp, or (12) cqweb/j_security_check sample script.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74671" source="XF">rcq-installscripts-info-disclosure(74671)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21606317" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21606317</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21599361" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21599361</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1PM66896" source="AIXAPAR">PM66896</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="rational_clearquest">
-        <vers num="7.1.1.1" />
-        <vers num="7.1.1.2" />
-        <vers num="7.1.1.3" />
-        <vers num="7.1.1.4" />
-        <vers num="7.1.1.5" />
-        <vers num="7.1.1.6" />
-        <vers num="7.1.1.7" />
-        <vers num="7.1.1.8" />
-        <vers num="7.1.2" />
-        <vers num="7.1.2.1" />
-        <vers num="7.1.2.2" />
-        <vers num="7.1.2.3" />
-        <vers num="7.1.2.4" />
-        <vers num="7.1.2.5" />
-        <vers num="7.1.2.6" />
-        <vers num="8.0" />
-        <vers num="8.0.0.1" />
-        <vers num="8.0.0.2" />
-        <vers num="8.0.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0745" published="2012-05-04" name="CVE-2012-0745" modified="2012-05-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local users to gain privileges via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74679" source="XF">aix-getpwnam-privilege-escalation(74679)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV19098" source="AIXAPAR" adv="1">IV19098</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV19097" source="AIXAPAR" adv="1">IV19097</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV19077" source="AIXAPAR" adv="1">IV19077</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV18638" source="AIXAPAR" adv="1">IV18638</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV18637" source="AIXAPAR" adv="1">IV18637</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV18464" source="AIXAPAR" adv="1">IV18464</ref>
-      <ref url="http://aix.software.ibm.com/aix/efixes/security/ldapauth_advisory2.asc" source="CONFIRM" adv="1">http://aix.software.ibm.com/aix/efixes/security/ldapauth_advisory2.asc</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="vios">
-        <vers num="2.1.0.10" />
-        <vers num="2.1.2.12" />
-        <vers num="2.1.2.13" />
-        <vers num="2.1.3.10" />
-        <vers num="2.2.0.10" />
-        <vers num="2.2.0.11" />
-        <vers num="2.2.0.12" />
-        <vers num="2.2.0.13" />
-        <vers num="2.2.1.0" />
-        <vers num="2.2.1.1" />
-        <vers num="2.2.1.3" />
-      </prod>
-      <prod vendor="ibm" name="aix">
-        <vers num="5.3" />
-        <vers num="6.1" />
-        <vers num="7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0746" published="2012-09-10" name="CVE-2012-0746" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74726" source="XF">ibm-maximo-xss-iv17961(74726)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21610081" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21610081</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IV17961" source="AIXAPAR">IV17961</ref>
-      <ref url="http://secunia.com/advisories/50551" source="SECUNIA" adv="1">50551</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="change_and_configuration_management_database">
-        <vers num="6.0" />
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_asset_management">
-        <vers num="7.5.0.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_service_desk">
-        <vers num="6.2" />
-      </prod>
-      <prod vendor="ibm" name="smartcloud_control_desk">
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_asset_management_for_it">
-        <vers num="6.0" />
-        <vers num="6.2" />
-        <vers num="7.0" />
-        <vers num="7.1" />
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_service_request_manager">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0747" published="2012-09-10" name="CVE-2012-0747" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74731" source="XF">ibm-maximo-sql-injection-iv16032(74731)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21610081" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21610081</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IV16032" source="AIXAPAR">IV16032</ref>
-      <ref url="http://secunia.com/advisories/50551" source="SECUNIA" adv="1">50551</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="change_and_configuration_management_database">
-        <vers num="6.0" />
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_asset_management">
-        <vers num="6.2.0.0" />
-        <vers num="7.1.0.0" />
-        <vers num="7.5.0.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_service_desk">
-        <vers num="6.2" />
-      </prod>
-      <prod vendor="ibm" name="smartcloud_control_desk">
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_asset_management_for_it">
-        <vers num="6.0" />
-        <vers num="6.2" />
-        <vers num="7.0" />
-        <vers num="7.1" />
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_service_request_manager">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0751" published="2012-02-16" name="CVE-2012-0751" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The ActiveX control in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-03.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-03.html</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14985" source="OVAL">oval:org.mitre.oval:def:14985</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html" source="SUSE">openSUSE-SU-2012:0265</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10" />
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers prev="1" num="10.3.183.11" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers prev="1" num="11.1.102.55" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0752" published="2012-02-16" name="CVE-2012-0752" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via leveraging an unspecified "type confusion."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-03.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-03.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-07.xml" source="GENTOO">GLSA-201204-07</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0144.html" source="REDHAT">RHSA-2012:0144</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14654" source="OVAL">oval:org.mitre.oval:def:14654</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html" source="SUSE">openSUSE-SU-2012:0265</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10" />
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers prev="1" num="10.3.183.11" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers prev="1" num="11.1.102.55" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-      <prod vendor="adobe" name="flash_player_for_android">
-        <vers num="11.1.102.59" />
-        <vers prev="1" num="11.1.111.5" />
-        <vers num="11.1.112.60" />
-        <vers prev="1" num="11.1.112.61" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0753" published="2012-02-16" name="CVE-2012-0753" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted MP4 data.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-03.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-03.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-07.xml" source="GENTOO">GLSA-201204-07</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0144.html" source="REDHAT">RHSA-2012:0144</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14795" source="OVAL">oval:org.mitre.oval:def:14795</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html" source="SUSE">openSUSE-SU-2012:0265</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10" />
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers prev="1" num="10.3.183.11" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers prev="1" num="11.1.102.55" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-      <prod vendor="adobe" name="flash_player_for_android">
-        <vers num="11.1.102.59" />
-        <vers prev="1" num="11.1.111.5" />
-        <vers num="11.1.112.60" />
-        <vers prev="1" num="11.1.112.61" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0754" published="2012-02-16" name="CVE-2012-0754" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-03.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-03.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-07.xml" source="GENTOO">GLSA-201204-07</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0144.html" source="REDHAT">RHSA-2012:0144</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15030" source="OVAL">oval:org.mitre.oval:def:15030</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html" source="SUSE">openSUSE-SU-2012:0265</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10" />
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers prev="1" num="10.3.183.11" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers prev="1" num="11.1.102.55" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-      <prod vendor="adobe" name="flash_player_for_android">
-        <vers num="11.1.102.59" />
-        <vers prev="1" num="11.1.111.5" />
-        <vers num="11.1.112.60" />
-        <vers prev="1" num="11.1.112.61" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0755" published="2012-02-16" name="CVE-2012-0755" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2012-0756.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-03.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-03.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-07.xml" source="GENTOO">GLSA-201204-07</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0144.html" source="REDHAT">RHSA-2012:0144</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14731" source="OVAL">oval:org.mitre.oval:def:14731</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html" source="SUSE">openSUSE-SU-2012:0265</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10" />
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers prev="1" num="10.3.183.11" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers prev="1" num="11.1.102.55" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-      <prod vendor="adobe" name="flash_player_for_android">
-        <vers num="11.1.102.59" />
-        <vers prev="1" num="11.1.111.5" />
-        <vers num="11.1.112.60" />
-        <vers prev="1" num="11.1.112.61" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0756" published="2012-02-16" name="CVE-2012-0756" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2012-0755.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-03.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-03.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-07.xml" source="GENTOO">GLSA-201204-07</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0144.html" source="REDHAT">RHSA-2012:0144</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14881" source="OVAL">oval:org.mitre.oval:def:14881</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html" source="SUSE">openSUSE-SU-2012:0265</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10" />
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers prev="1" num="10.3.183.11" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers prev="1" num="11.1.102.55" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-      <prod vendor="adobe" name="flash_player_for_android">
-        <vers num="11.1.102.59" />
-        <vers prev="1" num="11.1.111.5" />
-        <vers num="11.1.112.60" />
-        <vers prev="1" num="11.1.112.61" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0757" published="2012-02-14" name="CVE-2012-0757" modified="2012-02-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0760, CVE-2012-0761, CVE-2012-0762, CVE-2012-0763, CVE-2012-0764, and CVE-2012-0766.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-02.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-02.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers prev="1" num="11.6.3.633" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0758" published="2012-02-14" name="CVE-2012-0758" modified="2012-02-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-02.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-02.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers prev="1" num="11.6.3.633" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0759" published="2012-02-14" name="CVE-2012-0759" modified="2012-02-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-02.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-02.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers prev="1" num="11.6.3.633" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0760" published="2012-02-14" name="CVE-2012-0760" modified="2012-02-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0761, CVE-2012-0762, CVE-2012-0763, CVE-2012-0764, and CVE-2012-0766.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-02.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-02.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers prev="1" num="11.6.3.633" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0761" published="2012-02-14" name="CVE-2012-0761" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0760, CVE-2012-0762, CVE-2012-0763, CVE-2012-0764, and CVE-2012-0766.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-02.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-02.html</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73174" source="XF">adobe-shockwave-3d-code-exec(73174)</ref>
-      <ref url="http://www.securityfocus.com/bid/52001" source="BID">52001</ref>
-      <ref url="http://osvdb.org/79241" source="OSVDB">79241</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers prev="1" num="11.6.3.633" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0762" published="2012-02-14" name="CVE-2012-0762" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0760, CVE-2012-0761, CVE-2012-0763, CVE-2012-0764, and CVE-2012-0766.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-02.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-02.html</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73175" source="XF">shockwave-3d-code-exec(73175)</ref>
-      <ref url="http://www.securityfocus.com/bid/52002" source="BID">52002</ref>
-      <ref url="http://osvdb.org/79242" source="OSVDB">79242</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers prev="1" num="11.6.3.633" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0763" published="2012-02-14" name="CVE-2012-0763" modified="2012-02-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0760, CVE-2012-0761, CVE-2012-0762, CVE-2012-0764, and CVE-2012-0766.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-02.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-02.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers prev="1" num="11.6.3.633" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0764" published="2012-02-14" name="CVE-2012-0764" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0760, CVE-2012-0761, CVE-2012-0762, CVE-2012-0763, and CVE-2012-0766.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-02.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-02.html</ref>
-      <ref url="http://www.securityfocus.com/bid/52004" source="BID">52004</ref>
-      <ref url="http://osvdb.org/79244" source="OSVDB">79244</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers prev="1" num="11.6.3.633" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0765" published="2012-02-14" name="CVE-2012-0765" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 8 and 9 for Word allow remote attackers to inject arbitrary web script or HTML via a crafted URL, related to certain .htm files in (1) template_stock and (2) template_csh directories.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73179" source="XF">adobe-robohelp-output-xss(73179)</ref>
-      <ref url="http://www.securitytracker.com/id?1026676" source="SECTRACK">1026676</ref>
-      <ref url="http://www.securityfocus.com/bid/52008" source="BID">52008</ref>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-04.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-04.html</ref>
-      <ref url="http://secunia.com/advisories/47936" source="SECUNIA">47936</ref>
-      <ref url="http://osvdb.org/79251" source="OSVDB">79251</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="robohelp">
-        <vers num="8" />
-        <vers num="8.0.1" />
-        <vers num="8.0.2" />
-        <vers num="9" />
-        <vers num="9.0.0.228" />
-        <vers num="9.0.1" />
-        <vers num="9.0.1.232" />
-        <vers num="9.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0766" published="2012-02-14" name="CVE-2012-0766" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0760, CVE-2012-0761, CVE-2012-0762, CVE-2012-0763, and CVE-2012-0764.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-02.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-02.html</ref>
-      <ref url="http://osvdb.org/79245" source="OSVDB">79245</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers prev="1" num="11.6.3.633" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0767" published="2012-02-16" name="CVE-2012-0767" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS (UXSS)," as exploited in the wild in February 2012.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-03.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-03.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-07.xml" source="GENTOO">GLSA-201204-07</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0144.html" source="REDHAT">RHSA-2012:0144</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14806" source="OVAL">oval:org.mitre.oval:def:14806</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html" source="SUSE">openSUSE-SU-2012:0265</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10" />
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers prev="1" num="10.3.183.11" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers prev="1" num="11.1.102.55" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-      <prod vendor="adobe" name="flash_player_for_android">
-        <vers num="11.1.102.59" />
-        <vers prev="1" num="11.1.111.5" />
-        <vers num="11.1.112.60" />
-        <vers prev="1" num="11.1.112.61" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0768" published="2012-03-05" name="CVE-2012-0768" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The Matrix3D component in Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x; and before 11.1.115.7 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-05.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-05.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-07.xml" source="GENTOO">GLSA-201204-07</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15058" source="OVAL">oval:org.mitre.oval:def:15058</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10" />
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers prev="1" num="10.3.183.15" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.62" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-      <prod vendor="adobe" name="flash_player_for_android">
-        <vers num="11.1.102.59" />
-        <vers num="11.1.111.5" />
-        <vers prev="1" num="11.1.111.6" />
-        <vers num="11.1.112.60" />
-        <vers num="11.1.112.61" />
-        <vers prev="1" num="11.1.115.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0769" published="2012-03-05" name="CVE-2012-0769" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x; and before 11.1.115.7 on Android 4.x does not properly handle integers, which allows attackers to obtain sensitive information via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-05.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-05.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-07.xml" source="GENTOO">GLSA-201204-07</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14828" source="OVAL">oval:org.mitre.oval:def:14828</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10" />
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers prev="1" num="10.3.183.15" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.62" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-      <prod vendor="adobe" name="flash_player_for_android">
-        <vers num="11.1.102.59" />
-        <vers num="11.1.111.5" />
-        <vers prev="1" num="11.1.111.6" />
-        <vers num="11.1.112.60" />
-        <vers num="11.1.112.61" />
-        <vers prev="1" num="11.1.115.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0770" published="2012-03-13" name="CVE-2012-0770" modified="2012-03-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/407.html
-
-'CWE-407: Algorithmic Complexity'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-06.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-06.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="coldfusion">
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0772" published="2012-03-28" name="CVE-2012-0772" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">An unspecified ActiveX control in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228, and AIR before 3.2.0.2070, on Windows does not properly perform URL security domain checking, which allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-07.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-07.html</ref>
-      <ref url="http://www.securitytracker.com/id?1026859" source="SECTRACK">1026859</ref>
-      <ref url="http://secunia.com/advisories/48618" source="SECUNIA">48618</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15266" source="OVAL">oval:org.mitre.oval:def:15266</ref>
-      <ref url="http://osvdb.org/80706" source="OSVDB">80706</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="adobe_air">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.1" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.9120" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.3.13070" />
-        <vers num="2.0.4" />
-        <vers num="2.6" />
-        <vers num="2.7" />
-        <vers num="2.7.0.1948" />
-        <vers num="2.7.0.1953" />
-        <vers num="2.7.1" />
-        <vers num="2.7.1.19610" />
-        <vers num="3.0.0.408" />
-        <vers num="3.1.0.485" />
-        <vers prev="1" num="3.1.0.488" />
-      </prod>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10" />
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers prev="1" num="10.3.183.16" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.62" />
-        <vers num="11.1.102.63" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0773" published="2012-03-28" name="CVE-2012-0773" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.183.18 and 11.x before 11.2.202.223 on Solaris; Flash Player before 11.1.111.8 on Android 2.x and 3.x; and AIR before 3.2.0.2070 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-07.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-07.html</ref>
-      <ref url="http://www.securitytracker.com/id?1026859" source="SECTRACK">1026859</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-07.xml" source="GENTOO">GLSA-201204-07</ref>
-      <ref url="http://secunia.com/advisories/48618" source="SECUNIA">48618</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15391" source="OVAL">oval:org.mitre.oval:def:15391</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="adobe_air">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.1" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.9120" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.3.13070" />
-        <vers num="2.0.4" />
-        <vers num="2.6" />
-        <vers num="2.7" />
-        <vers num="2.7.0.1948" />
-        <vers num="2.7.0.1953" />
-        <vers num="2.7.1" />
-        <vers num="2.7.1.19610" />
-        <vers num="3.0.0.408" />
-        <vers num="3.1.0.485" />
-        <vers prev="1" num="3.1.0.488" />
-      </prod>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10" />
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers prev="1" num="10.3.183.16" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.59" />
-        <vers num="11.1.102.62" />
-        <vers num="11.1.102.63" />
-        <vers num="11.1.111.5" />
-        <vers num="11.1.111.6" />
-        <vers prev="1" num="11.1.111.7" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0774" published="2012-04-10" name="CVE-2012-0774" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code via a crafted TrueType font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-08.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-08.html</ref>
-      <ref url="http://www.securitytracker.com/id?1026908" source="SECTRACK">1026908</ref>
-      <ref url="http://www.securityfocus.com/bid/52951" source="BID">52951</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14860" source="OVAL">oval:org.mitre.oval:def:14860</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0775" published="2012-04-10" name="CVE-2012-0775" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The JavaScript implementation in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-08.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-08.html</ref>
-      <ref url="http://www.securitytracker.com/id?1026908" source="SECTRACK">1026908</ref>
-      <ref url="http://www.securityfocus.com/bid/52949" source="BID">52949</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15477" source="OVAL">oval:org.mitre.oval:def:15477</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0776" published="2012-04-10" name="CVE-2012-0776" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The installer in Adobe Reader 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-08.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-08.html</ref>
-      <ref url="http://www.securitytracker.com/id?1026908" source="SECTRACK">1026908</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15270" source="OVAL">oval:org.mitre.oval:def:15270</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0777" published="2012-04-10" name="CVE-2012-0777" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.adobe.com/support/security/bulletins/apsb12-08.html
-
-'These updates resolve a memory corruption in the JavaScript API that could lead to code execution (CVE-2012-0777) (Macintosh and Linux only).'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-08.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-08.html</ref>
-      <ref url="http://www.securitytracker.com/id?1026908" source="SECTRACK">1026908</ref>
-      <ref url="http://www.securityfocus.com/bid/52950" source="BID">52950</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0778" published="2012-05-09" name="CVE-2012-0778" modified="2012-05-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Buffer overflow in Adobe Flash Professional before CS6 allows attackers to execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-12.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-12.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="flash_cs3">
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="adobe" name="flash_cs4">
-        <vers num="10.0" />
-      </prod>
-      <prod vendor="adobe" name="flash_cs5.5">
-        <vers prev="1" num="11.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0779" published="2012-05-04" name="CVE-2012-0779" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," as exploited in the wild in May 2012.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75383" source="XF">adobe-flash-objecttype-code-exec(75383)</ref>
-      <ref url="http://www.securitytracker.com/id?1027023" source="SECTRACK">1027023</ref>
-      <ref url="http://www.securityfocus.com/bid/53395" source="BID">53395</ref>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-09.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-09.html</ref>
-      <ref url="http://secunia.com/advisories/49096" source="SECUNIA">49096</ref>
-      <ref url="http://secunia.com/advisories/49038" source="SECUNIA">49038</ref>
-      <ref url="http://osvdb.org/81656" source="OSVDB">81656</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00005.html" source="SUSE">openSUSE-SU-2012:0594</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00004.html" source="SUSE">SUSE-SU-2012:0592</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.2.54" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.52.14" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.23" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers num="10.3.183.16" />
-        <vers prev="1" num="10.3.183.18" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="10.3.185.22" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" edition="" />
-        <vers num="11.0.1.152" edition=":~~~~x64~" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" edition="" />
-        <vers num="11.1.102.55" edition=":~~~~x64~" />
-        <vers num="11.1.102.62" />
-        <vers num="11.1.102.63" />
-        <vers prev="1" num="11.1.111.8" />
-        <vers prev="1" num="11.1.115.7" />
-        <vers num="11.2.202.228" />
-        <vers num="11.2.202.233" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.8.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0780" published="2012-05-09" name="CVE-2012-0780" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2023, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-10.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-10.html</ref>
-      <ref url="http://www.securityfocus.com/bid/53422" source="BID">53422</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="illustrator">
-        <vers num="10.0" />
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="12.0.0" />
-        <vers num="13.0" />
-        <vers num="13.0.1" />
-        <vers num="13.0.2" />
-        <vers num="13.0.3" />
-        <vers num="14.0" />
-        <vers num="15.0" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="adobe" name="illustrator_cs5.5">
-        <vers prev="1" num="15" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0781" published="2012-01-18" name="CVE-2012-0781" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability than CVE-2011-4153.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/18370/" source="EXPLOIT-DB">18370</ref>
-      <ref url="http://secunia.com/advisories/48668" source="SECUNIA">48668</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html" source="SUSE">openSUSE-SU-2012:0426</ref>
-      <ref url="http://cxsecurity.com/research/103" source="MISC">http://cxsecurity.com/research/103</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0092.html" source="BUGTRAQ">20120114 PHP 5.3.8 Multiple vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="5.3.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0782" published="2012-01-30" name="CVE-2012-0782" modified="2012-01-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dbhost, (2) dbname, or (3) uname parameter. NOTE: the vendor disputes the significance of this issue; also, it is unclear whether this specific XSS scenario has security relevance.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.trustwave.com/spiderlabs/advisories/TWSL2012-002.txt" source="MISC">https://www.trustwave.com/spiderlabs/advisories/TWSL2012-002.txt</ref>
-      <ref url="http://www.exploit-db.com/exploits/18417" source="EXPLOIT-DB">18417</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0150.html" source="BUGTRAQ">20120124 TWSL2012-002: Multiple Vulnerabilities in WordPress</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wordpress" name="wordpress">
-        <vers num="0.7" />
-        <vers num="0.71" />
-        <vers num="0.711" />
-        <vers num="0.72" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.2" />
-        <vers num="1.5.1.3" />
-        <vers num="1.5.2" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.5" />
-        <vers num="2.7" />
-        <vers num="2.7.1" />
-        <vers num="2.8" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" />
-        <vers num="2.8.5" />
-        <vers num="2.8.6" />
-        <vers num="2.9" />
-        <vers num="2.9.1" />
-        <vers num="2.9.2" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.2.1" />
-        <vers num="3.3" />
-        <vers prev="1" num="3.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0788" published="2012-02-14" name="CVE-2012-0788" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start function, as demonstrated by a crash of the Apache HTTP Server.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=783605" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=783605</ref>
-      <ref url="https://bugs.php.net/bug.php?id=55776" source="CONFIRM">https://bugs.php.net/bug.php?id=55776</ref>
-      <ref url="http://www.php.net/ChangeLog-5.php#5.3.9" source="CONFIRM">http://www.php.net/ChangeLog-5.php#5.3.9</ref>
-      <ref url="http://secunia.com/advisories/48668" source="SECUNIA">48668</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html" source="SUSE">openSUSE-SU-2012:0426</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="5.0.0" edition="beta1" />
-        <vers num="5.0.0" edition="beta2" />
-        <vers num="5.0.0" edition="beta3" />
-        <vers num="5.0.0" edition="beta4" />
-        <vers num="5.0.0" edition="rc1" />
-        <vers num="5.0.0" edition="rc2" />
-        <vers num="5.0.0" edition="rc3" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers num="5.2.0" />
-        <vers num="5.2.1" />
-        <vers num="5.2.10" />
-        <vers num="5.2.11" />
-        <vers num="5.2.12" />
-        <vers num="5.2.14" />
-        <vers num="5.2.15" />
-        <vers num="5.2.16" />
-        <vers num="5.2.17" />
-        <vers num="5.2.2" />
-        <vers num="5.2.3" />
-        <vers num="5.2.4" />
-        <vers num="5.2.5" />
-        <vers num="5.2.6" />
-        <vers num="5.2.7" />
-        <vers num="5.2.8" />
-        <vers num="5.2.9" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers prev="1" num="5.3.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0789" published="2012-02-14" name="CVE-2012-0789" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=783609" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=783609</ref>
-      <ref url="https://bugs.php.net/bug.php?id=53502" source="CONFIRM">https://bugs.php.net/bug.php?id=53502</ref>
-      <ref url="http://www.php.net/ChangeLog-5.php#5.3.9" source="CONFIRM">http://www.php.net/ChangeLog-5.php#5.3.9</ref>
-      <ref url="http://secunia.com/advisories/48668" source="SECUNIA">48668</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html" source="SUSE">openSUSE-SU-2012:0426</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="5.0.0" edition="beta1" />
-        <vers num="5.0.0" edition="beta2" />
-        <vers num="5.0.0" edition="beta3" />
-        <vers num="5.0.0" edition="beta4" />
-        <vers num="5.0.0" edition="rc1" />
-        <vers num="5.0.0" edition="rc2" />
-        <vers num="5.0.0" edition="rc3" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers num="5.2.0" />
-        <vers num="5.2.1" />
-        <vers num="5.2.10" />
-        <vers num="5.2.11" />
-        <vers num="5.2.12" />
-        <vers num="5.2.14" />
-        <vers num="5.2.15" />
-        <vers num="5.2.16" />
-        <vers num="5.2.17" />
-        <vers num="5.2.2" />
-        <vers num="5.2.3" />
-        <vers num="5.2.4" />
-        <vers num="5.2.5" />
-        <vers num="5.2.6" />
-        <vers num="5.2.7" />
-        <vers num="5.2.8" />
-        <vers num="5.2.9" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers prev="1" num="5.3.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0790" published="2012-01-24" name="CVE-2012-0790" modified="2012-01-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in smokeping_cgi in Smokeping 2.4.2, 2.6.6, and other versions before 2.6.7 allows remote attackers to inject arbitrary web script or HTML via the displaymode parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=783584" source="CONFIRM" patch="1">https://bugzilla.redhat.com/show_bug.cgi?id=783584</ref>
-      <ref url="https://bugs.gentoo.org/show_bug.cgi?id=399553" source="CONFIRM">https://bugs.gentoo.org/show_bug.cgi?id=399553</ref>
-      <ref url="http://www.securityfocus.com/bid/51584" source="BID">51584</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/21/1" source="MLIST">[oss-security] 20120120 Re: CVE request: smokeping XSS</ref>
-      <ref url="http://secunia.com/advisories/47678" source="SECUNIA" adv="1">47678</ref>
-      <ref url="http://oss.oetiker.ch/smokeping/pub/CHANGES" source="CONFIRM">http://oss.oetiker.ch/smokeping/pub/CHANGES</ref>
-      <ref url="http://holisticinfosec.org/content/view/188/45/" source="MISC">http://holisticinfosec.org/content/view/188/45/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oetiker" name="smokeping">
-        <vers num="0.99.10" />
-        <vers num="0.99.11" />
-        <vers num="0.99.12" />
-        <vers num="0.99.13" />
-        <vers num="0.99.14" />
-        <vers num="0.99.15" />
-        <vers num="0.99.16" />
-        <vers num="0.99.17" />
-        <vers num="0.99.18" />
-        <vers num="0.99.5" />
-        <vers num="0.99.6" />
-        <vers num="0.99.7" />
-        <vers num="0.99.8" />
-        <vers num="0.99.9" />
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.10" />
-        <vers num="1.11" />
-        <vers num="1.12" />
-        <vers num="1.13" />
-        <vers num="1.14" />
-        <vers num="1.15" />
-        <vers num="1.16" />
-        <vers num="1.17" />
-        <vers num="1.18" />
-        <vers num="1.19" />
-        <vers num="1.2" />
-        <vers num="1.20" />
-        <vers num="1.21" />
-        <vers num="1.22" />
-        <vers num="1.23" />
-        <vers num="1.24" />
-        <vers num="1.25" />
-        <vers num="1.26" />
-        <vers num="1.27" />
-        <vers num="1.28" />
-        <vers num="1.29" />
-        <vers num="1.3" />
-        <vers num="1.30" />
-        <vers num="1.31" />
-        <vers num="1.34" />
-        <vers num="1.36" />
-        <vers num="1.37" />
-        <vers num="1.38" />
-        <vers num="1.4" />
-        <vers num="1.5" />
-        <vers num="1.6" />
-        <vers num="1.7" />
-        <vers num="1.8" />
-        <vers num="1.9" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0" edition="rc3" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers prev="1" num="2.6.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0791" published="2012-01-24" name="CVE-2012-0791" modified="2012-01-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) composeCache, (2) rtemode, or (3) filename_* parameters to the compose page; (4) formname parameter to the contacts popup window; or (5) IMAP mailbox names.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026554" source="SECTRACK">1026554</ref>
-      <ref url="http://www.securitytracker.com/id?1026553" source="SECTRACK">1026553</ref>
-      <ref url="http://www.securityfocus.com/bid/51586" source="BID">51586</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/22/2" source="MLIST">[oss-security] 20120121 Re: Re: CVE Request -- Horde IMP -- Multiple XSS flaws</ref>
-      <ref url="http://www.horde.org/apps/webmail/docs/RELEASE_NOTES" source="CONFIRM">http://www.horde.org/apps/webmail/docs/RELEASE_NOTES</ref>
-      <ref url="http://www.horde.org/apps/webmail/docs/CHANGES" source="CONFIRM">http://www.horde.org/apps/webmail/docs/CHANGES</ref>
-      <ref url="http://www.horde.org/apps/imp/docs/RELEASE_NOTES" source="CONFIRM">http://www.horde.org/apps/imp/docs/RELEASE_NOTES</ref>
-      <ref url="http://www.horde.org/apps/imp/docs/CHANGES" source="CONFIRM">http://www.horde.org/apps/imp/docs/CHANGES</ref>
-      <ref url="http://secunia.com/advisories/47592" source="SECUNIA" adv="1">47592</ref>
-      <ref url="http://secunia.com/advisories/47580" source="SECUNIA" adv="1">47580</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="horde" name="dynamic_imp">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="rc1" />
-        <vers num="1.0" edition="rc2" />
-        <vers num="1.0" edition="rc3" />
-        <vers num="1.1" edition="rc1" />
-        <vers num="1.1" edition="rc2" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.10" />
-        <vers num="5.0.11" />
-        <vers num="5.0.12" />
-        <vers num="5.0.13" />
-        <vers num="5.0.14" />
-        <vers num="5.0.15" />
-        <vers num="5.0.16" />
-        <vers prev="1" num="5.0.17" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.0.7" />
-        <vers num="5.0.8" />
-        <vers num="5.0.9" />
-      </prod>
-      <prod vendor="horde" name="groupware_webmail_edition">
-        <vers num="1.0" edition="rc1" />
-        <vers num="1.0" edition="rc2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.1" edition="rc1" />
-        <vers num="1.1" edition="rc2" />
-        <vers num="1.1" edition="rc3" />
-        <vers num="1.1" edition="rc4" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.2" edition="rc1" />
-        <vers num="1.2.1" />
-        <vers num="1.2.10" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" edition="rc1" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers num="1.2.8" />
-        <vers num="1.2.9" />
-        <vers num="4.0" edition="rc1" />
-        <vers num="4.0" edition="rc2" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers prev="1" num="4.0.5" />
-      </prod>
-      <prod vendor="horde" name="imp">
-        <vers num="2.0" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2.8" />
-        <vers num="2.3" />
-        <vers num="3.0" />
-        <vers num="3.1" />
-        <vers num="3.1.2" />
-        <vers num="3.2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" edition="rc1" />
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.1.3" />
-        <vers num="4.1.5" />
-        <vers num="4.1.6" />
-        <vers num="4.2" />
-        <vers num="4.2.1" />
-        <vers num="4.2.2" />
-        <vers num="4.3" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.4" />
-        <vers num="4.3.5" />
-        <vers num="4.3.6" />
-        <vers num="4.3.7" />
-        <vers num="4.3.8" />
-        <vers num="4.3.9" />
-        <vers num="5.0" edition="alpha1" />
-        <vers num="5.0" edition="beta1" />
-        <vers num="5.0" edition="rc1" />
-        <vers num="5.0" edition="rc2" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-        <vers num="5.0.4-git" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0792" published="2012-07-17" name="CVE-2012-0792" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.moodle.org/gw?p=moodle.git;a=commit;h=36b0ddeed45d0751508dcd9fa50f17fda43bae54" source="CONFIRM" patch="1">http://git.moodle.org/gw?p=moodle.git;a=commit;h=36b0ddeed45d0751508dcd9fa50f17fda43bae54</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=783532" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=783532</ref>
-      <ref url="http://moodle.org/mod/forum/discuss.php?d=194009" source="CONFIRM" adv="1">http://moodle.org/mod/forum/discuss.php?d=194009</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="1.9" />
-        <vers num="1.9.1" />
-        <vers num="1.9.10" />
-        <vers num="1.9.11" />
-        <vers num="1.9.12" />
-        <vers num="1.9.13" />
-        <vers num="1.9.14" />
-        <vers num="1.9.15" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.4" />
-        <vers num="1.9.5" />
-        <vers num="1.9.6" />
-        <vers num="1.9.7" />
-        <vers num="1.9.8" />
-        <vers num="1.9.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0793" published="2012-07-17" name="CVE-2012-0793" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote attackers to view the profile images of arbitrary user accounts via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.moodle.org/gw?p=moodle.git;a=commit;h=90911c4ff98dc2078a3acef5ddf5a1a8f7e20ba5" source="CONFIRM" patch="1">http://git.moodle.org/gw?p=moodle.git;a=commit;h=90911c4ff98dc2078a3acef5ddf5a1a8f7e20ba5</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=783532" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=783532</ref>
-      <ref url="http://moodle.org/mod/forum/discuss.php?d=194012" source="CONFIRM" adv="1">http://moodle.org/mod/forum/discuss.php?d=194012</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="1.9" />
-        <vers num="1.9.1" />
-        <vers num="1.9.10" />
-        <vers num="1.9.11" />
-        <vers num="1.9.12" />
-        <vers num="1.9.13" />
-        <vers num="1.9.14" />
-        <vers num="1.9.15" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.4" />
-        <vers num="1.9.5" />
-        <vers num="1.9.6" />
-        <vers num="1.9.7" />
-        <vers num="1.9.8" />
-        <vers num="1.9.9" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0794" published="2012-07-17" name="CVE-2012-0794" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The rc4encrypt function in lib/moodlelib.php in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 uses a hardcoded password of nfgjeingjk, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by reading this script's source code within the open-source software distribution.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.moodle.org/gw?p=moodle.git;a=commit;h=98456628a24bba25d336860d38a45b5a4e3895da" source="CONFIRM" patch="1">http://git.moodle.org/gw?p=moodle.git;a=commit;h=98456628a24bba25d336860d38a45b5a4e3895da</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=783532" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=783532</ref>
-      <ref url="http://moodle.org/mod/forum/discuss.php?d=194013" source="CONFIRM" adv="1">http://moodle.org/mod/forum/discuss.php?d=194013</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="1.9" />
-        <vers num="1.9.1" />
-        <vers num="1.9.10" />
-        <vers num="1.9.11" />
-        <vers num="1.9.12" />
-        <vers num="1.9.13" />
-        <vers num="1.9.14" />
-        <vers num="1.9.15" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.4" />
-        <vers num="1.9.5" />
-        <vers num="1.9.6" />
-        <vers num="1.9.7" />
-        <vers num="1.9.8" />
-        <vers num="1.9.9" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0795" published="2012-07-17" name="CVE-2012-0795" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 does not validate e-mail address settings, which allows remote authenticated users to have an unspecified impact via a crafted address.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=783532" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=783532</ref>
-      <ref url="http://moodle.org/mod/forum/discuss.php?d=194014" source="CONFIRM" adv="1">http://moodle.org/mod/forum/discuss.php?d=194014</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-13572" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-13572</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="1.9" />
-        <vers num="1.9.1" />
-        <vers num="1.9.10" />
-        <vers num="1.9.11" />
-        <vers num="1.9.12" />
-        <vers num="1.9.13" />
-        <vers num="1.9.14" />
-        <vers num="1.9.15" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.4" />
-        <vers num="1.9.5" />
-        <vers num="1.9.6" />
-        <vers num="1.9.7" />
-        <vers num="1.9.8" />
-        <vers num="1.9.9" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0796" published="2012-07-17" name="CVE-2012-0796" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted (1) From: or (2) Sender: header.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.moodle.org/gw?p=moodle.git;a=commit;h=62988bf0bbc73df655f51884aaf1f523928abff9" source="CONFIRM" patch="1">http://git.moodle.org/gw?p=moodle.git;a=commit;h=62988bf0bbc73df655f51884aaf1f523928abff9</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=783532" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=783532</ref>
-      <ref url="http://moodle.org/mod/forum/discuss.php?d=194015" source="CONFIRM" adv="1">http://moodle.org/mod/forum/discuss.php?d=194015</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="1.9" />
-        <vers num="1.9.1" />
-        <vers num="1.9.10" />
-        <vers num="1.9.11" />
-        <vers num="1.9.12" />
-        <vers num="1.9.13" />
-        <vers num="1.9.14" />
-        <vers num="1.9.15" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.4" />
-        <vers num="1.9.5" />
-        <vers num="1.9.6" />
-        <vers num="1.9.7" />
-        <vers num="1.9.8" />
-        <vers num="1.9.9" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0797" published="2012-07-17" name="CVE-2012-0797" modified="2012-09-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:N)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote authenticated users to bypass the deleted status and continue using a server via a token.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=783532" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=783532</ref>
-      <ref url="http://moodle.org/mod/forum/discuss.php?d=194016" source="CONFIRM" adv="1">http://moodle.org/mod/forum/discuss.php?d=194016</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-28126" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-28126</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0798" published="2012-07-17" name="CVE-2012-0798" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:N)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">The self-enrolment functionality in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 allows remote authenticated users to obtain the manager role by leveraging the teacher role.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=783532" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=783532</ref>
-      <ref url="http://moodle.org/mod/forum/discuss.php?d=194017" source="CONFIRM" adv="1">http://moodle.org/mod/forum/discuss.php?d=194017</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-29469" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-29469</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0799" published="2012-07-17" name="CVE-2012-0799" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled, allows remote attackers to obtain session keys for their sessions by visiting the front page.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=783532" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=783532</ref>
-      <ref url="http://moodle.org/mod/forum/discuss.php?d=194018" source="CONFIRM" adv="1">http://moodle.org/mod/forum/discuss.php?d=194018</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-27334" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-27334</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0800" published="2012-07-17" name="CVE-2012-0800" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">The form-autocompletion functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 makes it easier for physically proximate attackers to discover passwords by reading the contents of a non-password field, as demonstrated by accessing a create-groups page with Safari on an iPad device.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://git.moodle.org/gw?p=moodle.git;a=commit;h=6e9989dbd3f261b2e1586ff77b0bf22fc7091485" source="CONFIRM" patch="1">http://git.moodle.org/gw?p=moodle.git;a=commit;h=6e9989dbd3f261b2e1586ff77b0bf22fc7091485</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=783532" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=783532</ref>
-      <ref url="http://moodle.org/mod/forum/discuss.php?d=194019" source="CONFIRM" adv="1">http://moodle.org/mod/forum/discuss.php?d=194019</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0801" published="2012-07-17" name="CVE-2012-0801" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">lib/formslib.php in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 does not properly handle multiple instances of a form element, which has unspecified impact and remote attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.moodle.org/gw?p=moodle.git;a=commit;h=51070abc78b9e1db1db9a44855e8623b22bebd48" source="CONFIRM" patch="1">http://git.moodle.org/gw?p=moodle.git;a=commit;h=51070abc78b9e1db1db9a44855e8623b22bebd48</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=783532" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=783532</ref>
-      <ref url="http://moodle.org/mod/forum/discuss.php?d=194020" source="CONFIRM" adv="1">http://moodle.org/mod/forum/discuss.php?d=194020</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0802" published="2012-06-19" name="CVE-2012-0802" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple buffer overflows in Spamdyke before 4.3.0 might allow remote attackers to execute arbitrary code via vectors related to "serious errors in the usage of snprintf()/vsnprintf()" in which the return values may be larger than the size of the buffer.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.spamdyke.org/documentation/Changelog.txt" source="CONFIRM">http://www.spamdyke.org/documentation/Changelog.txt</ref>
-      <ref url="http://www.securityfocus.com/bid/51440" source="BID">51440</ref>
-      <ref url="http://www.osvdb.org/78351" source="OSVDB">78351</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/23/5" source="MLIST">[oss-security] 20120123 Re: CVE request: spamdyke buffer overflow vulnerability</ref>
-      <ref url="http://www.mail-archive.com/spamdyke-release@spamdyke.org/msg00014.html" source="MLIST">[spamdyke-release] 20120115 New version: spamdyke 4.3.0</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201203-01.xml" source="GENTOO">GLSA-201203-01</ref>
-      <ref url="http://secunia.com/advisories/48257" source="SECUNIA" adv="1">48257</ref>
-      <ref url="http://secunia.com/advisories/47548" source="SECUNIA" adv="1">47548</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="spamdyke" name="spamdyke">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="4.0.0" edition="beta1" />
-        <vers num="4.0.0" edition="beta2" />
-        <vers num="4.0.0" edition="beta3" />
-        <vers num="4.0.0" edition="rc1" />
-        <vers num="4.0.1" />
-        <vers num="4.0.10" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" edition="beta1" />
-        <vers num="4.0.5" edition="beta2" />
-        <vers num="4.0.5" edition="beta3" />
-        <vers num="4.0.5" edition="beta4" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" />
-        <vers num="4.0.8" />
-        <vers num="4.0.9" />
-        <vers num="4.1.0" />
-        <vers num="4.2.0" />
-        <vers prev="1" num="4.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0804" published="2012-05-29" name="CVE-2012-0804" modified="2012-05-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP response.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=784141" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=784141</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73097" source="XF">cvs-proxyconnect-bo(73097)</ref>
-      <ref url="http://www.securityfocus.com/bid/51943" source="BID">51943</ref>
-      <ref url="http://www.osvdb.org/78987" source="OSVDB">78987</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2407" source="DEBIAN">DSA-2407</ref>
-      <ref url="http://ubuntu.com/usn/usn-1371-1" source="UBUNTU">USN-1371-1</ref>
-      <ref url="http://secunia.com/advisories/48150" source="SECUNIA">48150</ref>
-      <ref url="http://secunia.com/advisories/48142" source="SECUNIA" adv="1">48142</ref>
-      <ref url="http://secunia.com/advisories/48063" source="SECUNIA" adv="1">48063</ref>
-      <ref url="http://secunia.com/advisories/47869" source="SECUNIA" adv="1">47869</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0321.html" source="REDHAT">RHSA-2012:0321</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-02/msg00064.html" source="SUSE">openSUSE-SU-2012:0310</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cvs" name="cvs">
-        <vers num="1.11" />
-        <vers num="1.12" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0805" published="2012-06-05" name="CVE-2012-0805" modified="2012-06-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit or (4) select.offset function.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.sqlalchemy.org/trac/changeset/852b6a1a87e7/" source="CONFIRM" patch="1">http://www.sqlalchemy.org/trac/changeset/852b6a1a87e7/</ref>
-      <ref url="https://bugs.launchpad.net/keystone/+bug/918608" source="MISC">https://bugs.launchpad.net/keystone/+bug/918608</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73756" source="XF">sqlalchemy-select-sql-injection(73756)</ref>
-      <ref url="http://www.sqlalchemy.org/changelog/CHANGES_0_7_0" source="CONFIRM">http://www.sqlalchemy.org/changelog/CHANGES_0_7_0</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2449" source="DEBIAN">DSA-2449</ref>
-      <ref url="http://secunia.com/advisories/48771" source="SECUNIA" adv="1">48771</ref>
-      <ref url="http://secunia.com/advisories/48328" source="SECUNIA" adv="1">48328</ref>
-      <ref url="http://secunia.com/advisories/48327" source="SECUNIA" adv="1">48327</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0369.html" source="REDHAT">RHSA-2012:0369</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sqlalchemy" name="sqlalchemy">
-        <vers num="0.6.0" edition="beta1" />
-        <vers num="0.6.0" edition="beta2" />
-        <vers num="0.6.0" edition="beta3" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.6.4" />
-        <vers num="0.6.5" />
-        <vers num="0.6.6" />
-        <vers num="0.6.7" />
-        <vers prev="1" num="0.7.0" edition="b1" />
-        <vers prev="1" num="0.7.0" edition="b2" />
-        <vers prev="1" num="0.7.0" edition="b3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0806" published="2012-01-26" name="CVE-2012-0806" modified="2012-02-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">Buffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute arbitrary code via vectors involving a series of TCP connections that triggers use of many open file descriptors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://projects.duckcorp.org/projects/bip/repository/revisions/222a33cb84a2e52ad55a88900b7895bf9dd0262c" source="CONFIRM" patch="1">https://projects.duckcorp.org/projects/bip/repository/revisions/222a33cb84a2e52ad55a88900b7895bf9dd0262c</ref>
-      <ref url="https://projects.duckcorp.org/issues/269" source="CONFIRM" patch="1">https://projects.duckcorp.org/issues/269</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/24/10" source="MLIST" patch="1">[oss-security] 20120124 Re: CVE request: bip buffer overflow</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657217" source="CONFIRM" patch="1">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657217</ref>
-      <ref url="http://secunia.com/advisories/47679" source="SECUNIA" adv="1">47679</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/24/4" source="MLIST">[oss-security] 20120124 CVE request: bip buffer overflow</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-February/072767.html" source="FEDORA">FEDORA-2012-0916</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-February/072752.html" source="FEDORA">FEDORA-2012-0941</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="duckcorp" name="bip">
-        <vers num="0.7.0" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.8.0" edition="rc0" />
-        <vers num="0.8.0" edition="rc1" />
-        <vers num="0.8.1" />
-        <vers num="0.8.2" />
-        <vers num="0.8.3" />
-        <vers num="0.8.4" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers prev="1" num="0.8.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0807" published="2012-01-26" name="CVE-2012-0807" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="5.1" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="4.9" CVSS_base_score="5.1">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in the suhosin_encrypt_single_cookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33 for PHP, when suhosin.cookie.encrypt and suhosin.multiheader are enabled, might allow remote attackers to execute arbitrary code via a long string that is used in a Set-Cookie HTTP header.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/stefanesser/suhosin/commit/73b1968ee30f6d9d2dae497544b910e68e114bfa" source="CONFIRM" patch="1">https://github.com/stefanesser/suhosin/commit/73b1968ee30f6d9d2dae497544b910e68e114bfa</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=783350" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=783350</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/24/7" source="MLIST">[oss-security] 20120124 CVE requests: Suhosin extension / as31</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/24/11" source="MLIST">[oss-security] 20120124 Re: CVE requests: Suhosin extension / as31</ref>
-      <ref url="http://secunia.com/advisories/48668" source="SECUNIA">48668</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html" source="SUSE">openSUSE-SU-2012:0426</ref>
-      <ref url="http://archives.neohapsis.com/archives/fulldisclosure/2012-01/0296.html" source="FULLDISC">20120119 Advisory 01/2012: Suhosin PHP Extension Transparent Cookie Encryption Stack Buffer Overflow</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hardened-php" name="suhosin">
-        <vers num="" edition="beta_2006.09.07" />
-        <vers num="" edition="beta_2006.09.09" />
-        <vers num="0.9.0" />
-        <vers num="0.9.1" />
-        <vers num="0.9.10" />
-        <vers num="0.9.11" />
-        <vers num="0.9.12" />
-        <vers num="0.9.13" />
-        <vers num="0.9.14" />
-        <vers num="0.9.15" />
-        <vers num="0.9.16" />
-        <vers num="0.9.17" />
-        <vers num="0.9.18" />
-        <vers num="0.9.19" />
-        <vers num="0.9.2" />
-        <vers num="0.9.20" />
-        <vers num="0.9.21" />
-        <vers num="0.9.22" />
-        <vers num="0.9.23" />
-        <vers num="0.9.24" />
-        <vers num="0.9.25" />
-        <vers num="0.9.26" />
-        <vers num="0.9.27" />
-        <vers num="0.9.28" />
-        <vers num="0.9.29" />
-        <vers num="0.9.3" />
-        <vers num="0.9.30" />
-        <vers prev="1" num="0.9.31" />
-        <vers num="0.9.4" />
-        <vers num="0.9.5" />
-        <vers num="0.9.6" />
-        <vers num="0.9.6.1" />
-        <vers num="0.9.6.2" />
-        <vers num="0.9.6.3" />
-        <vers num="0.9.7" />
-        <vers num="0.9.8" />
-        <vers num="0.9.9" />
-        <vers num="0.9.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0808" published="2012-03-19" name="CVE-2012-0808" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="3.6" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.9" CVSS_base_score="3.6">
-    <desc>
-      <descript source="cve">as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/9" source="MLIST">[oss-security] 20120831 Re: Three CVE requests: at-spi2-atk, as31, naxsi</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/06/3" source="MLIST">[oss-security] 20120706 Re: Three CVE requests: at-spi2-atk, as31, naxsi</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/05/1" source="MLIST">[oss-security] 20120705 Three CVE requests: at-spi2-atk, as31, naxsi</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/24/7" source="MLIST">[oss-security] 20120124 CVE requests: Suhosin extension / as31</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/24/11" source="MLIST">[oss-security] 20120124 Re: CVE requests: Suhosin extension / as31</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655496" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655496</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bdale_garbee" name="as31">
-        <vers num="2.3.1-4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0809" published="2012-01-31" name="CVE-2012-0809" modified="2012-02-01" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-      <sec_prot admin="1" />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.sudo.ws/sudo/alerts/sudo_debug.html" source="CONFIRM" adv="1">http://www.sudo.ws/sudo/alerts/sudo_debug.html</ref>
-      <ref url="http://archives.neohapsis.com/archives/fulldisclosure/2012-01/att-0591/advisory_sudo.txt" source="MISC">http://archives.neohapsis.com/archives/fulldisclosure/2012-01/att-0591/advisory_sudo.txt</ref>
-      <ref url="http://archives.neohapsis.com/archives/fulldisclosure/2012-01/0591.html" source="FULLDISC">20120130 Advisory: sudo 1.8 Format String Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="todd_miller" name="sudo">
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-        <vers num="1.8.1p1" />
-        <vers num="1.8.1p2" />
-        <vers num="1.8.2" />
-        <vers num="1.8.3" />
-        <vers num="1.8.3p1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0813" published="2012-06-29" name="CVE-2012-0813" modified="2012-08-01" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://launchpad.net/wicd/+announcement/9570" source="CONFIRM">https://launchpad.net/wicd/+announcement/9570</ref>
-      <ref url="http://www.securityfocus.com/bid/51703" source="BID">51703</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/26/14" source="MLIST">[oss-security] 20120126 Re: CVE request: wicd writes sensitive information in log files (password,  passphrase...)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/26/13" source="MLIST">[oss-security] 20120126 CVE request: wicd writes sensitive information in log files (password,  passphrase...)</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201206-08.xml" source="GENTOO">GLSA-201206-08</ref>
-      <ref url="http://secunia.com/advisories/49657" source="SECUNIA" adv="1">49657</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652417" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652417</ref>
-      <ref url="http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/682" source="MISC">http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/682</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="david_paleino" name="wicd">
-        <vers num="1.2.7" />
-        <vers num="1.3.1" />
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.5.0" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.5.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.2" />
-        <vers num="1.7.0" />
-        <vers prev="1" num="1.7.1" edition="beta3" />
-        <vers num="1.7.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0814" published="2012-01-27" name="CVE-2012-0814" modified="2012-02-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:N/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorized_keys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user account required by Gitolite.  NOTE: this can cross privilege boundaries because a user account may intentionally have no shell or filesystem access, and therefore may have no supported way to read an authorized_keys file in its own home directory.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72756" source="XF">opensshserver-commands-info-disc(72756)</ref>
-      <ref url="http://www.securityfocus.com/bid/51702" source="BID">51702</ref>
-      <ref url="http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth-options.c.diff?r1=1.53;r2=1.54" source="CONFIRM">http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth-options.c.diff?r1=1.53;r2=1.54</ref>
-      <ref url="http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth-options.c" source="CONFIRM">http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth-options.c</ref>
-      <ref url="http://osvdb.org/78706" source="OSVDB">78706</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/27/4" source="MLIST">[oss-security] 20120127 Re: CVE Request: Debian (others?) openssh-server: Forced Command handling leaks private information to ssh clients</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/27/1" source="MLIST">[oss-security] 20120126 Re: CVE Request: Debian (others?) openssh-server: Forced Command handling leaks private information to ssh clients</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/26/16" source="MLIST">[oss-security] 20120126 Re: CVE Request: Debian (others?) openssh-server: Forced Command handling leaks private information to ssh clients</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/01/26/15" source="MLIST">[oss-security] 20120126 CVE Request: Debian (others?) openssh-server: Forced Command handling leaks private information to ssh clients</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657445" source="CONFIRM">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657445</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openbsd" name="openssh">
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.27" />
-        <vers num="1.2.3" />
-        <vers num="1.3" />
-        <vers num="1.5" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="2" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.9" />
-        <vers num="2.9.9" />
-        <vers num="2.9.9p2" />
-        <vers num="2.9p1" />
-        <vers num="2.9p2" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.1p1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.2p1" />
-        <vers num="3.0p1" />
-        <vers num="3.1" />
-        <vers num="3.1p1" />
-        <vers num="3.2" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2p1" />
-        <vers num="3.2.3p1" />
-        <vers num="3.3" />
-        <vers num="3.3p1" />
-        <vers num="3.4" />
-        <vers num="3.4p1" />
-        <vers num="3.5" />
-        <vers num="3.5p1" />
-        <vers num="3.6" />
-        <vers num="3.6.1" />
-        <vers num="3.6.1p1" />
-        <vers num="3.6.1p2" />
-        <vers num="3.7" />
-        <vers num="3.7.1" />
-        <vers num="3.7.1p1" />
-        <vers num="3.7.1p2" />
-        <vers num="3.8" />
-        <vers num="3.8.1" />
-        <vers num="3.8.1p1" />
-        <vers num="3.9" />
-        <vers num="3.9.1" />
-        <vers num="3.9.1p1" />
-        <vers num="4.0" />
-        <vers num="4.0p1" />
-        <vers num="4.1" />
-        <vers num="4.1p1" />
-        <vers num="4.2" />
-        <vers num="4.2p1" />
-        <vers num="4.3" />
-        <vers num="4.3p1" />
-        <vers num="4.3p2" />
-        <vers num="4.4" />
-        <vers num="4.4p1" />
-        <vers num="4.5" />
-        <vers num="4.6" />
-        <vers num="4.7" />
-        <vers num="4.8" />
-        <vers num="4.9" />
-        <vers num="5.0" />
-        <vers num="5.1" />
-        <vers num="5.2" />
-        <vers num="5.3" />
-        <vers num="5.4" />
-        <vers num="5.5" />
-        <vers prev="1" num="5.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0815" published="2012-06-04" name="CVE-2012-0815" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://rpm.org/wiki/Releases/4.9.1.3" source="CONFIRM" patch="1">http://rpm.org/wiki/Releases/4.9.1.3</ref>
-      <ref url="http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=858a328cd0f7d4bcd8500c78faaf00e4f8033df6" source="CONFIRM" patch="1">http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=858a328cd0f7d4bcd8500c78faaf00e4f8033df6</ref>
-      <ref url="http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=472e569562d4c90d7a298080e0052856aa7fa86b" source="CONFIRM" patch="1">http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=472e569562d4c90d7a298080e0052856aa7fa86b</ref>
-      <ref url="https://hermes.opensuse.org/messages/14441362" source="SUSE">openSUSE-SU-2012:0589</ref>
-      <ref url="https://hermes.opensuse.org/messages/14440932" source="SUSE">openSUSE-SU-2012:0588</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=744104" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=744104</ref>
-      <ref url="http://www.securityfocus.com/bid/52865" source="BID">52865</ref>
-      <ref url="http://www.osvdb.org/81009" source="OSVDB">81009</ref>
-      <ref url="http://secunia.com/advisories/49110" source="SECUNIA" adv="1">49110</ref>
-      <ref url="http://secunia.com/advisories/48716" source="SECUNIA" adv="1">48716</ref>
-      <ref url="http://secunia.com/advisories/48651" source="SECUNIA" adv="1">48651</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0451.html" source="REDHAT">RHSA-2012:0451</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html" source="FEDORA">FEDORA-2012-5421</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html" source="FEDORA">FEDORA-2012-5420</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html" source="FEDORA">FEDORA-2012-5298</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rpm" name="rpm">
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="1.3.1" />
-        <vers num="1.4" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.4.2/a" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.10" />
-        <vers num="2.2.11" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.3.10" />
-        <vers num="2.2.3.11" />
-        <vers num="2.2.4" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.1" />
-        <vers num="2.4.11" />
-        <vers num="2.4.12" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.8" />
-        <vers num="2.4.9" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-        <vers num="2.5.4" />
-        <vers num="2.5.5" />
-        <vers num="2.5.6" />
-        <vers num="2.6.7" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="4.0." />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.1" />
-        <vers num="4.3.3" />
-        <vers num="4.4.2.1" />
-        <vers num="4.4.2.2" />
-        <vers num="4.4.2.3" />
-        <vers num="4.5.90" />
-        <vers num="4.6.0" edition="rc1" />
-        <vers num="4.6.0" edition="rc2" />
-        <vers num="4.6.0" edition="rc3" />
-        <vers num="4.6.0" edition="rc4" />
-        <vers num="4.6.1" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" />
-        <vers num="4.8.1" />
-        <vers num="4.9.0" edition="alpha" />
-        <vers num="4.9.0" edition="beta1" />
-        <vers num="4.9.0" edition="rc1" />
-        <vers num="4.9.1" />
-        <vers num="4.9.1.1" />
-        <vers prev="1" num="4.9.1.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0817" published="2012-01-30" name="CVE-2012-0817" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of service (memory and CPU consumption) by making many connection requests.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.samba.org/samba/security/CVE-2012-0817" source="CONFIRM" patch="1" adv="1">http://www.samba.org/samba/security/CVE-2012-0817</ref>
-      <ref url="http://www.samba.org/samba/history/samba-3.6.3.html" source="CONFIRM">http://www.samba.org/samba/history/samba-3.6.3.html</ref>
-      <ref url="http://secunia.com/advisories/47763" source="SECUNIA" adv="1">47763</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-February/072930.html" source="FEDORA">FEDORA-2012-1098</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="samba" name="samba">
-        <vers num="3.6.0" />
-        <vers num="3.6.1" />
-        <vers num="3.6.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0819" published="2012-09-06" name="CVE-2012-0819" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2012-0821.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.joomla.org/announcements/release-news/5405-joomla-174-released.html" source="CONFIRM" patch="1">http://www.joomla.org/announcements/release-news/5405-joomla-174-released.html</ref>
-      <ref url="http://www.osvdb.org/78517" source="OSVDB">78517</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/30/1" source="MLIST">[oss-security] 20120129 Re: Fwd Joomla! Security News 2012-01</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/26/4" source="MLIST">[oss-security] 20120126 Re: Fwd Joomla! Security News 2012-01</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/26/2" source="MLIST">[oss-security] 20120125 Re: Fwd Joomla! Security News 2012-01</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/25/1" source="MLIST">[oss-security] 20120125 Fwd Joomla! Security News 2012-01</ref>
-      <ref url="http://www.joomla.org/announcements/release-news/5403-joomla-250-released.html" source="CONFIRM">http://www.joomla.org/announcements/release-news/5403-joomla-250-released.html</ref>
-      <ref url="http://secunia.com/advisories/47753" source="SECUNIA" adv="1">47753</ref>
-      <ref url="http://developer.joomla.org/security/news/382-20120101-core-information-disclosure" source="CONFIRM" adv="1">http://developer.joomla.org/security/news/382-20120101-core-information-disclosure</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="joomla" name="joomla!">
-        <vers num="1.6" edition="alpha" />
-        <vers num="1.6" edition="alpha2" />
-        <vers num="1.6" edition="beta1" />
-        <vers num="1.6" edition="beta10" />
-        <vers num="1.6" edition="beta11" />
-        <vers num="1.6" edition="beta12" />
-        <vers num="1.6" edition="beta13" />
-        <vers num="1.6" edition="beta14" />
-        <vers num="1.6" edition="beta15" />
-        <vers num="1.6" edition="beta2" />
-        <vers num="1.6" edition="beta3" />
-        <vers num="1.6" edition="beta4" />
-        <vers num="1.6" edition="beta5" />
-        <vers num="1.6" edition="beta6" />
-        <vers num="1.6" edition="beta7" />
-        <vers num="1.6" edition="beta8" />
-        <vers num="1.6" edition="beta9" />
-        <vers num="1.6" edition="rc1" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.7.0" />
-        <vers num="1.7.1" />
-        <vers num="1.7.2" />
-        <vers num="1.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0820" published="2012-09-06" name="CVE-2012-0820" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0822.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.joomla.org/announcements/release-news/5405-joomla-174-released.html" source="CONFIRM" patch="1">http://www.joomla.org/announcements/release-news/5405-joomla-174-released.html</ref>
-      <ref url="http://www.osvdb.org/78515" source="OSVDB">78515</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/30/1" source="MLIST">[oss-security] 20120129 Re: Fwd Joomla! Security News 2012-01</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/26/4" source="MLIST">[oss-security] 20120126 Re: Fwd Joomla! Security News 2012-01</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/26/2" source="MLIST">[oss-security] 20120125 Re: Fwd Joomla! Security News 2012-01</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/25/1" source="MLIST">[oss-security] 20120125 Fwd Joomla! Security News 2012-01</ref>
-      <ref url="http://www.joomla.org/announcements/release-news/5403-joomla-250-released.html" source="CONFIRM">http://www.joomla.org/announcements/release-news/5403-joomla-250-released.html</ref>
-      <ref url="http://secunia.com/advisories/47753" source="SECUNIA" adv="1">47753</ref>
-      <ref url="http://developer.joomla.org/security/news/383-20120102-core-xss-vulnerability" source="CONFIRM" adv="1">http://developer.joomla.org/security/news/383-20120102-core-xss-vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="joomla" name="joomla!">
-        <vers num="1.6" edition="alpha" />
-        <vers num="1.6" edition="alpha2" />
-        <vers num="1.6" edition="beta1" />
-        <vers num="1.6" edition="beta10" />
-        <vers num="1.6" edition="beta11" />
-        <vers num="1.6" edition="beta12" />
-        <vers num="1.6" edition="beta13" />
-        <vers num="1.6" edition="beta14" />
-        <vers num="1.6" edition="beta15" />
-        <vers num="1.6" edition="beta2" />
-        <vers num="1.6" edition="beta3" />
-        <vers num="1.6" edition="beta4" />
-        <vers num="1.6" edition="beta5" />
-        <vers num="1.6" edition="beta6" />
-        <vers num="1.6" edition="beta7" />
-        <vers num="1.6" edition="beta8" />
-        <vers num="1.6" edition="beta9" />
-        <vers num="1.6" edition="rc1" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.7.0" />
-        <vers num="1.7.1" />
-        <vers num="1.7.2" />
-        <vers num="1.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0821" published="2012-09-06" name="CVE-2012-0821" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2012-0819.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.joomla.org/announcements/release-news/5405-joomla-174-released.html" source="CONFIRM" patch="1" adv="1">http://www.joomla.org/announcements/release-news/5405-joomla-174-released.html</ref>
-      <ref url="http://www.joomla.org/announcements/release-news/5403-joomla-250-released.html" source="CONFIRM" patch="1" adv="1">http://www.joomla.org/announcements/release-news/5403-joomla-250-released.html</ref>
-      <ref url="http://www.osvdb.org/78518" source="OSVDB">78518</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/30/1" source="MLIST">[oss-security] 20120129 Re: Fwd Joomla! Security News 2012-01</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/26/4" source="MLIST">[oss-security] 20120126 Re: Fwd Joomla! Security News 2012-01</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/26/2" source="MLIST">[oss-security] 20120125 Re: Fwd Joomla! Security News 2012-01</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/25/1" source="MLIST">[oss-security] 20120125 Fwd Joomla! Security News 2012-01</ref>
-      <ref url="http://secunia.com/advisories/47753" source="SECUNIA" adv="1">47753</ref>
-      <ref url="http://developer.joomla.org/security/news/384-20120103-core-information-disclosure" source="CONFIRM" adv="1">http://developer.joomla.org/security/news/384-20120103-core-information-disclosure</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="joomla" name="joomla!">
-        <vers num="1.6" edition="alpha" />
-        <vers num="1.6" edition="alpha2" />
-        <vers num="1.6" edition="beta1" />
-        <vers num="1.6" edition="beta10" />
-        <vers num="1.6" edition="beta11" />
-        <vers num="1.6" edition="beta12" />
-        <vers num="1.6" edition="beta13" />
-        <vers num="1.6" edition="beta14" />
-        <vers num="1.6" edition="beta15" />
-        <vers num="1.6" edition="beta2" />
-        <vers num="1.6" edition="beta3" />
-        <vers num="1.6" edition="beta4" />
-        <vers num="1.6" edition="beta5" />
-        <vers num="1.6" edition="beta6" />
-        <vers num="1.6" edition="beta7" />
-        <vers num="1.6" edition="beta8" />
-        <vers num="1.6" edition="beta9" />
-        <vers num="1.6" edition="rc1" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.7.0" />
-        <vers num="1.7.1" />
-        <vers num="1.7.2" />
-        <vers num="1.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0822" published="2012-09-06" name="CVE-2012-0822" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Joomla! 1.6 and 1.7.x before 1.7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0820.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.joomla.org/announcements/release-news/5405-joomla-174-released.html" source="CONFIRM" patch="1">http://www.joomla.org/announcements/release-news/5405-joomla-174-released.html</ref>
-      <ref url="http://www.osvdb.org/78516" source="OSVDB">78516</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/30/1" source="MLIST">[oss-security] 20120129 Re: Fwd Joomla! Security News 2012-01</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/26/4" source="MLIST">[oss-security] 20120126 Re: Fwd Joomla! Security News 2012-01</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/26/2" source="MLIST">[oss-security] 20120125 Re: Fwd Joomla! Security News 2012-01</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/25/1" source="MLIST">[oss-security] 20120125 Fwd Joomla! Security News 2012-01</ref>
-      <ref url="http://www.joomla.org/announcements/release-news/5403-joomla-250-released.html" source="CONFIRM">http://www.joomla.org/announcements/release-news/5403-joomla-250-released.html</ref>
-      <ref url="http://secunia.com/advisories/47753" source="SECUNIA" adv="1">47753</ref>
-      <ref url="http://developer.joomla.org/security/news/385-20120104-core-xss-vulnerability" source="CONFIRM" adv="1">http://developer.joomla.org/security/news/385-20120104-core-xss-vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="joomla" name="joomla!">
-        <vers num="1.6" edition="alpha" />
-        <vers num="1.6" edition="alpha2" />
-        <vers num="1.6" edition="beta1" />
-        <vers num="1.6" edition="beta10" />
-        <vers num="1.6" edition="beta11" />
-        <vers num="1.6" edition="beta12" />
-        <vers num="1.6" edition="beta13" />
-        <vers num="1.6" edition="beta14" />
-        <vers num="1.6" edition="beta15" />
-        <vers num="1.6" edition="beta2" />
-        <vers num="1.6" edition="beta3" />
-        <vers num="1.6" edition="beta4" />
-        <vers num="1.6" edition="beta5" />
-        <vers num="1.6" edition="beta6" />
-        <vers num="1.6" edition="beta7" />
-        <vers num="1.6" edition="beta8" />
-        <vers num="1.6" edition="beta9" />
-        <vers num="1.6" edition="rc1" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.7.0" />
-        <vers num="1.7.1" />
-        <vers num="1.7.2" />
-        <vers num="1.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0823" published="2012-02-23" name="CVE-2012-0823" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks".</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51775" source="BID">51775</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/30/2" source="MLIST">[oss-security] 20120129 Re: (maybe) CVE request: libvpx before 1.0 crasher</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/28/4" source="MLIST">[oss-security] 20120128 (maybe) CVE request: libvpx before 1.0 crasher</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:023" source="MANDRIVA">MDVSA-2012:023</ref>
-      <ref url="http://code.google.com/p/webm/source/browse/CHANGELOG?repo=libvpx" source="CONFIRM">http://code.google.com/p/webm/source/browse/CHANGELOG?repo=libvpx</ref>
-      <ref url="http://blog.webmproject.org/2012/01/vp8-codec-sdk-duclair-released.html" source="CONFIRM">http://blog.webmproject.org/2012/01/vp8-codec-sdk-duclair-released.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="john_koleszar" name="libvpx">
-        <vers num="0.9.0" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="0.9.5" />
-        <vers num="0.9.6" />
-        <vers prev="1" num="0.9.7" edition="p1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0829" published="2012-02-13" name="CVE-2012-0829" modified="2012-02-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in Mibew Messenger 1.6.4 and earlier allow remote attackers to hijack the authentication of operators for requests that insert cross-site scripting (XSS) sequences via the (1) address or (2) threadid parameters to operator/ban.php; or (3) geolinkparams, (4) title, or (5) chattitle parameters to operator/settings.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72822" source="XF">mibew-webinterface-csrf(72822)</ref>
-      <ref url="http://www.securityfocus.com/bid/51723" source="BID">51723</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/02/10" source="MLIST">[oss-security] 20120202 Re: XSS hiding CSRF (was: Re: Mibew messenger multiple XSS)</ref>
-      <ref url="http://www.codseq.it/advisories/mibew_messenger_multiple_xss" source="MISC">http://www.codseq.it/advisories/mibew_messenger_multiple_xss</ref>
-      <ref url="http://secunia.com/advisories/47787" source="SECUNIA" adv="1">47787</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0178.html" source="BUGTRAQ">20120130 Mibew messenger multiple XSS</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mibew" name="mibew_messenger">
-        <vers num="1.0.10" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.5.0" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers prev="1" num="1.6.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0830" published="2012-02-06" name="CVE-2012-0830" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://gist.github.com/1725489" source="MISC">https://gist.github.com/1725489</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72911" source="XF">php-phpregistervariableex-code-exec(72911)</ref>
-      <ref url="http://www.securityfocus.com/bid/51830" source="BID">51830</ref>
-      <ref url="http://www.php.net/ChangeLog-5.php#5.3.10" source="CONFIRM">http://www.php.net/ChangeLog-5.php#5.3.10</ref>
-      <ref url="http://www.osvdb.org/78819" source="OSVDB">78819</ref>
-      <ref url="http://www.h-online.com/security/news/item/Critical-PHP-vulnerability-being-fixed-1427316.html" source="MISC">http://www.h-online.com/security/news/item/Critical-PHP-vulnerability-being-fixed-1427316.html</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2403" source="DEBIAN">DSA-2403</ref>
-      <ref url="http://thexploit.com/sec/critical-php-remote-vulnerability-introduced-in-fix-for-php-hashtable-collision-dos/" source="MISC">http://thexploit.com/sec/critical-php-remote-vulnerability-introduced-in-fix-for-php-hashtable-collision-dos/</ref>
-      <ref url="http://svn.php.net/viewvc?view=revision&amp;revision=323007" source="CONFIRM">http://svn.php.net/viewvc?view=revision&amp;revision=323007</ref>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://securitytracker.com/id?1026631" source="SECTRACK">1026631</ref>
-      <ref url="http://secunia.com/advisories/48668" source="SECUNIA">48668</ref>
-      <ref url="http://secunia.com/advisories/47813" source="SECUNIA">47813</ref>
-      <ref url="http://secunia.com/advisories/47806" source="SECUNIA" adv="1">47806</ref>
-      <ref url="http://secunia.com/advisories/47801" source="SECUNIA">47801</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0092.html" source="REDHAT">RHSA-2012:0092</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/02/03/1" source="MLIST">[oss-security] 20120203 Re: PHP remote code execution introduced via HashDoS fix</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/02/02/12" source="MLIST">[oss-security] 20120202 PHP remote code execution introduced via HashDoS fix</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134012830914727&amp;w=2" source="HP">HPSBUX02791</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134012830914727&amp;w=2" source="HP">SSRT100856</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html" source="SUSE">openSUSE-SU-2012:0426</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE">APPLE-SA-2012-05-09-1</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">HPSBMU02786</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">SSRT100877</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="5.3.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0831" published="2012-02-10" name="CVE-2012-0831" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing of environment variables, which makes it easier for remote attackers to conduct SQL injection attacks via a crafted request, related to main/php_variables.c, sapi/cgi/cgi_main.c, and sapi/fpm/fpm/fpm_main.c.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.ubuntu.com/usn/USN-1358-1" source="UBUNTU" patch="1">USN-1358-1</ref>
-      <ref url="http://www.securityfocus.com/bid/51954" source="BID" patch="1">51954</ref>
-      <ref url="https://launchpadlibrarian.net/92454212/php5_5.3.2-1ubuntu4.13.diff.gz" source="CONFIRM">https://launchpadlibrarian.net/92454212/php5_5.3.2-1ubuntu4.13.diff.gz</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73125" source="XF">php-magicquotesgpc-sec-bypass(73125)</ref>
-      <ref url="http://svn.php.net/viewvc?view=revision&amp;revision=323016" source="CONFIRM">http://svn.php.net/viewvc?view=revision&amp;revision=323016</ref>
-      <ref url="http://secunia.com/advisories/48668" source="SECUNIA">48668</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html" source="SUSE">openSUSE-SU-2012:0426</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080041.html" source="FEDORA">FEDORA-2012-6907</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080037.html" source="FEDORA">FEDORA-2012-6911</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="1.0" />
-        <vers num="2.0" />
-        <vers num="2.0b10" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta_4_patch1" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" />
-        <vers num="4.1.0" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="4.2.0" />
-        <vers num="4.2.1" />
-        <vers num="4.2.2" />
-        <vers num="4.2.3" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.10" />
-        <vers num="4.3.11" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.4" />
-        <vers num="4.3.5" />
-        <vers num="4.3.6" />
-        <vers num="4.3.7" />
-        <vers num="4.3.8" />
-        <vers num="4.3.9" />
-        <vers num="4.4.0" />
-        <vers num="4.4.1" />
-        <vers num="4.4.2" />
-        <vers num="4.4.3" />
-        <vers num="4.4.4" />
-        <vers num="4.4.5" />
-        <vers num="4.4.6" />
-        <vers num="4.4.7" />
-        <vers num="4.4.8" />
-        <vers num="4.4.9" />
-        <vers num="5.0.0" edition="beta1" />
-        <vers num="5.0.0" edition="beta2" />
-        <vers num="5.0.0" edition="beta3" />
-        <vers num="5.0.0" edition="beta4" />
-        <vers num="5.0.0" edition="rc1" />
-        <vers num="5.0.0" edition="rc2" />
-        <vers num="5.0.0" edition="rc3" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.1.0" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers num="5.2.0" />
-        <vers num="5.2.1" />
-        <vers num="5.2.10" />
-        <vers num="5.2.11" />
-        <vers num="5.2.12" />
-        <vers num="5.2.13" />
-        <vers num="5.2.14" />
-        <vers num="5.2.15" />
-        <vers num="5.2.16" />
-        <vers num="5.2.2" />
-        <vers num="5.2.3" />
-        <vers num="5.2.4" />
-        <vers num="5.2.5" />
-        <vers num="5.2.6" />
-        <vers num="5.2.8" />
-        <vers num="5.2.9" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers num="5.3.8" />
-        <vers prev="1" num="5.3.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0833" published="2012-07-03" name="CVE-2012-0833" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:A/AC:M/Au:S/C:N/I:N/A:P)" CVSS_score="2.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.4" CVSS_base_score="2.3">
-    <desc>
-      <descript source="cve">The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups, which allows remote authenticated LDAP users with a certificate group to cause a denial of service (infinite loop and CPU consumption) by binding to the server.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://fedorahosted.org/389/changeset/1bbbb3e5049c1aa0650546efab87ed2f1ea59637/389-ds-base" source="CONFIRM" patch="1">https://fedorahosted.org/389/changeset/1bbbb3e5049c1aa0650546efab87ed2f1ea59637/389-ds-base</ref>
-      <ref url="https://fedorahosted.org/389/ticket/162" source="CONFIRM">https://fedorahosted.org/389/ticket/162</ref>
-      <ref url="http://secunia.com/advisories/49562" source="SECUNIA" adv="1">49562</ref>
-      <ref url="http://secunia.com/advisories/48035" source="SECUNIA" adv="1">48035</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0813.html" source="REDHAT">RHSA-2012:0813</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="fedoraproject" name="389_directory_server">
-        <vers num="1.2.1" />
-        <vers prev="1" num="1.2.10" edition="alpha8" />
-        <vers prev="1" num="1.2.10" edition="rc1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.5" edition="rc1" />
-        <vers num="1.2.5" edition="rc2" />
-        <vers num="1.2.5" edition="rc3" />
-        <vers num="1.2.5" edition="rc4" />
-        <vers num="1.2.6" edition="a2" />
-        <vers num="1.2.6" edition="a3" />
-        <vers num="1.2.6" edition="a4" />
-        <vers num="1.2.6" edition="rc1" />
-        <vers num="1.2.6" edition="rc2" />
-        <vers num="1.2.6" edition="rc3" />
-        <vers num="1.2.6" edition="rc6" />
-        <vers num="1.2.6" edition="rc7" />
-        <vers num="1.2.6.1" />
-        <vers num="1.2.7" edition="alpha3" />
-        <vers num="1.2.7.5" />
-        <vers num="1.2.8" edition="alpha1" />
-        <vers num="1.2.8" edition="alpha2" />
-        <vers num="1.2.8" edition="alpha3" />
-        <vers num="1.2.8" edition="rc1" />
-        <vers num="1.2.8" edition="rc2" />
-        <vers num="1.2.8.1" />
-        <vers num="1.2.8.2" />
-        <vers num="1.2.8.3" />
-        <vers num="1.2.9.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0834" published="2012-02-10" name="CVE-2012-0834" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in lib/QueryRender.php in phpLDAPadmin 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the base parameter in a query_engine action to cmd.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://sourceforge.net/tracker/index.php?func=detail&amp;aid=3477910&amp;group_id=61828&amp;atid=498546" source="CONFIRM">https://sourceforge.net/tracker/index.php?func=detail&amp;aid=3477910&amp;group_id=61828&amp;atid=498546</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:020" source="MANDRIVA">MDVSA-2012:020</ref>
-      <ref url="http://secunia.com/advisories/47852" source="SECUNIA" adv="1">47852</ref>
-      <ref url="http://phpldapadmin.git.sourceforge.net/git/gitweb.cgi?p=phpldapadmin/phpldapadmin;a=commit;h=7dc8d57d6952fe681cb9e8818df7f103220457bd" source="CONFIRM">http://phpldapadmin.git.sourceforge.net/git/gitweb.cgi?p=phpldapadmin/phpldapadmin;a=commit;h=7dc8d57d6952fe681cb9e8818df7f103220457bd</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/02/03/3" source="MLIST">[oss-security] 20120203 Re: CVE request: phpldapadmin </ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/02/02/9" source="MLIST">[oss-security] 20120202 CVE request: phpldapadmin </ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="deon_george" name="phpldapadmin">
-        <vers num="1.2.0" />
-        <vers num="1.2.0.1" />
-        <vers num="1.2.0.2" />
-        <vers num="1.2.0.3" />
-        <vers num="1.2.0.4" />
-        <vers num="1.2.0.5" />
-        <vers num="1.2.1" />
-        <vers num="1.2.1.1" />
-        <vers prev="1" num="1.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0835" published="2012-09-06" name="CVE-2012-0835" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain sensitive information via unknown vectors related to "administrator."</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.joomla.org/announcements/release-news/5411-joomla-175-released.html" source="CONFIRM" patch="1">http://www.joomla.org/announcements/release-news/5411-joomla-175-released.html</ref>
-      <ref url="http://www.joomla.org/announcements/release-news/5410-joomla-251-released.html" source="CONFIRM" patch="1">http://www.joomla.org/announcements/release-news/5410-joomla-251-released.html</ref>
-      <ref url="http://www.osvdb.org/78824" source="OSVDB">78824</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/03/9" source="MLIST">[oss-security] 20120203 Re: CVE-request: Joomla! Security News 2012-02-03</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/03/6" source="MLIST">[oss-security] 20120203 CVE-request: Joomla! Security News 2012-02-03</ref>
-      <ref url="http://secunia.com/advisories/47847" source="SECUNIA" adv="1">47847</ref>
-      <ref url="http://developer.joomla.org/security/news/387-20120201-core-information-disclosure" source="CONFIRM" adv="1">http://developer.joomla.org/security/news/387-20120201-core-information-disclosure</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="joomla" name="joomla!">
-        <vers num="1.7.0" />
-        <vers num="1.7.1" />
-        <vers num="1.7.2" />
-        <vers num="1.7.3" />
-        <vers num="1.7.4" />
-        <vers num="2.5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0836" published="2012-09-06" name="CVE-2012-0836" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Joomla! 1.7.x before 1.7.5 allows attackers to read the error log via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.joomla.org/announcements/release-news/5411-joomla-175-released.html" source="CONFIRM" patch="1" adv="1">http://www.joomla.org/announcements/release-news/5411-joomla-175-released.html</ref>
-      <ref url="http://www.osvdb.org/78825" source="OSVDB">78825</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/03/9" source="MLIST">[oss-security] 20120203 Re: CVE-request: Joomla! Security News 2012-02-03</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/03/6" source="MLIST">[oss-security] 20120203 CVE-request: Joomla! Security News 2012-02-03</ref>
-      <ref url="http://secunia.com/advisories/47847" source="SECUNIA" adv="1">47847</ref>
-      <ref url="http://developer.joomla.org/security/news/388-20120201-core-information-disclosure" source="CONFIRM" adv="1">http://developer.joomla.org/security/news/388-20120201-core-information-disclosure</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="joomla" name="joomla!">
-        <vers num="1.7.0" />
-        <vers num="1.7.1" />
-        <vers num="1.7.2" />
-        <vers num="1.7.3" />
-        <vers num="1.7.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0837" published="2012-09-06" name="CVE-2012-0837" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain the installation path via unspecified vectors related to "administrator."</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.joomla.org/announcements/release-news/5411-joomla-175-released.html" source="CONFIRM" patch="1">http://www.joomla.org/announcements/release-news/5411-joomla-175-released.html</ref>
-      <ref url="http://www.osvdb.org/78826" source="OSVDB">78826</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/03/9" source="MLIST">[oss-security] 20120203 Re: CVE-request: Joomla! Security News 2012-02-03</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/03/6" source="MLIST">[oss-security] 20120203 CVE-request: Joomla! Security News 2012-02-03</ref>
-      <ref url="http://www.joomla.org/announcements/release-news/5410-joomla-251-released.html" source="CONFIRM">http://www.joomla.org/announcements/release-news/5410-joomla-251-released.html</ref>
-      <ref url="http://secunia.com/advisories/47847" source="SECUNIA" adv="1">47847</ref>
-      <ref url="http://developer.joomla.org/security/news/389-20120201-core-information-disclosure" source="CONFIRM" adv="1">http://developer.joomla.org/security/news/389-20120201-core-information-disclosure</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="joomla" name="joomla!">
-        <vers num="1.7.0" />
-        <vers num="1.7.1" />
-        <vers num="1.7.2" />
-        <vers num="1.7.3" />
-        <vers num="1.7.4" />
-        <vers num="2.5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0838" published="2012-03-02" name="CVE-2012-0838" modified="2012-03-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attackers to modify run-time data values, and consequently execute arbitrary code, via invalid input to a field.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://issues.apache.org/jira/browse/WW-3668" source="CONFIRM">https://issues.apache.org/jira/browse/WW-3668</ref>
-      <ref url="http://struts.apache.org/2.3.1.2/docs/s2-007.html" source="CONFIRM" adv="1">http://struts.apache.org/2.3.1.2/docs/s2-007.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000012" source="JVNDB">JVNDB-2012-000012</ref>
-      <ref url="http://jvn.jp/en/jp/JVN79099262/index.html" source="JVN">JVN#79099262</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="struts">
-        <vers num="2.0.11" />
-        <vers num="2.0.11.1" />
-        <vers num="2.0.11.2" />
-        <vers num="2.0.12" />
-        <vers num="2.0.14" />
-        <vers num="2.0.6" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1.6" />
-        <vers num="2.1.8" />
-        <vers num="2.1.8.1" />
-        <vers num="2.2.1" />
-        <vers num="2.2.1.1" />
-        <vers prev="1" num="2.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0839" published="2012-02-08" name="CVE-2012-0839" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.ocert.org/advisories/ocert-2011-003.html" source="MISC">http://www.ocert.org/advisories/ocert-2011-003.html</ref>
-      <ref url="http://www.nruns.com/_downloads/advisory28122011.pdf" source="MISC">http://www.nruns.com/_downloads/advisory28122011.pdf</ref>
-      <ref url="http://www.mail-archive.com/caml-list@inria.fr/msg01478.html" source="MLIST">[caml-list] 20111230 Re: Hashtbl and security</ref>
-      <ref url="http://www.mail-archive.com/caml-list@inria.fr/msg01477.html" source="MLIST">[caml-list] 20111230 Hashtbl and security</ref>
-      <ref url="http://secunia.com/advisories/47853" source="SECUNIA">47853</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/02/07/2" source="MLIST">[oss-security] 20120206 Re: CVE request: Hash DoS vulnerability (ocert-2011-003)</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/02/07/1" source="MLIST">[oss-security] 20120206 CVE request: Hash DoS vulnerability (ocert-2011-003)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="inria" name="ocaml">
-        <vers num="1.07" />
-        <vers num="2.02" />
-        <vers num="2.04" />
-        <vers num="2.99" edition="alpha" />
-        <vers num="3.00" />
-        <vers num="3.01" />
-        <vers num="3.02" />
-        <vers num="3.03" edition="alpha" />
-        <vers num="3.04" />
-        <vers num="3.05" edition="beta" />
-        <vers num="3.06" />
-        <vers num="3.07" edition="beta1" />
-        <vers num="3.07" edition="beta2" />
-        <vers num="3.07" edition="pl2" />
-        <vers num="3.08" />
-        <vers num="3.09" />
-        <vers num="3.10" />
-        <vers num="3.11" />
-        <vers num="3.12" />
-        <vers prev="1" num="3.12.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0840" published="2012-02-10" name="CVE-2012-0840" modified="2012-02-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://svn.apache.org/viewvc?rev=1231605&amp;view=rev" source="CONFIRM" patch="1">http://svn.apache.org/viewvc?rev=1231605&amp;view=rev</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73096" source="XF">apacheapr-hash-dos(73096)</ref>
-      <ref url="http://www.mail-archive.com/dev%40apr.apache.org/msg24473.html" source="MLIST">[dev] 20120114 Re: Hash collision vectors in APR?</ref>
-      <ref url="http://www.mail-archive.com/dev%40apr.apache.org/msg24472.html" source="MLIST">[dev] 20120113 Re: Hash collision vectors in APR?</ref>
-      <ref url="http://www.mail-archive.com/dev%40apr.apache.org/msg24439.html" source="MLIST">[dev] 20120105 Hash collision vectors in APR?</ref>
-      <ref url="http://secunia.com/advisories/47862" source="SECUNIA" adv="1">47862</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/02/09/1" source="MLIST">[oss-security] 20120208 Re: CVE request: apr - Hash DoS vulnerability</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/02/08/3" source="MLIST">[oss-security] 20120208 CVE request: apr - Hash DoS vulnerability</ref>
-      <ref url="http://mail-archives.apache.org/mod_mbox/apr-commits/201201.mbox/%3C20120115003715.071D423888FD@eris.apache.org%3E" source="MLIST">[apr-commits] 20120115 svn commit: r1231605 - /apr/apr/trunk/tables/apr_hash.c</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="portable_runtime">
-        <vers num="0.9.1" />
-        <vers num="0.9.16-dev" />
-        <vers num="0.9.2" />
-        <vers num="0.9.2-dev" />
-        <vers num="0.9.3" />
-        <vers num="0.9.3-dev" />
-        <vers num="0.9.4" />
-        <vers num="0.9.5" />
-        <vers num="0.9.6" />
-        <vers num="0.9.7" />
-        <vers num="0.9.7-dev" />
-        <vers num="0.9.8" />
-        <vers num="0.9.9" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.10" />
-        <vers num="1.3.11" />
-        <vers num="1.3.12" />
-        <vers num="1.3.13" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.3.4" />
-        <vers num="1.3.4-dev" />
-        <vers num="1.3.5" />
-        <vers num="1.3.6" />
-        <vers num="1.3.6-dev" />
-        <vers num="1.3.7" />
-        <vers num="1.3.8" />
-        <vers num="1.3.9" />
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers prev="1" num="1.4.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0847" published="2012-08-20" name="CVE-2012-0847" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the avfilter_filter_samples function in libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/14/4" source="MLIST">[oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/01/11" source="MLIST">[oss-security] 20120201 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commit;h=ae21776207e8a2bbe268e7c9e203f7599dd87ddb" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commit;h=ae21776207e8a2bbe268e7c9e203f7599dd87ddb</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM" adv="1">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers prev="1" num="0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0848" published="2012-08-20" name="CVE-2012-0848" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the ws_snd_decode_frame function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file, related to an incorrect calculation, aka "wrong samples count."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commit;h=5257743aee0c3982f0079e6553aabc6aa39401d2" source="CONFIRM" patch="1">http://git.videolan.org/?p=ffmpeg.git;a=commit;h=5257743aee0c3982f0079e6553aabc6aa39401d2</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/14/4" source="MLIST">[oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/01/11" source="MLIST">[oss-security] 20120201 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0849" published="2012-08-27" name="CVE-2012-0849" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Integer overflow in the ff_j2k_dwt_init function in libavcodec/j2k_dwt.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted JPEG2000 image that triggers an incorrect check for a negative value.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.ffmpeg.org/trac/ffmpeg/ticket/776" source="CONFIRM" patch="1">http://www.ffmpeg.org/trac/ffmpeg/ticket/776</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/14/4" source="MLIST">[oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/01/11" source="MLIST">[oss-security] 20120201 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commit;h=1f99939a6361e2e6d6788494dd7c682b051c6c34" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commit;h=1f99939a6361e2e6d6788494dd7c682b051c6c34</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers prev="1" num="0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0850" published="2012-08-20" name="CVE-2012-0850" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The sbr_qmf_synthesis function in libavcodec/aacsbr.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted mpg file that triggers memory corruption involving the v_off variable, probably a buffer underflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commit;h=944f5b2779e4aa63f7624df6cd4de832a53db81b" source="CONFIRM" patch="1">http://git.videolan.org/?p=ffmpeg.git;a=commit;h=944f5b2779e4aa63f7624df6cd4de832a53db81b</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/14/4" source="MLIST">[oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/01/11" source="MLIST">[oss-security] 20120201 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers prev="1" num="0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0851" published="2012-08-20" name="CVE-2012-0851" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted H.264 file, related to the chroma_format_idc value.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.ubuntu.com/usn/USN-1479-1" source="UBUNTU">USN-1479-1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/14/4" source="MLIST">[oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2494" source="DEBIAN">DSA-2494</ref>
-      <ref url="http://libav.org/" source="CONFIRM" adv="1">http://libav.org/</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commit;h=7fff64e00d886fde11d61958888c82b461cf99b9" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commit;h=7fff64e00d886fde11d61958888c82b461cf99b9</ref>
-      <ref url="http://ffmpeg.org/trac/ffmpeg/ticket/758" source="CONFIRM" adv="1">http://ffmpeg.org/trac/ffmpeg/ticket/758</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers prev="1" num="0.9" />
-      </prod>
-      <prod vendor="libav" name="libav">
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.5" />
-        <vers num="0.5.6" />
-        <vers num="0.5.7" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.6.4" />
-        <vers num="0.6.5" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.8" edition="beta2" />
-        <vers num="0.8.1" />
-        <vers num="0.8.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0852" published="2012-08-20" name="CVE-2012-0852" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an ADPCM file with the number of channels not equal to two.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://ffmpeg.org/trac/ffmpeg/ticket/794" source="CONFIRM" adv="1">https://ffmpeg.org/trac/ffmpeg/ticket/794</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1479-1" source="UBUNTU">USN-1479-1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/14/4" source="MLIST">[oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2494" source="DEBIAN">DSA-2494</ref>
-      <ref url="http://libav.org/" source="CONFIRM" adv="1">http://libav.org/</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commit;h=608708009f69ba4cecebf05120c696167494c897" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commit;h=608708009f69ba4cecebf05120c696167494c897</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers prev="1" num="0.9" />
-      </prod>
-      <prod vendor="libav" name="libav">
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.5" />
-        <vers num="0.5.6" />
-        <vers num="0.5.7" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.6.4" />
-        <vers num="0.6.5" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.8" edition="beta2" />
-        <vers num="0.8.1" />
-        <vers num="0.8.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0853" published="2012-08-20" name="CVE-2012-0853" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (infinite loop and crash) and possibly execute arbitrary code via a large component count in an Atrac 3 file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=c509f4f74713b035a06f79cb4d00e708f5226bc5" source="CONFIRM" patch="1">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=c509f4f74713b035a06f79cb4d00e708f5226bc5</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=9af6abdc17deb95c9b1f1d9242ba49b8b5e0b016" source="CONFIRM" patch="1">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=9af6abdc17deb95c9b1f1d9242ba49b8b5e0b016</ref>
-      <ref url="http://git.libav.org/?p=libav.git;a=commit;h=c509f4f74713b035a06f79cb4d00e708f5226bc5" source="CONFIRM" patch="1">http://git.libav.org/?p=libav.git;a=commit;h=c509f4f74713b035a06f79cb4d00e708f5226bc5</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1479-1" source="UBUNTU">USN-1479-1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/14/4" source="MLIST">[oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://ffmpeg.org/trac/ffmpeg/ticket/780" source="CONFIRM">http://ffmpeg.org/trac/ffmpeg/ticket/780</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-      </prod>
-      <prod vendor="libav" name="libav">
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.5" />
-        <vers num="0.5.6" />
-        <vers num="0.5.7" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.6.4" />
-        <vers num="0.6.5" />
-        <vers num="0.7" edition="beta1" />
-        <vers num="0.7" edition="beta2" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.8" edition="beta2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0854" published="2012-08-20" name="CVE-2012-0854" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The dpcm_decode_frame function in libavcodec/dpcm.c in FFmpeg before 0.9.1 does not use the proper pointer after an audio API change, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors, which triggers a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commit;h=6d8e6fe9dbc365f50521cf0c4a5ffee97c970cb5" source="CONFIRM" patch="1">http://git.videolan.org/?p=ffmpeg.git;a=commit;h=6d8e6fe9dbc365f50521cf0c4a5ffee97c970cb5</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/14/4" source="MLIST">[oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/01/11" source="MLIST">[oss-security] 20120201 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers prev="1" num="0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0855" published="2012-08-27" name="CVE-2012-0855" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the get_sot function in the J2K decoder (j2k.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via unspecified vectors related to the curtileno variable.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commit;h=3eedf9f716733b3b4c5205726d2c1ca52b3d3d78" source="CONFIRM" patch="1">http://git.videolan.org/?p=ffmpeg.git;a=commit;h=3eedf9f716733b3b4c5205726d2c1ca52b3d3d78</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/14/4" source="MLIST">[oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/01/11" source="MLIST">[oss-security] 20120201 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM" adv="1">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers prev="1" num="0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0856" published="2012-08-20" name="CVE-2012-0856" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:N/A:P)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.9.1, when the lowres option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted H263 media file.  NOTE: this vulnerability exists because of a regression error.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commit;h=21270cffaeab2f67a613907516b2b0cd6c9eacf4" source="CONFIRM" patch="1">http://git.videolan.org/?p=ffmpeg.git;a=commit;h=21270cffaeab2f67a613907516b2b0cd6c9eacf4</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/14/4" source="MLIST">[oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/01/11" source="MLIST">[oss-security] 20120201 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://ffmpeg.org/trac/ffmpeg/ticket/757" source="CONFIRM">http://ffmpeg.org/trac/ffmpeg/ticket/757</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers prev="1" num="0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0857" published="2012-08-20" name="CVE-2012-0857" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Multiple buffer overflows in the get_qcx function in the J2K decoder (j2kdec.c) in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a denial of service (application crash) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/14/4" source="MLIST">[oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/01/11" source="MLIST">[oss-security] 20120201 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers prev="1" num="0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0858" published="2012-08-20" name="CVE-2012-0858" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Shorten file, related to an "invalid free".</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=204cb29b3c84a74cbcd059d353c70c8bdc567d98" source="CONFIRM" patch="1">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=204cb29b3c84a74cbcd059d353c70c8bdc567d98</ref>
-      <ref url="http://git.libav.org/?p=libav.git;a=commitdiff;h=204cb29b3c84a74cbcd059d353c70c8bdc567d98" source="CONFIRM" patch="1">http://git.libav.org/?p=libav.git;a=commitdiff;h=204cb29b3c84a74cbcd059d353c70c8bdc567d98</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1479-1" source="UBUNTU">USN-1479-1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/14/4" source="MLIST">[oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1</ref>
-      <ref url="http://libav.org/" source="CONFIRM" adv="1">http://libav.org/</ref>
-      <ref url="http://ffmpeg.org/" source="CONFIRM" adv="1">http://ffmpeg.org/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.2" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.10" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-      </prod>
-      <prod vendor="libav" name="libav">
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.5" />
-        <vers num="0.5.6" />
-        <vers num="0.5.7" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.6.4" />
-        <vers num="0.6.5" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.8" edition="beta2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0859" published="2012-08-20" name="CVE-2012-0859" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The render_line function in the vorbis codec (vorbis.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Vorbis file, related to a large multiplier.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3893.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=6fcf2bb8af0e7d6bb179e71e67e5fab8ef0d2ec2" source="CONFIRM" patch="1">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=6fcf2bb8af0e7d6bb179e71e67e5fab8ef0d2ec2</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1479-1" source="UBUNTU">USN-1479-1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/14/4" source="MLIST">[oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers prev="1" num="0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0862" published="2012-06-04" name="CVE-2012-0862" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access restrictions via a request to tcpmux port 1.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=790940" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=790940</ref>
-      <ref url="https://bugzilla.redhat.com/attachment.cgi?id=583311" source="MISC">https://bugzilla.redhat.com/attachment.cgi?id=583311</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75965" source="XF">xinetd-tcpmux-weak-security(75965)</ref>
-      <ref url="http://www.xinetd.org/#changes" source="CONFIRM">http://www.xinetd.org/#changes</ref>
-      <ref url="http://www.securitytracker.com/id?1027050" source="SECTRACK">1027050</ref>
-      <ref url="http://www.securityfocus.com/bid/53720" source="BID">53720</ref>
-      <ref url="http://www.osvdb.org/81774" source="OSVDB">81774</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/10/2" source="MLIST">[oss-security] 20120510 Re: CVE-2012-0862 assignment notification: xinetd enables unintentional services over tcpmux port</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/09/5" source="MLIST">[oss-security] 20120509 CVE-2012-0862 assignment notification: xinetd enables unintentional services over tcpmux port</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081446.html" source="FEDORA">FEDORA-2012-8041</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081428.html" source="FEDORA">FEDORA-2012-8061</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="xinetd" name="xinetd">
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.13" />
-        <vers prev="1" num="2.3.14" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0863" published="2012-04-30" name="CVE-2012-0863" modified="2012-05-01" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might allow local users to obtain a cleartext password and configuration data by reading a file.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/mumble-voip/mumble/commit/5632c35d6759f5e13a7dfe78e4ee6403ff6a8e3e" source="CONFIRM">https://github.com/mumble-voip/mumble/commit/5632c35d6759f5e13a7dfe78e4ee6403ff6a8e3e</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=791000" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=791000</ref>
-      <ref url="https://bugs.launchpad.net/ubuntu/+source/mumble/+bug/783405" source="CONFIRM">https://bugs.launchpad.net/ubuntu/+source/mumble/+bug/783405</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/15/2" source="MLIST">[oss-security] 20120215 Re: CVE request: mumble local information disclosure</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/15/1" source="MLIST">[oss-security] 20120215 CVE request: mumble local information disclosure</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2411" source="DEBIAN">DSA-2411</ref>
-      <ref url="http://bugs.gentoo.org/show_bug.cgi?id=403939" source="CONFIRM">http://bugs.gentoo.org/show_bug.cgi?id=403939</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659039" source="CONFIRM">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659039</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mumble" name="mumble">
-        <vers num="1.2.0" />
-        <vers num="1.2.2" />
-        <vers prev="1" num="1.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0865" published="2012-02-21" name="CVE-2012-0865" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) r parameter to switch.php or (2) goto parameter to admin/login.php.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://yehg.net/lab/pr0js/advisories/%5Bcubecart_3.0.20_3.0.x%5D_open_url_redirection" source="MISC">http://yehg.net/lab/pr0js/advisories/%5Bcubecart_3.0.20_3.0.x%5D_open_url_redirection</ref>
-      <ref url="http://www.securityfocus.com/bid/51966" source="BID">51966</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/18/1" source="MLIST">[oss-security] 20120217 Re: CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/13/5" source="MLIST">[oss-security] 20120213 Re: CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/12/4" source="MLIST">[oss-security] 20120212 CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability</ref>
-      <ref url="http://osvdb.org/79141" source="OSVDB">79141</ref>
-      <ref url="http://osvdb.org/79140" source="OSVDB">79140</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0058.html" source="BUGTRAQ">20120210 CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cubecart" name="cubecart">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.19" />
-        <vers num="3.0.2" />
-        <vers prev="1" num="3.0.20" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0866" published="2012-07-18" name="CVE-2012-0866" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise restricted triggers on arbitrary data by installing the trigger on an attacker-owned table.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.postgresql.org/docs/9.1/static/release-9-1-3.html" source="CONFIRM">http://www.postgresql.org/docs/9.1/static/release-9-1-3.html</ref>
-      <ref url="http://www.postgresql.org/docs/9.0/static/release-9-0-7.html" source="CONFIRM">http://www.postgresql.org/docs/9.0/static/release-9-0-7.html</ref>
-      <ref url="http://www.postgresql.org/docs/8.4/static/release-8-4-11.html" source="CONFIRM">http://www.postgresql.org/docs/8.4/static/release-8-4-11.html</ref>
-      <ref url="http://www.postgresql.org/docs/8.3/static/release-8-3-18.html" source="CONFIRM">http://www.postgresql.org/docs/8.3/static/release-8-3-18.html</ref>
-      <ref url="http://www.postgresql.org/about/news/1377/" source="CONFIRM" adv="1">http://www.postgresql.org/about/news/1377/</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:092" source="MANDRIVA">MDVSA-2012:092</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:027" source="MANDRIVA">MDVSA-2012:027</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:026" source="MANDRIVA">MDVSA-2012:026</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2418" source="DEBIAN">DSA-2418</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0678.html" source="REDHAT">RHSA-2012:0678</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0677.html" source="REDHAT">RHSA-2012:0677</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="postgresql" name="postgresql">
-        <vers num="8.3" />
-        <vers num="8.3.1" />
-        <vers num="8.3.10" />
-        <vers num="8.3.11" />
-        <vers num="8.3.12" />
-        <vers num="8.3.13" />
-        <vers num="8.3.14" />
-        <vers num="8.3.15" />
-        <vers num="8.3.16" />
-        <vers num="8.3.17" />
-        <vers num="8.3.2" />
-        <vers num="8.3.3" />
-        <vers num="8.3.4" />
-        <vers num="8.3.5" />
-        <vers num="8.3.6" />
-        <vers num="8.3.7" />
-        <vers num="8.3.8" />
-        <vers num="8.3.9" />
-        <vers num="8.4" />
-        <vers num="8.4.1" />
-        <vers num="8.4.10" />
-        <vers num="8.4.2" />
-        <vers num="8.4.3" />
-        <vers num="8.4.4" />
-        <vers num="8.4.5" />
-        <vers num="8.4.6" />
-        <vers num="8.4.7" />
-        <vers num="8.4.8" />
-        <vers num="8.4.9" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.0.4" />
-        <vers num="9.0.5" />
-        <vers num="9.0.6" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0867" published="2012-07-18" name="CVE-2012-0867" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.postgresql.org/docs/9.1/static/release-9-1-3.html" source="CONFIRM">http://www.postgresql.org/docs/9.1/static/release-9-1-3.html</ref>
-      <ref url="http://www.postgresql.org/docs/9.0/static/release-9-0-7.html" source="CONFIRM">http://www.postgresql.org/docs/9.0/static/release-9-0-7.html</ref>
-      <ref url="http://www.postgresql.org/docs/8.4/static/release-8-4-11.html" source="CONFIRM">http://www.postgresql.org/docs/8.4/static/release-8-4-11.html</ref>
-      <ref url="http://www.postgresql.org/about/news/1377/" source="CONFIRM" adv="1">http://www.postgresql.org/about/news/1377/</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:026" source="MANDRIVA">MDVSA-2012:026</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2418" source="DEBIAN">DSA-2418</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0678.html" source="REDHAT">RHSA-2012:0678</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="postgresql" name="postgresql">
-        <vers num="8.4" />
-        <vers num="8.4.1" />
-        <vers num="8.4.10" />
-        <vers num="8.4.2" />
-        <vers num="8.4.3" />
-        <vers num="8.4.4" />
-        <vers num="8.4.5" />
-        <vers num="8.4.6" />
-        <vers num="8.4.7" />
-        <vers num="8.4.8" />
-        <vers num="8.4.9" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.0.4" />
-        <vers num="9.0.5" />
-        <vers num="9.0.6" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0868" published="2012-07-18" name="CVE-2012-0868" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQL script that is used when the database is restored.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.postgresql.org/docs/9.1/static/release-9-1-3.html" source="CONFIRM">http://www.postgresql.org/docs/9.1/static/release-9-1-3.html</ref>
-      <ref url="http://www.postgresql.org/docs/9.0/static/release-9-0-7.html" source="CONFIRM">http://www.postgresql.org/docs/9.0/static/release-9-0-7.html</ref>
-      <ref url="http://www.postgresql.org/docs/8.4/static/release-8-4-11.html" source="CONFIRM">http://www.postgresql.org/docs/8.4/static/release-8-4-11.html</ref>
-      <ref url="http://www.postgresql.org/docs/8.3/static/release-8-3-18.html" source="CONFIRM">http://www.postgresql.org/docs/8.3/static/release-8-3-18.html</ref>
-      <ref url="http://www.postgresql.org/about/news/1377/" source="CONFIRM" adv="1">http://www.postgresql.org/about/news/1377/</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:027" source="MANDRIVA">MDVSA-2012:027</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:026" source="MANDRIVA">MDVSA-2012:026</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2418" source="DEBIAN">DSA-2418</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0678.html" source="REDHAT">RHSA-2012:0678</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0677.html" source="REDHAT">RHSA-2012:0677</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="postgresql" name="postgresql">
-        <vers num="8.3" />
-        <vers num="8.3.1" />
-        <vers num="8.3.10" />
-        <vers num="8.3.11" />
-        <vers num="8.3.12" />
-        <vers num="8.3.13" />
-        <vers num="8.3.14" />
-        <vers num="8.3.15" />
-        <vers num="8.3.16" />
-        <vers num="8.3.17" />
-        <vers num="8.3.2" />
-        <vers num="8.3.3" />
-        <vers num="8.3.4" />
-        <vers num="8.3.5" />
-        <vers num="8.3.6" />
-        <vers num="8.3.7" />
-        <vers num="8.3.8" />
-        <vers num="8.3.9" />
-        <vers num="8.4" />
-        <vers num="8.4.1" />
-        <vers num="8.4.10" />
-        <vers num="8.4.2" />
-        <vers num="8.4.3" />
-        <vers num="8.4.4" />
-        <vers num="8.4.5" />
-        <vers num="8.4.6" />
-        <vers num="8.4.7" />
-        <vers num="8.4.8" />
-        <vers num="8.4.9" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.0.4" />
-        <vers num="9.0.5" />
-        <vers num="9.0.6" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0870" published="2012-02-23" name="CVE-2012-0870" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:A/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="7.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="5.5" CVSS_base_score="7.9">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=795509" source="CONFIRM" patch="1">https://bugzilla.redhat.com/show_bug.cgi?id=795509</ref>
-      <ref url="http://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&amp;docType=kc&amp;externalId=KB29565" source="CONFIRM" patch="1" adv="1">http://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&amp;docType=kc&amp;externalId=KB29565</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73361" source="XF">blackberry-playbook-samba-code-execution(73361)</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1374-1" source="UBUNTU">USN-1374-1</ref>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://secunia.com/advisories/48186" source="SECUNIA">48186</ref>
-      <ref url="http://secunia.com/advisories/48116" source="SECUNIA">48116</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE">APPLE-SA-2012-05-09-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="samba" name="samba">
-        <vers num="3.0" />
-      </prod>
-      <prod vendor="rim" name="blackberry_playbook_tablet">
-        <vers num="-" />
-      </prod>
-      <prod vendor="rim" name="blackberry_playbook_os">
-        <vers num="1.0" />
-        <vers num="1.0.3" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.7.2942" />
-        <vers num="1.0.7.3312" />
-        <vers num="1.0.8.4985" />
-        <vers num="1.0.8.6067" />
-        <vers prev="1" num="2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0872" published="2012-03-19" name="CVE-2012-0872" modified="2012-03-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in OxWall 1.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) captchaField, (2) email, (3) form_name, (4) password, (5) realname, (6) repeatPassword, or (7) username parameters to Oxwall/join; (8) captcha, (9) email, (10) form_name, (11) from, or (12) subject parameters to Oxwall/contact; (13) tag parameter to Oxwall/blogs/browse-by-tag; or (14) PATH_INFO to Oxwall/photo/viewlist/tagged, (15) Oxwall/photo/viewlist, or (16) Oxwall/video/viewlist.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://yehg.net/lab/pr0js/advisories/%5BOxWall_1.1.1%5D_xss" source="MISC">http://yehg.net/lab/pr0js/advisories/%5BOxWall_1.1.1%5D_xss</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73466" source="XF">oxwall-multiple-xss(73466)</ref>
-      <ref url="http://www.securityfocus.com/bid/52090" source="BID">52090</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/20/5" source="MLIST">[oss-security] 20120221 OxWall 1.1.1 &lt;= Multiple Cross Site Scripting Vulnerabilities</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/20/10" source="MLIST">[oss-security] 20120220 Re: OxWall 1.1.1 &lt;= Multiple Cross Site Scripting Vulnerabilities</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0113.html" source="BUGTRAQ">20120220 Re: [oss-security] OxWall 1.1.1 &lt;= Multiple Cross Site Scripting Vulnerabilities</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0106.html" source="BUGTRAQ">20120220 OxWall 1.1.1 &lt;= Multiple Cross Site Scripting Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oxwall" name="oxwall">
-        <vers prev="1" num="1.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0873" published="2012-02-23" name="CVE-2012-0873" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) explain parameter to explanation.php or the (2) photos_only, (3) online_only, or (4) mode parameters to viewFriends.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.boonex.com/trac/dolphin/ticket/2530" source="CONFIRM" patch="1">http://www.boonex.com/trac/dolphin/ticket/2530</ref>
-      <ref url="http://www.boonex.com/trac/dolphin/changeset/15283" source="CONFIRM" patch="1">http://www.boonex.com/trac/dolphin/changeset/15283</ref>
-      <ref url="http://www.boonex.com/trac/dolphin/changeset/15282" source="CONFIRM" patch="1">http://www.boonex.com/trac/dolphin/changeset/15282</ref>
-      <ref url="http://yehg.net/lab/pr0js/advisories/%5BDolphin_7.0.7%5D_xss" source="MISC">http://yehg.net/lab/pr0js/advisories/%5BDolphin_7.0.7%5D_xss</ref>
-      <ref url="http://www.securityfocus.com/bid/52088" source="BID">52088</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/20/6" source="MLIST">[oss-security] 20120221 Dolphin 7.0.7 &lt;= Multiple Cross Site Scripting Vulnerabilities</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/20/11" source="MLIST">[oss-security] 20120220 Re: Dolphin 7.0.7 &lt;= Multiple Cross Site Scripting Vulnerabilities</ref>
-      <ref url="http://www.boonex.com/n/dolphin-7-0-8-released" source="CONFIRM">http://www.boonex.com/n/dolphin-7-0-8-released</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0107.html" source="BUGTRAQ">20120220 Dolphin 7.0.7 &lt;= Multiple Cross Site Scripting Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="boonex" name="dolphin">
-        <vers num="5.1" />
-        <vers num="5.2" />
-        <vers num="6.1.2" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.0.3" edition="beta" />
-        <vers num="7.0.4" />
-        <vers num="7.0.5" />
-        <vers num="7.0.6" />
-        <vers prev="1" num="7.0.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0876" published="2012-07-03" name="CVE-2012-0876" modified="2012-07-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:041" source="MANDRIVA">MDVSA-2012:041</ref>
-      <ref url="http://sourceforge.net/tracker/?func=detail&amp;atid=110127&amp;aid=3496608&amp;group_id=10127" source="CONFIRM">http://sourceforge.net/tracker/?func=detail&amp;atid=110127&amp;aid=3496608&amp;group_id=10127</ref>
-      <ref url="http://sourceforge.net/projects/expat/files/expat/2.1.0/" source="CONFIRM">http://sourceforge.net/projects/expat/files/expat/2.1.0/</ref>
-      <ref url="http://secunia.com/advisories/49504" source="SECUNIA" adv="1">49504</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0731.html" source="REDHAT">RHSA-2012:0731</ref>
-      <ref url="http://mail.libexpat.org/pipermail/expat-discuss/2012-March/002768.html" source="MLIST">[Expat-discuss] 20120304 Announcement: Expat 2.1.0 Beta can be tested</ref>
-      <ref url="http://bugs.python.org/issue13703#msg151870" source="MISC">http://bugs.python.org/issue13703#msg151870</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="libexpat" name="expat">
-        <vers num="1.95.1" />
-        <vers num="1.95.2" />
-        <vers num="1.95.4" />
-        <vers num="1.95.5" />
-        <vers num="1.95.6" />
-        <vers num="1.95.7" />
-        <vers num="1.95.8" />
-        <vers num="2.0.0" />
-        <vers prev="1" num="2.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0878" published="2012-05-01" name="CVE-2012-0878" modified="2012-05-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="5.1" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="4.9" CVSS_base_score="5.1">
-    <desc>
-      <descript source="cve">Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bitbucket.org/ianb/pastescript/pull-request/3/fix-group-permissions-for-pastescriptserve" source="MISC" patch="1">https://bitbucket.org/ianb/pastescript/pull-request/3/fix-group-permissions-for-pastescriptserve</ref>
-      <ref url="https://bitbucket.org/ianb/pastescript/changeset/a19e462769b4" source="CONFIRM" patch="1">https://bitbucket.org/ianb/pastescript/changeset/a19e462769b4</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/23/1" source="MLIST" patch="1">[oss-security] 20120223 CVE Request -- python-paste-script: Supplementary groups not dropped when started an application with </ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=796790" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=796790</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/23/4" source="MLIST">[oss-security] 20120223 Re: CVE Request -- python-paste-script: Supplementary groups not dropped when started an application with </ref>
-      <ref url="http://groups.google.com/group/paste-users/browse_thread/thread/2aa651ba331c2471" source="CONFIRM">http://groups.google.com/group/paste-users/browse_thread/thread/2aa651ba331c2471</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pythonpaste" name="paste">
-        <vers prev="1" num="1.7.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0879" published="2012-05-17" name="CVE-2012-0879" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE_IO feature, which allows local users to cause a denial of service (I/O instability) by starting multiple processes that share an I/O context.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/b69f2292063d2caf37ca9aec7d63ded203701bf3" source="CONFIRM">https://github.com/torvalds/linux/commit/b69f2292063d2caf37ca9aec7d63ded203701bf3</ref>
-      <ref url="https://github.com/torvalds/linux/commit/61cc74fbb87af6aa551a06a370590c9bc07e29d9" source="CONFIRM">https://github.com/torvalds/linux/commit/61cc74fbb87af6aa551a06a370590c9bc07e29d9</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=796829" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=796829</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/23/5" source="MLIST">[oss-security] 20120223 Re: CVE request -- kernel: block: CLONE_IO io_context refcounting issues</ref>
-      <ref url="http://secunia.com/advisories/48545" source="SECUNIA">48545</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b69f2292063d2caf37ca9aec7d63ded203701bf3" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b69f2292063d2caf37ca9aec7d63ded203701bf3</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=61cc74fbb87af6aa551a06a370590c9bc07e29d9" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=61cc74fbb87af6aa551a06a370590c9bc07e29d9</ref>
-      <ref url="http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33" source="CONFIRM">http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="1.2.0" />
-        <vers num="1.3.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.15" />
-        <vers num="2.0.16" />
-        <vers num="2.0.17" />
-        <vers num="2.0.18" />
-        <vers num="2.0.19" />
-        <vers num="2.0.2" />
-        <vers num="2.0.20" />
-        <vers num="2.0.21" />
-        <vers num="2.0.22" />
-        <vers num="2.0.23" />
-        <vers num="2.0.24" />
-        <vers num="2.0.25" />
-        <vers num="2.0.26" />
-        <vers num="2.0.27" />
-        <vers num="2.0.28" />
-        <vers num="2.0.29" />
-        <vers num="2.0.3" />
-        <vers num="2.0.30" />
-        <vers num="2.0.31" />
-        <vers num="2.0.32" />
-        <vers num="2.0.33" />
-        <vers num="2.0.34" />
-        <vers num="2.0.35" />
-        <vers num="2.0.36" />
-        <vers num="2.0.37" />
-        <vers num="2.0.38" />
-        <vers num="2.0.39" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1.132" />
-        <vers num="2.1.89" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.10" />
-        <vers num="2.2.11" />
-        <vers num="2.2.12" />
-        <vers num="2.2.13" edition="pre15" />
-        <vers num="2.2.14" />
-        <vers num="2.2.15" edition="pre16" />
-        <vers num="2.2.16" edition="pre5" />
-        <vers num="2.2.16" edition="pre6" />
-        <vers num="2.2.17" edition="pre14" />
-        <vers num="2.2.18" />
-        <vers num="2.2.19" />
-        <vers num="2.2.2" />
-        <vers num="2.2.20" />
-        <vers num="2.2.21" edition="pre1" />
-        <vers num="2.2.21" edition="pre2" />
-        <vers num="2.2.21" edition="pre3" />
-        <vers num="2.2.21" edition="pre4" />
-        <vers num="2.2.21" edition="rc1" />
-        <vers num="2.2.21" edition="rc2" />
-        <vers num="2.2.21" edition="rc3" />
-        <vers num="2.2.21" edition="rc4" />
-        <vers num="2.2.22" edition="rc1" />
-        <vers num="2.2.22" edition="rc2" />
-        <vers num="2.2.22" edition="rc3" />
-        <vers num="2.2.23" edition="rc1" />
-        <vers num="2.2.23" edition="rc2" />
-        <vers num="2.2.24" edition="rc2" />
-        <vers num="2.2.24" edition="rc3" />
-        <vers num="2.2.24" edition="rc4" />
-        <vers num="2.2.24" edition="rc5" />
-        <vers num="2.2.25" />
-        <vers num="2.2.26" />
-        <vers num="2.2.27" edition="pre1" />
-        <vers num="2.2.27" edition="pre2" />
-        <vers num="2.2.27" edition="rc1" />
-        <vers num="2.2.27" edition="rc2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" edition="rc1" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.13" />
-        <vers num="2.3.14" />
-        <vers num="2.3.15" />
-        <vers num="2.3.16" />
-        <vers num="2.3.17" />
-        <vers num="2.3.18" />
-        <vers num="2.3.19" />
-        <vers num="2.3.2" />
-        <vers num="2.3.20" />
-        <vers num="2.3.21" />
-        <vers num="2.3.22" />
-        <vers num="2.3.23" />
-        <vers num="2.3.24" />
-        <vers num="2.3.25" />
-        <vers num="2.3.26" />
-        <vers num="2.3.27" />
-        <vers num="2.3.28" />
-        <vers num="2.3.29" />
-        <vers num="2.3.3" />
-        <vers num="2.3.30" />
-        <vers num="2.3.31" />
-        <vers num="2.3.32" />
-        <vers num="2.3.33" />
-        <vers num="2.3.34" />
-        <vers num="2.3.35" />
-        <vers num="2.3.36" />
-        <vers num="2.3.37" />
-        <vers num="2.3.38" />
-        <vers num="2.3.39" />
-        <vers num="2.3.4" />
-        <vers num="2.3.40" />
-        <vers num="2.3.41" />
-        <vers num="2.3.42" />
-        <vers num="2.3.43" />
-        <vers num="2.3.44" />
-        <vers num="2.3.45" />
-        <vers num="2.3.46" />
-        <vers num="2.3.47" />
-        <vers num="2.3.48" />
-        <vers num="2.3.49" />
-        <vers num="2.3.5" />
-        <vers num="2.3.50" />
-        <vers num="2.3.51" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.3.99" edition="pre1" />
-        <vers num="2.3.99" edition="pre2" />
-        <vers num="2.3.99" edition="pre3" />
-        <vers num="2.3.99" edition="pre4" />
-        <vers num="2.3.99" edition="pre5" />
-        <vers num="2.3.99" edition="pre6" />
-        <vers num="2.3.99" edition="pre7" />
-        <vers num="2.3.99" edition="pre8" />
-        <vers num="2.3.99" edition="pre9" />
-        <vers num="2.4.0" edition="test1" />
-        <vers num="2.4.0" edition="test10" />
-        <vers num="2.4.0" edition="test11" />
-        <vers num="2.4.0" edition="test12" />
-        <vers num="2.4.0" edition="test2" />
-        <vers num="2.4.0" edition="test3" />
-        <vers num="2.4.0" edition="test4" />
-        <vers num="2.4.0" edition="test5" />
-        <vers num="2.4.0" edition="test6" />
-        <vers num="2.4.0" edition="test7" />
-        <vers num="2.4.0" edition="test8" />
-        <vers num="2.4.0" edition="test9" />
-        <vers num="2.4.1" />
-        <vers num="2.4.10" />
-        <vers num="2.4.11" edition="pre3" />
-        <vers num="2.4.12" />
-        <vers num="2.4.13" />
-        <vers num="2.4.14" />
-        <vers num="2.4.15" />
-        <vers num="2.4.16" />
-        <vers num="2.4.17" />
-        <vers num="2.4.18" edition="pre1" />
-        <vers num="2.4.18" edition="pre2" />
-        <vers num="2.4.18" edition="pre3" />
-        <vers num="2.4.18" edition="pre4" />
-        <vers num="2.4.18" edition="pre5" />
-        <vers num="2.4.18" edition="pre6" />
-        <vers num="2.4.18" edition="pre7" />
-        <vers num="2.4.18" edition="pre8" />
-        <vers num="2.4.18" edition="pre9" />
-        <vers num="2.4.19" edition="pre1" />
-        <vers num="2.4.19" edition="pre2" />
-        <vers num="2.4.19" edition="pre3" />
-        <vers num="2.4.19" edition="pre4" />
-        <vers num="2.4.19" edition="pre5" />
-        <vers num="2.4.19" edition="pre6" />
-        <vers num="2.4.2" />
-        <vers num="2.4.20" />
-        <vers num="2.4.21" edition="pre1" />
-        <vers num="2.4.21" edition="pre4" />
-        <vers num="2.4.21" edition="pre7" />
-        <vers num="2.4.22" edition="pre10" />
-        <vers num="2.4.23" edition="pre9" />
-        <vers num="2.4.24" />
-        <vers num="2.4.25" />
-        <vers num="2.4.26" />
-        <vers num="2.4.27" edition="pre1" />
-        <vers num="2.4.27" edition="pre2" />
-        <vers num="2.4.27" edition="pre3" />
-        <vers num="2.4.27" edition="pre4" />
-        <vers num="2.4.27" edition="pre5" />
-        <vers num="2.4.28" />
-        <vers num="2.4.29" edition="rc1" />
-        <vers num="2.4.29" edition="rc2" />
-        <vers num="2.4.3" edition="pre3" />
-        <vers num="2.4.30" edition="rc2" />
-        <vers num="2.4.30" edition="rc3" />
-        <vers num="2.4.31" edition="pre1" />
-        <vers num="2.4.32" edition="pre1" />
-        <vers num="2.4.32" edition="pre2" />
-        <vers num="2.4.33" edition="pre1" />
-        <vers num="2.4.33.2" />
-        <vers num="2.4.33.3" />
-        <vers num="2.4.33.4" />
-        <vers num="2.4.33.5" />
-        <vers num="2.4.34" edition="rc3" />
-        <vers num="2.4.34.1" />
-        <vers num="2.4.34.2" />
-        <vers num="2.4.35" />
-        <vers num="2.4.35.2" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers num="2.4.8" />
-        <vers num="2.4.9" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.10" />
-        <vers num="2.5.11" />
-        <vers num="2.5.12" />
-        <vers num="2.5.13" />
-        <vers num="2.5.14" />
-        <vers num="2.5.15" />
-        <vers num="2.5.16" />
-        <vers num="2.5.17" />
-        <vers num="2.5.18" />
-        <vers num="2.5.19" />
-        <vers num="2.5.2" />
-        <vers num="2.5.20" />
-        <vers num="2.5.21" />
-        <vers num="2.5.22" />
-        <vers num="2.5.23" />
-        <vers num="2.5.24" />
-        <vers num="2.5.25" />
-        <vers num="2.5.26" />
-        <vers num="2.5.27" />
-        <vers num="2.5.28" />
-        <vers num="2.5.29" />
-        <vers num="2.5.3" />
-        <vers num="2.5.30" />
-        <vers num="2.5.31" />
-        <vers num="2.5.32" />
-        <vers num="2.5.33" />
-        <vers num="2.5.34" />
-        <vers num="2.5.35" />
-        <vers num="2.5.36" />
-        <vers num="2.5.37" />
-        <vers num="2.5.38" />
-        <vers num="2.5.39" />
-        <vers num="2.5.4" />
-        <vers num="2.5.40" />
-        <vers num="2.5.41" />
-        <vers num="2.5.42" />
-        <vers num="2.5.43" />
-        <vers num="2.5.44" />
-        <vers num="2.5.45" />
-        <vers num="2.5.46" />
-        <vers num="2.5.47" />
-        <vers num="2.5.48" />
-        <vers num="2.5.49" />
-        <vers num="2.5.5" />
-        <vers num="2.5.50" />
-        <vers num="2.5.51" />
-        <vers num="2.5.52" />
-        <vers num="2.5.53" />
-        <vers num="2.5.54" />
-        <vers num="2.5.55" />
-        <vers num="2.5.56" />
-        <vers num="2.5.57" />
-        <vers num="2.5.58" />
-        <vers num="2.5.59" />
-        <vers num="2.5.6" />
-        <vers num="2.5.60" />
-        <vers num="2.5.61" />
-        <vers num="2.5.62" />
-        <vers num="2.5.63" />
-        <vers num="2.5.64" />
-        <vers num="2.5.65" />
-        <vers num="2.5.66" />
-        <vers num="2.5.67" />
-        <vers num="2.5.68" />
-        <vers num="2.5.69" />
-        <vers num="2.5.7" />
-        <vers num="2.5.8" />
-        <vers num="2.5.9" />
-        <vers num="2.6.0" edition="test1" />
-        <vers num="2.6.0" edition="test10" />
-        <vers num="2.6.0" edition="test11" />
-        <vers num="2.6.0" edition="test2" />
-        <vers num="2.6.0" edition="test3" />
-        <vers num="2.6.0" edition="test4" />
-        <vers num="2.6.0" edition="test5" />
-        <vers num="2.6.0" edition="test6" />
-        <vers num="2.6.0" edition="test7" />
-        <vers num="2.6.0" edition="test8" />
-        <vers num="2.6.0" edition="test9" />
-        <vers num="2.6.1" edition="rc1" />
-        <vers num="2.6.1" edition="rc2" />
-        <vers num="2.6.1" edition="rc3" />
-        <vers num="2.6.10" edition="rc1" />
-        <vers num="2.6.10" edition="rc2" />
-        <vers num="2.6.10" edition="rc3" />
-        <vers num="2.6.11" edition="rc1" />
-        <vers num="2.6.11" edition="rc2" />
-        <vers num="2.6.11" edition="rc3" />
-        <vers num="2.6.11" edition="rc4" />
-        <vers num="2.6.11" edition="rc5" />
-        <vers num="2.6.11.1" />
-        <vers num="2.6.11.10" />
-        <vers num="2.6.11.11" />
-        <vers num="2.6.11.12" />
-        <vers num="2.6.11.2" />
-        <vers num="2.6.11.3" />
-        <vers num="2.6.11.4" />
-        <vers num="2.6.11.5" />
-        <vers num="2.6.11.6" />
-        <vers num="2.6.11.7" />
-        <vers num="2.6.11.8" />
-        <vers num="2.6.11.9" />
-        <vers num="2.6.12" edition="rc1" />
-        <vers num="2.6.12" edition="rc2" />
-        <vers num="2.6.12" edition="rc3" />
-        <vers num="2.6.12" edition="rc4" />
-        <vers num="2.6.12" edition="rc5" />
-        <vers num="2.6.12" edition="rc6" />
-        <vers num="2.6.12.1" />
-        <vers num="2.6.12.2" />
-        <vers num="2.6.12.3" />
-        <vers num="2.6.12.4" />
-        <vers num="2.6.12.5" />
-        <vers num="2.6.12.6" />
-        <vers num="2.6.13" edition="rc1" />
-        <vers num="2.6.13" edition="rc2" />
-        <vers num="2.6.13" edition="rc3" />
-        <vers num="2.6.13" edition="rc4" />
-        <vers num="2.6.13" edition="rc5" />
-        <vers num="2.6.13" edition="rc6" />
-        <vers num="2.6.13" edition="rc7" />
-        <vers num="2.6.13.1" />
-        <vers num="2.6.13.2" />
-        <vers num="2.6.13.3" />
-        <vers num="2.6.13.4" />
-        <vers num="2.6.13.5" />
-        <vers num="2.6.14" edition="rc1" />
-        <vers num="2.6.14" edition="rc2" />
-        <vers num="2.6.14" edition="rc3" />
-        <vers num="2.6.14" edition="rc4" />
-        <vers num="2.6.14" edition="rc5" />
-        <vers num="2.6.14.1" />
-        <vers num="2.6.14.2" />
-        <vers num="2.6.14.3" />
-        <vers num="2.6.14.4" />
-        <vers num="2.6.14.5" />
-        <vers num="2.6.14.6" />
-        <vers num="2.6.14.7" />
-        <vers num="2.6.15" edition="rc1" />
-        <vers num="2.6.15" edition="rc2" />
-        <vers num="2.6.15" edition="rc3" />
-        <vers num="2.6.15" edition="rc4" />
-        <vers num="2.6.15" edition="rc5" />
-        <vers num="2.6.15" edition="rc6" />
-        <vers num="2.6.15" edition="rc7" />
-        <vers num="2.6.15.1" />
-        <vers num="2.6.15.10" />
-        <vers num="2.6.15.11" />
-        <vers num="2.6.15.2" />
-        <vers num="2.6.15.3" />
-        <vers num="2.6.15.4" />
-        <vers num="2.6.15.5" />
-        <vers num="2.6.15.6" />
-        <vers num="2.6.15.7" />
-        <vers num="2.6.15.8" />
-        <vers num="2.6.15.9" />
-        <vers num="2.6.16" edition="rc1" />
-        <vers num="2.6.16" edition="rc2" />
-        <vers num="2.6.16" edition="rc3" />
-        <vers num="2.6.16" edition="rc4" />
-        <vers num="2.6.16" edition="rc5" />
-        <vers num="2.6.16" edition="rc6" />
-        <vers num="2.6.16" edition="rc7" />
-        <vers num="2.6.16.1" />
-        <vers num="2.6.16.10" />
-        <vers num="2.6.16.11" />
-        <vers num="2.6.16.12" />
-        <vers num="2.6.16.13" />
-        <vers num="2.6.16.14" />
-        <vers num="2.6.16.15" />
-        <vers num="2.6.16.16" />
-        <vers num="2.6.16.17" />
-        <vers num="2.6.16.18" />
-        <vers num="2.6.16.19" />
-        <vers num="2.6.16.2" />
-        <vers num="2.6.16.20" />
-        <vers num="2.6.16.21" />
-        <vers num="2.6.16.22" />
-        <vers num="2.6.16.23" />
-        <vers num="2.6.16.24" />
-        <vers num="2.6.16.25" />
-        <vers num="2.6.16.26" />
-        <vers num="2.6.16.27" />
-        <vers num="2.6.16.28" />
-        <vers num="2.6.16.29" />
-        <vers num="2.6.16.3" />
-        <vers num="2.6.16.30" />
-        <vers num="2.6.16.31" />
-        <vers num="2.6.16.32" />
-        <vers num="2.6.16.33" />
-        <vers num="2.6.16.34" />
-        <vers num="2.6.16.35" />
-        <vers num="2.6.16.36" />
-        <vers num="2.6.16.37" />
-        <vers num="2.6.16.38" />
-        <vers num="2.6.16.39" />
-        <vers num="2.6.16.4" />
-        <vers num="2.6.16.40" />
-        <vers num="2.6.16.41" />
-        <vers num="2.6.16.42" />
-        <vers num="2.6.16.43" />
-        <vers num="2.6.16.44" />
-        <vers num="2.6.16.45" />
-        <vers num="2.6.16.46" />
-        <vers num="2.6.16.47" />
-        <vers num="2.6.16.48" />
-        <vers num="2.6.16.49" />
-        <vers num="2.6.16.5" />
-        <vers num="2.6.16.50" />
-        <vers num="2.6.16.51" />
-        <vers num="2.6.16.52" />
-        <vers num="2.6.16.53" />
-        <vers num="2.6.16.54" />
-        <vers num="2.6.16.55" />
-        <vers num="2.6.16.56" />
-        <vers num="2.6.16.57" />
-        <vers num="2.6.16.58" />
-        <vers num="2.6.16.59" />
-        <vers num="2.6.16.6" />
-        <vers num="2.6.16.60" />
-        <vers num="2.6.16.61" />
-        <vers num="2.6.16.62" />
-        <vers num="2.6.16.7" />
-        <vers num="2.6.16.8" />
-        <vers num="2.6.16.9" />
-        <vers num="2.6.17" edition="rc1" />
-        <vers num="2.6.17" edition="rc2" />
-        <vers num="2.6.17" edition="rc3" />
-        <vers num="2.6.17" edition="rc4" />
-        <vers num="2.6.17" edition="rc5" />
-        <vers num="2.6.17" edition="rc6" />
-        <vers num="2.6.17.1" />
-        <vers num="2.6.17.10" />
-        <vers num="2.6.17.11" />
-        <vers num="2.6.17.12" />
-        <vers num="2.6.17.13" />
-        <vers num="2.6.17.14" />
-        <vers num="2.6.17.2" />
-        <vers num="2.6.17.3" />
-        <vers num="2.6.17.4" />
-        <vers num="2.6.17.5" />
-        <vers num="2.6.17.6" />
-        <vers num="2.6.17.7" />
-        <vers num="2.6.17.8" />
-        <vers num="2.6.17.9" />
-        <vers num="2.6.18" edition="rc1" />
-        <vers num="2.6.18" edition="rc2" />
-        <vers num="2.6.18" edition="rc3" />
-        <vers num="2.6.18" edition="rc4" />
-        <vers num="2.6.18" edition="rc5" />
-        <vers num="2.6.18" edition="rc6" />
-        <vers num="2.6.18" edition="rc7" />
-        <vers num="2.6.18.1" />
-        <vers num="2.6.18.2" />
-        <vers num="2.6.18.3" />
-        <vers num="2.6.18.4" />
-        <vers num="2.6.18.5" />
-        <vers num="2.6.18.6" />
-        <vers num="2.6.18.7" />
-        <vers num="2.6.18.8" />
-        <vers num="2.6.19" edition="rc1" />
-        <vers num="2.6.19" edition="rc2" />
-        <vers num="2.6.19" edition="rc3" />
-        <vers num="2.6.19" edition="rc4" />
-        <vers num="2.6.19.1" />
-        <vers num="2.6.19.2" />
-        <vers num="2.6.19.3" />
-        <vers num="2.6.19.4" />
-        <vers num="2.6.19.5" />
-        <vers num="2.6.19.6" />
-        <vers num="2.6.19.7" />
-        <vers num="2.6.2" edition="rc1" />
-        <vers num="2.6.2" edition="rc2" />
-        <vers num="2.6.2" edition="rc3" />
-        <vers num="2.6.20" edition="rc2" />
-        <vers num="2.6.20.1" />
-        <vers num="2.6.20.10" />
-        <vers num="2.6.20.11" />
-        <vers num="2.6.20.12" />
-        <vers num="2.6.20.13" />
-        <vers num="2.6.20.14" />
-        <vers num="2.6.20.15" />
-        <vers num="2.6.20.16" />
-        <vers num="2.6.20.17" />
-        <vers num="2.6.20.18" />
-        <vers num="2.6.20.19" />
-        <vers num="2.6.20.2" />
-        <vers num="2.6.20.20" />
-        <vers num="2.6.20.21" />
-        <vers num="2.6.20.3" />
-        <vers num="2.6.20.4" />
-        <vers num="2.6.20.5" />
-        <vers num="2.6.20.6" />
-        <vers num="2.6.20.7" />
-        <vers num="2.6.20.8" />
-        <vers num="2.6.20.9" />
-        <vers num="2.6.21" edition="git1" />
-        <vers num="2.6.21" edition="git2" />
-        <vers num="2.6.21" edition="git3" />
-        <vers num="2.6.21" edition="git4" />
-        <vers num="2.6.21" edition="git5" />
-        <vers num="2.6.21" edition="git6" />
-        <vers num="2.6.21" edition="git7" />
-        <vers num="2.6.21" edition="rc3" />
-        <vers num="2.6.21" edition="rc4" />
-        <vers num="2.6.21" edition="rc5" />
-        <vers num="2.6.21" edition="rc6" />
-        <vers num="2.6.21" edition="rc7" />
-        <vers num="2.6.21.1" />
-        <vers num="2.6.21.2" />
-        <vers num="2.6.21.3" />
-        <vers num="2.6.21.4" />
-        <vers num="2.6.21.5" />
-        <vers num="2.6.21.6" />
-        <vers num="2.6.21.7" />
-        <vers num="2.6.22" edition="rc6" />
-        <vers num="2.6.22.1" />
-        <vers num="2.6.22.10" />
-        <vers num="2.6.22.11" />
-        <vers num="2.6.22.12" />
-        <vers num="2.6.22.13" />
-        <vers num="2.6.22.14" />
-        <vers num="2.6.22.15" />
-        <vers num="2.6.22.16" />
-        <vers num="2.6.22.17" />
-        <vers num="2.6.22.18" />
-        <vers num="2.6.22.19" />
-        <vers num="2.6.22.2" />
-        <vers num="2.6.22.20" />
-        <vers num="2.6.22.3" />
-        <vers num="2.6.22.4" />
-        <vers num="2.6.22.5" />
-        <vers num="2.6.22.6" />
-        <vers num="2.6.22.7" />
-        <vers num="2.6.22.8" />
-        <vers num="2.6.22.9" />
-        <vers num="2.6.23" edition="rc1" />
-        <vers num="2.6.23" edition="rc2" />
-        <vers num="2.6.23.1" />
-        <vers num="2.6.23.10" />
-        <vers num="2.6.23.11" />
-        <vers num="2.6.23.12" />
-        <vers num="2.6.23.13" />
-        <vers num="2.6.23.14" />
-        <vers num="2.6.23.15" />
-        <vers num="2.6.23.16" />
-        <vers num="2.6.23.17" />
-        <vers num="2.6.23.2" />
-        <vers num="2.6.23.3" />
-        <vers num="2.6.23.4" />
-        <vers num="2.6.23.5" />
-        <vers num="2.6.23.6" />
-        <vers num="2.6.23.7" />
-        <vers num="2.6.23.8" />
-        <vers num="2.6.23.9" />
-        <vers num="2.6.24" edition="rc1" />
-        <vers num="2.6.24" edition="rc2" />
-        <vers num="2.6.24" edition="rc3" />
-        <vers num="2.6.24" edition="rc4" />
-        <vers num="2.6.24" edition="rc5" />
-        <vers num="2.6.24.1" />
-        <vers num="2.6.24.2" />
-        <vers num="2.6.24.3" />
-        <vers num="2.6.24.4" />
-        <vers num="2.6.24.5" />
-        <vers num="2.6.24.6" />
-        <vers num="2.6.24.7" />
-        <vers num="2.6.25" />
-        <vers num="2.6.25.1" />
-        <vers num="2.6.25.10" />
-        <vers num="2.6.25.11" />
-        <vers num="2.6.25.12" />
-        <vers num="2.6.25.13" />
-        <vers num="2.6.25.14" />
-        <vers num="2.6.25.15" />
-        <vers num="2.6.25.16" />
-        <vers num="2.6.25.17" />
-        <vers num="2.6.25.18" />
-        <vers num="2.6.25.19" />
-        <vers num="2.6.25.2" />
-        <vers num="2.6.25.20" />
-        <vers num="2.6.25.3" />
-        <vers num="2.6.25.4" />
-        <vers num="2.6.25.5" />
-        <vers num="2.6.25.6" />
-        <vers num="2.6.25.7" />
-        <vers num="2.6.25.8" />
-        <vers num="2.6.25.9" />
-        <vers num="2.6.26" />
-        <vers num="2.6.26.1" />
-        <vers num="2.6.26.2" />
-        <vers num="2.6.26.3" />
-        <vers num="2.6.26.4" />
-        <vers num="2.6.26.5" />
-        <vers num="2.6.26.6" />
-        <vers num="2.6.26.7" />
-        <vers num="2.6.27" />
-        <vers num="2.6.27.1" />
-        <vers num="2.6.27.10" />
-        <vers num="2.6.27.11" />
-        <vers num="2.6.27.12" />
-        <vers num="2.6.27.13" />
-        <vers num="2.6.27.14" />
-        <vers num="2.6.27.15" />
-        <vers num="2.6.27.16" />
-        <vers num="2.6.27.17" />
-        <vers num="2.6.27.18" />
-        <vers num="2.6.27.19" />
-        <vers num="2.6.27.2" />
-        <vers num="2.6.27.20" />
-        <vers num="2.6.27.21" />
-        <vers num="2.6.27.22" />
-        <vers num="2.6.27.23" />
-        <vers num="2.6.27.24" />
-        <vers num="2.6.27.25" />
-        <vers num="2.6.27.26" />
-        <vers num="2.6.27.27" />
-        <vers num="2.6.27.28" />
-        <vers num="2.6.27.29" />
-        <vers num="2.6.27.3" />
-        <vers num="2.6.27.30" />
-        <vers num="2.6.27.31" />
-        <vers num="2.6.27.32" />
-        <vers num="2.6.27.33" />
-        <vers num="2.6.27.34" />
-        <vers num="2.6.27.35" />
-        <vers num="2.6.27.36" />
-        <vers num="2.6.27.37" />
-        <vers num="2.6.27.38" />
-        <vers num="2.6.27.39" />
-        <vers num="2.6.27.4" />
-        <vers num="2.6.27.40" />
-        <vers num="2.6.27.41" />
-        <vers num="2.6.27.42" />
-        <vers num="2.6.27.43" />
-        <vers num="2.6.27.44" />
-        <vers num="2.6.27.45" />
-        <vers num="2.6.27.46" />
-        <vers num="2.6.27.47" />
-        <vers num="2.6.27.48" />
-        <vers num="2.6.27.49" />
-        <vers num="2.6.27.5" />
-        <vers num="2.6.27.50" />
-        <vers num="2.6.27.51" />
-        <vers num="2.6.27.52" />
-        <vers num="2.6.27.53" />
-        <vers num="2.6.27.54" />
-        <vers num="2.6.27.55" />
-        <vers num="2.6.27.56" />
-        <vers num="2.6.27.57" />
-        <vers num="2.6.27.58" />
-        <vers num="2.6.27.59" />
-        <vers num="2.6.27.6" />
-        <vers num="2.6.27.60" />
-        <vers num="2.6.27.61" />
-        <vers num="2.6.27.62" />
-        <vers num="2.6.27.7" />
-        <vers num="2.6.27.8" />
-        <vers num="2.6.27.9" />
-        <vers num="2.6.28" />
-        <vers num="2.6.28.1" />
-        <vers num="2.6.28.10" />
-        <vers num="2.6.28.2" />
-        <vers num="2.6.28.3" />
-        <vers num="2.6.28.4" />
-        <vers num="2.6.28.5" />
-        <vers num="2.6.28.6" />
-        <vers num="2.6.28.7" />
-        <vers num="2.6.28.8" />
-        <vers num="2.6.28.9" />
-        <vers num="2.6.29" />
-        <vers num="2.6.29.1" />
-        <vers num="2.6.29.2" />
-        <vers num="2.6.29.3" />
-        <vers num="2.6.29.4" />
-        <vers num="2.6.29.5" />
-        <vers num="2.6.29.6" />
-        <vers num="2.6.32" />
-        <vers num="2.6.32.1" />
-        <vers num="2.6.32.10" />
-        <vers num="2.6.32.11" />
-        <vers num="2.6.32.12" />
-        <vers num="2.6.32.13" />
-        <vers num="2.6.32.14" />
-        <vers num="2.6.32.15" />
-        <vers num="2.6.32.16" />
-        <vers num="2.6.32.17" />
-        <vers num="2.6.32.18" />
-        <vers num="2.6.32.2" />
-        <vers num="2.6.32.28" />
-        <vers num="2.6.32.29" />
-        <vers num="2.6.32.3" />
-        <vers num="2.6.32.30" />
-        <vers num="2.6.32.31" />
-        <vers num="2.6.32.32" />
-        <vers num="2.6.32.33" />
-        <vers num="2.6.32.34" />
-        <vers num="2.6.32.35" />
-        <vers num="2.6.32.36" />
-        <vers num="2.6.32.37" />
-        <vers num="2.6.32.38" />
-        <vers num="2.6.32.39" />
-        <vers num="2.6.32.4" />
-        <vers num="2.6.32.40" />
-        <vers num="2.6.32.41" />
-        <vers num="2.6.32.42" />
-        <vers num="2.6.32.43" />
-        <vers num="2.6.32.44" />
-        <vers num="2.6.32.45" />
-        <vers num="2.6.32.46" />
-        <vers num="2.6.32.47" />
-        <vers num="2.6.32.48" />
-        <vers num="2.6.32.49" />
-        <vers num="2.6.32.5" />
-        <vers num="2.6.32.50" />
-        <vers num="2.6.32.51" />
-        <vers num="2.6.32.52" />
-        <vers num="2.6.32.53" />
-        <vers num="2.6.32.54" />
-        <vers num="2.6.32.55" />
-        <vers num="2.6.32.56" />
-        <vers num="2.6.32.57" />
-        <vers prev="1" num="2.6.32.58" />
-        <vers num="2.6.32.6" />
-        <vers num="2.6.32.7" />
-        <vers num="2.6.32.8" />
-        <vers num="2.6.32.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0883" published="2012-04-18" name="CVE-2012-0883" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://svn.apache.org/viewvc?view=revision&amp;revision=1296428" source="CONFIRM" patch="1">http://svn.apache.org/viewvc?view=revision&amp;revision=1296428</ref>
-      <ref url="http://www.securitytracker.com/id?1026932" source="SECTRACK">1026932</ref>
-      <ref url="http://www.apache.org/dist/httpd/Announcement2.4.html" source="CONFIRM" adv="1">http://www.apache.org/dist/httpd/Announcement2.4.html</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134012830914727&amp;w=2" source="HP">HPSBUX02791</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134012830914727&amp;w=2" source="HP">SSRT100856</ref>
-      <ref url="http://article.gmane.org/gmane.comp.apache.devel/48158" source="MLIST">[dev] 20120417 [ANNOUNCEMENT] Apache HTTP Server 2.4.2 Released</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="http_server">
-        <vers num="0.8.11" />
-        <vers num="0.8.14" />
-        <vers num="1.0" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.9" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.1.1" />
-        <vers num="1.3.10" />
-        <vers num="1.3.11" />
-        <vers num="1.3.12" />
-        <vers num="1.3.13" />
-        <vers num="1.3.14" />
-        <vers num="1.3.15" />
-        <vers num="1.3.16" />
-        <vers num="1.3.17" />
-        <vers num="1.3.18" />
-        <vers num="1.3.19" />
-        <vers num="1.3.2" />
-        <vers num="1.3.20" />
-        <vers num="1.3.22" />
-        <vers num="1.3.23" />
-        <vers num="1.3.24" />
-        <vers num="1.3.25" />
-        <vers num="1.3.26" />
-        <vers num="1.3.27" />
-        <vers num="1.3.28" />
-        <vers num="1.3.29" />
-        <vers num="1.3.3" />
-        <vers num="1.3.30" />
-        <vers num="1.3.31" />
-        <vers num="1.3.32" />
-        <vers num="1.3.33" />
-        <vers num="1.3.34" />
-        <vers num="1.3.35" />
-        <vers num="1.3.36" />
-        <vers num="1.3.37" />
-        <vers num="1.3.38" />
-        <vers num="1.3.39" />
-        <vers num="1.3.4" />
-        <vers num="1.3.41" />
-        <vers num="1.3.42" />
-        <vers num="1.3.5" />
-        <vers num="1.3.6" />
-        <vers num="1.3.65" />
-        <vers num="1.3.68" />
-        <vers num="1.3.7" />
-        <vers num="1.3.8" />
-        <vers num="1.3.9" />
-        <vers num="1.4.0" />
-        <vers num="1.99" />
-        <vers num="2.0" />
-        <vers num="2.0.28" edition="beta" />
-        <vers num="2.0.32" edition="beta" />
-        <vers num="2.0.34" edition="beta" />
-        <vers num="2.0.35" />
-        <vers num="2.0.36" />
-        <vers num="2.0.37" />
-        <vers num="2.0.38" />
-        <vers num="2.0.39" />
-        <vers num="2.0.40" />
-        <vers num="2.0.41" />
-        <vers num="2.0.42" />
-        <vers num="2.0.43" />
-        <vers num="2.0.44" />
-        <vers num="2.0.45" />
-        <vers num="2.0.46" />
-        <vers num="2.0.47" />
-        <vers num="2.0.48" />
-        <vers num="2.0.49" />
-        <vers num="2.0.50" />
-        <vers num="2.0.51" />
-        <vers num="2.0.52" />
-        <vers num="2.0.53" />
-        <vers num="2.0.54" />
-        <vers num="2.0.55" />
-        <vers num="2.0.56" />
-        <vers num="2.0.57" />
-        <vers num="2.0.58" />
-        <vers num="2.0.59" />
-        <vers num="2.0.60" />
-        <vers num="2.0.61" />
-        <vers num="2.0.63" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.10" />
-        <vers num="2.2.11" />
-        <vers num="2.2.12" />
-        <vers num="2.2.13" />
-        <vers num="2.2.14" />
-        <vers num="2.2.15" />
-        <vers num="2.2.16" />
-        <vers num="2.2.17" />
-        <vers num="2.2.18" />
-        <vers num="2.2.19" />
-        <vers num="2.2.2" />
-        <vers num="2.2.20" />
-        <vers num="2.2.21" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" />
-        <vers num="2.2.6" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.13" />
-        <vers num="2.3.14" />
-        <vers num="2.3.15" />
-        <vers num="2.3.16" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers prev="1" num="2.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0884" published="2012-03-12" name="CVE-2012-0884" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/14330767" source="SUSE">openSUSE-SU-2012:0547</ref>
-      <ref url="http://www.openssl.org/news/secadv_20120312.txt" source="CONFIRM" adv="1">http://www.openssl.org/news/secadv_20120312.txt</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2454" source="DEBIAN">DSA-2454</ref>
-      <ref url="http://secunia.com/advisories/48916" source="SECUNIA">48916</ref>
-      <ref url="http://secunia.com/advisories/48895" source="SECUNIA">48895</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134039053214295&amp;w=2" source="HP">HPSBOV02793</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134039053214295&amp;w=2" source="HP">SSRT100891</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077086.html" source="FEDORA">FEDORA-2012-4665</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openssl" name="openssl">
-        <vers num="0.9.0b" />
-        <vers num="0.9.1b" />
-        <vers num="0.9.1c" />
-        <vers num="0.9.2b" />
-        <vers num="0.9.3" />
-        <vers num="0.9.3a" />
-        <vers num="0.9.4" />
-        <vers num="0.9.5" />
-        <vers num="0.9.5a" />
-        <vers num="0.9.6" />
-        <vers num="0.9.6a" />
-        <vers num="0.9.6b" />
-        <vers num="0.9.6c" />
-        <vers num="0.9.6d" />
-        <vers num="0.9.6e" />
-        <vers num="0.9.6f" />
-        <vers num="0.9.6g" />
-        <vers num="0.9.6h" />
-        <vers num="0.9.6i" />
-        <vers num="0.9.6j" />
-        <vers num="0.9.6k" />
-        <vers num="0.9.6l" />
-        <vers num="0.9.6m" />
-        <vers num="0.9.7" />
-        <vers num="0.9.7a" />
-        <vers num="0.9.7b" />
-        <vers num="0.9.7c" />
-        <vers num="0.9.7d" />
-        <vers num="0.9.7e" />
-        <vers num="0.9.7f" />
-        <vers num="0.9.7g" />
-        <vers num="0.9.7h" />
-        <vers num="0.9.7i" />
-        <vers num="0.9.7j" />
-        <vers num="0.9.7k" />
-        <vers num="0.9.7l" />
-        <vers num="0.9.7m" />
-        <vers num="0.9.8" />
-        <vers num="0.9.8a" />
-        <vers num="0.9.8b" />
-        <vers num="0.9.8c" />
-        <vers num="0.9.8d" />
-        <vers num="0.9.8e" />
-        <vers num="0.9.8f" />
-        <vers num="0.9.8g" />
-        <vers num="0.9.8h" />
-        <vers num="0.9.8i" />
-        <vers num="0.9.8j" />
-        <vers num="0.9.8k" />
-        <vers num="0.9.8l" />
-        <vers num="0.9.8m" />
-        <vers num="0.9.8n" />
-        <vers num="0.9.8o" />
-        <vers num="0.9.8p" />
-        <vers num="0.9.8q" />
-        <vers num="0.9.8r" />
-        <vers num="0.9.8s" />
-        <vers prev="1" num="0.9.8t" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0a" />
-        <vers num="1.0.0b" />
-        <vers num="1.0.0c" />
-        <vers num="1.0.0d" />
-        <vers num="1.0.0e" />
-        <vers num="1.0.0f" />
-        <vers num="1.0.0g" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0885" published="2012-01-25" name="CVE-2012-0885" modified="2012-01-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">chan_sip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and 10.x before 10.0.1, when the res_srtp module is used and media support is improperly configured, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted SDP message with a crypto attribute and a (1) video or (2) text media type, as demonstrated by CSipSimple.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://downloads.asterisk.org/pub/security/AST-2012-001-10.diff" source="CONFIRM" patch="1">http://downloads.asterisk.org/pub/security/AST-2012-001-10.diff</ref>
-      <ref url="http://downloads.asterisk.org/pub/security/AST-2012-001-1.8.diff" source="CONFIRM" patch="1">http://downloads.asterisk.org/pub/security/AST-2012-001-1.8.diff</ref>
-      <ref url="https://issues.asterisk.org/jira/secure/attachment/42202/issueA19202_crypto_if_uninited_text_or_video.patch" source="CONFIRM">https://issues.asterisk.org/jira/secure/attachment/42202/issueA19202_crypto_if_uninited_text_or_video.patch</ref>
-      <ref url="https://issues.asterisk.org/jira/browse/ASTERISK-19202" source="CONFIRM">https://issues.asterisk.org/jira/browse/ASTERISK-19202</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=783487" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=783487</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/20/18" source="MLIST">[oss-security] 20120120 Re: CVE Request -- Asterisk AST-2012-001 / Remote DoS while processing crypto line for media stream with non-existing RTP</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/20/16" source="MLIST">[oss-security] 20120120 CVE Request -- Asterisk AST-2012-001 / Remote DoS while processing crypto line for media stream with non-existing RTP</ref>
-      <ref url="http://downloads.asterisk.org/pub/security/AST-2012-001.html" source="CONFIRM" adv="1">http://downloads.asterisk.org/pub/security/AST-2012-001.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="asterisk" name="open_source">
-        <vers num="1.8.0" edition="beta1" />
-        <vers num="1.8.0" edition="beta2" />
-        <vers num="1.8.0" edition="beta3" />
-        <vers num="1.8.0" edition="beta4" />
-        <vers num="1.8.0" edition="beta5" />
-        <vers num="1.8.0" edition="rc2" />
-        <vers num="1.8.0" edition="rc3" />
-        <vers num="1.8.0" edition="rc4" />
-        <vers num="1.8.0" edition="rc5" />
-        <vers num="1.8.1" edition="rc1" />
-        <vers num="1.8.1.1" />
-        <vers num="1.8.1.2" />
-        <vers num="1.8.2" edition="rc1" />
-        <vers num="1.8.2.1" />
-        <vers num="1.8.2.2" />
-        <vers num="1.8.2.3" />
-        <vers num="1.8.2.4" />
-        <vers num="1.8.3" edition="rc1" />
-        <vers num="1.8.3" edition="rc2" />
-        <vers num="1.8.3" edition="rc3" />
-        <vers num="1.8.3.1" />
-        <vers num="1.8.3.2" />
-        <vers num="1.8.3.3" />
-        <vers num="1.8.4" edition="rc1" />
-        <vers num="1.8.4" edition="rc2" />
-        <vers num="1.8.4" edition="rc3" />
-        <vers num="1.8.4.1" />
-        <vers num="1.8.4.2" />
-        <vers num="1.8.4.3" />
-        <vers num="1.8.4.4" />
-        <vers num="1.8.5" edition="rc1" />
-        <vers num="1.8.5.0" />
-        <vers num="1.8.6.0" edition="rc1" />
-        <vers num="1.8.6.0" edition="rc2" />
-        <vers num="1.8.6.0" edition="rc3" />
-        <vers num="1.8.7.0" edition="rc1" />
-        <vers num="1.8.7.0" edition="rc2" />
-        <vers num="1.8.7.1" />
-        <vers num="1.8.7.2" />
-        <vers num="1.8.8.0" edition="rc1" />
-        <vers num="1.8.8.0" edition="rc2" />
-        <vers num="1.8.8.0" edition="rc3" />
-        <vers num="1.8.8.0" edition="rc4" />
-        <vers num="1.8.8.0" edition="rc5" />
-        <vers num="1.8.8.1" />
-        <vers num="10.0.0" edition="beta1" />
-        <vers num="10.0.0" edition="beta2" />
-        <vers num="10.0.0" edition="rc1" />
-        <vers num="10.0.0" edition="rc2" />
-        <vers num="10.0.0" edition="rc3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0895" published="2012-01-20" name="CVE-2012-0895" modified="2012-01-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72384" source="XF">countperday-map-xss(72384)</ref>
-      <ref url="http://www.securityfocus.com/bid/51402" source="BID">51402</ref>
-      <ref url="http://www.exploit-db.com/exploits/18355" source="EXPLOIT-DB">18355</ref>
-      <ref url="http://wordpress.org/extend/plugins/count-per-day/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/count-per-day/changelog/</ref>
-      <ref url="http://secunia.com/advisories/47529" source="SECUNIA" adv="1">47529</ref>
-      <ref url="http://plugins.trac.wordpress.org/changeset/488883/count-per-day" source="CONFIRM">http://plugins.trac.wordpress.org/changeset/488883/count-per-day</ref>
-      <ref url="http://packetstormsecurity.org/files/108631/countperday-downloadxss.txt" source="MISC">http://packetstormsecurity.org/files/108631/countperday-downloadxss.txt</ref>
-      <ref url="http://osvdb.org/78271" source="OSVDB">78271</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tom_braider" name="count_per_day">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.3" />
-        <vers num="1.4" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.10" />
-        <vers num="2.10.1" />
-        <vers num="2.11" />
-        <vers num="2.12" />
-        <vers num="2.13" />
-        <vers num="2.13.1" />
-        <vers num="2.14" />
-        <vers num="2.15" />
-        <vers num="2.15.1" />
-        <vers num="2.16" />
-        <vers num="2.16.1" />
-        <vers num="2.17" />
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.4" />
-        <vers num="2.4.2" />
-        <vers num="2.5" />
-        <vers num="2.6" />
-        <vers num="2.7" />
-        <vers num="2.8" />
-        <vers num="2.9" />
-        <vers num="3.0" />
-        <vers prev="1" num="3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0896" published="2012-01-20" name="CVE-2012-0896" modified="2012-01-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read arbitrary files via the f parameter.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72385" source="XF">countperday-download-file-download(72385)</ref>
-      <ref url="http://www.securityfocus.com/bid/51402" source="BID">51402</ref>
-      <ref url="http://www.exploit-db.com/exploits/18355" source="EXPLOIT-DB">18355</ref>
-      <ref url="http://wordpress.org/extend/plugins/count-per-day/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/count-per-day/changelog/</ref>
-      <ref url="http://secunia.com/advisories/47529" source="SECUNIA" adv="1">47529</ref>
-      <ref url="http://plugins.trac.wordpress.org/changeset/488883/count-per-day" source="CONFIRM">http://plugins.trac.wordpress.org/changeset/488883/count-per-day</ref>
-      <ref url="http://packetstormsecurity.org/files/108631/countperday-downloadxss.txt" source="MISC">http://packetstormsecurity.org/files/108631/countperday-downloadxss.txt</ref>
-      <ref url="http://osvdb.org/78270" source="OSVDB">78270</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tom_braider" name="count_per_day">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.3" />
-        <vers num="1.4" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.10" />
-        <vers num="2.10.1" />
-        <vers num="2.11" />
-        <vers num="2.12" />
-        <vers num="2.13" />
-        <vers num="2.13.1" />
-        <vers num="2.14" />
-        <vers num="2.15" />
-        <vers num="2.15.1" />
-        <vers num="2.16" />
-        <vers num="2.16.1" />
-        <vers num="2.17" />
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.4" />
-        <vers num="2.4.2" />
-        <vers num="2.5" />
-        <vers num="2.6" />
-        <vers num="2.7" />
-        <vers num="2.8" />
-        <vers num="2.9" />
-        <vers num="3.0" />
-        <vers prev="1" num="3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0897" published="2012-01-20" name="CVE-2012-0897" modified="2012-01-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72398" source="XF">irfanview-qcd-bo(72398)</ref>
-      <ref url="http://www.securityfocus.com/bid/51426" source="BID">51426</ref>
-      <ref url="http://secunia.com/advisories/47360" source="SECUNIA" adv="1">47360</ref>
-      <ref url="http://osvdb.org/78333" source="OSVDB">78333</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="irfanview" name="irfanview">
-        <vers num="1.70" />
-        <vers num="1.75" />
-        <vers num="1.80" />
-        <vers num="1.85" />
-        <vers num="1.90" />
-        <vers num="1.95" />
-        <vers num="1.97" />
-        <vers num="1.98" />
-        <vers num="1.98a" />
-        <vers num="1.99" />
-        <vers num="2.00" />
-        <vers num="2.05" />
-        <vers num="2.07" />
-        <vers num="2.10" />
-        <vers num="2.12" />
-        <vers num="2.15" />
-        <vers num="2.17" />
-        <vers num="2.18" />
-        <vers num="2.20" />
-        <vers num="2.22" />
-        <vers num="2.25" />
-        <vers num="2.27" />
-        <vers num="2.30" />
-        <vers num="2.32" />
-        <vers num="2.35" />
-        <vers num="2.37" />
-        <vers num="2.40" />
-        <vers num="2.50" />
-        <vers num="2.52" />
-        <vers num="2.55" />
-        <vers num="2.60" />
-        <vers num="2.62" />
-        <vers num="2.63" />
-        <vers num="2.65" />
-        <vers num="2.66" />
-        <vers num="2.68" />
-        <vers num="2.80" />
-        <vers num="2.82" />
-        <vers num="2.83" />
-        <vers num="2.85" />
-        <vers num="2.90" />
-        <vers num="2.92" />
-        <vers num="2.95" />
-        <vers num="2.97" />
-        <vers num="2.98" />
-        <vers num="3.0.7" />
-        <vers num="3.00" />
-        <vers num="3.02" />
-        <vers num="3.05" />
-        <vers num="3.07" />
-        <vers num="3.10" />
-        <vers num="3.12" />
-        <vers num="3.15" />
-        <vers num="3.17" />
-        <vers num="3.20" />
-        <vers num="3.21" />
-        <vers num="3.25" />
-        <vers num="3.30" />
-        <vers num="3.33" />
-        <vers num="3.35" />
-        <vers num="3.36" />
-        <vers num="3.50" />
-        <vers num="3.51" />
-        <vers num="3.60" />
-        <vers num="3.61" />
-        <vers num="3.70" />
-        <vers num="3.75" />
-        <vers num="3.80" />
-        <vers num="3.85" />
-        <vers num="3.90" />
-        <vers num="3.91" />
-        <vers num="3.92" />
-        <vers num="3.95" />
-        <vers num="3.97" />
-        <vers num="3.98" />
-        <vers num="3.99" />
-        <vers num="4.00" />
-        <vers num="4.10" />
-        <vers num="4.20" />
-        <vers num="4.22" />
-        <vers num="4.23" />
-        <vers num="4.25" />
-        <vers num="4.27" />
-        <vers num="4.28" />
-        <vers num="4.30" />
-        <vers prev="1" num="4.32" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0898" published="2012-01-20" name="CVE-2012-0898" modified="2012-01-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in meb_download.php in the myEASYbackup plugin 1.0.8.1 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the dwn_file parameter.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72404" source="XF">myeasy-mebdownload-directory-traversal(72404)</ref>
-      <ref url="http://secunia.com/advisories/47594" source="SECUNIA" adv="1">47594</ref>
-      <ref url="http://packetstormsecurity.org/files/view/108711/wpmyeasybackup-traversal.txt" source="MISC">http://packetstormsecurity.org/files/view/108711/wpmyeasybackup-traversal.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="camaleo" name="myeasybackup">
-        <vers num="1.0.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0899" published="2012-01-20" name="CVE-2012-0899" modified="2012-01-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in referencement/sites_inscription.php in Annuaire PHP allows remote attackers to inject arbitrary web script or HTML via the url parameter and possibly the nom parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72407" source="XF">annuaire-sitesinscription-xss(72407)</ref>
-      <ref url="http://www.securityfocus.com/bid/51434" source="BID">51434</ref>
-      <ref url="http://packetstormsecurity.org/files/view/108719/annuaire-xss.txt" source="MISC">http://packetstormsecurity.org/files/view/108719/annuaire-xss.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="annuairephp" name="annuaire_php">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0900" published="2012-01-20" name="CVE-2012-0900" modified="2012-01-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Beehive Forum 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) forum/register.php or (2) forum/logon.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72411" source="XF">beehiveforum101-multiple-xss(72411)</ref>
-      <ref url="http://www.securityfocus.com/bid/51424" source="BID">51424</ref>
-      <ref url="http://www.darksecurity.de/advisories/SSCHADV2011-042.txt" source="MISC">http://www.darksecurity.de/advisories/SSCHADV2011-042.txt</ref>
-      <ref url="http://secunia.com/advisories/47595" source="SECUNIA" adv="1">47595</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0103.html" source="BUGTRAQ">20120115 Beehive Forum 101 Multiple XSS vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="beehive_forum" name="beehive_forum">
-        <vers num="1.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0901" published="2012-01-20" name="CVE-2012-0901" modified="2012-01-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in yousaytoo.php in YouSayToo auto-publishing plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72271" source="XF">yousaytooautopublishing-yousaytoo-xss(72271)</ref>
-      <ref url="http://packetstormsecurity.org/files/view/108470/wpystap-xss.txt" source="MISC">http://packetstormsecurity.org/files/view/108470/wpystap-xss.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="attenzione" name="yousaytoo">
-        <vers num="1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0902" published="2012-01-20" name="CVE-2012-0902" modified="2012-01-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">AirTies Air 4450 1.1.2.18 allows remote attackers to cause a denial of service (reboot) via a direct request to cgi-bin/loader.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72200" source="XF">airties-4450-cgibin-dos(72200)</ref>
-      <ref url="http://www.securityfocus.com/bid/51320" source="BID">51320</ref>
-      <ref url="http://www.exploit-db.com/exploits/18336" source="EXPLOIT-DB">18336</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="airties" name="air_4450">
-        <vers num="1.1.2.18" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0903" published="2012-01-20" name="CVE-2012-0903" modified="2012-01-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Desktop 7.1.2 b10978 allow remote attackers to inject arbitrary web script or HTML via the (1) Username or (2) MailBox Name.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72405" source="XF">zimbra-labelname-xss(72405)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=378" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=378</ref>
-      <ref url="http://www.securityfocus.com/bid/51436" source="BID">51436</ref>
-      <ref url="http://seclists.org/fulldisclosure/2012/Jan/244" source="FULLDISC">20120116 Zimbra Desktop v7.1.2 - Persistent Software Vulnerability</ref>
-      <ref url="http://packetstormsecurity.org/files/view/108715/VL-378.txt" source="MISC">http://packetstormsecurity.org/files/view/108715/VL-378.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="zimbra_desktop">
-        <vers num="7.1.2" edition="b10978" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0904" published="2012-01-20" name="CVE-2012-0904" modified="2012-01-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72085" source="XF">vlcmediaplayer-amr-dos(72085)</ref>
-      <ref url="http://www.securityfocus.com/bid/51255" source="BID">51255</ref>
-      <ref url="http://www.exploit-db.com/exploits/18309" source="EXPLOIT-DB">18309</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14327" source="OVAL">oval:org.mitre.oval:def:14327</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0033.html" source="BUGTRAQ">20120104 VLC media player v1.1.11 (.amr) Local Crash PoC</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="videolan" name="vlc_media_player">
-        <vers num="1.1.11" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0905" published="2012-01-20" name="CVE-2012-0905" modified="2012-02-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in deV!L'z Clanportal (DZCP) Gamebase addon allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a detail action to index.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/18385" source="EXPLOIT-DB">18385</ref>
-      <ref url="http://secunia.com/advisories/47563" source="SECUNIA" adv="1">47563</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dev!l's" name="dev!l'z_clanportal_gamebase_addon">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0906" published="2012-01-20" name="CVE-2012-0906" modified="2012-01-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal (DZCP) 1.5.5 allows remote attackers to execute arbitrary SQL commands via the id parameter in a showkat action to index.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/18386" source="EXPLOIT-DB">18386</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mystarmedia" name="moviebase_addon">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0907" published="2012-01-20" name="CVE-2012-0907" modified="2012-01-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:P)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in the web player in NeoAxis NeoAxis web player 1.4 and earlier allows user-assisted remote attackers to write arbitrary files via a .. (dot dot) in a filename in the neoaxis_web_application_win32.zip ZIP archive.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72427" source="XF">neoaxis-neoaxis-directory-traversal(72427)</ref>
-      <ref url="http://osvdb.org/78311" source="OSVDB">78311</ref>
-      <ref url="http://aluigi.altervista.org/adv/neoaxis_1-adv.txt" source="MISC">http://aluigi.altervista.org/adv/neoaxis_1-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="neoaxis" name="neoaxis_web_player">
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers prev="1" num="1.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0908" published="2012-01-24" name="CVE-2012-0908" modified="2012-01-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the link_href parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72313" source="XF">simplesamlphp-nocookie-logout-xss(72313)</ref>
-      <ref url="http://www.securityfocus.com/bid/51372" source="BID">51372</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/20/20" source="MLIST">[oss-security] 20120120 Re: CVE request: simpleSAMLphp 1.8.2 cross site scripting</ref>
-      <ref url="http://secunia.com/advisories/47491" source="SECUNIA" adv="1">47491</ref>
-      <ref url="http://osvdb.org/78255" source="OSVDB">78255</ref>
-      <ref url="http://code.google.com/p/simplesamlphp/issues/detail?id=468" source="CONFIRM">http://code.google.com/p/simplesamlphp/issues/detail?id=468</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="simplesamlphp" name="simplesamlphp">
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="1.4" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.6" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.7" />
-        <vers num="1.8" />
-        <vers prev="1" num="1.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0909" published="2012-01-24" name="CVE-2012-0909" modified="2012-01-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to email verification.  NOTE: Some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51586" source="BID">51586</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/01/22/2" source="MLIST">[oss-security] 20120121 Re: Re: CVE Request -- Horde IMP -- Multiple XSS flaws</ref>
-      <ref url="http://www.horde.org/apps/webmail/docs/RELEASE_NOTES" source="CONFIRM">http://www.horde.org/apps/webmail/docs/RELEASE_NOTES</ref>
-      <ref url="http://www.horde.org/apps/webmail/docs/CHANGES" source="CONFIRM">http://www.horde.org/apps/webmail/docs/CHANGES</ref>
-      <ref url="http://secunia.com/advisories/47592" source="SECUNIA" adv="1">47592</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="horde" name="groupware_webmail_edition">
-        <vers num="1.0" edition="rc1" />
-        <vers num="1.0" edition="rc2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.1" edition="rc1" />
-        <vers num="1.1" edition="rc2" />
-        <vers num="1.1" edition="rc3" />
-        <vers num="1.1" edition="rc4" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.2" edition="rc1" />
-        <vers num="1.2.1" />
-        <vers num="1.2.10" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" edition="rc1" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers num="1.2.8" />
-        <vers num="1.2.9" />
-        <vers num="4.0" edition="rc1" />
-        <vers num="4.0" edition="rc2" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers prev="1" num="4.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0911" published="2012-07-12" name="CVE-2012-0911" modified="2012-07-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bannerlib.php; (2) printpages or (3) printstructures parameter to (a) tiki-print_multi_pages.php or (b) tiki-print_pages.php; or (4) sendpages, (5) sendstructures, or (6) sendarticles parameter to tiki-send_objects.php, which is not properly handled when processed by the unserialize function.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://info.tiki.org/article191-Tiki-Releases-8-4" source="CONFIRM" patch="1">http://info.tiki.org/article191-Tiki-Releases-8-4</ref>
-      <ref url="http://info.tiki.org/article190-Tiki-Wiki-CMS-Groupware-Updates-Tiki-6-7-LTS" source="CONFIRM" patch="1">http://info.tiki.org/article190-Tiki-Wiki-CMS-Groupware-Updates-Tiki-6-7-LTS</ref>
-      <ref url="http://dev.tiki.org/item4109" source="CONFIRM" patch="1" adv="1">http://dev.tiki.org/item4109</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76758" source="XF">tikiwiki-unserialize-code-exec(76758)</ref>
-      <ref url="http://www.securityfocus.com/bid/54298" source="BID">54298</ref>
-      <ref url="http://www.exploit-db.com/exploits/19630" source="EXPLOIT-DB">19630</ref>
-      <ref url="http://www.exploit-db.com/exploits/19573" source="EXPLOIT-DB">19573</ref>
-      <ref url="http://osvdb.org/83534" source="OSVDB">83534</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0020.html" source="BUGTRAQ">20120704 [CVE-2012-0911] Tiki Wiki CMS Groupware &lt;= 8.3 </ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tikiwiki" name="tikiwiki">
-        <vers num="0.9" />
-        <vers num="0.95" />
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="1.4" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.5" />
-        <vers num="1.6" />
-        <vers num="1.6.1" />
-        <vers num="1.7" />
-        <vers num="1.7.1" />
-        <vers num="1.7.1.1" />
-        <vers num="1.8" />
-        <vers num="1.8.1" />
-        <vers num="1.8.2" />
-        <vers num="1.8.3" />
-        <vers num="1.8.4" />
-        <vers num="1.8.5" />
-        <vers num="1.8.6" />
-        <vers num="1.9" />
-        <vers num="1.9.1" />
-        <vers num="1.9.1.1" />
-        <vers num="1.9.10" />
-        <vers num="1.9.10.1" />
-        <vers num="1.9.11" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.3.1" />
-        <vers num="1.9.3.2" />
-        <vers num="1.9.4" />
-        <vers num="1.9.5" />
-        <vers num="1.9.6" />
-        <vers num="1.9.7" />
-        <vers num="1.9.8" />
-        <vers num="1.9.8.1" />
-        <vers num="1.9.8.2" />
-        <vers num="1.9.8.3" />
-        <vers num="1.9.9" />
-        <vers num="1.9_rc1" />
-        <vers num="1.9_rc2" />
-        <vers num="1.9_rc3" />
-        <vers num="1.9_rc3.1" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-        <vers num="4.2" />
-        <vers num="5.0" />
-        <vers num="5.1" edition="rc1" />
-        <vers num="5.2" />
-        <vers num="5.3" />
-        <vers num="5.4" />
-        <vers num="6.0" />
-        <vers num="6.1" />
-        <vers num="6.2" />
-        <vers num="6.3" />
-        <vers num="6.4" />
-        <vers num="6.5" />
-        <vers num="6.6" />
-        <vers num="6.7" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.0" edition="rc1" />
-        <vers num="7.1" edition="rc1" />
-        <vers num="7.2" />
-        <vers num="8.0" edition="beta" />
-        <vers num="8.0" edition="rc1" />
-        <vers num="8.1" />
-        <vers num="8.2" />
-        <vers num="8.3" />
-      </prod>
-      <prod vendor="tikiwiki" name="tikiwiki_cms/groupware">
-        <vers num="2.2" />
-        <vers num="3.0" />
-        <vers num="3.1" />
-        <vers num="3.2" />
-        <vers num="3.3" />
-        <vers num="3.4" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0912" published="2012-01-24" name="CVE-2012-0912" modified="2012-01-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.stone-ware.com/swql.jsp?kb=d1960" source="CONFIRM" adv="1">http://www.stone-ware.com/swql.jsp?kb=d1960</ref>
-      <ref url="http://www.stone-ware.com/support/techdocs/kb/d1960/sb_6_0_8.pdf" source="CONFIRM" adv="1">http://www.stone-ware.com/support/techdocs/kb/d1960/sb_6_0_8.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="stone-ware" name="webnetwork">
-        <vers num="6.0.5.0" />
-        <vers prev="1" num="6.0.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0913" published="2012-01-24" name="CVE-2012-0913" modified="2012-01-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote attackers to execute arbitrary SQL commands via the passw parameter.  NOTE: Some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72569" source="XF">ictimeattendance-passw-sql-injection(72569)</ref>
-      <ref url="http://www.securityfocus.com/bid/51589" source="BID">51589</ref>
-      <ref url="http://www.exploit-db.com/exploits/18394" source="EXPLOIT-DB">18394</ref>
-      <ref url="http://secunia.com/advisories/47660" source="SECUNIA" adv="1">47660</ref>
-      <ref url="http://osvdb.org/78444" source="OSVDB">78444</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="icloudcenter" name="ictimeattendance">
-        <vers num="1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0914" published="2012-01-24" name="CVE-2012-0914" modified="2012-01-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in display_renderers/panels_renderer_editor.class.php in the admin view in the Panels module 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x-3.0 for Drupal allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the Region title.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.madirish.net/content/drupal-panels-6x-39-xss-vulnerability" source="MISC" patch="1">http://www.madirish.net/content/drupal-panels-6x-39-xss-vulnerability</ref>
-      <ref url="http://drupal.org/node/1409448" source="CONFIRM" patch="1">http://drupal.org/node/1409448</ref>
-      <ref url="http://drupal.org/node/1409446" source="CONFIRM" patch="1">http://drupal.org/node/1409446</ref>
-      <ref url="http://drupal.org/node/1409436" source="CONFIRM" patch="1" adv="1">http://drupal.org/node/1409436</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72549" source="XF">drupal-panels-unspecified-xss(72549)</ref>
-      <ref url="http://www.securityfocus.com/bid/51568" source="BID">51568</ref>
-      <ref url="http://secunia.com/advisories/47649" source="SECUNIA" adv="1">47649</ref>
-      <ref url="http://osvdb.org/78367" source="OSVDB">78367</ref>
-      <ref url="http://drupalcode.org/project/panels.git/commit/d844942" source="CONFIRM">http://drupalcode.org/project/panels.git/commit/d844942</ref>
-      <ref url="http://drupalcode.org/project/panels.git/commit/2066d59" source="CONFIRM">http://drupalcode.org/project/panels.git/commit/2066d59</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="earl_miles" name="panels">
-        <vers num="6.x-3.0" edition="alpha1" />
-        <vers num="6.x-3.0" edition="alpha2" />
-        <vers num="6.x-3.0" edition="alpha3" />
-        <vers num="6.x-3.0" edition="alpha4" />
-        <vers num="6.x-3.0" edition="beta1" />
-        <vers num="6.x-3.0" edition="beta2" />
-        <vers num="6.x-3.0" edition="beta4" />
-        <vers num="6.x-3.0" edition="rc1" />
-        <vers num="6.x-3.1" />
-        <vers num="6.x-3.2" />
-        <vers num="6.x-3.3" />
-        <vers num="6.x-3.4" />
-        <vers num="6.x-3.5" />
-        <vers num="6.x-3.7" />
-        <vers num="6.x-3.8" />
-        <vers num="6.x-3.9" />
-        <vers num="6.x-3.x" edition="dev" />
-        <vers num="7.x-3.0" edition="alpha1" />
-        <vers num="7.x-3.0" edition="alpha2" />
-        <vers num="7.x-3.0" edition="alpha3" />
-        <vers num="7.x-3.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0915" published="2012-01-24" name="CVE-2012-0915" modified="2012-01-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Integer signedness error in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via crafted dimensions of a skin file, leading to a heap-based buffer overflow, as demonstrated using a BMP image.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51585" source="BID">51585</ref>
-      <ref url="http://secunia.com/advisories/47314" source="SECUNIA" adv="1">47314</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="renren" name="renren_talk">
-        <vers num="2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0916" published="2012-01-24" name="CVE-2012-0916" modified="2012-01-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via a crafted image in a chat message, as demonstrated using a PNG file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51585" source="BID">51585</ref>
-      <ref url="http://secunia.com/advisories/47314" source="SECUNIA" adv="1">47314</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="renren" name="renren_talk">
-        <vers num="2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0917" published="2012-01-24" name="CVE-2012-0917" modified="2012-01-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Analyzer 02-01, 02-51 through 02-51-01, and 02-53 through 02-53-02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72248" source="XF">hitachi-it-unspecified-xss(72248)</ref>
-      <ref url="http://www.securityfocus.com/bid/51340" source="BID">51340</ref>
-      <ref url="http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-001/index.html" source="CONFIRM" adv="1">http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-001/index.html</ref>
-      <ref url="http://secunia.com/advisories/47467" source="SECUNIA" adv="1">47467</ref>
-      <ref url="http://osvdb.org/78221" source="OSVDB">78221</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hitachi" name="it_operations_analyzer">
-        <vers num="02-01" />
-        <vers num="02-51" />
-        <vers num="02-51-01" />
-        <vers num="02-53" />
-        <vers num="02-53-01" />
-        <vers num="02-53-02" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0918" published="2012-01-24" name="CVE-2012-0918" modified="2012-01-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Hitachi COBOL2002 Net Developer, Net Server Suite, and Net Client Suite 01-00, 01-01 through 01-01-/D, 01-02 through 01-02-/F, 01-03 through 01-03-/F, 02-00 through 02-00-/D, 02-01 through 02-01-/C, and possibly other versions before 02-01-/D allows remote attackers to execute arbitrary code via unknown attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72558" source="XF">hitachi-cobol2002-unspec-code-exec(72558)</ref>
-      <ref url="http://www.securityfocus.com/bid/51580" source="BID">51580</ref>
-      <ref url="http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-002/index.html" source="CONFIRM" adv="1">http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-002/index.html</ref>
-      <ref url="http://secunia.com/advisories/47643" source="SECUNIA" adv="1">47643</ref>
-      <ref url="http://secunia.com/advisories/47612" source="SECUNIA" adv="1">47612</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hitachi" name="cobol2002_net_client_suite">
-        <vers num="01-00" />
-        <vers num="01-01" />
-        <vers num="01-01-/d" />
-        <vers num="01-02" />
-        <vers num="01-02-/f" />
-        <vers num="01-03" />
-        <vers num="01-03-/f" />
-        <vers num="02-00" />
-        <vers num="02-00-/d" />
-        <vers num="02-01" />
-      </prod>
-      <prod vendor="hitachi" name="cobol2002_net_developer">
-        <vers num="01-00" />
-        <vers num="01-01" />
-        <vers num="01-01-/d" />
-        <vers num="01-02" />
-        <vers num="01-02-/f" />
-        <vers num="01-03" />
-        <vers num="01-03-/f" />
-        <vers num="02-00" />
-        <vers num="02-00-/d" />
-        <vers num="02-01" />
-        <vers num="02-01-/c" />
-      </prod>
-      <prod vendor="hitachi" name="cobol2002_net_server_suite">
-        <vers num="01-00" />
-        <vers num="01-01" />
-        <vers num="01-01-/d" />
-        <vers num="01-02" />
-        <vers num="01-02-/f" />
-        <vers num="01-03" />
-        <vers num="01-03-/f" />
-        <vers num="02-00" />
-        <vers num="02-00-/d" />
-        <vers num="02-01" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0919" published="2012-01-24" name="CVE-2012-0919" modified="2012-01-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 through 03-00-04, and possibly other versions before 03-00-06, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72248" source="XF">hitachi-it-unspecified-xss(72248)</ref>
-      <ref url="http://www.securityfocus.com/bid/51340" source="BID">51340</ref>
-      <ref url="http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-001/index.html" source="CONFIRM" adv="1">http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-001/index.html</ref>
-      <ref url="http://secunia.com/advisories/47490" source="SECUNIA" adv="1">47490</ref>
-      <ref url="http://osvdb.org/78215" source="OSVDB">78215</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hitachi" name="it_operations_director">
-        <vers num="02-50-01" />
-        <vers num="02-50-06" />
-        <vers num="02-50-07" />
-        <vers num="03-00" />
-        <vers num="03-00-04" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0920" published="2012-06-05" name="CVE-2012-0920" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:C/I:C/A:C)" CVSS_score="7.1" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.1">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to "channels concurrency."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.mantor.org/~northox/misc/CVE-2012-0920.html" source="MISC">https://www.mantor.org/~northox/misc/CVE-2012-0920.html</ref>
-      <ref url="https://secure.ucc.asn.au/hg/dropbear/rev/818108bf7749" source="CONFIRM">https://secure.ucc.asn.au/hg/dropbear/rev/818108bf7749</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73444" source="XF">dropbear-code-execution(73444)</ref>
-      <ref url="http://www.securityfocus.com/bid/52159" source="BID">52159</ref>
-      <ref url="http://www.osvdb.org/79590" source="OSVDB">79590</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2456" source="DEBIAN">DSA-2456</ref>
-      <ref url="http://secunia.com/advisories/48929" source="SECUNIA" adv="1">48929</ref>
-      <ref url="http://secunia.com/advisories/48147" source="SECUNIA" adv="1">48147</ref>
-      <ref url="http://matt.ucc.asn.au/dropbear/CHANGES" source="CONFIRM">http://matt.ucc.asn.au/dropbear/CHANGES</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="matt_johnston" name="dropbear_ssh_server">
-        <vers num="0.52" />
-        <vers num="0.53" />
-        <vers num="0.53.1" />
-        <vers num="2011.54" />
-        <vers num="2012.54" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0922" published="2012-02-08" name="CVE-2012-0922" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73018" source="XF">realplayer-rmff-code-execution(73018)</ref>
-      <ref url="http://www.securityfocus.com/bid/51883" source="BID">51883</ref>
-      <ref url="http://service.real.com/realplayer/security/02062012_player/en/" source="CONFIRM" adv="1">http://service.real.com/realplayer/security/02062012_player/en/</ref>
-      <ref url="http://secunia.com/advisories/47896" source="SECUNIA">47896</ref>
-      <ref url="http://osvdb.org/78911" source="OSVDB">78911</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="realplayer">
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="11.0.2" />
-        <vers num="11.0.2.1744" />
-        <vers num="11.0.2.2315" />
-        <vers num="11.0.3" />
-        <vers num="11.0.4" />
-        <vers num="11.0.5" />
-        <vers num="11.1" />
-        <vers num="11.1.3" />
-        <vers num="11_build_6.0.14.748" />
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.0.1.609" />
-        <vers num="14.0.1.633" />
-        <vers num="14.0.2" />
-        <vers num="14.0.3" />
-        <vers num="14.0.4" />
-        <vers num="14.0.5" />
-        <vers num="14.0.6" />
-        <vers num="14.0.7" />
-        <vers num="15.0.0" />
-        <vers num="15.0.1.13" />
-      </prod>
-      <prod vendor="realnetworks" name="realplayer_sp">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0923" published="2012-02-08" name="CVE-2012-0923" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows remote attackers to execute arbitrary code via a crafted RV20 RealVideo video stream.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51884" source="BID">51884</ref>
-      <ref url="http://service.real.com/realplayer/security/02062012_player/en/" source="CONFIRM" adv="1">http://service.real.com/realplayer/security/02062012_player/en/</ref>
-      <ref url="http://secunia.com/advisories/47896" source="SECUNIA">47896</ref>
-      <ref url="http://osvdb.org/78912" source="OSVDB">78912</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="realplayer">
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="11.0.2" />
-        <vers num="11.0.2.1744" />
-        <vers num="11.0.2.2315" />
-        <vers num="11.0.3" />
-        <vers num="11.0.4" />
-        <vers num="11.0.5" />
-        <vers num="11.1" />
-        <vers num="11.1.3" />
-        <vers num="11_build_6.0.14.748" />
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.0.1.609" />
-        <vers num="14.0.1.633" />
-        <vers num="14.0.2" />
-        <vers num="14.0.3" />
-        <vers num="14.0.4" />
-        <vers num="14.0.5" />
-        <vers num="14.0.6" />
-        <vers num="14.0.7" />
-        <vers num="15.0.0" />
-        <vers num="15.0.1.13" />
-      </prod>
-      <prod vendor="realnetworks" name="realplayer_sp">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0924" published="2012-02-08" name="CVE-2012-0924" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving a VIDOBJ_START_CODE code in a header within a video stream.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://service.real.com/realplayer/security/02062012_player/en/" source="CONFIRM" adv="1">http://service.real.com/realplayer/security/02062012_player/en/</ref>
-      <ref url="http://secunia.com/advisories/47896" source="SECUNIA">47896</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="realplayer">
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="11.0.2" />
-        <vers num="11.0.2.1744" />
-        <vers num="11.0.2.2315" />
-        <vers num="11.0.3" />
-        <vers num="11.0.4" />
-        <vers num="11.0.5" />
-        <vers num="11.1" />
-        <vers num="11.1.3" />
-        <vers num="11_build_6.0.14.748" />
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.0.1.609" />
-        <vers num="14.0.1.633" />
-        <vers num="14.0.2" />
-        <vers num="14.0.3" />
-        <vers num="14.0.4" />
-        <vers num="14.0.5" />
-        <vers num="14.0.6" />
-        <vers num="14.0.7" />
-        <vers num="15.0.0" />
-        <vers num="15.0.1.13" />
-      </prod>
-      <prod vendor="realnetworks" name="realplayer_sp">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0925" published="2012-02-08" name="CVE-2012-0925" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RV40 RealVideo video stream.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73021" source="XF">realplayer-rv40-code-exec(73021)</ref>
-      <ref url="http://www.securityfocus.com/bid/51887" source="BID">51887</ref>
-      <ref url="http://service.real.com/realplayer/security/02062012_player/en/" source="CONFIRM" adv="1">http://service.real.com/realplayer/security/02062012_player/en/</ref>
-      <ref url="http://secunia.com/advisories/47896" source="SECUNIA">47896</ref>
-      <ref url="http://osvdb.org/78914" source="OSVDB">78914</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="realplayer">
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="11.0.2" />
-        <vers num="11.0.2.1744" />
-        <vers num="11.0.2.2315" />
-        <vers num="11.0.3" />
-        <vers num="11.0.4" />
-        <vers num="11.0.5" />
-        <vers num="11.1" />
-        <vers num="11.1.3" />
-        <vers num="11_build_6.0.14.748" />
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.0.1.609" />
-        <vers num="14.0.1.633" />
-        <vers num="14.0.2" />
-        <vers num="14.0.3" />
-        <vers num="14.0.4" />
-        <vers num="14.0.5" />
-        <vers num="14.0.6" />
-        <vers num="14.0.7" />
-        <vers num="15.0.0" />
-        <vers num="15.0.1.13" />
-      </prod>
-      <prod vendor="realnetworks" name="realplayer_sp">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0926" published="2012-02-08" name="CVE-2012-0926" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows remote attackers to execute arbitrary code via a crafted RV10 RealVideo video stream.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://service.real.com/realplayer/security/02062012_player/en/" source="CONFIRM" adv="1">http://service.real.com/realplayer/security/02062012_player/en/</ref>
-      <ref url="http://secunia.com/advisories/47896" source="SECUNIA">47896</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="realplayer">
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="11.0.2" />
-        <vers num="11.0.2.1744" />
-        <vers num="11.0.2.2315" />
-        <vers num="11.0.3" />
-        <vers num="11.0.4" />
-        <vers num="11.0.5" />
-        <vers num="11.1" />
-        <vers num="11.1.3" />
-        <vers num="11_build_6.0.14.748" />
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.0.1.609" />
-        <vers num="14.0.1.633" />
-        <vers num="14.0.2" />
-        <vers num="14.0.3" />
-        <vers num="14.0.4" />
-        <vers num="14.0.5" />
-        <vers num="14.0.6" />
-        <vers num="14.0.7" />
-        <vers num="15.0.0" />
-        <vers num="15.0.1.13" />
-      </prod>
-      <prod vendor="realnetworks" name="realplayer_sp">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0927" published="2012-02-08" name="CVE-2012-0927" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving the coded_frame_size value in a RealAudio audio stream.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://service.real.com/realplayer/security/02062012_player/en/" source="CONFIRM" adv="1">http://service.real.com/realplayer/security/02062012_player/en/</ref>
-      <ref url="http://secunia.com/advisories/47896" source="SECUNIA">47896</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="realplayer">
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="11.0.2" />
-        <vers num="11.0.2.1744" />
-        <vers num="11.0.2.2315" />
-        <vers num="11.0.3" />
-        <vers num="11.0.4" />
-        <vers num="11.0.5" />
-        <vers num="11.1" />
-        <vers num="11.1.3" />
-        <vers num="11_build_6.0.14.748" />
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.0.1.609" />
-        <vers num="14.0.1.633" />
-        <vers num="14.0.2" />
-        <vers num="14.0.3" />
-        <vers num="14.0.4" />
-        <vers num="14.0.5" />
-        <vers num="14.0.6" />
-        <vers num="14.0.7" />
-        <vers num="15.0.0" />
-        <vers num="15.0.1.13" />
-      </prod>
-      <prod vendor="realnetworks" name="realplayer_sp">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0928" published="2012-02-08" name="CVE-2012-0928" modified="2012-02-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode samples, which allows remote attackers to execute arbitrary code via a crafted ATRAC audio file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://service.real.com/realplayer/security/02062012_player/en/" source="CONFIRM" adv="1">http://service.real.com/realplayer/security/02062012_player/en/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="realplayer">
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="11.0.2" />
-        <vers num="11.0.2.1744" />
-        <vers num="11.0.2.2315" />
-        <vers num="11.0.3" />
-        <vers num="11.0.4" />
-        <vers num="11.0.5" />
-        <vers num="11.1" />
-        <vers num="11.1.3" />
-        <vers num="11_build_6.0.14.748" />
-        <vers num="12.0.0.1569" edition="" />
-        <vers num="12.0.0.1569" edition=":mac_os" />
-        <vers num="12.0.0.1701" edition="" />
-        <vers num="12.0.0.1701" edition=":mac_os" />
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.0.1.609" />
-        <vers num="14.0.1.633" />
-        <vers num="14.0.2" />
-        <vers num="14.0.3" />
-        <vers num="14.0.4" />
-        <vers num="14.0.5" />
-        <vers num="14.0.6" />
-        <vers num="14.0.7" />
-      </prod>
-      <prod vendor="realnetworks" name="realplayer_sp">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0929" published="2012-01-27" name="CVE-2012-0929" modified="2012-02-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the (1) FTP server or (2) HTTP server.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72589" source="XF">schneider-modicon-ftp-dos(72589)</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72588" source="XF">schneider-modicon-http-dos(72588)</ref>
-      <ref url="http://www.securityfocus.com/bid/51605" source="BID">51605</ref>
-      <ref url="http://secunia.com/advisories/47723" source="SECUNIA" adv="1">47723</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="schneider-electric" name="modicon_quantum_plc">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0930" published="2012-01-27" name="CVE-2012-0930" modified="2012-02-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72590" source="XF">schneider-modicon-unspec-xss(72590)</ref>
-      <ref url="http://www.securityfocus.com/bid/51605" source="BID">51605</ref>
-      <ref url="http://secunia.com/advisories/47723" source="SECUNIA" adv="1">47723</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="schneider-electric" name="modicon_quantum_plc">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0931" published="2012-01-27" name="CVE-2012-0931" modified="2012-02-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72586" source="XF">schneider-modicon-unity-dos(72586)</ref>
-      <ref url="http://www.securityfocus.com/bid/51605" source="BID">51605</ref>
-      <ref url="http://secunia.com/advisories/47723" source="SECUNIA" adv="1">47723</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="schneider-electric" name="modicon_quantum_plc">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0932" published="2012-01-28" name="CVE-2012-0932" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:P)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72623" source="XF">leadcapture-login-xss(72623)</ref>
-      <ref url="http://secunia.com/advisories/47702" source="SECUNIA" adv="1">47702</ref>
-      <ref url="http://packetstormsecurity.org/files/108887/leadcapturepagesystem-xss.txt" source="MISC">http://packetstormsecurity.org/files/108887/leadcapturepagesystem-xss.txt</ref>
-      <ref url="http://osvdb.org/78455" source="OSVDB">78455</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="leadcapturepagesystem" name="lead_capture_page_system">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0933" published="2012-01-28" name="CVE-2012-0933" modified="2012-02-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin_colors.asp, (2) admin_config.asp, and (3) admin_cat_add.asp in admin/.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72624" source="XF">acidcatcms-multiple-xss(72624)</ref>
-      <ref url="http://www.securityfocus.com/bid/51608" source="BID">51608</ref>
-      <ref url="http://secunia.com/advisories/47705" source="SECUNIA" adv="1">47705</ref>
-      <ref url="http://packetstormsecurity.org/files/108869/acidcat-xss.txt" source="MISC">http://packetstormsecurity.org/files/108869/acidcat-xss.txt</ref>
-      <ref url="http://osvdb.org/78458" source="OSVDB">78458</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="acidcat" name="acidcat_cms">
-        <vers num="3.5.1" />
-        <vers num="3.5.2" />
-        <vers num="3.5.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0934" published="2012-01-28" name="CVE-2012-0934" modified="2012-02-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the tt-abspath parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://wordpress.org/extend/plugins/theme-tuner/changelog/" source="CONFIRM" patch="1">http://wordpress.org/extend/plugins/theme-tuner/changelog/</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72626" source="XF">themetuner-savetag-file-include(72626)</ref>
-      <ref url="http://www.securityfocus.com/bid/51636" source="BID">51636</ref>
-      <ref url="http://spareclockcycles.org/2011/09/18/exploitring-the-wordpress-extension-repos/" source="MISC">http://spareclockcycles.org/2011/09/18/exploitring-the-wordpress-extension-repos/</ref>
-      <ref url="http://secunia.com/advisories/47722" source="SECUNIA" adv="1">47722</ref>
-      <ref url="http://plugins.trac.wordpress.org/changeset/492167/theme-tuner#file2" source="CONFIRM">http://plugins.trac.wordpress.org/changeset/492167/theme-tuner#file2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="zingiri" name="theme_tuner_plugin">
-        <vers num="0.1" />
-        <vers num="0.2" />
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.6" />
-        <vers prev="1" num="0.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0935" published="2012-01-28" name="CVE-2012-0935" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute arbitrary SQL commands via the PageID parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72639" source="XF">aryadad-default-sql-injection(72639)</ref>
-      <ref url="http://www.securityfocus.com/bid/51627" source="BID">51627</ref>
-      <ref url="http://www.exploit-db.com/exploits/18405" source="EXPLOIT-DB">18405</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="aryadad" name="aryadad_cms">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0936" published="2012-01-28" name="CVE-2012-0936" modified="2012-01-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:P)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via the Username field, related to login.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72625" source="XF">opennms-username-xss(72625)</ref>
-      <ref url="http://www.securityfocus.com/bid/51632" source="BID">51632</ref>
-      <ref url="http://secunia.com/advisories/47646" source="SECUNIA" adv="1">47646</ref>
-      <ref url="http://osvdb.org/78454" source="OSVDB">78454</ref>
-      <ref url="http://issues.opennms.org/browse/NMS/fixforversion/10825" source="CONFIRM">http://issues.opennms.org/browse/NMS/fixforversion/10825</ref>
-      <ref url="http://issues.opennms.org/browse/NMS/fixforversion/10824#atl_token=BCL8-RCDX-MB62-2EZT%7C38eaf469042162355c28f5393587690a8388d556%7Clout&amp;selectedTab=com.atlassian.jira.plugin.system.project%3Aversion-summary-panel" source="CONFIRM">http://issues.opennms.org/browse/NMS/fixforversion/10824#atl_token=BCL8-RCDX-MB62-2EZT%7C38eaf469042162355c28f5393587690a8388d556%7Clout&amp;selectedTab=com.atlassian.jira.plugin.system.project%3Aversion-summary-panel</ref>
-      <ref url="http://issues.opennms.org/browse/NMS-5128?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel#issue-tabs" source="CONFIRM" adv="1">http://issues.opennms.org/browse/NMS-5128?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel#issue-tabs</ref>
-      <ref url="http://fisheye.opennms.org/browse/opennms/features/springframework-security/src/main/java/org/opennms/web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java?r2=d2ce15470cb6c87c115c918eb86ef147486a9166&amp;r1=80b80e110e4bce568fc2c6c0a15a" source="CONFIRM">http://fisheye.opennms.org/browse/opennms/features/springframework-security/src/main/java/org/opennms/web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java?r2=d2ce15470cb6c87c115c918eb86ef147486a9166&amp;r1=80b80e110e4bce568fc2c6c0a15a</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opennms.org" name="opennms">
-        <vers num="0.2" />
-        <vers num="0.3.0" />
-        <vers num="0.4.0" />
-        <vers num="0.6.0" />
-        <vers num="0.6.1" />
-        <vers num="0.6.1--2" />
-        <vers num="0.6.2" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.5" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.9.0" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="0.9.4" />
-        <vers num="0.9.5" />
-        <vers num="0.9.6" />
-        <vers num="0.9.9" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.10.0" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers num="1.2.8" />
-        <vers num="1.2.9" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.10" />
-        <vers num="1.3.11" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.3.4" />
-        <vers num="1.3.5" />
-        <vers num="1.3.6" />
-        <vers num="1.3.7" />
-        <vers num="1.3.8" />
-        <vers num="1.3.9" />
-        <vers num="1.5.90" />
-        <vers num="1.5.91" />
-        <vers num="1.5.92" />
-        <vers num="1.5.93" />
-        <vers num="1.5.94" />
-        <vers num="1.5.95" />
-        <vers num="1.5.96" />
-        <vers num="1.5.97" />
-        <vers num="1.5.98" />
-        <vers num="1.5.99" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.10" />
-        <vers num="1.6.11" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-        <vers num="1.6.8" />
-        <vers num="1.6.9" />
-        <vers num="1.7.0" />
-        <vers num="1.7.1" />
-        <vers num="1.7.10" />
-        <vers num="1.7.2" />
-        <vers num="1.7.3" />
-        <vers num="1.7.4" />
-        <vers num="1.7.5" />
-        <vers num="1.7.6" />
-        <vers num="1.7.7" />
-        <vers num="1.7.8" />
-        <vers num="1.7.9" />
-        <vers num="1.7.90" />
-        <vers num="1.7.91" />
-        <vers num="1.7.92" />
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-        <vers num="1.8.10" />
-        <vers num="1.8.11" />
-        <vers num="1.8.12" />
-        <vers num="1.8.13" />
-        <vers num="1.8.14" />
-        <vers num="1.8.15" />
-        <vers num="1.8.16" />
-        <vers num="1.8.2" />
-        <vers num="1.8.3" />
-        <vers num="1.8.4" />
-        <vers num="1.8.5" />
-        <vers num="1.8.6" />
-        <vers num="1.8.7" />
-        <vers num="1.8.8" />
-        <vers num="1.8.9" />
-        <vers num="1.9.0" />
-        <vers num="1.9.1" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.4" />
-        <vers num="1.9.5" />
-        <vers num="1.9.6" />
-        <vers num="1.9.7" />
-        <vers num="1.9.8" />
-        <vers num="1.9.90" />
-        <vers num="1.9.91" />
-        <vers num="1.9.92" />
-        <vers prev="1" num="1.9.93" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0937" published="2012-01-30" name="CVE-2012-0937" modified="2012-01-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">** DISPUTED ** wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers, which allows remote attackers to use WordPress as a proxy for brute-force attacks or denial of service attacks via the dbhost parameter, a different vulnerability than CVE-2011-4898.  NOTE: the vendor disputes the significance of this issue because an incomplete WordPress installation might be present on the network for only a short time.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.trustwave.com/spiderlabs/advisories/TWSL2012-002.txt" source="MISC">https://www.trustwave.com/spiderlabs/advisories/TWSL2012-002.txt</ref>
-      <ref url="http://www.exploit-db.com/exploits/18417" source="EXPLOIT-DB">18417</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0150.html" source="BUGTRAQ">20120124 TWSL2012-002: Multiple Vulnerabilities in WordPress</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wordpress" name="wordpress">
-        <vers num="0.7" />
-        <vers num="0.71" />
-        <vers num="0.711" />
-        <vers num="0.72" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.2" />
-        <vers num="1.5.1.3" />
-        <vers num="1.5.2" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.5" />
-        <vers num="2.7" />
-        <vers num="2.7.1" />
-        <vers num="2.8" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" />
-        <vers num="2.8.5" />
-        <vers num="2.8.6" />
-        <vers num="2.9" />
-        <vers num="2.9.1" />
-        <vers num="2.9.2" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.2.1" />
-        <vers num="3.3" />
-        <vers prev="1" num="3.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0942" published="2012-04-17" name="CVE-2012-0942" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Buffer overflow in rn5auth.dll in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to execute arbitrary code via crafted authentication credentials.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52929" source="BID">52929</ref>
-      <ref url="http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf" source="CONFIRM" adv="1">http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="helix_mobile_server">
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-      </prod>
-      <prod vendor="realnetworks" name="helix_server">
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.2" />
-        <vers num="14.2.0.212" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0944" published="2012-06-04" name="CVE-2012-0944" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote attackers to install arbitrary packages via a man-in-the-middle attack.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugs.launchpad.net/ubuntu/%2Bsource/aptdaemon/%2Bbug/959131" source="CONFIRM">https://bugs.launchpad.net/ubuntu/%2Bsource/aptdaemon/%2Bbug/959131</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74553" source="XF">aptdaemon-transaction-security-bypass(74553)</ref>
-      <ref url="http://www.securityfocus.com/bid/52855" source="BID">52855</ref>
-      <ref url="http://www.osvdb.org/80887" source="OSVDB">80887</ref>
-      <ref url="http://ubuntu.com/usn/usn-1414-1" source="UBUNTU">USN-1414-1</ref>
-      <ref url="http://secunia.com/advisories/48688" source="SECUNIA" adv="1">48688</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sebastian_heinlein" name="aptdaemon">
-        <vers num="0.20" />
-        <vers num="0.30" />
-        <vers num="0.31" />
-        <vers num="0.32" />
-        <vers num="0.33" />
-        <vers num="0.34" />
-        <vers num="0.40" />
-        <vers num="0.41" />
-        <vers prev="1" num="0.42" />
-      </prod>
-      <prod vendor="canonical" name="ubuntu_linux">
-        <vers num="11.04" />
-        <vers num="11.10" />
-        <vers num="12.04" edition="lts" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0946" published="2012-04-22" name="CVE-2012-0946" modified="2012-04-23" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="4.6" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.9" CVSS_base_score="4.6">
-    <desc>
-      <descript source="cve">The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.ubuntu.com/usn/usn-1420-1/" source="UBUNTU">USN-1420-1</ref>
-      <ref url="http://nvidia.custhelp.com/app/answers/detail/a_id/3109" source="CONFIRM" adv="1">http://nvidia.custhelp.com/app/answers/detail/a_id/3109</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nvidia" name="unix_driver">
-        <vers prev="1" num="295.40" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0947" published="2012-08-20" name="CVE-2012-0947" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VQA media file in which the image size is not a multiple of the block size.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://git.libav.org/?p=libav.git;a=commit;h=58b2e0f0f2fc96c1158e04f8aba95cbe6157a1a3" source="CONFIRM" patch="1">http://git.libav.org/?p=libav.git;a=commit;h=58b2e0f0f2fc96c1158e04f8aba95cbe6157a1a3</ref>
-      <ref url="https://bugs.launchpad.net/ubuntu/+source/libav/+bug/980963" source="MISC">https://bugs.launchpad.net/ubuntu/+source/libav/+bug/980963</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1479-1" source="UBUNTU">USN-1479-1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/4" source="MLIST">[oss-security] 20120503 Security issue in libav/ffmpeg</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2471" source="DEBIAN">DSA-2471</ref>
-      <ref url="http://libav.org/" source="CONFIRM">http://libav.org/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="libav" name="libav">
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.5" />
-        <vers num="0.5.6" />
-        <vers num="0.5.7" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.6.4" />
-        <vers num="0.6.5" />
-        <vers num="0.7" edition="beta1" />
-        <vers num="0.7" edition="beta2" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.8" edition="beta2" />
-        <vers num="0.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0948" published="2012-06-07" name="CVE-2012-0948" modified="2012-06-12" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">DistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uses weak permissions for (1) apt-clone_system_state.tar.gz and (2) system_state.tar.gz, which allows local users to obtain repository credentials.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75727" source="XF">update-manager-info-disclosure(75727)</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1443-1" source="UBUNTU" adv="1">USN-1443-1</ref>
-      <ref url="http://www.securityfocus.com/bid/53604" source="BID">53604</ref>
-      <ref url="http://secunia.com/advisories/49230" source="SECUNIA" adv="1">49230</ref>
-      <ref url="http://osvdb.org/82019" source="OSVDB">82019</ref>
-      <ref url="http://launchpadlibrarian.net/105380733/update-manager_1%3A0.156.14.3_1%3A0.156.14.4.diff.gz" source="CONFIRM">http://launchpadlibrarian.net/105380733/update-manager_1%3A0.156.14.3_1%3A0.156.14.4.diff.gz</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnome" name="update-manager-core">
-        <vers num="0.150.5.2" />
-        <vers num="0.152.25.10" />
-        <vers num="0.156.14.3" />
-      </prod>
-      <prod vendor="canonical" name="ubuntu_linux">
-        <vers num="11.04" />
-        <vers num="11.10" />
-        <vers num="12.04" edition="-" />
-        <vers num="12.04" edition="-:lts" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0949" published="2012-05-31" name="CVE-2012-0949" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Apport hook in Update Manager as used by Ubuntu 12.04 LTS, 11.10, and 11.04 uploads certain system state archive files when reporting bugs to Launchpad, which allows remote attackers to read repository credentials by viewing a public bug report.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75728" source="XF">update-manager-archives-info-disclosure(75728)</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1443-1" source="UBUNTU" adv="1">USN-1443-1</ref>
-      <ref url="http://www.securityfocus.com/bid/53605" source="BID">53605</ref>
-      <ref url="http://secunia.com/advisories/49230" source="SECUNIA" adv="1">49230</ref>
-      <ref url="http://osvdb.org/82020" source="OSVDB">82020</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="canonical" name="ubuntu_linux">
-        <vers num="11.04" />
-        <vers num="11.10" />
-        <vers num="12.04" edition="-" />
-        <vers num="12.04" edition="-:lts" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0950" published="2012-06-19" name="CVE-2012-0950" modified="2012-06-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Apport hook (DistUpgradeApport.py) in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uploads the /var/log/dist-upgrade directory when reporting bugs to Launchpad, which allows remote attackers to read repository credentials by viewing a public bug report.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0949.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugs.launchpad.net/ubuntu/%2Bsource/update-manager/%2Bbug/1004503" source="CONFIRM">https://bugs.launchpad.net/ubuntu/%2Bsource/update-manager/%2Bbug/1004503</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1443-2" source="UBUNTU" adv="1">USN-1443-2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="canonical" name="ubuntu_linux">
-        <vers num="11.04" />
-        <vers num="11.10" />
-        <vers num="12.04" edition="-" />
-        <vers num="12.04" edition="-:lts" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0954" published="2012-06-19" name="CVE-2012-0954" modified="2012-06-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attackers to install altered packages via a man-in-the-middle (MITM) attack.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3587.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1013681" source="CONFIRM">https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1013681</ref>
-      <ref url="https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1013639" source="CONFIRM">https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1013639</ref>
-      <ref url="https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1013128" source="CONFIRM">https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1013128</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1477-1" source="UBUNTU">USN-1477-1</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1475-1" source="UBUNTU">USN-1475-1</ref>
-      <ref url="http://www.securityfocus.com/bid/54046" source="BID">54046</ref>
-      <ref url="http://seclists.org/fulldisclosure/2012/Jun/289" source="FULLDISC">20120615 ubuntu apt-key (part 3)</ref>
-      <ref url="http://seclists.org/fulldisclosure/2012/Jun/271" source="FULLDISC">20120614 Using second gpg keyring may be misleading?</ref>
-      <ref url="http://seclists.org/fulldisclosure/2012/Jun/267" source="FULLDISC">20120612 Strange gpg key shadowing</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="debian" name="apt">
-        <vers num="0.7.0" />
-        <vers num="0.7.1" />
-        <vers num="0.7.10" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.13" />
-        <vers num="0.7.14" />
-        <vers num="0.7.15" edition="exp1" />
-        <vers num="0.7.15" edition="exp2" />
-        <vers num="0.7.15" edition="exp3" />
-        <vers num="0.7.16" />
-        <vers num="0.7.17" edition="exp1" />
-        <vers num="0.7.17" edition="exp2" />
-        <vers num="0.7.17" edition="exp3" />
-        <vers num="0.7.17" edition="exp4" />
-        <vers num="0.7.18" />
-        <vers num="0.7.19" />
-        <vers num="0.7.2" />
-        <vers num="0.7.2-0.1" />
-        <vers num="0.7.20" />
-        <vers num="0.7.20.1" />
-        <vers num="0.7.20.2" />
-        <vers num="0.7.21" />
-        <vers num="0.7.22" />
-        <vers num="0.7.22.1" />
-        <vers num="0.7.22.2" />
-        <vers num="0.7.23" />
-        <vers num="0.7.23.1" />
-        <vers num="0.7.24" />
-        <vers num="0.8.0" edition="pre1" />
-        <vers num="0.8.0" edition="pre2" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.10.1" />
-        <vers num="0.8.10.2" />
-        <vers num="0.8.10.3" />
-        <vers num="0.8.11" />
-        <vers num="0.8.11.1" />
-        <vers num="0.8.11.2" />
-        <vers num="0.8.11.3" />
-        <vers num="0.8.11.4" />
-        <vers num="0.8.11.5" />
-        <vers num="0.8.12" />
-        <vers num="0.8.13" />
-        <vers num="0.8.13.1" />
-        <vers num="0.8.13.2" />
-        <vers num="0.8.14" />
-        <vers num="0.8.14.1" />
-        <vers num="0.8.15" edition="exp1" />
-        <vers num="0.8.15" edition="exp2" />
-        <vers num="0.8.15" edition="exp3" />
-        <vers num="0.8.15.1" />
-        <vers num="0.8.15.10" />
-        <vers num="0.8.15.6" />
-        <vers num="0.8.15.7" />
-        <vers num="0.8.15.8" />
-        <vers num="0.8.15.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0975" published="2012-02-02" name="CVE-2012-0975" modified="2012-02-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in misc.php in Image Hosting Script DPI 1.0, 1.3, and earlier allows remote attackers to inject arbitrary web script or HTML via the showseries parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72823" source="XF">dpi-misc-xss(72823)</ref>
-      <ref url="http://www.securityfocus.com/bid/51734" source="BID">51734</ref>
-      <ref url="http://secunia.com/advisories/47786" source="SECUNIA" adv="1">47786</ref>
-      <ref url="http://packetstormsecurity.org/files/view/109240/dpi10-xss.txt" source="MISC">http://packetstormsecurity.org/files/view/109240/dpi10-xss.txt</ref>
-      <ref url="http://osvdb.org/78660" source="OSVDB">78660</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="clixint" name="image_hosting_script_dpi">
-        <vers num="1.0" />
-        <vers prev="1" num="1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0976" published="2012-02-02" name="CVE-2012-0976" modified="2012-02-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in admin/EditForm in SilverStripe 2.4.6 allows remote authenticated users with Content Authors privileges to inject arbitrary web script or HTML via the Title parameter.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72820" source="XF">silverstripe-editform-xss(72820)</ref>
-      <ref url="http://www.securityfocus.com/bid/51761" source="BID">51761</ref>
-      <ref url="http://secunia.com/advisories/47812" source="SECUNIA" adv="1">47812</ref>
-      <ref url="http://packetstormsecurity.org/files/view/109210/silverstripecmspage-xss.txt" source="MISC">http://packetstormsecurity.org/files/view/109210/silverstripecmspage-xss.txt</ref>
-      <ref url="http://osvdb.org/78677" source="OSVDB">78677</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="silverstripe" name="silverstripe">
-        <vers num="2.4.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0977" published="2012-02-02" name="CVE-2012-0977" modified="2012-02-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in jp2_x.dll in LuraWave JP2 ActiveX Control 2.1.5.5 and other versions before 2.1.5.11 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72807" source="XF">lurawave-jp2-qcd-bo(72807)</ref>
-      <ref url="http://www.securityfocus.com/bid/51744" source="BID">51744</ref>
-      <ref url="http://secunia.com/advisories/47350" source="SECUNIA" adv="1">47350</ref>
-      <ref url="http://osvdb.org/78661" source="OSVDB">78661</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="luratech" name="lurawave_jp2_activex_control">
-        <vers num="2.1.5.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0978" published="2012-02-02" name="CVE-2012-0978" modified="2012-02-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in npjp2.dll in LuraWave JP2 Browser Plug-In 1.1.1.11 and other versions before 2.1.1.11 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72806" source="XF">lurawave-qcd-bo(72806)</ref>
-      <ref url="http://www.securityfocus.com/bid/51732" source="BID">51732</ref>
-      <ref url="http://secunia.com/advisories/47831" source="SECUNIA" adv="1">47831</ref>
-      <ref url="http://osvdb.org/78662" source="OSVDB">78662</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="luratech" name="lurawave_jp2_browser_plug-in">
-        <vers num="1.1.1.11" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0979" published="2012-02-02" name="CVE-2012-0979" modified="2012-02-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in TWiki allows remote attackers to inject arbitrary web script or HTML via the organization field in a profile, involving (1) registration or (2) editing of the user.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://secunia.com/advisories/47784
-
-'The vulnerability is confirmed in version 5.1.1. Other versions may also be affected.'</impact>
-    </impacts>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72821" source="XF">twiki-organization-xss(72821)</ref>
-      <ref url="http://www.securitytracker.com/id?1026604" source="SECTRACK">1026604</ref>
-      <ref url="http://www.securityfocus.com/bid/51731" source="BID">51731</ref>
-      <ref url="http://st2tea.blogspot.com/2012/01/cross-site-scripting-twiki.html" source="MISC">http://st2tea.blogspot.com/2012/01/cross-site-scripting-twiki.html</ref>
-      <ref url="http://secunia.com/advisories/47784" source="SECUNIA" adv="1">47784</ref>
-      <ref url="http://packetstormsecurity.org/files/109246/twiki-xss.txt" source="MISC">http://packetstormsecurity.org/files/109246/twiki-xss.txt</ref>
-      <ref url="http://osvdb.org/78664" source="OSVDB">78664</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="twiki" name="twiki">
-        <vers num="-" />
-        <vers num="5.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0980" published="2012-02-02" name="CVE-2012-0980" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in download.php in phux Download Manager allows remote attackers to execute arbitrary SQL commands via the file parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72826" source="XF">phux-download-sql-injection(72826)</ref>
-      <ref url="http://www.securityfocus.com/bid/51725" source="BID">51725</ref>
-      <ref url="http://www.exploit-db.com/exploits/18432" source="EXPLOIT-DB">18432</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="phux" name="download_manager">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0981" published="2012-02-02" name="CVE-2012-0981" modified="2012-02-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image files via a .. (dot dot) in the r parameter to index.php.  NOTE: Some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72824" source="XF">phpshowtime-index-directory-traversal(72824)</ref>
-      <ref url="http://www.exploit-db.com/exploits/18435" source="EXPLOIT-DB">18435</ref>
-      <ref url="http://secunia.com/advisories/47802" source="SECUNIA" adv="1">47802</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kybernetika" name="phpshowtime">
-        <vers num="2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0982" published="2012-02-02" name="CVE-2012-0982" modified="2012-02-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the price_from parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72879" source="XF">agentzone-search-sql-injection(72879)</ref>
-      <ref url="http://www.securityfocus.com/bid/51773" source="BID">51773</ref>
-      <ref url="http://www.exploit-db.com/exploits/18441" source="EXPLOIT-DB">18441</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vastal" name="agent_zone">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0983" published="2012-02-02" name="CVE-2012-0983" modified="2012-02-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72809" source="XF">ezalbum-index-sql-injection(72809)</ref>
-      <ref url="http://www.securityfocus.com/bid/51781" source="BID">51781</ref>
-      <ref url="http://www.exploit-db.com/exploits/18438" source="EXPLOIT-DB">18438</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="scriptsez" name="ez_album">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0985" published="2012-06-07" name="CVE-2012-0985" modified="2012-06-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.00_64, 1.0.1, 2.0, and 3.0; SmartWi Connection Utility 4.7, 4.7.4, 4.8, 4.9, 4.10, and 4.11; and VAIO Easy Connect software 1.0.0 and 1.1.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the second argument of the (1) SetTmpProfileOption or (2) ConnectToNetwork method.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75978" source="XF">vaio-activex-bo(75978)</ref>
-      <ref url="http://www.securityfocus.com/bid/53735" source="BID">53735</ref>
-      <ref url="http://www.exploit-db.com/exploits/18958" source="EXPLOIT-DB">18958</ref>
-      <ref url="http://secunia.com/advisories/49340" source="SECUNIA" adv="1">49340</ref>
-      <ref url="http://osvdb.org/82401" source="OSVDB">82401</ref>
-      <ref url="http://esupport.sony.com/US/perl/support-info.pl?template_id=1&amp;info_id=946" source="CONFIRM" adv="1">http://esupport.sony.com/US/perl/support-info.pl?template_id=1&amp;info_id=946</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-05/0147.html" source="BUGTRAQ">20120530 2 Buffer Overflows in Wireless Manager Sony VAIO</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sony" name="smartwi_connection_utillity">
-        <vers num="4.10" />
-        <vers num="4.11" />
-        <vers num="4.7" />
-        <vers num="4.7.4" />
-        <vers num="4.8" />
-        <vers num="4.9" />
-      </prod>
-      <prod vendor="sony" name="vaio_easy_connect">
-        <vers num="1.0.0" />
-        <vers num="1.1.0" />
-      </prod>
-      <prod vendor="sony" name="vaio_pc_wireless_lan_wizard">
-        <vers num="1.0" />
-      </prod>
-      <prod vendor="sony" name="vaio_wireless_wizard">
-        <vers num="1.00" />
-        <vers num="1.00_64" />
-        <vers num="1.01" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0990" published="2012-02-07" name="CVE-2012-0990" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in admin/settings/update in DClassifieds 0.1 final allows remote attackers to hijack the authentication of administrators for requests that modify account settings such as the administrator password or email via certain Settings[] parameters.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://sourceforge.net/projects/dclassifieds/files/csrf_fix_120105.rar/download" source="CONFIRM" patch="1">http://sourceforge.net/projects/dclassifieds/files/csrf_fix_120105.rar/download</ref>
-      <ref url="https://www.htbridge.ch/advisory/HTB23067" source="MISC">https://www.htbridge.ch/advisory/HTB23067</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72733" source="XF">dclassifieds-settings-csrf(72733)</ref>
-      <ref url="http://www.securityfocus.com/bid/51671" source="BID">51671</ref>
-      <ref url="http://www.osvdb.org/78557" source="OSVDB">78557</ref>
-      <ref url="http://secunia.com/advisories/47691" source="SECUNIA" adv="1">47691</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0158.html" source="BUGTRAQ">20120125 CSRF (Cross-Site Request Forgery) in DClassifieds</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dclassifieds" name="dclassifieds">
-        <vers num="0.1" edition="final" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-0991" published="2012-02-07" name="CVE-2012-0991" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:N/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the formname parameter to (1) contrib/acog/print_form.php; or (2) load_form.php, (3) view_form.php, or (4) trend_form.php in interface/patient_file/encounter.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.ch/advisory/HTB23069" source="MISC" patch="1">https://www.htbridge.ch/advisory/HTB23069</ref>
-      <ref url="http://www.open-emr.org/wiki/index.php/OpenEMR_Patches" source="CONFIRM" patch="1">http://www.open-emr.org/wiki/index.php/OpenEMR_Patches</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0004.html" source="BUGTRAQ" patch="1">20120201 Multiple vulnerabilities in OpenEMR</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72914" source="XF">openemr-formname-file-include(72914)</ref>
-      <ref url="http://www.securityfocus.com/bid/51788" source="BID">51788</ref>
-      <ref url="http://secunia.com/advisories/47781" source="SECUNIA" adv="1">47781</ref>
-      <ref url="http://osvdb.org/78730" source="OSVDB">78730</ref>
-      <ref url="http://osvdb.org/78729" source="OSVDB">78729</ref>
-      <ref url="http://osvdb.org/78728" source="OSVDB">78728</ref>
-      <ref url="http://osvdb.org/78727" source="OSVDB">78727</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openemr" name="openemr">
-        <vers num="4.1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0992" published="2012-02-07" name="CVE-2012-0992" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:C/I:C/A:C)" CVSS_score="8.5" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="6.8" CVSS_base_score="8.5">
-    <desc>
-      <descript source="cve">interface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the file parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.open-emr.org/wiki/index.php/OpenEMR_Patches" source="CONFIRM" patch="1">http://www.open-emr.org/wiki/index.php/OpenEMR_Patches</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0004.html" source="BUGTRAQ" patch="1" adv="1">20120201 Multiple vulnerabilities in OpenEMR</ref>
-      <ref url="https://www.htbridge.ch/advisory/HTB23069" source="MISC">https://www.htbridge.ch/advisory/HTB23069</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72915" source="XF">openemr-faxdispatch-command-execution(72915)</ref>
-      <ref url="http://www.securityfocus.com/bid/51788" source="BID">51788</ref>
-      <ref url="http://secunia.com/advisories/47781" source="SECUNIA" adv="1">47781</ref>
-      <ref url="http://osvdb.org/78731" source="OSVDB">78731</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openemr" name="openemr">
-        <vers num="4.1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0993" published="2012-02-21" name="CVE-2012-0993" modified="2012-02-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Eval injection vulnerability in zp-core/zp-extensions/viewer_size_image.php in ZENphoto 1.4.2, when the viewer_size_image plugin is enabled, allows remote attackers to execute arbitrary PHP code via the viewer_size_image_saved cookie.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.zenphoto.org/trac/changeset/8995" source="CONFIRM" patch="1">http://www.zenphoto.org/trac/changeset/8995</ref>
-      <ref url="http://www.zenphoto.org/trac/changeset/8994" source="CONFIRM" patch="1">http://www.zenphoto.org/trac/changeset/8994</ref>
-      <ref url="https://www.htbridge.ch/advisory/HTB23070" source="MISC">https://www.htbridge.ch/advisory/HTB23070</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73081" source="XF">zenphoto-viewersizeimage-code-execution(73081)</ref>
-      <ref url="http://www.zenphoto.org/news/zenphoto-1.4.2.1" source="CONFIRM">http://www.zenphoto.org/news/zenphoto-1.4.2.1</ref>
-      <ref url="http://www.securityfocus.com/bid/51916" source="BID">51916</ref>
-      <ref url="http://secunia.com/advisories/47875" source="SECUNIA" adv="1">47875</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0037.html" source="BUGTRAQ">20120208 Multiple vulnerabilities in ZENphoto</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="zenphoto" name="zenphoto">
-        <vers num="1.4.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0994" published="2012-02-21" name="CVE-2012-0994" modified="2012-02-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via the sortableList parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.zenphoto.org/trac/changeset/8995" source="CONFIRM" patch="1">http://www.zenphoto.org/trac/changeset/8995</ref>
-      <ref url="http://www.zenphoto.org/trac/changeset/8994" source="CONFIRM" patch="1">http://www.zenphoto.org/trac/changeset/8994</ref>
-      <ref url="https://www.htbridge.ch/advisory/HTB23070" source="MISC">https://www.htbridge.ch/advisory/HTB23070</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73082" source="XF">zenphoto-albumsort-sql-injection(73082)</ref>
-      <ref url="http://www.zenphoto.org/news/zenphoto-1.4.2.1" source="CONFIRM">http://www.zenphoto.org/news/zenphoto-1.4.2.1</ref>
-      <ref url="http://www.securityfocus.com/bid/51916" source="BID">51916</ref>
-      <ref url="http://secunia.com/advisories/47875" source="SECUNIA" adv="1">47875</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0037.html" source="BUGTRAQ">20120208 Multiple vulnerabilities in ZENphoto</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="zenphoto" name="zenphoto">
-        <vers num="1.4.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0995" published="2012-02-21" name="CVE-2012-0995" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in ZENphoto 1.4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter in an external action to zp-core/admin.php, (2) PATH_INTO to an unspecified URL, as demonstrated using /1/, (3) PATH_INFO to zp-core/admin.php, or (4) album parameter to zp-core/admin-edit.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.zenphoto.org/trac/changeset/8995" source="CONFIRM" patch="1">http://www.zenphoto.org/trac/changeset/8995</ref>
-      <ref url="http://www.zenphoto.org/trac/changeset/8994" source="CONFIRM" patch="1">http://www.zenphoto.org/trac/changeset/8994</ref>
-      <ref url="https://www.htbridge.ch/advisory/HTB23070" source="MISC">https://www.htbridge.ch/advisory/HTB23070</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73083" source="XF">zenphoto-multiple-xss(73083)</ref>
-      <ref url="http://www.zenphoto.org/news/zenphoto-1.4.2.1" source="CONFIRM">http://www.zenphoto.org/news/zenphoto-1.4.2.1</ref>
-      <ref url="http://www.securityfocus.com/bid/51916" source="BID">51916</ref>
-      <ref url="http://secunia.com/advisories/47875" source="SECUNIA" adv="1">47875</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0037.html" source="BUGTRAQ">20120208 Multiple vulnerabilities in ZENphoto</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="zenphoto" name="zenphoto">
-        <vers num="1.4.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0996" published="2012-02-24" name="CVE-2012-0996" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. (dot dot) in the class parameter to (1) index.php or (2) admin/index.php.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.ch/advisory/HTB23071" source="MISC">https://www.htbridge.ch/advisory/HTB23071</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="11in1" name="11in1">
-        <vers num="1.2.1" edition="stable_12-31-2011" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-0997" published="2012-02-24" name="CVE-2012-0997" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in admin/index.php in 11in1 1.2.1 stable 12-31-2011 allows remote attackers to hijack the authentication of administrators for requests that add new topics via an addTopic action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.ch/advisory/HTB23071" source="MISC">https://www.htbridge.ch/advisory/HTB23071</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="11in1" name="11in1">
-        <vers num="1.2.1" edition="stable_12-31-2011" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0998" published="2012-02-24" name="CVE-2012-0998" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in account/preferences.php in LEPTON before 1.1.4 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the language parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.lepton-cms.org/posts/security-release-lepton-1.1.4-52.php" source="CONFIRM" patch="1" adv="1">http://www.lepton-cms.org/posts/security-release-lepton-1.1.4-52.php</ref>
-      <ref url="https://www.htbridge.ch/advisory/HTB23072" source="MISC">https://www.htbridge.ch/advisory/HTB23072</ref>
-      <ref url="http://www.lepton-cms.org/media/changelog/changelog_1.1.4.txt" source="MISC">http://www.lepton-cms.org/media/changelog/changelog_1.1.4.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="lepton-cms" name="lepton">
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers prev="1" num="1.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-0999" published="2012-02-24" name="CVE-2012-0999" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in modules/news/rss.php in LEPTON before 1.1.4 allows remote attackers to execute arbitrary SQL commands via the group_id parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.lepton-cms.org/posts/security-release-lepton-1.1.4-52.php" source="CONFIRM" patch="1" adv="1">http://www.lepton-cms.org/posts/security-release-lepton-1.1.4-52.php</ref>
-      <ref url="https://www.htbridge.ch/advisory/HTB23072" source="MISC">https://www.htbridge.ch/advisory/HTB23072</ref>
-      <ref url="http://www.lepton-cms.org/media/changelog/changelog_1.1.4.txt" source="CONFIRM">http://www.lepton-cms.org/media/changelog/changelog_1.1.4.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="lepton-cms" name="lepton">
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers prev="1" num="1.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1000" published="2012-02-24" name="CVE-2012-1000" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in LEPTON 1.1.3 and other versions before 1.1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) message parameter to admins/login/forgot/index.php, or the (2) display_name or (3) email parameter to account/preferences.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.lepton-cms.org/posts/security-release-lepton-1.1.4-52.php" source="CONFIRM" patch="1" adv="1">http://www.lepton-cms.org/posts/security-release-lepton-1.1.4-52.php</ref>
-      <ref url="https://www.htbridge.ch/advisory/HTB23072" source="MISC">https://www.htbridge.ch/advisory/HTB23072</ref>
-      <ref url="http://www.lepton-cms.org/media/changelog/changelog_1.1.4.txt" source="CONFIRM">http://www.lepton-cms.org/media/changelog/changelog_1.1.4.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="lepton-cms" name="lepton">
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers prev="1" num="1.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1002" published="2012-02-07" name="CVE-2012-1002" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in OpenConf 4.x before 4.12 has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openconf.com/news/#20120202" source="CONFIRM">http://www.openconf.com/news/#20120202</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="zakongroup" name="openconf">
-        <vers num="4.00" />
-        <vers num="4.01" />
-        <vers num="4.02" />
-        <vers num="4.10" />
-        <vers num="4.11" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1003" published="2012-02-06" name="CVE-2012-1003" modified="2012-02-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Multiple integer overflows in Opera 11.60 and earlier allow remote attackers to cause a denial of service (application crash) via a large integer argument to the (1) Int32Array, (2) Float32Array, (3) Float64Array, (4) Uint32Array, (5) Int16Array, or (6) ArrayBuffer function.  NOTE: the vendor reportedly characterizes this as "a stability issue, not a security issue."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73027" source="XF">opera-integer-dos(73027)</ref>
-      <ref url="http://blog.vulnhunt.com/index.php/2012/02/02/cal-2012-0004-opera-array-integer-overflow/" source="MISC">http://blog.vulnhunt.com/index.php/2012/02/02/cal-2012-0004-opera-array-integer-overflow/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers prev="1" num="11.60" edition="beta" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1004" published="2012-02-07" name="CVE-2012-1004" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE privileges to inject arbitrary web script or HTML via the (1) text, (2) FirstName, (3) LastName, (4) OrganisationName, (5) OrganisationUrl, (6) Profession, (7) Country, (8) State, (9) Address, (10) Location, (11) Telephone, (12) VoIP, (13) InstantMessagingIM, (14) Email, (15) HomePage, or (16) Comment parameter.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://foswiki.org/Support/SecurityAlert-CVE-2012-1004
-
-'Vulnerable Software Versions  - All versions 1.0.0 - 1.1.4 inclusive for sites that use the user registration process'</impact>
-    </impacts>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://st2tea.blogspot.com/2012/02/foswiki-cross-site-scripting.html" source="MISC">http://st2tea.blogspot.com/2012/02/foswiki-cross-site-scripting.html</ref>
-      <ref url="http://secunia.com/advisories/47849" source="SECUNIA" adv="1">47849</ref>
-      <ref url="http://foswiki.org/Tasks/Item11501" source="CONFIRM">http://foswiki.org/Tasks/Item11501</ref>
-      <ref url="http://foswiki.org/Tasks/Item11498" source="CONFIRM">http://foswiki.org/Tasks/Item11498</ref>
-      <ref url="http://foswiki.org/Support/SecurityAlert-CVE-2012-1004" source="CONFIRM" adv="1">http://foswiki.org/Support/SecurityAlert-CVE-2012-1004</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="foswiki" name="foswiki">
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" edition="beta" />
-        <vers num="1.1.4" edition="rc" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1005" published="2012-02-07" name="CVE-2012-1005" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47 allow remote attackers to inject arbitrary web script or HTML via the comment parameter to a blog, as demonstrated using (1) Blog/MyFirstBlog.txt or (2) Blog/AboutSomething.txt.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72913" source="XF">sphinixsoftware-comment-xss(72913)</ref>
-      <ref url="http://www.securityfocus.com/bid/51820" source="BID">51820</ref>
-      <ref url="http://secunia.com/advisories/47876" source="SECUNIA" adv="1">47876</ref>
-      <ref url="http://secpod.org/blog/?p=453" source="MISC">http://secpod.org/blog/?p=453</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sphinx-soft" name="mobile_web_server">
-        <vers num="3.1.2.47" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1006" published="2012-02-06" name="CVE-2012-1006" modified="2012-02-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastName parameter to struts2-showcase/person/editPerson.action, or the (3) clientName parameter to struts2-rest-showcase/orders.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72888" source="XF">apache-struts-multiple-xss(72888)</ref>
-      <ref url="http://www.securityfocus.com/bid/51902" source="BID">51902</ref>
-      <ref url="http://secpod.org/blog/?p=450" source="MISC">http://secpod.org/blog/?p=450</ref>
-      <ref url="http://secpod.org/advisories/SecPod_Apache_Struts_Multiple_Parsistant_XSS_Vulns.txt" source="MISC">http://secpod.org/advisories/SecPod_Apache_Struts_Multiple_Parsistant_XSS_Vulns.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="struts">
-        <vers num="2.0.14" />
-        <vers num="2.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1007" published="2012-02-06" name="CVE-2012-1007" modified="2012-02-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter to struts-examples/upload/upload-submit.do, or the message parameter to (2) struts-cookbook/processSimple.do or (3) struts-cookbook/processDyna.do.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73052" source="XF">apache-struts-name-xss(73052)</ref>
-      <ref url="http://secpod.org/blog/?p=450" source="MISC">http://secpod.org/blog/?p=450</ref>
-      <ref url="http://secpod.org/advisories/SecPod_Apache_Struts_Multiple_Parsistant_XSS_Vulns.txt" source="MISC">http://secpod.org/advisories/SecPod_Apache_Struts_Multiple_Parsistant_XSS_Vulns.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="struts">
-        <vers num="1.3.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1008" published="2012-02-07" name="CVE-2012-1008" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a SIP INVITE message.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/18453" source="EXPLOIT-DB">18453</ref>
-      <ref url="http://secpod.org/exploits/SecPod_Exploit_OfficeSIP_Server_DOS.py" source="MISC">http://secpod.org/exploits/SecPod_Exploit_OfficeSIP_Server_DOS.py</ref>
-      <ref url="http://secpod.org/blog/?p=461" source="MISC">http://secpod.org/blog/?p=461</ref>
-      <ref url="http://secpod.org/advisories/SecPod_Exploit_OfficeSIP_Server_DOS_Vuln.txt" source="MISC">http://secpod.org/advisories/SecPod_Exploit_OfficeSIP_Server_DOS_Vuln.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="officesip" name="officesip_server">
-        <vers num="3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1009" published="2012-02-14" name="CVE-2012-1009" modified="2012-02-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">NetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186 allow remote attackers to cause a denial of service (daemon crash) via a malformed LPD request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72933" source="XF">netsarang-xlpd-dos(72933)</ref>
-      <ref url="http://www.securityfocus.com/bid/51821" source="BID">51821</ref>
-      <ref url="http://www.exploit-db.com/exploits/18454" source="EXPLOIT-DB">18454</ref>
-      <ref url="http://secpod.org/blog/?p=457" source="MISC">http://secpod.org/blog/?p=457</ref>
-      <ref url="http://secpod.org/advisories/SecPod_Exploit_NetSarang_Xlpd_Printer_Daemon_DoS_Vuln.txt" source="MISC">http://secpod.org/advisories/SecPod_Exploit_NetSarang_Xlpd_Printer_Daemon_DoS_Vuln.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netsarang" name="xlpd">
-        <vers num="4" edition="0100" />
-      </prod>
-      <prod vendor="netsarang" name="xmanager_enterprise">
-        <vers num="4" edition="0186" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1010" published="2012-02-07" name="CVE-2012-1010" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72640" source="XF">allwebmenus-actions-file-upload(72640)</ref>
-      <ref url="http://www.securityfocus.com/bid/51615" source="BID">51615</ref>
-      <ref url="http://www.exploit-db.com/exploits/18407" source="EXPLOIT-DB">18407</ref>
-      <ref url="http://wordpress.org/extend/plugins/allwebmenus-wordpress-menu-plugin/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/allwebmenus-wordpress-menu-plugin/changelog/</ref>
-      <ref url="http://secunia.com/advisories/47659" source="SECUNIA" adv="1">47659</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0137.html" source="BUGTRAQ">20120122 AllWebMenus &lt; 1.1.9 WordPress Menu Plugin Arbitrary file upload</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="likno" name="allwebmenus_plugin">
-        <vers num="1.0.1" />
-        <vers num="1.0.10" />
-        <vers num="1.0.11" />
-        <vers num="1.0.12" />
-        <vers num="1.0.17" />
-        <vers num="1.0.18" />
-        <vers num="1.0.19" />
-        <vers num="1.0.20" />
-        <vers num="1.0.21" />
-        <vers num="1.0.22" />
-        <vers num="1.0.23" />
-        <vers num="1.0.24" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.9" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers prev="1" num="1.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1011" published="2012-02-07" name="CVE-2012-1011" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitrary PHP code by setting the HTTP_REFERER to a certain value, then uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://wordpress.org/extend/plugins/allwebmenus-wordpress-menu-plugin/changelog/" source="CONFIRM" patch="1">http://wordpress.org/extend/plugins/allwebmenus-wordpress-menu-plugin/changelog/</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72640" source="XF">allwebmenus-actions-file-upload(72640)</ref>
-      <ref url="http://www.securityfocus.com/bid/51615" source="BID">51615</ref>
-      <ref url="http://www.exploit-db.com/exploits/18407" source="EXPLOIT-DB">18407</ref>
-      <ref url="http://secunia.com/advisories/47659" source="SECUNIA" adv="1">47659</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0137.html" source="BUGTRAQ">20120122 AllWebMenus &lt; 1.1.9 WordPress Menu Plugin Arbitrary file upload</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="likno" name="allwebmenus_plugin">
-        <vers num="1.1.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1012" published="2012-06-07" name="CVE-2012-1012" modified="2012-06-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:N)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global list privilege.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=796438" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=796438</ref>
-      <ref url="http://web.mit.edu/kerberos/krb5-1.10/" source="CONFIRM">http://web.mit.edu/kerberos/krb5-1.10/</ref>
-      <ref url="http://src.mit.edu/fisheye/changelog/krb5/?cs=25704" source="CONFIRM">http://src.mit.edu/fisheye/changelog/krb5/?cs=25704</ref>
-      <ref url="http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&amp;pass=guest&amp;id=7093" source="CONFIRM">http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&amp;pass=guest&amp;id=7093</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mit" name="kerberos">
-        <vers num="5-1.10" />
-        <vers num="5-1.10.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1013" published="2012-06-07" nvd_name="NULL pointer dereference" name="CVE-2012-1013" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x, and 1.10.x before 1.10.2 allows remote authenticated administrators to cause a denial of service (NULL pointer dereference and daemon crash) via a KRB5_KDB_DISALLOW_ALL_TIX create request that lacks a password.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/476.html
-
-'CWE-476: NULL Pointer Dereference'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/krb5/krb5/commit/c5be6209311d4a8f10fda37d0d3f876c1b33b77b" source="CONFIRM" patch="1">https://github.com/krb5/krb5/commit/c5be6209311d4a8f10fda37d0d3f876c1b33b77b</ref>
-      <ref url="https://hermes.opensuse.org/messages/15083635" source="SUSE">openSUSE-SU-2012:0834</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=827517" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=827517</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:102" source="MANDRIVA">MDVSA-2012:102</ref>
-      <ref url="http://web.mit.edu/kerberos/krb5-1.10/" source="CONFIRM">http://web.mit.edu/kerberos/krb5-1.10/</ref>
-      <ref url="http://mailman.mit.edu/pipermail/kerberos-announce/2012q2/000136.html" source="MLIST">[kerberos-announce] 20120531 krb5-1.10.2 is released</ref>
-      <ref url="http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&amp;pass=guest&amp;id=7152" source="CONFIRM">http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&amp;pass=guest&amp;id=7152</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mit" name="kerberos">
-        <vers num="5-1.10" />
-        <vers num="5-1.10.1" />
-        <vers num="5-1.8" />
-        <vers num="5-1.8.1" />
-        <vers num="5-1.8.2" />
-        <vers num="5-1.8.3" />
-        <vers num="5-1.8.4" />
-        <vers num="5-1.8.5" />
-        <vers num="5-1.8.6" />
-        <vers num="5-1.9" />
-        <vers num="5-1.9.1" />
-        <vers num="5-1.9.2" />
-        <vers num="5-1.9.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1014" published="2012-08-06" name="CVE-2012-1014" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:C)" CVSS_score="9.0" CVSS_impact_subscore="8.5" CVSS_exploit_subscore="10.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">The process_as_req function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x before 1.10.3 does not initialize a certain structure member, which allows remote attackers to cause a denial of service (uninitialized pointer dereference and daemon crash) or possibly execute arbitrary code via a malformed AS-REQ request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2012-001.txt" source="CONFIRM" patch="1" adv="1">http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2012-001.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mit" name="kerberos">
-        <vers num="5-1.10" />
-        <vers num="5-1.10.1" />
-        <vers num="5-1.10.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1015" published="2012-08-06" name="CVE-2012-1015" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The kdc_handle_protected_negotiation function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to calculate a checksum before verifying that the key type is appropriate for a checksum, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free, heap memory corruption, and daemon crash) via a crafted AS-REQ request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2012-001.txt" source="CONFIRM" patch="1" adv="1">http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2012-001.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mit" name="kerberos">
-        <vers num="5-1.10" />
-        <vers num="5-1.10.1" />
-        <vers num="5-1.10.2" />
-        <vers num="5-1.8" />
-        <vers num="5-1.8.1" />
-        <vers num="5-1.8.2" />
-        <vers num="5-1.8.3" />
-        <vers num="5-1.8.4" />
-        <vers num="5-1.8.5" />
-        <vers num="5-1.8.6" />
-        <vers num="5-1.9.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1017" published="2012-02-07" name="CVE-2012-1017" modified="2012-02-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to execute arbitrary SQL commands via the (1) ip_addr[0][1], (2) ip_addr[0][2], or (3) ip_addr[0][9] parameters.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72998" source="XF">base-ipaddr-sql-injection(72998)</ref>
-      <ref url="http://www.securityfocus.com/bid/51874" source="BID">51874</ref>
-      <ref url="http://www.exploit-db.com/exploits/18465" source="EXPLOIT-DB">18465</ref>
-      <ref url="http://secunia.com/advisories/47857" source="SECUNIA">47857</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="secureideas" name="base">
-        <vers num="1.4.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1018" published="2012-02-07" name="CVE-2012-1018" modified="2012-02-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in includes/convert.php in D-Mack Media Currency Converter (mod_currencyconverter) module 1.0.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the from parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72917" source="XF">currencyconverter-convert-xss(72917)</ref>
-      <ref url="http://www.securityfocus.com/bid/51804" source="BID">51804</ref>
-      <ref url="http://dl.packetstormsecurity.net/1202-exploits/joomlacurrencyconverter-xss.txt" source="MISC">http://dl.packetstormsecurity.net/1202-exploits/joomlacurrencyconverter-xss.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dmackmedia" name="mod_currencyconverter">
-        <vers num="1.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1019" published="2012-02-07" name="CVE-2012-1019" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in XWiki Enterprise 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) XWiki.XWikiComments_comment parameter to xwiki/bin/commentadd/Main/WebHome, (2) XWiki.XWikiUsers_0_company parameter when editing a user profile, or (3) projectVersion parameter to xwiki/bin/view/DownloadCode/DownloadFeedback.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51867" source="BID">51867</ref>
-      <ref url="http://st2tea.blogspot.com/2012/02/xwiki-cross-site-scripting.html" source="MISC">http://st2tea.blogspot.com/2012/02/xwiki-cross-site-scripting.html</ref>
-      <ref url="http://secunia.com/advisories/47885" source="SECUNIA" adv="1">47885</ref>
-      <ref url="http://packetstormsecurity.org/files/109447/XWiki-Enterprise-3.4-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/109447/XWiki-Enterprise-3.4-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="xwiki" name="xwiki_enterprise">
-        <vers num="3.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1020" published="2012-02-07" name="CVE-2012-1020" modified="2012-02-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in login.php in NexorONE Online Banking allow remote attackers to inject arbitrary web script or HTML via the (1) visitor_language parameter to register.php or (2) message parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73001" source="XF">nexorone-login-xss(73001)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=304" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=304</ref>
-      <ref url="http://www.securityfocus.com/bid/51876" source="BID">51876</ref>
-      <ref url="http://secunia.com/advisories/47897" source="SECUNIA" adv="1">47897</ref>
-      <ref url="http://marc.info/?l=full-disclosure&amp;m=132852645911072&amp;w=2" source="FULLDISC">20120205 NexorONE Online Banking - Multiple Cross Site Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="overseaswtc" name="nexorone_online_banking_system">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1021" published="2012-02-07" name="CVE-2012-1021" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arbitrary web script or HTML via the cat_parent_id parameter in an addcat action.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72924" source="XF">4images-categories-xss(72924)</ref>
-      <ref url="http://www.securityfocus.com/bid/51774" source="BID">51774</ref>
-      <ref url="http://secunia.com/advisories/47811" source="SECUNIA" adv="1">47811</ref>
-      <ref url="http://packetstormsecurity.org/files/109290/4images-xss.txt" source="MISC">http://packetstormsecurity.org/files/109290/4images-xss.txt</ref>
-      <ref url="http://osvdb.org/78711" source="OSVDB">78711</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="4homepages" name="4images">
-        <vers num="1.7.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1022" published="2012-02-07" name="CVE-2012-1022" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to execute arbitrary SQL commands via the cat_parent_id parameter in an addcat action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72932" source="XF">4images-catparentid-sql-injection(72932)</ref>
-      <ref url="http://www.securityfocus.com/bid/51774" source="BID">51774</ref>
-      <ref url="http://packetstormsecurity.org/files/109290/4images-xss.txt" source="MISC">http://packetstormsecurity.org/files/109290/4images-xss.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="4homepages" name="4images">
-        <vers num="1.7.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1023" published="2012-02-07" name="CVE-2012-1023" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72925" source="XF">4images-index-open-redirect(72925)</ref>
-      <ref url="http://www.securityfocus.com/bid/51774" source="BID">51774</ref>
-      <ref url="http://packetstormsecurity.org/files/109290/4images-xss.txt" source="MISC">http://packetstormsecurity.org/files/109290/4images-xss.txt</ref>
-      <ref url="http://osvdb.org/78779" source="OSVDB">78779</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="4homepages" name="4images">
-        <vers num="1.7.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1024" published="2012-02-07" name="CVE-2012-1024" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73109" source="XF">enigma2-webinterface-directory-traversal(73109)</ref>
-      <ref url="http://www.exploit-db.com/exploits/18343" source="EXPLOIT-DB">18343</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dream-multimedia-tv" name="enigma2_webinterface">
-        <vers num="1.5" edition="beta4" />
-        <vers num="1.5" edition="rc1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1025" published="2012-02-07" name="CVE-2012-1025" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remote attackers to read arbitrary files via a full pathname in the file parameter.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/18343" source="EXPLOIT-DB">18343</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dream-multimedia-tv" name="enigma2_webinterface">
-        <vers num="1.6" edition="rc3" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-        <vers num="1.6.8" />
-        <vers num="1.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1026" published="2012-02-07" name="CVE-2012-1026" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in login2.php in XRay CMS 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73000" source="XF">xraycms-login2-sql-injection(73000)</ref>
-      <ref url="http://www.securityfocus.com/bid/51870" source="BID">51870</ref>
-      <ref url="http://www.exploit-db.com/exploits/18467" source="EXPLOIT-DB">18467</ref>
-      <ref url="http://sourceforge.net/tracker/?func=detail&amp;aid=3488241&amp;group_id=298778&amp;atid=1260461" source="MISC">http://sourceforge.net/tracker/?func=detail&amp;aid=3488241&amp;group_id=298778&amp;atid=1260461</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0068.html" source="BUGTRAQ">20120212 sqlinjection bug in nova cms</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="johannes_ekberg" name="xray_cms">
-        <vers num="1.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1027" published="2012-02-07" name="CVE-2012-1027" modified="2012-02-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in account-closed.tcl in ]project-open[ (aka ]po[) 3.4.x, 3.5.0.1-2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the message parameter to register/account-closed.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/732115" source="CERT-VN">VU#732115</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72952" source="XF">projectopen-accountclosed-xss(72952)</ref>
-      <ref url="http://www.securityfocus.com/bid/51842" source="BID">51842</ref>
-      <ref url="http://secunia.com/advisories/47854" source="SECUNIA" adv="1">47854</ref>
-      <ref url="http://osvdb.org/78823" source="OSVDB">78823</ref>
-      <ref url="http://dl.packetstormsecurity.net/1202-exploits/projectopen-xss.txt" source="MISC">http://dl.packetstormsecurity.net/1202-exploits/projectopen-xss.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="project-open" name="]project-open[">
-        <vers num="3.4.0" />
-        <vers num="3.5.0.1-2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1028" published="2012-02-07" name="CVE-2012-1028" modified="2012-02-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in bin/index.php in SimpleGroupware 0.742 and other versions before 0.743 allows remote attackers to inject arbitrary web script or HTML via the export parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73042" source="XF">simple-groupware-index-xss(73042)</ref>
-      <ref url="http://www.securityfocus.com/bid/51882" source="BID">51882</ref>
-      <ref url="http://voxel.dl.sourceforge.net/project/simplgroup/README.md" source="CONFIRM">http://voxel.dl.sourceforge.net/project/simplgroup/README.md</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0028.html" source="BUGTRAQ">20120206 SimpleGroupware 0.742 Cross-Site-Scripting vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="simple-groupware" name="simplegroupware">
-        <vers num="0.742" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1029" published="2012-02-07" name="CVE-2012-1029" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in mobile/search/index.php in Tube Ace (Adult PHP Tube Script) 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72999" source="XF">tubeace-q-sql-injection(72999)</ref>
-      <ref url="http://www.securityfocus.com/bid/52046" source="BID">52046</ref>
-      <ref url="http://www.securityfocus.com/bid/51873" source="BID">51873</ref>
-      <ref url="http://www.exploit-db.com/exploits/18466" source="EXPLOIT-DB">18466</ref>
-      <ref url="http://secunia.com/advisories/47874" source="SECUNIA" adv="1">47874</ref>
-      <ref url="http://packetstormsecurity.org/files/109485/Tube-Ace-SQL-Injection.html" source="MISC">http://packetstormsecurity.org/files/109485/Tube-Ace-SQL-Injection.html</ref>
-      <ref url="http://osvdb.org/78900" source="OSVDB">78900</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tubeace" name="tube_ace">
-        <vers num="1.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1030" published="2012-04-11" name="CVE-2012-1030" modified="2012-04-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in DotNetNuke 6.x through 6.0.2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted URL containing text that is used within a modal popup.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.dotnetnuke.com/News/Security-Policy/Security-bulletin-no.62.aspx" source="CONFIRM" adv="1">http://www.dotnetnuke.com/News/Security-Policy/Security-bulletin-no.62.aspx</ref>
-      <ref url="http://technet.microsoft.com/en-us/security/msvr/msvr12-003" source="MISC">http://technet.microsoft.com/en-us/security/msvr/msvr12-003</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dotnetnuke" name="dotnetnuke">
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1031" published="2012-02-07" name="CVE-2012-1031" modified="2012-02-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in EPiServer CMS 5 and 6 through 6R2, in certain configurations using Forms Authentication, allows remote authenticated users to obtain WebAdmins access by leveraging Edit Mode privileges, a different vulnerability than CVE-2011-3416 and CVE-2011-3417.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51877" source="BID">51877</ref>
-      <ref url="http://world.episerver.com/Blogs/Shahid-Nawaz/Dates/2012/1/General-Hotfix-CMS-6-R2/" source="CONFIRM">http://world.episerver.com/Blogs/Shahid-Nawaz/Dates/2012/1/General-Hotfix-CMS-6-R2/</ref>
-      <ref url="http://world.episerver.com/Blogs/Jens-N/Dates/2012/1/Security-vulnerability---Elevation-of-privilege/" source="CONFIRM" adv="1">http://world.episerver.com/Blogs/Jens-N/Dates/2012/1/Security-vulnerability---Elevation-of-privilege/</ref>
-      <ref url="http://secunia.com/advisories/47910" source="SECUNIA" adv="1">47910</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="episerver" name="episerver_cms">
-        <vers num="5.1.422.122" />
-        <vers num="5.1.422.256" />
-        <vers num="5.1.422.267" />
-        <vers num="5.1.422.4" />
-        <vers num="5.2.375.133" />
-        <vers num="5.2.375.236" />
-        <vers num="5.2.375.7" />
-        <vers num="6.0.530.0" />
-        <vers num="6.1.379.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1033" published="2012-02-08" name="CVE-2012-1033" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.</descript>
-    </desc>
-    <sols>
-      <sol source="nvd">Per: https://www.isc.org/software/bind/advisories/cve-2012-1033
-
-'Solution: 
-
-On further review, ISC has determined that this is not an issue which needs an immediate patch. The issue is being reviewed at the protocol level and will be addressed there. Implementing DNSSEC is the safest mitigation measure.'</sol>
-    </sols>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/542123" source="CERT-VN">VU#542123</ref>
-      <ref url="https://www.isc.org/software/bind/advisories/cve-2012-1033" source="CONFIRM" adv="1">https://www.isc.org/software/bind/advisories/cve-2012-1033</ref>
-      <ref url="https://hermes.opensuse.org/messages/15136477" source="SUSE">openSUSE-SU-2012:0864</ref>
-      <ref url="https://hermes.opensuse.org/messages/15136456" source="SUSE">openSUSE-SU-2012:0863</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73053" source="XF">isc-bind-update-sec-bypass(73053)</ref>
-      <ref url="http://www.securitytracker.com/id?1026647" source="SECTRACK">1026647</ref>
-      <ref url="http://www.securityfocus.com/bid/51898" source="BID">51898</ref>
-      <ref url="http://secunia.com/advisories/47884" source="SECUNIA">47884</ref>
-      <ref url="http://osvdb.org/78916" source="OSVDB">78916</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="isc" name="bind">
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.2.0" />
-        <vers num="9.2.1" />
-        <vers num="9.2.2" edition="p3" />
-        <vers num="9.2.3" />
-        <vers num="9.2.4" />
-        <vers num="9.2.5" />
-        <vers num="9.2.6" />
-        <vers num="9.2.7" />
-        <vers num="9.3" />
-        <vers num="9.3.0" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.4" />
-        <vers num="9.4.0" edition="rc1" />
-        <vers num="9.4.0a1" />
-        <vers num="9.4.0a2" />
-        <vers num="9.4.0a3" />
-        <vers num="9.4.0a4" />
-        <vers num="9.4.0a5" />
-        <vers num="9.4.0a6" />
-        <vers num="9.4.0b1" />
-        <vers num="9.4.0b2" />
-        <vers num="9.4.0b3" />
-        <vers num="9.4.0b4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" edition="rc1" />
-        <vers num="9.4.3b1" />
-        <vers num="9.4.3b2" />
-        <vers num="9.4.3b3" />
-        <vers num="9.5" />
-        <vers num="9.5.0" edition="rc1" />
-        <vers num="9.5.0-p1" />
-        <vers num="9.5.0-p2" />
-        <vers num="9.5.0-p2-w1" />
-        <vers num="9.5.0-p2-w2" />
-        <vers num="9.5.0a1" />
-        <vers num="9.5.0a2" />
-        <vers num="9.5.0a3" />
-        <vers num="9.5.0a4" />
-        <vers num="9.5.0a5" />
-        <vers num="9.5.0a6" />
-        <vers num="9.5.0a7" />
-        <vers num="9.5.0b1" />
-        <vers num="9.5.0b2" />
-        <vers num="9.5.0b3" />
-        <vers num="9.5.1" edition="rc1" />
-        <vers num="9.5.1" edition="rc2" />
-        <vers num="9.5.1b1" />
-        <vers num="9.5.1b2" />
-        <vers num="9.5.1b3" />
-        <vers num="9.6.0" edition="p1" />
-        <vers num="9.6.0" edition="rc1" />
-        <vers num="9.6.0" edition="rc2" />
-        <vers num="9.6.0a1" />
-        <vers num="9.6.0b1" />
-        <vers num="9.7.0" edition="beta" />
-        <vers num="9.7.0" edition="p1" />
-        <vers num="9.7.0" edition="p2" />
-        <vers num="9.7.0" edition="rc1" />
-        <vers num="9.7.0" edition="rc2" />
-        <vers num="9.7.1" edition="p1" />
-        <vers num="9.7.1" edition="p2" />
-        <vers num="9.7.1" edition="rc1" />
-        <vers num="9.7.2" edition="p1" />
-        <vers num="9.7.2" edition="p2" />
-        <vers num="9.7.2" edition="p3" />
-        <vers num="9.7.2" edition="rc1" />
-        <vers num="9.7.3" edition="b1" />
-        <vers num="9.7.3" edition="p1" />
-        <vers num="9.7.3" edition="rc1" />
-        <vers num="9.7.4" edition="b1" />
-        <vers num="9.7.4b1" />
-        <vers num="9.8.0" edition="a1" />
-        <vers num="9.8.0" edition="b1" />
-        <vers num="9.8.0" edition="p1" />
-        <vers num="9.8.0" edition="p2" />
-        <vers num="9.8.0" edition="p4" />
-        <vers num="9.8.0" edition="rc1" />
-        <vers num="9.8.1" edition="b1" />
-        <vers num="9.8.1" edition="b2" />
-        <vers num="9.8.1" edition="b3" />
-        <vers num="9.8.1" edition="p1" />
-        <vers num="9.8.1" edition="rc1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1034" published="2012-02-08" name="CVE-2012-1034" modified="2012-02-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the admin interface in EPiServer CMS through 6R2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51877" source="BID">51877</ref>
-      <ref url="http://world.episerver.com/PageFiles/110367/BugList.txt" source="CONFIRM">http://world.episerver.com/PageFiles/110367/BugList.txt</ref>
-      <ref url="http://world.episerver.com/Blogs/Shahid-Nawaz/Dates/2012/1/General-Hotfix-CMS-6-R2/" source="CONFIRM">http://world.episerver.com/Blogs/Shahid-Nawaz/Dates/2012/1/General-Hotfix-CMS-6-R2/</ref>
-      <ref url="http://secunia.com/advisories/47910" source="SECUNIA" adv="1">47910</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="episerver" name="episerver_cms">
-        <vers num="5.1.422.122" />
-        <vers num="5.1.422.256" />
-        <vers num="5.1.422.267" />
-        <vers num="5.1.422.4" />
-        <vers num="5.2.375.133" />
-        <vers num="5.2.375.236" />
-        <vers num="5.2.375.7" />
-        <vers num="6.0.530.0" />
-        <vers num="6.1.379.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1035" published="2012-02-08" name="CVE-2012-1035" modified="2012-02-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">AdaCore Ada Web Services (AWS) before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.ocert.org/advisories/ocert-2011-003.html" source="MISC">http://www.ocert.org/advisories/ocert-2011-003.html</ref>
-      <ref url="http://www.nruns.com/_downloads/advisory28122011.pdf" source="MISC">http://www.nruns.com/_downloads/advisory28122011.pdf</ref>
-      <ref url="http://www.adacore.com/2012/01/27/security-advisory-sa-2012-l119-003-hash-collisions-in-aws/" source="CONFIRM" adv="1">http://www.adacore.com/2012/01/27/security-advisory-sa-2012-l119-003-hash-collisions-in-aws/</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0169.html" source="BUGTRAQ">20120127 AdaCore Security Advisory SA-2012-L119-003 Hash collisions in AWS</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adacore" name="ada_web_services">
-        <vers num="2.10.0" />
-        <vers prev="1" num="2.10.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1036" published="2012-04-11" name="CVE-2012-1036" modified="2012-04-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and 6.x before 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a message.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.dotnetnuke.com/News/Security-Policy/Security-bulletin-no.59.aspx" source="CONFIRM" adv="1">http://www.dotnetnuke.com/News/Security-Policy/Security-bulletin-no.59.aspx</ref>
-      <ref url="http://technet.microsoft.com/en-us/security/msvr/msvr12-002" source="MISC">http://technet.microsoft.com/en-us/security/msvr/msvr12-002</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dotnetnuke" name="dotnetnuke">
-        <vers num="4.9.0" />
-        <vers num="4.9.1" />
-        <vers num="4.9.2" />
-        <vers num="4.9.3" />
-        <vers num="4.9.4" />
-        <vers num="4.9.5" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="5.1.0" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.2.0" />
-        <vers num="5.2.1" />
-        <vers num="5.2.2" />
-        <vers num="5.2.3" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.4.0" />
-        <vers num="5.4.1" />
-        <vers num="5.4.2" />
-        <vers num="5.4.3" />
-        <vers num="5.4.4" />
-        <vers num="5.5.0" />
-        <vers num="5.5.1" />
-        <vers num="5.6.0" />
-        <vers num="5.6.1" />
-        <vers num="5.6.2" />
-        <vers prev="1" num="5.6.3" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1037" published="2012-07-12" name="CVE-2012-1037" modified="2012-07-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">PHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows remote authenticated users to execute arbitrary PHP code via a URL in the sub_type parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://forge.indepnet.net/projects/glpi/versions/685" source="CONFIRM">https://forge.indepnet.net/projects/glpi/versions/685</ref>
-      <ref url="https://forge.indepnet.net/projects/glpi/repository/revisions/17457/diff/branches/0.80-bugfixes/front/popup.php" source="CONFIRM">https://forge.indepnet.net/projects/glpi/repository/revisions/17457/diff/branches/0.80-bugfixes/front/popup.php</ref>
-      <ref url="https://forge.indepnet.net/issues/3338" source="CONFIRM">https://forge.indepnet.net/issues/3338</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:016" source="MANDRIVA">MDVSA-2012:016</ref>
-      <ref url="http://seclists.org/fulldisclosure/2012/Feb/157" source="FULLDISC">20120210 CVE-2012-1037: GLPI &lt;= 0.80.61 LFI/RFI</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="glpi-project" name="glpi">
-        <vers num="0.78" />
-        <vers num="0.78.1" />
-        <vers num="0.78.2" />
-        <vers num="0.78.3" />
-        <vers num="0.78.4" />
-        <vers num="0.78.5" />
-        <vers num="0.80" />
-        <vers num="0.80.1" />
-        <vers num="0.80.2" />
-        <vers num="0.80.3" />
-        <vers num="0.80.4" />
-        <vers num="0.80.5" />
-        <vers num="0.80.6" />
-        <vers num="0.80.61" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1039" published="2012-03-19" name="CVE-2012-1039" modified="2012-08-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Dotclear before 2.4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) login_data parameter to admin/auth.php; (2) nb parameter to admin/blogs.php; (3) type, (4) sortby, (5) order, or (6) status parameters to admin/comments.php; or (7) page parameter to admin/plugin.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://dotclear.org/blog/post/2012/02/11/Dotclear-2.4.2" source="CONFIRM" patch="1" adv="1">http://dotclear.org/blog/post/2012/02/11/Dotclear-2.4.2</ref>
-      <ref url="https://www.htbridge.ch/advisory/HTB23074" source="MISC">https://www.htbridge.ch/advisory/HTB23074</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dotclear" name="dotclear">
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers num="1.2.8" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="beta_3" />
-        <vers num="2.0" edition="beta_4" />
-        <vers num="2.0" edition="beta_5.2" />
-        <vers num="2.0" edition="beta_5.4" />
-        <vers num="2.0" edition="beta_6" />
-        <vers num="2.0" edition="beta_7" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3.0" />
-        <vers prev="1" num="2.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1046" published="2012-02-10" name="CVE-2012-1046" modified="2012-02-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in TM1 Web in IBM Cognos TM1 9.5.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0696.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51905" source="BID">51905</ref>
-      <ref url="http://www.osvdb.org/78917" source="OSVDB">78917</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg1PM49009" source="AIXAPAR">PM49009</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg27023584" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg27023584</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?crawler=1&amp;uid=swg1PM49009" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?crawler=1&amp;uid=swg1PM49009</ref>
-      <ref url="http://securitytracker.com/id?1026648" source="SECTRACK">1026648</ref>
-      <ref url="http://secunia.com/advisories/47889" source="SECUNIA" adv="1">47889</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="cognos_tm1">
-        <vers num="9.5.2" edition="fp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1047" published="2012-02-12" name="CVE-2012-1047" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) in Cyberoam Central Console (CCC) 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter in an Online_help action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=405" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=405</ref>
-      <ref url="http://www.securityfocus.com/bid/51901" source="BID">51901</ref>
-      <ref url="http://www.exploit-db.com/exploits/18473" source="EXPLOIT-DB">18473</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0036.html" source="BUGTRAQ">20120207 Cyberoam Central Console v2.00.2 - File Include Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cyberoam" name="cyberoam_central_console">
-        <vers num="2.00.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1048" published="2012-02-12" name="CVE-2012-1048" modified="2012-02-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in communityplusplus/www/administrator.php in eFront Community++ edition 3.6.10, and possibly other editions, allows remote attackers to inject arbitrary web script or HTML via the filter parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73043" source="XF">efrontcommunity-administrator-xss(73043)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=423" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=423</ref>
-      <ref url="http://www.securityfocus.com/bid/51894" source="BID">51894</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0033.html" source="BUGTRAQ">20120207 eFronts Community++ v3.6.10 - Cross Site Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="efrontlearning" name="efront_community_++">
-        <vers num="3.6.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1049" published="2012-02-13" name="CVE-2012-1049" modified="2012-02-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attackers to inject arbitrary web script or HTML via the (1) domainName parameter to jsp/AddDC.jsp or (2) operation parameter to DomainConfig.do.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73039" source="XF">manageengine-admanager-multiple-xss(73039)</ref>
-      <ref url="http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5070.php" source="MISC">http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5070.php</ref>
-      <ref url="http://www.securityfocus.com/bid/51893" source="BID">51893</ref>
-      <ref url="http://secunia.com/advisories/47887" source="SECUNIA" adv="1">47887</ref>
-      <ref url="http://packetstormsecurity.org/files/109528" source="MISC">http://packetstormsecurity.org/files/109528</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="manageengine" name="admanager_plus">
-        <vers num="5.2" edition="build5210" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1050" published="2012-02-13" name="CVE-2012-1050" modified="2012-02-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in Mathopd 1.4.x and 1.5.x before 1.5p7, when configured with the * construct for mass virtual hosting, allows remote attackers to read arbitrary files via a crafted Host header.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73049" source="XF">mathopd-http-directory-traversal(73049)</ref>
-      <ref url="http://www.securitytracker.com/id?1026641" source="SECTRACK">1026641</ref>
-      <ref url="http://www.mathopd.org/security.html" source="CONFIRM">http://www.mathopd.org/security.html</ref>
-      <ref url="http://www.mail-archive.com/mathopd%40mathopd.org/msg00392.html" source="MLIST">[mathopd] 20120202 security alert: directory traversal when using * in Location</ref>
-      <ref url="http://secunia.com/advisories/47908" source="SECUNIA" adv="1">47908</ref>
-      <ref url="http://osvdb.org/78896" source="OSVDB">78896</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0025.html" source="BUGTRAQ">20120203 Mathopd - Directory Traversal Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mathopd" name="mathopd">
-        <vers num="1.4" />
-        <vers num="1.4_p1" />
-        <vers num="1.4_p2" />
-        <vers num="1.5_p3" />
-        <vers num="1.5_p4" />
-        <vers num="1.5_p4_1" />
-        <vers num="1.5_p4_2" />
-        <vers num="1.5_p5" />
-        <vers num="1.5_p6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1051" published="2012-02-13" name="CVE-2012-1051" modified="2012-02-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in Xjp2.dll in the JPEG2000 plug-in in XnView 1.98.5 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73040" source="XF">xnview-qcd-bo(73040)</ref>
-      <ref url="http://www.securityfocus.com/bid/51896" source="BID">51896</ref>
-      <ref url="http://secunia.com/advisories/47352" source="SECUNIA" adv="1">47352</ref>
-      <ref url="http://osvdb.org/78904" source="OSVDB">78904</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="xnview" name="xnview">
-        <vers num="1.98.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1052" published="2012-02-13" name="CVE-2012-1052" modified="2012-02-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Buffer overflow in IvanView 1.2.15 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73041" source="XF">ivanview-qcd-bo(73041)</ref>
-      <ref url="http://www.securityfocus.com/bid/51895" source="BID">51895</ref>
-      <ref url="http://secunia.com/advisories/47362" source="SECUNIA" adv="1">47362</ref>
-      <ref url="http://osvdb.org/78905" source="OSVDB">78905</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ivanview" name="ivanview">
-        <vers num="1.2.15" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1053" published="2012-05-29" name="CVE-2012-1053" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors relate to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15087408" source="SUSE">openSUSE-SU-2012:0835</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73445" source="XF">puppet-forked-priv-escalation(73445)</ref>
-      <ref url="http://www.securityfocus.com/bid/52158" source="BID">52158</ref>
-      <ref url="http://www.osvdb.org/79495" source="OSVDB">79495</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2419" source="DEBIAN">DSA-2419</ref>
-      <ref url="http://ubuntu.com/usn/usn-1372-1" source="UBUNTU">USN-1372-1</ref>
-      <ref url="http://secunia.com/advisories/48290" source="SECUNIA" adv="1">48290</ref>
-      <ref url="http://secunia.com/advisories/48166" source="SECUNIA" adv="1">48166</ref>
-      <ref url="http://secunia.com/advisories/48161" source="SECUNIA" adv="1">48161</ref>
-      <ref url="http://secunia.com/advisories/48157" source="SECUNIA">48157</ref>
-      <ref url="http://puppetlabs.com/security/cve/cve-2012-1053/" source="CONFIRM" adv="1">http://puppetlabs.com/security/cve/cve-2012-1053/</ref>
-      <ref url="http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.14" source="CONFIRM">http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.14</ref>
-      <ref url="http://projects.puppetlabs.com/issues/12459" source="MISC">http://projects.puppetlabs.com/issues/12459</ref>
-      <ref url="http://projects.puppetlabs.com/issues/12458" source="MISC">http://projects.puppetlabs.com/issues/12458</ref>
-      <ref url="http://projects.puppetlabs.com/issues/12457" source="MISC">http://projects.puppetlabs.com/issues/12457</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00003.html" source="SUSE">SUSE-SU-2012:0325</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="puppetlabs" name="puppet">
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.10" />
-        <vers num="2.6.11" />
-        <vers num="2.6.12" />
-        <vers num="2.6.13" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.6.7" />
-        <vers num="2.6.8" />
-        <vers num="2.6.9" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-      </prod>
-      <prod vendor="puppetlabs" name="puppet_enterprise_users">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1054" published="2012-05-29" name="CVE-2012-1054" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="4.4" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.4" CVSS_base_score="4.4">
-    <desc>
-      <descript source="cve">Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3, when managing a user login file with the k5login resource type, allows local users to gain privileges via a symlink attack on .k5login.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15087408" source="SUSE">openSUSE-SU-2012:0835</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73446" source="XF">puppet-k5login-type-symlink(73446)</ref>
-      <ref url="http://www.securityfocus.com/bid/52158" source="BID">52158</ref>
-      <ref url="http://www.osvdb.org/79496" source="OSVDB">79496</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2419" source="DEBIAN">DSA-2419</ref>
-      <ref url="http://ubuntu.com/usn/usn-1372-1" source="UBUNTU">USN-1372-1</ref>
-      <ref url="http://secunia.com/advisories/48290" source="SECUNIA" adv="1">48290</ref>
-      <ref url="http://secunia.com/advisories/48166" source="SECUNIA" adv="1">48166</ref>
-      <ref url="http://secunia.com/advisories/48161" source="SECUNIA" adv="1">48161</ref>
-      <ref url="http://secunia.com/advisories/48157" source="SECUNIA" adv="1">48157</ref>
-      <ref url="http://puppetlabs.com/security/cve/cve-2012-1054/" source="CONFIRM" adv="1">http://puppetlabs.com/security/cve/cve-2012-1054/</ref>
-      <ref url="http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.14" source="CONFIRM">http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.14</ref>
-      <ref url="http://projects.puppetlabs.com/issues/12460" source="MISC" adv="1">http://projects.puppetlabs.com/issues/12460</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00003.html" source="SUSE">SUSE-SU-2012:0325</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="puppetlabs" name="puppet">
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.10" />
-        <vers num="2.6.11" />
-        <vers num="2.6.12" />
-        <vers num="2.6.13" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.6.7" />
-        <vers num="2.6.8" />
-        <vers num="2.6.9" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-      </prod>
-      <prod vendor="puppetlabs" name="puppet_enterprise_users">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1055" published="2012-02-13" name="CVE-2012-1055" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in PhotoLine 17.01 and possibly other versions before 17.02 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73103" source="XF">photoline-qcd-bo(73103)</ref>
-      <ref url="http://www.securityfocus.com/bid/51948" source="BID">51948</ref>
-      <ref url="http://secunia.com/advisories/47477" source="SECUNIA" adv="1">47477</ref>
-      <ref url="http://osvdb.org/78985" source="OSVDB">78985</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pl32" name="photoline">
-        <vers num="17.01" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1056" published="2012-02-13" name="CVE-2012-1056" modified="2012-02-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for (1) Recent forwards, (2) Most forwarded, or (3) Dynamic blocks, which allows remote attackers to obtain node titles via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1425150" source="CONFIRM" patch="1" adv="1">http://drupal.org/node/1425150</ref>
-      <ref url="http://drupal.org/node/1423722" source="CONFIRM" patch="1">http://drupal.org/node/1423722</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72920" source="XF">drupal-multiple-blocks-security-bypass(72920)</ref>
-      <ref url="http://www.securityfocus.com/bid/51826" source="BID">51826</ref>
-      <ref url="http://secunia.com/advisories/47851" source="SECUNIA" adv="1">47851</ref>
-      <ref url="http://osvdb.org/78817" source="OSVDB">78817</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sean_robertson" name="forward">
-        <vers num="6.x-1.0" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.10" />
-        <vers num="6.x-1.11" />
-        <vers num="6.x-1.12" />
-        <vers num="6.x-1.13" />
-        <vers num="6.x-1.14" />
-        <vers num="6.x-1.15" />
-        <vers num="6.x-1.16" />
-        <vers num="6.x-1.17" />
-        <vers num="6.x-1.18" />
-        <vers num="6.x-1.19" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.20" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="6.x-1.5" />
-        <vers num="6.x-1.6" />
-        <vers num="6.x-1.7" />
-        <vers num="6.x-1.8" />
-        <vers num="6.x-1.9" />
-        <vers num="6.x-1.x-dev" />
-        <vers num="7.x-1.0" edition="alpha1" />
-        <vers num="7.x-1.0" edition="alpha2" />
-        <vers num="7.x-1.0" edition="alpha3" />
-        <vers num="7.x-1.0" edition="rc1" />
-        <vers num="7.x-1.0" edition="rc2" />
-        <vers num="7.x-1.0" edition="rc3" />
-        <vers num="7.x-1.0" edition="rc4" />
-        <vers num="7.x-1.1" />
-        <vers num="7.x-1.2" />
-        <vers num="7.x-1.x-dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1057" published="2012-02-13" name="CVE-2012-1057" modified="2012-02-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the clickthrough tracking functionality in the Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of administrators for requests that increase node rankings via the tracking code, possibly related to improper "flood control."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1425150" source="CONFIRM" patch="1" adv="1">http://drupal.org/node/1425150</ref>
-      <ref url="http://drupal.org/node/1423722" source="CONFIRM" patch="1">http://drupal.org/node/1423722</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72922" source="XF">drupal-forward-unspecified-csrf(72922)</ref>
-      <ref url="http://www.securityfocus.com/bid/51826" source="BID">51826</ref>
-      <ref url="http://secunia.com/advisories/47851" source="SECUNIA" adv="1">47851</ref>
-      <ref url="http://osvdb.org/78817" source="OSVDB">78817</ref>
-      <ref url="http://drupalcode.org/project/forward.git/commitdiff/72158fdbfbf5a068938985e3d10ce1d8f969d9c3" source="CONFIRM">http://drupalcode.org/project/forward.git/commitdiff/72158fdbfbf5a068938985e3d10ce1d8f969d9c3</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sean_robertson" name="forward">
-        <vers num="6.x-1.0" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.10" />
-        <vers num="6.x-1.11" />
-        <vers num="6.x-1.12" />
-        <vers num="6.x-1.13" />
-        <vers num="6.x-1.14" />
-        <vers num="6.x-1.15" />
-        <vers num="6.x-1.16" />
-        <vers num="6.x-1.17" />
-        <vers num="6.x-1.18" />
-        <vers num="6.x-1.19" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.20" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="6.x-1.5" />
-        <vers num="6.x-1.6" />
-        <vers num="6.x-1.7" />
-        <vers num="6.x-1.8" />
-        <vers num="6.x-1.9" />
-        <vers num="6.x-1.x-dev" />
-        <vers num="7.x-1.0" edition="alpha1" />
-        <vers num="7.x-1.0" edition="alpha2" />
-        <vers num="7.x-1.0" edition="alpha3" />
-        <vers num="7.x-1.0" edition="rc1" />
-        <vers num="7.x-1.0" edition="rc2" />
-        <vers num="7.x-1.0" edition="rc3" />
-        <vers num="7.x-1.0" edition="rc4" />
-        <vers num="7.x-1.1" />
-        <vers num="7.x-1.2" />
-        <vers num="7.x-1.x-dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1058" published="2012-02-13" name="CVE-2012-1058" modified="2012-02-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73051" source="XF">flyspray-index-csrf(73051)</ref>
-      <ref url="http://www.exploit-db.com/exploits/18468" source="EXPLOIT-DB">18468</ref>
-      <ref url="http://secunia.com/advisories/47881" source="SECUNIA" adv="1">47881</ref>
-      <ref url="http://packetstormsecurity.org/files/109507/Flyspray-0.9.9.6-Cross-Site-Request-Forgery.html" source="MISC">http://packetstormsecurity.org/files/109507/Flyspray-0.9.9.6-Cross-Site-Request-Forgery.html</ref>
-      <ref url="http://osvdb.org/78923" source="OSVDB">78923</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="flyspray" name="flyspray">
-        <vers num="0.9.9.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1059" published="2012-02-13" name="CVE-2012-1059" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce Online Merchant 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the value_title parameter, as demonstrated using the "Front" field in the shirt module.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/osCommerce/oscommerce/commit/a5aeb0448cc333cc4b801c0e01981b218fd9c7df" source="CONFIRM">https://github.com/osCommerce/oscommerce/commit/a5aeb0448cc333cc4b801c0e01981b218fd9c7df</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72916" source="XF">oscommerce-index-xss(72916)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=407" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=407</ref>
-      <ref url="http://www.securityfocus.com/bid/51831" source="BID">51831</ref>
-      <ref url="http://www.exploit-db.com/exploits/18455" source="EXPLOIT-DB">18455</ref>
-      <ref url="http://packetstormsecurity.org/files/109389/VL-407.txt" source="MISC">http://packetstormsecurity.org/files/109389/VL-407.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oscommerce" name="online_merchant">
-        <vers num="3.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1060" published="2012-02-13" name="CVE-2012-1060" modified="2012-02-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in revisioning_theme.inc in the Taxonomy module in the Revisioning module 6.x-3.13 and other versions before 6.x-3.14 for Drupal allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via the (1) tags or (2) term parameters.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.madirish.net/content/drupal-revisioning-6x-313-xss-vulnerability" source="MISC" patch="1">http://www.madirish.net/content/drupal-revisioning-6x-313-xss-vulnerability</ref>
-      <ref url="http://drupal.org/node/1431114" source="CONFIRM" patch="1">http://drupal.org/node/1431114</ref>
-      <ref url="http://www.securityfocus.com/bid/51923" source="BID">51923</ref>
-      <ref url="http://secunia.com/advisories/47931" source="SECUNIA" adv="1">47931</ref>
-      <ref url="http://drupalcode.org/project/revisioning.git/commit/768c882" source="CONFIRM">http://drupalcode.org/project/revisioning.git/commit/768c882</ref>
-      <ref url="http://drupal.org/node/1433550" source="CONFIRM" adv="1">http://drupal.org/node/1433550</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rik_de_boer" name="revisioning">
-        <vers num="6.x-3.13" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1061" published="2012-02-13" name="CVE-2012-1061" modified="2012-02-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in GForge Advanced Server 6.0.0 and other versions before 6.0.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73085" source="XF">gforgeadvanced-unspecified-sql-injection(73085)</ref>
-      <ref url="http://www.securityfocus.com/bid/51912" source="BID">51912</ref>
-      <ref url="http://secunia.com/advisories/47587" source="SECUNIA" adv="1">47587</ref>
-      <ref url="http://osvdb.org/78928" source="OSVDB">78928</ref>
-      <ref url="http://gforgegroup.wordpress.com/2012/02/03/gforge-as-6_0_1-release/" source="CONFIRM">http://gforgegroup.wordpress.com/2012/02/03/gforge-as-6_0_1-release/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gforgegroup" name="gforge">
-        <vers num="6.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1062" published="2012-02-13" name="CVE-2012-1062" modified="2012-02-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the (1) period parameter to showHistoryData.do; (2) selectedNetwork, (3) network, or (4) group parameters to showresource.do; (5) header parameter to AlarmView.do; or (6) attName parameter to jsp/PopUp_Graph.jsp.  NOTE: the Search.do/query vector is already covered by CVE-2008-1566, and the jsp/ThresholdActionConfiguration.jsp redirectto vector is already covered by CVE-2008-0474.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72830" source="XF">meapplicationsmanager-multiple-xss(72830)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=115" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=115</ref>
-      <ref url="http://www.securityfocus.com/bid/51796" source="BID">51796</ref>
-      <ref url="http://secunia.com/advisories/47724" source="SECUNIA" adv="1">47724</ref>
-      <ref url="http://packetstormsecurity.org/files/view/109238/VL-115.txt" source="MISC">http://packetstormsecurity.org/files/view/109238/VL-115.txt</ref>
-      <ref url="http://osvdb.org/78722" source="OSVDB">78722</ref>
-      <ref url="http://osvdb.org/78721" source="OSVDB">78721</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="manageengine" name="applications_manager">
-        <vers num="10.0" />
-        <vers num="10.1" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="9" />
-        <vers num="9.1" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.4" />
-        <vers num="9.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1063" published="2012-02-13" name="CVE-2012-1063" modified="2012-02-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execute arbitrary SQL commands via the (1) viewId parameter to fault/AlarmView.do or (2) period parameter to showHistoryData.do.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72831" source="XF">meapplication-multiple-sql-injection(72831)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=115" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=115</ref>
-      <ref url="http://www.securityfocus.com/bid/51796" source="BID">51796</ref>
-      <ref url="http://packetstormsecurity.org/files/view/109238/VL-115.txt" source="MISC">http://packetstormsecurity.org/files/view/109238/VL-115.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="manageengine" name="applications_manager">
-        <vers num="10.0" />
-        <vers num="10.1" />
-        <vers num="10.2" />
-        <vers num="10.3" />
-        <vers num="9.1" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.4" />
-        <vers num="9.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1065" published="2012-02-14" name="CVE-2012-1065" modified="2012-02-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Insecure method vulnerability in TuxScripting.dll in the TuxSystem ActiveX control in 2X ApplicationServer 10.1 Build 1224 allows remote attackers to create or overwrite arbitrary files via the ExportSettings method.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72947" source="XF">2xapplication-activex-file-overwrite(72947)</ref>
-      <ref url="http://www.securityfocus.com/bid/51856" source="BID">51856</ref>
-      <ref url="http://secunia.com/advisories/47657" source="SECUNIA" adv="1">47657</ref>
-      <ref url="http://osvdb.org/78831" source="OSVDB">78831</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="2x" name="applicationserver">
-        <vers num="10.1" edition="1224" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1066" published="2012-02-14" name="CVE-2012-1066" modified="2012-02-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72918" source="XF">smartycms-template-xss(72918)</ref>
-      <ref url="http://www.securityfocus.com/bid/51805" source="BID">51805</ref>
-      <ref url="http://dl.packetstormsecurity.net/1202-exploits/smartycms-xss.txt" source="MISC">http://dl.packetstormsecurity.net/1202-exploits/smartycms-xss.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="smartycms" name="smartycms">
-        <vers num="0.9.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1067" published="2012-02-14" name="CVE-2012-1067" modified="2012-02-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in an rc-content action to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72951" source="XF">wprecentcomments-index-sql-injection(72951)</ref>
-      <ref url="http://www.securityfocus.com/bid/51859" source="BID">51859</ref>
-      <ref url="http://secunia.com/advisories/47870" source="SECUNIA" adv="1">47870</ref>
-      <ref url="http://osvdb.org/78820" source="OSVDB">78820</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mg12" name="wp-recentcomments">
-        <vers num="2.0.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1068" published="2012-02-14" name="CVE-2012-1068" modified="2012-02-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the rc_ajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter, related to AJAX paging.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/70003" source="XF">wprecentcomments-core-xss(70003)</ref>
-      <ref url="http://www.securityfocus.com/bid/49734" source="BID">49734</ref>
-      <ref url="http://www.osvdb.org/75635" source="OSVDB">75635</ref>
-      <ref url="http://wordpress.org/extend/plugins/wp-recentcomments/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/wp-recentcomments/changelog/</ref>
-      <ref url="http://secunia.com/advisories/46141" source="SECUNIA" adv="1">46141</ref>
-      <ref url="http://plugins.trac.wordpress.org/changeset/416723/wp-recentcomments/trunk/core.php?old=316325&amp;old_path=wp-recentcomments%2Ftrunk%2Fcore.php" source="CONFIRM">http://plugins.trac.wordpress.org/changeset/416723/wp-recentcomments/trunk/core.php?old=316325&amp;old_path=wp-recentcomments%2Ftrunk%2Fcore.php</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mg12" name="wp-recentcomments">
-        <vers num="1.8" />
-        <vers num="1.8.1" />
-        <vers num="1.8.2" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers prev="1" num="2.0.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1069" published="2012-02-14" name="CVE-2012-1069" modified="2012-02-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in module/kb/search_word in the search module in lknSupport allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72926" source="XF">lknsupport-search-xss(72926)</ref>
-      <ref url="http://www.securityfocus.com/bid/51803" source="BID">51803</ref>
-      <ref url="http://dl.packetstormsecurity.net/1202-exploits/iknsupport-xss.txt" source="MISC">http://dl.packetstormsecurity.net/1202-exploits/iknsupport-xss.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="instantphp" name="lknsupport">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1070" published="2012-02-14" name="CVE-2012-1070" modified="2012-02-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the "return url parameter."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51845" source="BID">51845</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="MISC" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://secunia.com/advisories/47823" source="SECUNIA" adv="1">47823</ref>
-      <ref url="http://osvdb.org/78749" source="OSVDB">78749</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netcreators" name="irfaq">
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1071" published="2012-02-14" name="CVE-2012-1071" modified="2012-02-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in the Kitchen recipe (mv_cooking) extension before 0.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild as of February 2012.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72934" source="XF">typo3-kitchen-unspecified-sql-injection(72934)</ref>
-      <ref url="http://www.securityfocus.com/bid/51825" source="BID">51825</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="MISC" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://typo3.org/extensions/repository/view/mv_cooking/0.4.1/" source="MISC">http://typo3.org/extensions/repository/view/mv_cooking/0.4.1/</ref>
-      <ref url="http://secunia.com/advisories/47437" source="SECUNIA" adv="1">47437</ref>
-      <ref url="http://osvdb.org/78748" source="OSVDB">78748</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mathieu_vidal" name="mv_cooking">
-        <vers num="0.1.0" />
-        <vers num="0.3.0" />
-        <vers num="0.4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1072" published="2012-02-14" name="CVE-2012-1072" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in the Category-System (toi_category) extension 0.6.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72958" source="XF">typo3-category-unspecified-sql-injection(72958)</ref>
-      <ref url="http://www.securityfocus.com/bid/51834" source="BID">51834</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="MISC" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://osvdb.org/78785" source="OSVDB">78785</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="toi_category">
-        <vers prev="1" num="0.6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1073" published="2012-02-14" name="CVE-2012-1073" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Category-System (toi_category) extension 0.6.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72957" source="XF">typo3-categorysystem-unspecified-xss(72957)</ref>
-      <ref url="http://www.securityfocus.com/bid/51834" source="BID">51834</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="MISC">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://osvdb.org/78784" source="OSVDB">78784</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="toi_category">
-        <vers prev="1" num="0.6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1074" published="2012-02-14" name="CVE-2012-1074" modified="2012-02-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in the White Papers (mm_whtppr) extension 0.0.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72959" source="XF">typo3-whitepapers-unspecified-sql-injection(72959)</ref>
-      <ref url="http://www.securityfocus.com/bid/51837" source="BID">51837</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="MISC" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://osvdb.org/78786" source="OSVDB">78786</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="mm_whtppr">
-        <vers prev="1" num="0.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1075" published="2012-02-14" name="CVE-2012-1075" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in the Documents download (rtg_files) extension before 1.5.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72961" source="XF">typo3-documents-unspecified-sql-injection(72961)</ref>
-      <ref url="http://www.securityfocus.com/bid/51838" source="BID">51838</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="MISC">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://typo3.org/extensions/repository/view/rtg_files/1.5.2/" source="CONFIRM">http://typo3.org/extensions/repository/view/rtg_files/1.5.2/</ref>
-      <ref url="http://secunia.com/advisories/47842" source="SECUNIA">47842</ref>
-      <ref url="http://osvdb.org/78788" source="OSVDB">78788</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="robert_gonda" name="rtg_files">
-        <vers num="1.4.10" />
-        <vers num="1.4.7" />
-        <vers num="1.4.9" />
-        <vers num="1.5.0" />
-        <vers prev="1" num="1.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1076" published="2012-02-14" name="CVE-2012-1076" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Documents download (rtg_files) extension before 1.5.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72960" source="XF">typo3-documents-unspecified-xss(72960)</ref>
-      <ref url="http://www.securityfocus.com/bid/51838" source="BID">51838</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="MISC" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://typo3.org/extensions/repository/view/rtg_files/1.5.2/" source="CONFIRM">http://typo3.org/extensions/repository/view/rtg_files/1.5.2/</ref>
-      <ref url="http://secunia.com/advisories/47842" source="SECUNIA">47842</ref>
-      <ref url="http://osvdb.org/78787" source="OSVDB">78787</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="robert_gonda" name="rtg_files">
-        <vers num="1.4.10" />
-        <vers num="1.4.7" />
-        <vers num="1.4.9" />
-        <vers num="1.5.0" />
-        <vers prev="1" num="1.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1077" published="2012-02-14" name="CVE-2012-1077" modified="2012-02-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in the Post data records to facebook (bc_post2facebook) extension before 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="MISC" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://typo3.org/extensions/repository/view/bc_post2facebook/0.2.2/" source="CONFIRM">http://typo3.org/extensions/repository/view/bc_post2facebook/0.2.2/</ref>
-      <ref url="http://osvdb.org/78790" source="OSVDB">78790</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="manfred_egger" name="bc_post2facebook">
-        <vers num="0.2.0" />
-        <vers prev="1" num="0.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1078" published="2012-02-14" name="CVE-2012-1078" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The System Utilities (sysutils) extension 1.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unspecified vectors related to improper "protection" of the "backup output directory."</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72964" source="XF">typo3-sysutils-unspecified-info-disclosure(72964)</ref>
-      <ref url="http://www.securityfocus.com/bid/51844" source="BID">51844</ref>
-      <ref url="http://www.osvdb.org/78791" source="OSVDB">78791</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="MISC" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://typo3.org/extensions/repository/view/sysutils/1.0.4/" source="CONFIRM">http://typo3.org/extensions/repository/view/sysutils/1.0.4/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="claus_due" name="sysutils">
-        <vers num="0.10.0" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers prev="1" num="1.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1079" published="2012-02-14" name="CVE-2012-1079" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Webservices for TYPO3 (typo3_webservice) extension before 0.3.8 for TYPO3 allows remote authenticated users to execute arbitrary code via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72965" source="XF">typo3-webservices-unspecified-code-execution(72965)</ref>
-      <ref url="http://www.securityfocus.com/bid/51843" source="BID">51843</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="CONFIRM" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://typo3.org/extensions/repository/view/typo3_webservice/0.3.8/" source="MISC">http://typo3.org/extensions/repository/view/typo3_webservice/0.3.8/</ref>
-      <ref url="http://osvdb.org/78792" source="OSVDB">78792</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="helmut_hummel" name="typo3_webservice">
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.3.5" />
-        <vers num="0.3.6" />
-        <vers prev="1" num="0.3.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1080" published="2012-02-14" name="CVE-2012-1080" modified="2012-02-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Euro Calculator (skt_eurocalc) extension 0.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51848" source="BID">51848</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="MISC" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://osvdb.org/78794" source="OSVDB">78794</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="skt_eurocalc">
-        <vers num="0.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1081" published="2012-02-14" name="CVE-2012-1081" modified="2012-02-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Yet another Google search (ya_googlesearch) extension before 0.3.10 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="MISC" patch="1" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://typo3.org/extensions/repository/view/ya_googlesearch/0.3.10/" source="CONFIRM" patch="1">http://typo3.org/extensions/repository/view/ya_googlesearch/0.3.10/</ref>
-      <ref url="http://www.securityfocus.com/bid/51851" source="BID">51851</ref>
-      <ref url="http://osvdb.org/78795" source="OSVDB">78795</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="roderick_braun" name="ya_googlesearch">
-        <vers num="0.3.4" />
-        <vers num="0.3.5" />
-        <vers num="0.3.6" />
-        <vers num="0.3.7" />
-        <vers prev="1" num="0.3.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1082" published="2012-02-14" name="CVE-2012-1082" modified="2012-02-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51849" source="BID">51849</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="MISC" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://osvdb.org/78796" source="OSVDB">78796</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="terminal">
-        <vers prev="1" num="0.3.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1083" published="2012-02-14" name="CVE-2012-1083" modified="2012-02-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and earlier for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51849" source="BID">51849</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="MISC" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://osvdb.org/78797" source="OSVDB">78797</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="terminal">
-        <vers prev="1" num="0.3.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1084" published="2012-02-14" name="CVE-2012-1084" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the BE User Switch (beuserswitch) extension 0.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72974" source="XF">typo3-beuserswitch-unspecified-xss(72974)</ref>
-      <ref url="http://www.securityfocus.com/bid/51852" source="BID">51852</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="MISC" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://osvdb.org/78798" source="OSVDB">78798</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="beuserswitch">
-        <vers num="0.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1085" published="2012-02-14" name="CVE-2012-1085" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the BE User Switch (beuserswitch) extension 0.0.1 for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72973" source="XF">typo3-beuserswitch-unspec-info-disclosure(72973)</ref>
-      <ref url="http://www.securityfocus.com/bid/51852" source="BID">51852</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="MISC" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://osvdb.org/78799" source="OSVDB">78799</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="beuserswitch">
-        <vers num="0.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1086" published="2012-02-14" name="CVE-2012-1086" modified="2012-02-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the UrlTool (aeurltool) extension 0.1.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51855" source="BID">51855</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="MISC" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://osvdb.org/78801" source="OSVDB">78801</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="aeurltool">
-        <vers num="0.1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1087" published="2012-02-14" name="CVE-2012-1087" modified="2012-02-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Post data records to facebook (bc_post2facebook) extension before 0.2.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/" source="MISC" patch="1" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/</ref>
-      <ref url="http://typo3.org/extensions/repository/view/bc_post2facebook/0.2.2/" source="CONFIRM" patch="1">http://typo3.org/extensions/repository/view/bc_post2facebook/0.2.2/</ref>
-      <ref url="http://osvdb.org/78789" source="OSVDB">78789</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bluechip" name="bc_post2facebook">
-        <vers num="0.2.0" />
-        <vers prev="1" num="0.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1089" published="2012-03-23" name="CVE-2012-1089" modified="2012-06-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in Apache Wicket 1.4.x before 1.4.20 and 1.5.x before 1.5.5 allows remote attackers to read arbitrary web-application files via a relative pathname in a URL for a Wicket resource that corresponds to a null package.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74276" source="XF">apache-wicket-dir-traversal(74276)</ref>
-      <ref url="http://wicket.apache.org/2012/03/22/wicket-cve-2012-1089.html" source="CONFIRM" adv="1">http://wicket.apache.org/2012/03/22/wicket-cve-2012-1089.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="wicket">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.15" />
-        <vers num="1.4.16" />
-        <vers num="1.4.17" />
-        <vers num="1.4.18" />
-        <vers num="1.4.19" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.5.0" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1090" published="2012-05-17" name="CVE-2012-1090" modified="2012-05-17" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as demonstrated by a FIFO.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/88d7d4e4a439f32acc56a6d860e415ee71d3df08" source="CONFIRM">https://github.com/torvalds/linux/commit/88d7d4e4a439f32acc56a6d860e415ee71d3df08</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=798293" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=798293</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/28/4" source="MLIST">[oss-security] 20120228 Re: CVE request -- kernel: cifs: dentry refcount leak when opening a FIFO on lookup leads to panic on unmount</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="1.2.0" />
-        <vers num="1.3.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.15" />
-        <vers num="2.0.16" />
-        <vers num="2.0.17" />
-        <vers num="2.0.18" />
-        <vers num="2.0.19" />
-        <vers num="2.0.2" />
-        <vers num="2.0.20" />
-        <vers num="2.0.21" />
-        <vers num="2.0.22" />
-        <vers num="2.0.23" />
-        <vers num="2.0.24" />
-        <vers num="2.0.25" />
-        <vers num="2.0.26" />
-        <vers num="2.0.27" />
-        <vers num="2.0.28" />
-        <vers num="2.0.29" />
-        <vers num="2.0.3" />
-        <vers num="2.0.30" />
-        <vers num="2.0.31" />
-        <vers num="2.0.32" />
-        <vers num="2.0.33" />
-        <vers num="2.0.34" />
-        <vers num="2.0.35" />
-        <vers num="2.0.36" />
-        <vers num="2.0.37" />
-        <vers num="2.0.38" />
-        <vers num="2.0.39" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1.132" />
-        <vers num="2.1.89" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.10" />
-        <vers num="2.2.11" />
-        <vers num="2.2.12" />
-        <vers num="2.2.13" edition="pre15" />
-        <vers num="2.2.14" />
-        <vers num="2.2.15" edition="pre16" />
-        <vers num="2.2.16" edition="pre5" />
-        <vers num="2.2.16" edition="pre6" />
-        <vers num="2.2.17" edition="pre14" />
-        <vers num="2.2.18" />
-        <vers num="2.2.19" />
-        <vers num="2.2.2" />
-        <vers num="2.2.20" />
-        <vers num="2.2.21" edition="pre1" />
-        <vers num="2.2.21" edition="pre2" />
-        <vers num="2.2.21" edition="pre3" />
-        <vers num="2.2.21" edition="pre4" />
-        <vers num="2.2.21" edition="rc1" />
-        <vers num="2.2.21" edition="rc2" />
-        <vers num="2.2.21" edition="rc3" />
-        <vers num="2.2.21" edition="rc4" />
-        <vers num="2.2.22" edition="rc1" />
-        <vers num="2.2.22" edition="rc2" />
-        <vers num="2.2.22" edition="rc3" />
-        <vers num="2.2.23" edition="rc1" />
-        <vers num="2.2.23" edition="rc2" />
-        <vers num="2.2.24" edition="rc2" />
-        <vers num="2.2.24" edition="rc3" />
-        <vers num="2.2.24" edition="rc4" />
-        <vers num="2.2.24" edition="rc5" />
-        <vers num="2.2.25" />
-        <vers num="2.2.26" />
-        <vers num="2.2.27" edition="pre1" />
-        <vers num="2.2.27" edition="pre2" />
-        <vers num="2.2.27" edition="rc1" />
-        <vers num="2.2.27" edition="rc2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" edition="rc1" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.13" />
-        <vers num="2.3.14" />
-        <vers num="2.3.15" />
-        <vers num="2.3.16" />
-        <vers num="2.3.17" />
-        <vers num="2.3.18" />
-        <vers num="2.3.19" />
-        <vers num="2.3.2" />
-        <vers num="2.3.20" />
-        <vers num="2.3.21" />
-        <vers num="2.3.22" />
-        <vers num="2.3.23" />
-        <vers num="2.3.24" />
-        <vers num="2.3.25" />
-        <vers num="2.3.26" />
-        <vers num="2.3.27" />
-        <vers num="2.3.28" />
-        <vers num="2.3.29" />
-        <vers num="2.3.3" />
-        <vers num="2.3.30" />
-        <vers num="2.3.31" />
-        <vers num="2.3.32" />
-        <vers num="2.3.33" />
-        <vers num="2.3.34" />
-        <vers num="2.3.35" />
-        <vers num="2.3.36" />
-        <vers num="2.3.37" />
-        <vers num="2.3.38" />
-        <vers num="2.3.39" />
-        <vers num="2.3.4" />
-        <vers num="2.3.40" />
-        <vers num="2.3.41" />
-        <vers num="2.3.42" />
-        <vers num="2.3.43" />
-        <vers num="2.3.44" />
-        <vers num="2.3.45" />
-        <vers num="2.3.46" />
-        <vers num="2.3.47" />
-        <vers num="2.3.48" />
-        <vers num="2.3.49" />
-        <vers num="2.3.5" />
-        <vers num="2.3.50" />
-        <vers num="2.3.51" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.3.99" edition="pre1" />
-        <vers num="2.3.99" edition="pre2" />
-        <vers num="2.3.99" edition="pre3" />
-        <vers num="2.3.99" edition="pre4" />
-        <vers num="2.3.99" edition="pre5" />
-        <vers num="2.3.99" edition="pre6" />
-        <vers num="2.3.99" edition="pre7" />
-        <vers num="2.3.99" edition="pre8" />
-        <vers num="2.3.99" edition="pre9" />
-        <vers num="2.4.0" edition="test1" />
-        <vers num="2.4.0" edition="test10" />
-        <vers num="2.4.0" edition="test11" />
-        <vers num="2.4.0" edition="test12" />
-        <vers num="2.4.0" edition="test2" />
-        <vers num="2.4.0" edition="test3" />
-        <vers num="2.4.0" edition="test4" />
-        <vers num="2.4.0" edition="test5" />
-        <vers num="2.4.0" edition="test6" />
-        <vers num="2.4.0" edition="test7" />
-        <vers num="2.4.0" edition="test8" />
-        <vers num="2.4.0" edition="test9" />
-        <vers num="2.4.1" />
-        <vers num="2.4.10" />
-        <vers num="2.4.11" edition="pre3" />
-        <vers num="2.4.12" />
-        <vers num="2.4.13" />
-        <vers num="2.4.14" />
-        <vers num="2.4.15" />
-        <vers num="2.4.16" />
-        <vers num="2.4.17" />
-        <vers num="2.4.18" edition="pre1" />
-        <vers num="2.4.18" edition="pre2" />
-        <vers num="2.4.18" edition="pre3" />
-        <vers num="2.4.18" edition="pre4" />
-        <vers num="2.4.18" edition="pre5" />
-        <vers num="2.4.18" edition="pre6" />
-        <vers num="2.4.18" edition="pre7" />
-        <vers num="2.4.18" edition="pre8" />
-        <vers num="2.4.18" edition="pre9" />
-        <vers num="2.4.19" edition="pre1" />
-        <vers num="2.4.19" edition="pre2" />
-        <vers num="2.4.19" edition="pre3" />
-        <vers num="2.4.19" edition="pre4" />
-        <vers num="2.4.19" edition="pre5" />
-        <vers num="2.4.19" edition="pre6" />
-        <vers num="2.4.2" />
-        <vers num="2.4.20" />
-        <vers num="2.4.21" edition="pre1" />
-        <vers num="2.4.21" edition="pre4" />
-        <vers num="2.4.21" edition="pre7" />
-        <vers num="2.4.22" edition="pre10" />
-        <vers num="2.4.23" edition="pre9" />
-        <vers num="2.4.24" />
-        <vers num="2.4.25" />
-        <vers num="2.4.26" />
-        <vers num="2.4.27" edition="pre1" />
-        <vers num="2.4.27" edition="pre2" />
-        <vers num="2.4.27" edition="pre3" />
-        <vers num="2.4.27" edition="pre4" />
-        <vers num="2.4.27" edition="pre5" />
-        <vers num="2.4.28" />
-        <vers num="2.4.29" edition="rc1" />
-        <vers num="2.4.29" edition="rc2" />
-        <vers num="2.4.3" edition="pre3" />
-        <vers num="2.4.30" edition="rc2" />
-        <vers num="2.4.30" edition="rc3" />
-        <vers num="2.4.31" edition="pre1" />
-        <vers num="2.4.32" edition="pre1" />
-        <vers num="2.4.32" edition="pre2" />
-        <vers num="2.4.33" edition="pre1" />
-        <vers num="2.4.33.2" />
-        <vers num="2.4.33.3" />
-        <vers num="2.4.33.4" />
-        <vers num="2.4.33.5" />
-        <vers num="2.4.34" edition="rc3" />
-        <vers num="2.4.34.1" />
-        <vers num="2.4.34.2" />
-        <vers num="2.4.35" />
-        <vers num="2.4.35.2" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers num="2.4.8" />
-        <vers num="2.4.9" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.10" />
-        <vers num="2.5.11" />
-        <vers num="2.5.12" />
-        <vers num="2.5.13" />
-        <vers num="2.5.14" />
-        <vers num="2.5.15" />
-        <vers num="2.5.16" />
-        <vers num="2.5.17" />
-        <vers num="2.5.18" />
-        <vers num="2.5.19" />
-        <vers num="2.5.2" />
-        <vers num="2.5.20" />
-        <vers num="2.5.21" />
-        <vers num="2.5.22" />
-        <vers num="2.5.23" />
-        <vers num="2.5.24" />
-        <vers num="2.5.25" />
-        <vers num="2.5.26" />
-        <vers num="2.5.27" />
-        <vers num="2.5.28" />
-        <vers num="2.5.29" />
-        <vers num="2.5.3" />
-        <vers num="2.5.30" />
-        <vers num="2.5.31" />
-        <vers num="2.5.32" />
-        <vers num="2.5.33" />
-        <vers num="2.5.34" />
-        <vers num="2.5.35" />
-        <vers num="2.5.36" />
-        <vers num="2.5.37" />
-        <vers num="2.5.38" />
-        <vers num="2.5.39" />
-        <vers num="2.5.4" />
-        <vers num="2.5.40" />
-        <vers num="2.5.41" />
-        <vers num="2.5.42" />
-        <vers num="2.5.43" />
-        <vers num="2.5.44" />
-        <vers num="2.5.45" />
-        <vers num="2.5.46" />
-        <vers num="2.5.47" />
-        <vers num="2.5.48" />
-        <vers num="2.5.49" />
-        <vers num="2.5.5" />
-        <vers num="2.5.50" />
-        <vers num="2.5.51" />
-        <vers num="2.5.52" />
-        <vers num="2.5.53" />
-        <vers num="2.5.54" />
-        <vers num="2.5.55" />
-        <vers num="2.5.56" />
-        <vers num="2.5.57" />
-        <vers num="2.5.58" />
-        <vers num="2.5.59" />
-        <vers num="2.5.6" />
-        <vers num="2.5.60" />
-        <vers num="2.5.61" />
-        <vers num="2.5.62" />
-        <vers num="2.5.63" />
-        <vers num="2.5.64" />
-        <vers num="2.5.65" />
-        <vers num="2.5.66" />
-        <vers num="2.5.67" />
-        <vers num="2.5.68" />
-        <vers num="2.5.69" />
-        <vers num="2.5.7" />
-        <vers num="2.5.8" />
-        <vers num="2.5.9" />
-        <vers num="2.6.0" edition="test1" />
-        <vers num="2.6.0" edition="test10" />
-        <vers num="2.6.0" edition="test11" />
-        <vers num="2.6.0" edition="test2" />
-        <vers num="2.6.0" edition="test3" />
-        <vers num="2.6.0" edition="test4" />
-        <vers num="2.6.0" edition="test5" />
-        <vers num="2.6.0" edition="test6" />
-        <vers num="2.6.0" edition="test7" />
-        <vers num="2.6.0" edition="test8" />
-        <vers num="2.6.0" edition="test9" />
-        <vers num="2.6.1" edition="rc1" />
-        <vers num="2.6.1" edition="rc2" />
-        <vers num="2.6.1" edition="rc3" />
-        <vers num="2.6.10" edition="rc1" />
-        <vers num="2.6.10" edition="rc2" />
-        <vers num="2.6.10" edition="rc3" />
-        <vers num="2.6.11" edition="rc1" />
-        <vers num="2.6.11" edition="rc2" />
-        <vers num="2.6.11" edition="rc3" />
-        <vers num="2.6.11" edition="rc4" />
-        <vers num="2.6.11" edition="rc5" />
-        <vers num="2.6.11.1" />
-        <vers num="2.6.11.10" />
-        <vers num="2.6.11.11" />
-        <vers num="2.6.11.12" />
-        <vers num="2.6.11.2" />
-        <vers num="2.6.11.3" />
-        <vers num="2.6.11.4" />
-        <vers num="2.6.11.5" />
-        <vers num="2.6.11.6" />
-        <vers num="2.6.11.7" />
-        <vers num="2.6.11.8" />
-        <vers num="2.6.11.9" />
-        <vers num="2.6.12" edition="rc1" />
-        <vers num="2.6.12" edition="rc2" />
-        <vers num="2.6.12" edition="rc3" />
-        <vers num="2.6.12" edition="rc4" />
-        <vers num="2.6.12" edition="rc5" />
-        <vers num="2.6.12" edition="rc6" />
-        <vers num="2.6.12.1" />
-        <vers num="2.6.12.2" />
-        <vers num="2.6.12.3" />
-        <vers num="2.6.12.4" />
-        <vers num="2.6.12.5" />
-        <vers num="2.6.12.6" />
-        <vers num="2.6.13" edition="rc1" />
-        <vers num="2.6.13" edition="rc2" />
-        <vers num="2.6.13" edition="rc3" />
-        <vers num="2.6.13" edition="rc4" />
-        <vers num="2.6.13" edition="rc5" />
-        <vers num="2.6.13" edition="rc6" />
-        <vers num="2.6.13" edition="rc7" />
-        <vers num="2.6.13.1" />
-        <vers num="2.6.13.2" />
-        <vers num="2.6.13.3" />
-        <vers num="2.6.13.4" />
-        <vers num="2.6.13.5" />
-        <vers num="2.6.14" edition="rc1" />
-        <vers num="2.6.14" edition="rc2" />
-        <vers num="2.6.14" edition="rc3" />
-        <vers num="2.6.14" edition="rc4" />
-        <vers num="2.6.14" edition="rc5" />
-        <vers num="2.6.14.1" />
-        <vers num="2.6.14.2" />
-        <vers num="2.6.14.3" />
-        <vers num="2.6.14.4" />
-        <vers num="2.6.14.5" />
-        <vers num="2.6.14.6" />
-        <vers num="2.6.14.7" />
-        <vers num="2.6.15" edition="rc1" />
-        <vers num="2.6.15" edition="rc2" />
-        <vers num="2.6.15" edition="rc3" />
-        <vers num="2.6.15" edition="rc4" />
-        <vers num="2.6.15" edition="rc5" />
-        <vers num="2.6.15" edition="rc6" />
-        <vers num="2.6.15" edition="rc7" />
-        <vers num="2.6.15.1" />
-        <vers num="2.6.15.10" />
-        <vers num="2.6.15.11" />
-        <vers num="2.6.15.2" />
-        <vers num="2.6.15.3" />
-        <vers num="2.6.15.4" />
-        <vers num="2.6.15.5" />
-        <vers num="2.6.15.6" />
-        <vers num="2.6.15.7" />
-        <vers num="2.6.15.8" />
-        <vers num="2.6.15.9" />
-        <vers num="2.6.16" edition="rc1" />
-        <vers num="2.6.16" edition="rc2" />
-        <vers num="2.6.16" edition="rc3" />
-        <vers num="2.6.16" edition="rc4" />
-        <vers num="2.6.16" edition="rc5" />
-        <vers num="2.6.16" edition="rc6" />
-        <vers num="2.6.16" edition="rc7" />
-        <vers num="2.6.16.1" />
-        <vers num="2.6.16.10" />
-        <vers num="2.6.16.11" />
-        <vers num="2.6.16.12" />
-        <vers num="2.6.16.13" />
-        <vers num="2.6.16.14" />
-        <vers num="2.6.16.15" />
-        <vers num="2.6.16.16" />
-        <vers num="2.6.16.17" />
-        <vers num="2.6.16.18" />
-        <vers num="2.6.16.19" />
-        <vers num="2.6.16.2" />
-        <vers num="2.6.16.20" />
-        <vers num="2.6.16.21" />
-        <vers num="2.6.16.22" />
-        <vers num="2.6.16.23" />
-        <vers num="2.6.16.24" />
-        <vers num="2.6.16.25" />
-        <vers num="2.6.16.26" />
-        <vers num="2.6.16.27" />
-        <vers num="2.6.16.28" />
-        <vers num="2.6.16.29" />
-        <vers num="2.6.16.3" />
-        <vers num="2.6.16.30" />
-        <vers num="2.6.16.31" />
-        <vers num="2.6.16.32" />
-        <vers num="2.6.16.33" />
-        <vers num="2.6.16.34" />
-        <vers num="2.6.16.35" />
-        <vers num="2.6.16.36" />
-        <vers num="2.6.16.37" />
-        <vers num="2.6.16.38" />
-        <vers num="2.6.16.39" />
-        <vers num="2.6.16.4" />
-        <vers num="2.6.16.40" />
-        <vers num="2.6.16.41" />
-        <vers num="2.6.16.42" />
-        <vers num="2.6.16.43" />
-        <vers num="2.6.16.44" />
-        <vers num="2.6.16.45" />
-        <vers num="2.6.16.46" />
-        <vers num="2.6.16.47" />
-        <vers num="2.6.16.48" />
-        <vers num="2.6.16.49" />
-        <vers num="2.6.16.5" />
-        <vers num="2.6.16.50" />
-        <vers num="2.6.16.51" />
-        <vers num="2.6.16.52" />
-        <vers num="2.6.16.53" />
-        <vers num="2.6.16.54" />
-        <vers num="2.6.16.55" />
-        <vers num="2.6.16.56" />
-        <vers num="2.6.16.57" />
-        <vers num="2.6.16.58" />
-        <vers num="2.6.16.59" />
-        <vers num="2.6.16.6" />
-        <vers num="2.6.16.60" />
-        <vers num="2.6.16.61" />
-        <vers num="2.6.16.62" />
-        <vers num="2.6.16.7" />
-        <vers num="2.6.16.8" />
-        <vers num="2.6.16.9" />
-        <vers num="2.6.17" edition="rc1" />
-        <vers num="2.6.17" edition="rc2" />
-        <vers num="2.6.17" edition="rc3" />
-        <vers num="2.6.17" edition="rc4" />
-        <vers num="2.6.17" edition="rc5" />
-        <vers num="2.6.17" edition="rc6" />
-        <vers num="2.6.17.1" />
-        <vers num="2.6.17.10" />
-        <vers num="2.6.17.11" />
-        <vers num="2.6.17.12" />
-        <vers num="2.6.17.13" />
-        <vers num="2.6.17.14" />
-        <vers num="2.6.17.2" />
-        <vers num="2.6.17.3" />
-        <vers num="2.6.17.4" />
-        <vers num="2.6.17.5" />
-        <vers num="2.6.17.6" />
-        <vers num="2.6.17.7" />
-        <vers num="2.6.17.8" />
-        <vers num="2.6.17.9" />
-        <vers num="2.6.18" edition="rc1" />
-        <vers num="2.6.18" edition="rc2" />
-        <vers num="2.6.18" edition="rc3" />
-        <vers num="2.6.18" edition="rc4" />
-        <vers num="2.6.18" edition="rc5" />
-        <vers num="2.6.18" edition="rc6" />
-        <vers num="2.6.18" edition="rc7" />
-        <vers num="2.6.18.1" />
-        <vers num="2.6.18.2" />
-        <vers num="2.6.18.3" />
-        <vers num="2.6.18.4" />
-        <vers num="2.6.18.5" />
-        <vers num="2.6.18.6" />
-        <vers num="2.6.18.7" />
-        <vers num="2.6.18.8" />
-        <vers num="2.6.19" edition="rc1" />
-        <vers num="2.6.19" edition="rc2" />
-        <vers num="2.6.19" edition="rc3" />
-        <vers num="2.6.19" edition="rc4" />
-        <vers num="2.6.19.1" />
-        <vers num="2.6.19.2" />
-        <vers num="2.6.19.3" />
-        <vers num="2.6.19.4" />
-        <vers num="2.6.19.5" />
-        <vers num="2.6.19.6" />
-        <vers num="2.6.19.7" />
-        <vers num="2.6.2" edition="rc1" />
-        <vers num="2.6.2" edition="rc2" />
-        <vers num="2.6.2" edition="rc3" />
-        <vers num="2.6.20" edition="rc2" />
-        <vers num="2.6.20.1" />
-        <vers num="2.6.20.10" />
-        <vers num="2.6.20.11" />
-        <vers num="2.6.20.12" />
-        <vers num="2.6.20.13" />
-        <vers num="2.6.20.14" />
-        <vers num="2.6.20.15" />
-        <vers num="2.6.20.16" />
-        <vers num="2.6.20.17" />
-        <vers num="2.6.20.18" />
-        <vers num="2.6.20.19" />
-        <vers num="2.6.20.2" />
-        <vers num="2.6.20.20" />
-        <vers num="2.6.20.21" />
-        <vers num="2.6.20.3" />
-        <vers num="2.6.20.4" />
-        <vers num="2.6.20.5" />
-        <vers num="2.6.20.6" />
-        <vers num="2.6.20.7" />
-        <vers num="2.6.20.8" />
-        <vers num="2.6.20.9" />
-        <vers num="2.6.21" edition="git1" />
-        <vers num="2.6.21" edition="git2" />
-        <vers num="2.6.21" edition="git3" />
-        <vers num="2.6.21" edition="git4" />
-        <vers num="2.6.21" edition="git5" />
-        <vers num="2.6.21" edition="git6" />
-        <vers num="2.6.21" edition="git7" />
-        <vers num="2.6.21" edition="rc3" />
-        <vers num="2.6.21" edition="rc4" />
-        <vers num="2.6.21" edition="rc5" />
-        <vers num="2.6.21" edition="rc6" />
-        <vers num="2.6.21" edition="rc7" />
-        <vers num="2.6.21.1" />
-        <vers num="2.6.21.2" />
-        <vers num="2.6.21.3" />
-        <vers num="2.6.21.4" />
-        <vers num="2.6.21.5" />
-        <vers num="2.6.21.6" />
-        <vers num="2.6.21.7" />
-        <vers num="2.6.22" />
-        <vers num="2.6.22.1" />
-        <vers num="2.6.22.10" />
-        <vers num="2.6.22.11" />
-        <vers num="2.6.22.12" />
-        <vers num="2.6.22.13" />
-        <vers num="2.6.22.14" />
-        <vers num="2.6.22.15" />
-        <vers num="2.6.22.16" />
-        <vers num="2.6.22.17" />
-        <vers num="2.6.22.18" />
-        <vers num="2.6.22.19" />
-        <vers num="2.6.22.2" />
-        <vers num="2.6.22.20" />
-        <vers num="2.6.22.3" />
-        <vers num="2.6.22.4" />
-        <vers num="2.6.22.5" />
-        <vers num="2.6.22.6" />
-        <vers num="2.6.22.7" />
-        <vers num="2.6.22.8" />
-        <vers num="2.6.27.41" />
-        <vers num="2.6.27.42" />
-        <vers num="2.6.27.43" />
-        <vers num="2.6.27.44" />
-        <vers num="2.6.27.45" />
-        <vers num="2.6.27.46" />
-        <vers num="2.6.27.47" />
-        <vers num="2.6.27.48" />
-        <vers num="2.6.27.49" />
-        <vers num="2.6.27.5" />
-        <vers num="2.6.27.50" />
-        <vers num="2.6.27.51" />
-        <vers num="2.6.27.52" />
-        <vers num="2.6.27.53" />
-        <vers num="2.6.27.54" />
-        <vers num="2.6.27.55" />
-        <vers num="2.6.27.56" />
-        <vers num="2.6.27.57" />
-        <vers num="2.6.27.58" />
-        <vers num="2.6.27.59" />
-        <vers num="2.6.27.6" />
-        <vers num="2.6.27.60" />
-        <vers num="2.6.27.61" />
-        <vers num="2.6.27.62" />
-        <vers num="2.6.27.7" />
-        <vers num="2.6.27.8" />
-        <vers num="2.6.27.9" />
-        <vers num="2.6.28" />
-        <vers num="2.6.28.1" />
-        <vers num="2.6.28.10" />
-        <vers num="2.6.28.2" />
-        <vers num="2.6.28.3" />
-        <vers num="2.6.28.4" />
-        <vers num="2.6.28.5" />
-        <vers num="2.6.28.6" />
-        <vers num="2.6.28.7" />
-        <vers num="2.6.28.8" />
-        <vers num="2.6.28.9" />
-        <vers num="2.6.29" />
-        <vers num="2.6.29.1" />
-        <vers num="2.6.29.2" />
-        <vers num="2.6.29.3" />
-        <vers num="2.6.29.4" />
-        <vers num="2.6.29.5" />
-        <vers num="2.6.29.6" />
-        <vers num="2.6.3" edition="rc1" />
-        <vers num="2.6.3" edition="rc2" />
-        <vers num="2.6.3" edition="rc3" />
-        <vers num="2.6.3" edition="rc4" />
-        <vers num="2.6.32" />
-        <vers num="2.6.32.1" />
-        <vers num="2.6.32.10" />
-        <vers num="2.6.32.11" />
-        <vers num="2.6.32.12" />
-        <vers num="2.6.32.13" />
-        <vers num="2.6.32.14" />
-        <vers num="2.6.32.15" />
-        <vers num="2.6.32.16" />
-        <vers num="2.6.32.17" />
-        <vers num="2.6.32.18" />
-        <vers num="2.6.32.2" />
-        <vers num="2.6.32.28" />
-        <vers num="2.6.32.29" />
-        <vers num="2.6.32.3" />
-        <vers num="2.6.32.30" />
-        <vers num="2.6.32.31" />
-        <vers num="2.6.32.32" />
-        <vers num="2.6.32.33" />
-        <vers num="2.6.32.34" />
-        <vers num="2.6.32.35" />
-        <vers num="2.6.32.36" />
-        <vers num="2.6.32.37" />
-        <vers num="2.6.32.38" />
-        <vers num="2.6.32.39" />
-        <vers num="2.6.32.4" />
-        <vers num="2.6.32.40" />
-        <vers num="2.6.32.41" />
-        <vers num="2.6.32.42" />
-        <vers num="2.6.32.43" />
-        <vers num="2.6.32.44" />
-        <vers num="2.6.32.45" />
-        <vers num="2.6.32.46" />
-        <vers num="2.6.32.47" />
-        <vers num="2.6.32.48" />
-        <vers num="2.6.32.49" />
-        <vers num="2.6.32.5" />
-        <vers num="2.6.32.50" />
-        <vers num="2.6.32.51" />
-        <vers num="2.6.32.52" />
-        <vers num="2.6.32.53" />
-        <vers num="2.6.32.54" />
-        <vers num="2.6.32.55" />
-        <vers num="2.6.32.56" />
-        <vers num="2.6.32.57" />
-        <vers num="2.6.32.58" />
-        <vers num="2.6.32.6" />
-        <vers num="2.6.32.7" />
-        <vers num="2.6.32.8" />
-        <vers num="2.6.32.9" />
-        <vers num="2.6.33.10" />
-        <vers num="2.6.33.11" />
-        <vers num="2.6.33.12" />
-        <vers num="2.6.33.13" />
-        <vers num="2.6.33.14" />
-        <vers num="2.6.33.15" />
-        <vers num="2.6.33.16" />
-        <vers num="2.6.33.17" />
-        <vers num="2.6.33.18" />
-        <vers num="2.6.33.19" />
-        <vers num="2.6.33.20" />
-        <vers num="2.6.33.8" />
-        <vers num="2.6.33.9" />
-        <vers num="2.6.34.1" />
-        <vers num="2.6.34.10" />
-        <vers num="2.6.34.2" />
-        <vers num="2.6.34.3" />
-        <vers num="2.6.34.8" />
-        <vers num="2.6.34.9" />
-        <vers num="2.6.35.1" />
-        <vers num="2.6.35.10" />
-        <vers num="2.6.35.11" />
-        <vers num="2.6.35.12" />
-        <vers num="2.6.35.13" />
-        <vers num="2.6.37" edition="rc1" />
-        <vers num="2.6.37" edition="rc2" />
-        <vers num="2.6.37" edition="rc3" />
-        <vers num="2.6.37" edition="rc4" />
-        <vers num="2.6.37" edition="rc5" />
-        <vers num="2.6.38" edition="rc1" />
-        <vers num="2.6.38" edition="rc2" />
-        <vers num="2.6.38" edition="rc3" />
-        <vers num="2.6.38" edition="rc4" />
-        <vers num="2.6.38" edition="rc5" />
-        <vers num="2.6.38" edition="rc6" />
-        <vers num="2.6.38" edition="rc7" />
-        <vers num="2.6.38" edition="rc8" />
-        <vers num="2.6.39" edition="rc1" />
-        <vers num="2.6.39" edition="rc2" />
-        <vers num="2.6.39" edition="rc3" />
-        <vers num="2.6.39" edition="rc4" />
-        <vers num="2.6.39" edition="rc5" />
-        <vers num="2.6.39" edition="rc6" />
-        <vers num="2.6.39" edition="rc7" />
-        <vers num="2.6.4" edition="rc1" />
-        <vers num="2.6.4" edition="rc2" />
-        <vers num="2.6.4" edition="rc3" />
-        <vers num="2.6.5" edition="rc1" />
-        <vers num="2.6.5" edition="rc2" />
-        <vers num="2.6.5" edition="rc3" />
-        <vers num="2.6.6" edition="rc1" />
-        <vers num="2.6.6" edition="rc2" />
-        <vers num="2.6.6" edition="rc3" />
-        <vers num="2.6.7" edition="rc1" />
-        <vers num="2.6.7" edition="rc2" />
-        <vers num="2.6.7" edition="rc3" />
-        <vers num="2.6.8" edition="rc1" />
-        <vers num="2.6.8" edition="rc2" />
-        <vers num="2.6.8" edition="rc3" />
-        <vers num="2.6.8" edition="rc4" />
-        <vers num="2.6.8.1" />
-        <vers num="2.6.9" edition="rc1" />
-        <vers num="2.6.9" edition="rc2" />
-        <vers num="2.6.9" edition="rc3" />
-        <vers num="2.6.9" edition="rc4" />
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0" edition="rc2" />
-        <vers num="3.0" edition="rc3" />
-        <vers num="3.0" edition="rc4" />
-        <vers num="3.0" edition="rc5" />
-        <vers num="3.0" edition="rc6" />
-        <vers num="3.0" edition="rc7" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.19" />
-        <vers num="3.0.20" />
-        <vers num="3.0.21" />
-        <vers num="3.0.22" />
-        <vers num="3.0.23" />
-        <vers num="3.0.24" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.2" edition="rc2" />
-        <vers num="3.2" edition="rc3" />
-        <vers num="3.2" edition="rc4" />
-        <vers num="3.2" edition="rc5" />
-        <vers num="3.2" edition="rc6" />
-        <vers num="3.2" edition="rc7" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" />
-        <vers num="3.2.8" />
-        <vers prev="1" num="3.2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-1091" reject="1" published="2012-02-29" name="CVE-2012-1091" modified="2012-02-29">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-1410.  Reason: This candidate is a reservation duplicate of CVE-2012-1410.  Notes: All CVE users should reference CVE-2012-1410 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" seq="2012-1092" reject="1" published="2012-02-29" name="CVE-2012-1092" modified="2012-02-29">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-1410.  Reason: This candidate is a reservation duplicate of CVE-2012-1410.  Notes: All CVE users should reference CVE-2012-1410 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1097" published="2012-05-17" name="CVE-2012-1097" modified="2012-05-17" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a (1) PTRACE_GETREGSET or (2) PTRACE_SETREGSET ptrace call.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/c8e252586f8d5de906385d8cf6385fee289a825e" source="CONFIRM">https://github.com/torvalds/linux/commit/c8e252586f8d5de906385d8cf6385fee289a825e</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=799209" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=799209</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/05/1" source="MLIST">[oss-security] 20120305 CVE-2012-1097 kernel: regset: Prevent null pointer reference on readonly regsets</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c8e252586f8d5de906385d8cf6385fee289a825e" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c8e252586f8d5de906385d8cf6385fee289a825e</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="1.2.0" />
-        <vers num="1.3.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.15" />
-        <vers num="2.0.16" />
-        <vers num="2.0.17" />
-        <vers num="2.0.18" />
-        <vers num="2.0.19" />
-        <vers num="2.0.2" />
-        <vers num="2.0.20" />
-        <vers num="2.0.21" />
-        <vers num="2.0.22" />
-        <vers num="2.0.23" />
-        <vers num="2.0.24" />
-        <vers num="2.0.25" />
-        <vers num="2.0.26" />
-        <vers num="2.0.27" />
-        <vers num="2.0.28" />
-        <vers num="2.0.29" />
-        <vers num="2.0.3" />
-        <vers num="2.0.30" />
-        <vers num="2.0.31" />
-        <vers num="2.0.32" />
-        <vers num="2.0.33" />
-        <vers num="2.0.34" />
-        <vers num="2.0.35" />
-        <vers num="2.0.36" />
-        <vers num="2.0.37" />
-        <vers num="2.0.38" />
-        <vers num="2.0.39" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1.132" />
-        <vers num="2.1.89" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.10" />
-        <vers num="2.2.11" />
-        <vers num="2.2.12" />
-        <vers num="2.2.13" edition="pre15" />
-        <vers num="2.2.14" />
-        <vers num="2.2.15" edition="pre16" />
-        <vers num="2.2.16" edition="pre5" />
-        <vers num="2.2.16" edition="pre6" />
-        <vers num="2.2.17" edition="pre14" />
-        <vers num="2.2.18" />
-        <vers num="2.2.19" />
-        <vers num="2.2.2" />
-        <vers num="2.2.20" />
-        <vers num="2.2.21" edition="pre1" />
-        <vers num="2.2.21" edition="pre2" />
-        <vers num="2.2.21" edition="pre3" />
-        <vers num="2.2.21" edition="pre4" />
-        <vers num="2.2.21" edition="rc1" />
-        <vers num="2.2.21" edition="rc2" />
-        <vers num="2.2.21" edition="rc3" />
-        <vers num="2.2.21" edition="rc4" />
-        <vers num="2.2.22" edition="rc1" />
-        <vers num="2.2.22" edition="rc2" />
-        <vers num="2.2.22" edition="rc3" />
-        <vers num="2.2.23" edition="rc1" />
-        <vers num="2.2.23" edition="rc2" />
-        <vers num="2.2.24" edition="rc2" />
-        <vers num="2.2.24" edition="rc3" />
-        <vers num="2.2.24" edition="rc4" />
-        <vers num="2.2.24" edition="rc5" />
-        <vers num="2.2.25" />
-        <vers num="2.2.26" />
-        <vers num="2.2.27" edition="pre1" />
-        <vers num="2.2.27" edition="pre2" />
-        <vers num="2.2.27" edition="rc1" />
-        <vers num="2.2.27" edition="rc2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" edition="rc1" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.13" />
-        <vers num="2.3.14" />
-        <vers num="2.3.15" />
-        <vers num="2.3.16" />
-        <vers num="2.3.17" />
-        <vers num="2.3.18" />
-        <vers num="2.3.19" />
-        <vers num="2.3.2" />
-        <vers num="2.3.20" />
-        <vers num="2.3.21" />
-        <vers num="2.3.22" />
-        <vers num="2.3.23" />
-        <vers num="2.3.24" />
-        <vers num="2.3.25" />
-        <vers num="2.3.26" />
-        <vers num="2.3.27" />
-        <vers num="2.3.28" />
-        <vers num="2.3.29" />
-        <vers num="2.3.3" />
-        <vers num="2.3.30" />
-        <vers num="2.3.31" />
-        <vers num="2.3.32" />
-        <vers num="2.3.33" />
-        <vers num="2.3.34" />
-        <vers num="2.3.35" />
-        <vers num="2.3.36" />
-        <vers num="2.3.37" />
-        <vers num="2.3.38" />
-        <vers num="2.3.39" />
-        <vers num="2.3.4" />
-        <vers num="2.3.40" />
-        <vers num="2.3.41" />
-        <vers num="2.3.42" />
-        <vers num="2.3.43" />
-        <vers num="2.3.44" />
-        <vers num="2.3.45" />
-        <vers num="2.3.46" />
-        <vers num="2.3.47" />
-        <vers num="2.3.48" />
-        <vers num="2.3.49" />
-        <vers num="2.3.5" />
-        <vers num="2.3.50" />
-        <vers num="2.3.51" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.3.99" edition="pre1" />
-        <vers num="2.3.99" edition="pre2" />
-        <vers num="2.3.99" edition="pre3" />
-        <vers num="2.3.99" edition="pre4" />
-        <vers num="2.3.99" edition="pre5" />
-        <vers num="2.3.99" edition="pre6" />
-        <vers num="2.3.99" edition="pre7" />
-        <vers num="2.3.99" edition="pre8" />
-        <vers num="2.3.99" edition="pre9" />
-        <vers num="2.4.0" edition="test1" />
-        <vers num="2.4.0" edition="test10" />
-        <vers num="2.4.0" edition="test11" />
-        <vers num="2.4.0" edition="test12" />
-        <vers num="2.4.0" edition="test2" />
-        <vers num="2.4.0" edition="test3" />
-        <vers num="2.4.0" edition="test4" />
-        <vers num="2.4.0" edition="test5" />
-        <vers num="2.4.0" edition="test6" />
-        <vers num="2.4.0" edition="test7" />
-        <vers num="2.4.0" edition="test8" />
-        <vers num="2.4.0" edition="test9" />
-        <vers num="2.4.1" />
-        <vers num="2.4.10" />
-        <vers num="2.4.11" edition="pre3" />
-        <vers num="2.4.12" />
-        <vers num="2.4.13" />
-        <vers num="2.4.14" />
-        <vers num="2.4.15" />
-        <vers num="2.4.16" />
-        <vers num="2.4.17" />
-        <vers num="2.4.18" edition="pre1" />
-        <vers num="2.4.18" edition="pre2" />
-        <vers num="2.4.18" edition="pre3" />
-        <vers num="2.4.18" edition="pre4" />
-        <vers num="2.4.18" edition="pre5" />
-        <vers num="2.4.18" edition="pre6" />
-        <vers num="2.4.18" edition="pre7" />
-        <vers num="2.4.18" edition="pre8" />
-        <vers num="2.4.18" edition="pre9" />
-        <vers num="2.4.19" edition="pre1" />
-        <vers num="2.4.19" edition="pre2" />
-        <vers num="2.4.19" edition="pre3" />
-        <vers num="2.4.19" edition="pre4" />
-        <vers num="2.4.19" edition="pre5" />
-        <vers num="2.4.19" edition="pre6" />
-        <vers num="2.4.2" />
-        <vers num="2.4.20" />
-        <vers num="2.4.21" edition="pre1" />
-        <vers num="2.4.21" edition="pre4" />
-        <vers num="2.4.21" edition="pre7" />
-        <vers num="2.4.22" edition="pre10" />
-        <vers num="2.4.23" edition="pre9" />
-        <vers num="2.4.24" />
-        <vers num="2.4.25" />
-        <vers num="2.4.26" />
-        <vers num="2.4.27" edition="pre1" />
-        <vers num="2.4.27" edition="pre2" />
-        <vers num="2.4.27" edition="pre3" />
-        <vers num="2.4.27" edition="pre4" />
-        <vers num="2.4.27" edition="pre5" />
-        <vers num="2.4.28" />
-        <vers num="2.4.29" edition="rc1" />
-        <vers num="2.4.29" edition="rc2" />
-        <vers num="2.4.3" edition="pre3" />
-        <vers num="2.4.30" edition="rc2" />
-        <vers num="2.4.30" edition="rc3" />
-        <vers num="2.4.31" edition="pre1" />
-        <vers num="2.4.32" edition="pre1" />
-        <vers num="2.4.32" edition="pre2" />
-        <vers num="2.4.33" edition="pre1" />
-        <vers num="2.4.33.2" />
-        <vers num="2.4.33.3" />
-        <vers num="2.4.33.4" />
-        <vers num="2.4.33.5" />
-        <vers num="2.4.34" edition="rc3" />
-        <vers num="2.4.34.1" />
-        <vers num="2.4.34.2" />
-        <vers num="2.4.35" />
-        <vers num="2.4.35.2" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers num="2.4.8" />
-        <vers num="2.4.9" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.10" />
-        <vers num="2.5.11" />
-        <vers num="2.5.12" />
-        <vers num="2.5.13" />
-        <vers num="2.5.14" />
-        <vers num="2.5.15" />
-        <vers num="2.5.16" />
-        <vers num="2.5.17" />
-        <vers num="2.5.18" />
-        <vers num="2.5.19" />
-        <vers num="2.5.2" />
-        <vers num="2.5.20" />
-        <vers num="2.5.21" />
-        <vers num="2.5.22" />
-        <vers num="2.5.23" />
-        <vers num="2.5.24" />
-        <vers num="2.5.25" />
-        <vers num="2.5.26" />
-        <vers num="2.5.27" />
-        <vers num="2.5.28" />
-        <vers num="2.5.29" />
-        <vers num="2.5.3" />
-        <vers num="2.5.30" />
-        <vers num="2.5.31" />
-        <vers num="2.5.32" />
-        <vers num="2.5.33" />
-        <vers num="2.5.34" />
-        <vers num="2.5.35" />
-        <vers num="2.5.36" />
-        <vers num="2.5.37" />
-        <vers num="2.5.38" />
-        <vers num="2.5.39" />
-        <vers num="2.5.4" />
-        <vers num="2.5.40" />
-        <vers num="2.5.41" />
-        <vers num="2.5.42" />
-        <vers num="2.5.43" />
-        <vers num="2.5.44" />
-        <vers num="2.5.45" />
-        <vers num="2.5.46" />
-        <vers num="2.5.47" />
-        <vers num="2.5.48" />
-        <vers num="2.5.49" />
-        <vers num="2.5.5" />
-        <vers num="2.5.50" />
-        <vers num="2.5.51" />
-        <vers num="2.5.52" />
-        <vers num="2.5.53" />
-        <vers num="2.5.54" />
-        <vers num="2.5.55" />
-        <vers num="2.5.56" />
-        <vers num="2.5.57" />
-        <vers num="2.5.58" />
-        <vers num="2.5.59" />
-        <vers num="2.5.6" />
-        <vers num="2.5.60" />
-        <vers num="2.5.61" />
-        <vers num="2.5.62" />
-        <vers num="2.5.63" />
-        <vers num="2.5.64" />
-        <vers num="2.5.65" />
-        <vers num="2.5.66" />
-        <vers num="2.5.67" />
-        <vers num="2.5.68" />
-        <vers num="2.5.69" />
-        <vers num="2.5.7" />
-        <vers num="2.5.8" />
-        <vers num="2.5.9" />
-        <vers num="2.6.0" edition="test1" />
-        <vers num="2.6.0" edition="test10" />
-        <vers num="2.6.0" edition="test11" />
-        <vers num="2.6.0" edition="test2" />
-        <vers num="2.6.0" edition="test3" />
-        <vers num="2.6.0" edition="test4" />
-        <vers num="2.6.0" edition="test5" />
-        <vers num="2.6.0" edition="test6" />
-        <vers num="2.6.0" edition="test7" />
-        <vers num="2.6.0" edition="test8" />
-        <vers num="2.6.0" edition="test9" />
-        <vers num="2.6.1" edition="rc1" />
-        <vers num="2.6.1" edition="rc2" />
-        <vers num="2.6.1" edition="rc3" />
-        <vers num="2.6.10" edition="rc1" />
-        <vers num="2.6.10" edition="rc2" />
-        <vers num="2.6.10" edition="rc3" />
-        <vers num="2.6.11" edition="rc1" />
-        <vers num="2.6.11" edition="rc2" />
-        <vers num="2.6.11" edition="rc3" />
-        <vers num="2.6.11" edition="rc4" />
-        <vers num="2.6.11" edition="rc5" />
-        <vers num="2.6.11.1" />
-        <vers num="2.6.11.10" />
-        <vers num="2.6.11.11" />
-        <vers num="2.6.11.12" />
-        <vers num="2.6.11.2" />
-        <vers num="2.6.11.3" />
-        <vers num="2.6.11.4" />
-        <vers num="2.6.11.5" />
-        <vers num="2.6.11.6" />
-        <vers num="2.6.11.7" />
-        <vers num="2.6.11.8" />
-        <vers num="2.6.11.9" />
-        <vers num="2.6.12" edition="rc1" />
-        <vers num="2.6.12" edition="rc2" />
-        <vers num="2.6.12" edition="rc3" />
-        <vers num="2.6.12" edition="rc4" />
-        <vers num="2.6.12" edition="rc5" />
-        <vers num="2.6.12" edition="rc6" />
-        <vers num="2.6.12.1" />
-        <vers num="2.6.12.2" />
-        <vers num="2.6.12.3" />
-        <vers num="2.6.12.4" />
-        <vers num="2.6.12.5" />
-        <vers num="2.6.12.6" />
-        <vers num="2.6.13" edition="rc1" />
-        <vers num="2.6.13" edition="rc2" />
-        <vers num="2.6.13" edition="rc3" />
-        <vers num="2.6.13" edition="rc4" />
-        <vers num="2.6.13" edition="rc5" />
-        <vers num="2.6.13" edition="rc6" />
-        <vers num="2.6.13" edition="rc7" />
-        <vers num="2.6.13.1" />
-        <vers num="2.6.13.2" />
-        <vers num="2.6.13.3" />
-        <vers num="2.6.13.4" />
-        <vers num="2.6.13.5" />
-        <vers num="2.6.14" edition="rc1" />
-        <vers num="2.6.14" edition="rc2" />
-        <vers num="2.6.14" edition="rc3" />
-        <vers num="2.6.14" edition="rc4" />
-        <vers num="2.6.14" edition="rc5" />
-        <vers num="2.6.14.1" />
-        <vers num="2.6.14.2" />
-        <vers num="2.6.14.3" />
-        <vers num="2.6.14.4" />
-        <vers num="2.6.14.5" />
-        <vers num="2.6.14.6" />
-        <vers num="2.6.14.7" />
-        <vers num="2.6.15" edition="rc1" />
-        <vers num="2.6.15" edition="rc2" />
-        <vers num="2.6.15" edition="rc3" />
-        <vers num="2.6.15" edition="rc4" />
-        <vers num="2.6.15" edition="rc5" />
-        <vers num="2.6.15" edition="rc6" />
-        <vers num="2.6.15" edition="rc7" />
-        <vers num="2.6.15.1" />
-        <vers num="2.6.15.10" />
-        <vers num="2.6.15.11" />
-        <vers num="2.6.15.2" />
-        <vers num="2.6.15.3" />
-        <vers num="2.6.15.4" />
-        <vers num="2.6.15.5" />
-        <vers num="2.6.15.6" />
-        <vers num="2.6.15.7" />
-        <vers num="2.6.15.8" />
-        <vers num="2.6.15.9" />
-        <vers num="2.6.16" edition="rc1" />
-        <vers num="2.6.16" edition="rc2" />
-        <vers num="2.6.16" edition="rc3" />
-        <vers num="2.6.16" edition="rc4" />
-        <vers num="2.6.16" edition="rc5" />
-        <vers num="2.6.16" edition="rc6" />
-        <vers num="2.6.16" edition="rc7" />
-        <vers num="2.6.16.1" />
-        <vers num="2.6.16.10" />
-        <vers num="2.6.16.11" />
-        <vers num="2.6.16.12" />
-        <vers num="2.6.16.13" />
-        <vers num="2.6.16.14" />
-        <vers num="2.6.16.15" />
-        <vers num="2.6.16.16" />
-        <vers num="2.6.16.17" />
-        <vers num="2.6.16.18" />
-        <vers num="2.6.16.19" />
-        <vers num="2.6.16.2" />
-        <vers num="2.6.16.20" />
-        <vers num="2.6.16.21" />
-        <vers num="2.6.16.22" />
-        <vers num="2.6.16.23" />
-        <vers num="2.6.16.24" />
-        <vers num="2.6.16.25" />
-        <vers num="2.6.16.26" />
-        <vers num="2.6.16.27" />
-        <vers num="2.6.16.28" />
-        <vers num="2.6.16.29" />
-        <vers num="2.6.16.3" />
-        <vers num="2.6.16.30" />
-        <vers num="2.6.16.31" />
-        <vers num="2.6.16.32" />
-        <vers num="2.6.16.33" />
-        <vers num="2.6.16.34" />
-        <vers num="2.6.16.35" />
-        <vers num="2.6.16.36" />
-        <vers num="2.6.16.37" />
-        <vers num="2.6.16.38" />
-        <vers num="2.6.16.39" />
-        <vers num="2.6.16.4" />
-        <vers num="2.6.16.40" />
-        <vers num="2.6.16.41" />
-        <vers num="2.6.16.42" />
-        <vers num="2.6.16.43" />
-        <vers num="2.6.16.44" />
-        <vers num="2.6.16.45" />
-        <vers num="2.6.16.46" />
-        <vers num="2.6.16.47" />
-        <vers num="2.6.16.48" />
-        <vers num="2.6.16.49" />
-        <vers num="2.6.16.5" />
-        <vers num="2.6.16.50" />
-        <vers num="2.6.16.51" />
-        <vers num="2.6.16.52" />
-        <vers num="2.6.16.53" />
-        <vers num="2.6.16.54" />
-        <vers num="2.6.16.55" />
-        <vers num="2.6.16.56" />
-        <vers num="2.6.16.57" />
-        <vers num="2.6.16.58" />
-        <vers num="2.6.16.59" />
-        <vers num="2.6.16.6" />
-        <vers num="2.6.16.60" />
-        <vers num="2.6.16.61" />
-        <vers num="2.6.16.62" />
-        <vers num="2.6.16.7" />
-        <vers num="2.6.16.8" />
-        <vers num="2.6.16.9" />
-        <vers num="2.6.17" edition="rc1" />
-        <vers num="2.6.17" edition="rc2" />
-        <vers num="2.6.17" edition="rc3" />
-        <vers num="2.6.17" edition="rc4" />
-        <vers num="2.6.17" edition="rc5" />
-        <vers num="2.6.17" edition="rc6" />
-        <vers num="2.6.17.1" />
-        <vers num="2.6.17.10" />
-        <vers num="2.6.17.11" />
-        <vers num="2.6.17.12" />
-        <vers num="2.6.17.13" />
-        <vers num="2.6.17.14" />
-        <vers num="2.6.17.2" />
-        <vers num="2.6.17.3" />
-        <vers num="2.6.17.4" />
-        <vers num="2.6.17.5" />
-        <vers num="2.6.17.6" />
-        <vers num="2.6.17.7" />
-        <vers num="2.6.17.8" />
-        <vers num="2.6.17.9" />
-        <vers num="2.6.18" edition="rc1" />
-        <vers num="2.6.18" edition="rc2" />
-        <vers num="2.6.18" edition="rc3" />
-        <vers num="2.6.18" edition="rc4" />
-        <vers num="2.6.18" edition="rc5" />
-        <vers num="2.6.18" edition="rc6" />
-        <vers num="2.6.18" edition="rc7" />
-        <vers num="2.6.18.1" />
-        <vers num="2.6.18.2" />
-        <vers num="2.6.18.3" />
-        <vers num="2.6.18.4" />
-        <vers num="2.6.18.5" />
-        <vers num="2.6.18.6" />
-        <vers num="2.6.18.7" />
-        <vers num="2.6.18.8" />
-        <vers num="2.6.19" edition="rc1" />
-        <vers num="2.6.19" edition="rc2" />
-        <vers num="2.6.19" edition="rc3" />
-        <vers num="2.6.19" edition="rc4" />
-        <vers num="2.6.19.1" />
-        <vers num="2.6.19.2" />
-        <vers num="2.6.19.3" />
-        <vers num="2.6.19.4" />
-        <vers num="2.6.19.5" />
-        <vers num="2.6.19.6" />
-        <vers num="2.6.19.7" />
-        <vers num="2.6.2" edition="rc1" />
-        <vers num="2.6.2" edition="rc2" />
-        <vers num="2.6.2" edition="rc3" />
-        <vers num="2.6.20" edition="rc2" />
-        <vers num="2.6.20.1" />
-        <vers num="2.6.20.10" />
-        <vers num="2.6.20.11" />
-        <vers num="2.6.20.12" />
-        <vers num="2.6.20.13" />
-        <vers num="2.6.20.14" />
-        <vers num="2.6.20.15" />
-        <vers num="2.6.20.16" />
-        <vers num="2.6.20.17" />
-        <vers num="2.6.20.18" />
-        <vers num="2.6.20.19" />
-        <vers num="2.6.20.2" />
-        <vers num="2.6.20.20" />
-        <vers num="2.6.20.21" />
-        <vers num="2.6.20.3" />
-        <vers num="2.6.20.4" />
-        <vers num="2.6.20.5" />
-        <vers num="2.6.20.6" />
-        <vers num="2.6.20.7" />
-        <vers num="2.6.20.8" />
-        <vers num="2.6.20.9" />
-        <vers num="2.6.21" edition="git1" />
-        <vers num="2.6.21" edition="git2" />
-        <vers num="2.6.21" edition="git3" />
-        <vers num="2.6.21" edition="git4" />
-        <vers num="2.6.21" edition="git5" />
-        <vers num="2.6.21" edition="git6" />
-        <vers num="2.6.21" edition="git7" />
-        <vers num="2.6.21" edition="rc3" />
-        <vers num="2.6.21" edition="rc4" />
-        <vers num="2.6.21" edition="rc5" />
-        <vers num="2.6.21" edition="rc6" />
-        <vers num="2.6.21" edition="rc7" />
-        <vers num="2.6.21.1" />
-        <vers num="2.6.21.2" />
-        <vers num="2.6.21.3" />
-        <vers num="2.6.21.4" />
-        <vers num="2.6.21.5" />
-        <vers num="2.6.21.6" />
-        <vers num="2.6.21.7" />
-        <vers num="2.6.22" />
-        <vers num="2.6.22.1" />
-        <vers num="2.6.22.10" />
-        <vers num="2.6.22.11" />
-        <vers num="2.6.22.12" />
-        <vers num="2.6.22.13" />
-        <vers num="2.6.22.14" />
-        <vers num="2.6.22.15" />
-        <vers num="2.6.22.16" />
-        <vers num="2.6.22.17" />
-        <vers num="2.6.22.18" />
-        <vers num="2.6.22.19" />
-        <vers num="2.6.22.2" />
-        <vers num="2.6.22.20" />
-        <vers num="2.6.22.3" />
-        <vers num="2.6.22.4" />
-        <vers num="2.6.22.5" />
-        <vers num="2.6.22.6" />
-        <vers num="2.6.22.7" />
-        <vers num="2.6.22.8" />
-        <vers num="2.6.27.41" />
-        <vers num="2.6.27.42" />
-        <vers num="2.6.27.43" />
-        <vers num="2.6.27.44" />
-        <vers num="2.6.27.45" />
-        <vers num="2.6.27.46" />
-        <vers num="2.6.27.47" />
-        <vers num="2.6.27.48" />
-        <vers num="2.6.27.49" />
-        <vers num="2.6.27.5" />
-        <vers num="2.6.27.50" />
-        <vers num="2.6.27.51" />
-        <vers num="2.6.27.52" />
-        <vers num="2.6.27.53" />
-        <vers num="2.6.27.54" />
-        <vers num="2.6.27.55" />
-        <vers num="2.6.27.56" />
-        <vers num="2.6.27.57" />
-        <vers num="2.6.27.58" />
-        <vers num="2.6.27.59" />
-        <vers num="2.6.27.6" />
-        <vers num="2.6.27.60" />
-        <vers num="2.6.27.61" />
-        <vers num="2.6.27.62" />
-        <vers num="2.6.27.7" />
-        <vers num="2.6.27.8" />
-        <vers num="2.6.27.9" />
-        <vers num="2.6.28" />
-        <vers num="2.6.28.1" />
-        <vers num="2.6.28.10" />
-        <vers num="2.6.28.2" />
-        <vers num="2.6.28.3" />
-        <vers num="2.6.28.4" />
-        <vers num="2.6.28.5" />
-        <vers num="2.6.28.6" />
-        <vers num="2.6.28.7" />
-        <vers num="2.6.28.8" />
-        <vers num="2.6.28.9" />
-        <vers num="2.6.29" />
-        <vers num="2.6.29.1" />
-        <vers num="2.6.29.2" />
-        <vers num="2.6.29.3" />
-        <vers num="2.6.29.4" />
-        <vers num="2.6.29.5" />
-        <vers num="2.6.29.6" />
-        <vers num="2.6.3" edition="rc1" />
-        <vers num="2.6.3" edition="rc2" />
-        <vers num="2.6.3" edition="rc3" />
-        <vers num="2.6.3" edition="rc4" />
-        <vers num="2.6.32" />
-        <vers num="2.6.32.1" />
-        <vers num="2.6.32.10" />
-        <vers num="2.6.32.11" />
-        <vers num="2.6.32.12" />
-        <vers num="2.6.32.13" />
-        <vers num="2.6.32.14" />
-        <vers num="2.6.32.15" />
-        <vers num="2.6.32.16" />
-        <vers num="2.6.32.17" />
-        <vers num="2.6.32.18" />
-        <vers num="2.6.32.2" />
-        <vers num="2.6.32.28" />
-        <vers num="2.6.32.29" />
-        <vers num="2.6.32.3" />
-        <vers num="2.6.32.30" />
-        <vers num="2.6.32.31" />
-        <vers num="2.6.32.32" />
-        <vers num="2.6.32.33" />
-        <vers num="2.6.32.34" />
-        <vers num="2.6.32.35" />
-        <vers num="2.6.32.36" />
-        <vers num="2.6.32.37" />
-        <vers num="2.6.32.38" />
-        <vers num="2.6.32.39" />
-        <vers num="2.6.32.4" />
-        <vers num="2.6.32.40" />
-        <vers num="2.6.32.41" />
-        <vers num="2.6.32.42" />
-        <vers num="2.6.32.43" />
-        <vers num="2.6.32.44" />
-        <vers num="2.6.32.45" />
-        <vers num="2.6.32.46" />
-        <vers num="2.6.32.47" />
-        <vers num="2.6.32.48" />
-        <vers num="2.6.32.49" />
-        <vers num="2.6.32.5" />
-        <vers num="2.6.32.50" />
-        <vers num="2.6.32.51" />
-        <vers num="2.6.32.52" />
-        <vers num="2.6.32.53" />
-        <vers num="2.6.32.54" />
-        <vers num="2.6.32.55" />
-        <vers num="2.6.32.56" />
-        <vers num="2.6.32.57" />
-        <vers num="2.6.32.58" />
-        <vers num="2.6.32.6" />
-        <vers num="2.6.32.7" />
-        <vers num="2.6.32.8" />
-        <vers num="2.6.32.9" />
-        <vers num="2.6.33.10" />
-        <vers num="2.6.33.11" />
-        <vers num="2.6.33.12" />
-        <vers num="2.6.33.13" />
-        <vers num="2.6.33.14" />
-        <vers num="2.6.33.15" />
-        <vers num="2.6.33.16" />
-        <vers num="2.6.33.17" />
-        <vers num="2.6.33.18" />
-        <vers num="2.6.33.19" />
-        <vers num="2.6.33.20" />
-        <vers num="2.6.33.8" />
-        <vers num="2.6.33.9" />
-        <vers num="2.6.34.1" />
-        <vers num="2.6.34.10" />
-        <vers num="2.6.34.2" />
-        <vers num="2.6.34.3" />
-        <vers num="2.6.34.8" />
-        <vers num="2.6.34.9" />
-        <vers num="2.6.35.1" />
-        <vers num="2.6.35.10" />
-        <vers num="2.6.35.11" />
-        <vers num="2.6.35.12" />
-        <vers num="2.6.35.13" />
-        <vers num="2.6.37" edition="rc1" />
-        <vers num="2.6.37" edition="rc2" />
-        <vers num="2.6.37" edition="rc3" />
-        <vers num="2.6.37" edition="rc4" />
-        <vers num="2.6.37" edition="rc5" />
-        <vers num="2.6.38" edition="rc1" />
-        <vers num="2.6.38" edition="rc2" />
-        <vers num="2.6.38" edition="rc3" />
-        <vers num="2.6.38" edition="rc4" />
-        <vers num="2.6.38" edition="rc5" />
-        <vers num="2.6.38" edition="rc6" />
-        <vers num="2.6.38" edition="rc7" />
-        <vers num="2.6.38" edition="rc8" />
-        <vers num="2.6.39" edition="rc1" />
-        <vers num="2.6.39" edition="rc2" />
-        <vers num="2.6.39" edition="rc3" />
-        <vers num="2.6.39" edition="rc4" />
-        <vers num="2.6.39" edition="rc5" />
-        <vers num="2.6.39" edition="rc6" />
-        <vers num="2.6.39" edition="rc7" />
-        <vers num="2.6.4" edition="rc1" />
-        <vers num="2.6.4" edition="rc2" />
-        <vers num="2.6.4" edition="rc3" />
-        <vers num="2.6.5" edition="rc1" />
-        <vers num="2.6.5" edition="rc2" />
-        <vers num="2.6.5" edition="rc3" />
-        <vers num="2.6.6" edition="rc1" />
-        <vers num="2.6.6" edition="rc2" />
-        <vers num="2.6.6" edition="rc3" />
-        <vers num="2.6.7" edition="rc1" />
-        <vers num="2.6.7" edition="rc2" />
-        <vers num="2.6.7" edition="rc3" />
-        <vers num="2.6.8" edition="rc1" />
-        <vers num="2.6.8" edition="rc2" />
-        <vers num="2.6.8" edition="rc3" />
-        <vers num="2.6.8" edition="rc4" />
-        <vers num="2.6.8.1" />
-        <vers num="2.6.9" edition="rc1" />
-        <vers num="2.6.9" edition="rc2" />
-        <vers num="2.6.9" edition="rc3" />
-        <vers num="2.6.9" edition="rc4" />
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0" edition="rc2" />
-        <vers num="3.0" edition="rc3" />
-        <vers num="3.0" edition="rc4" />
-        <vers num="3.0" edition="rc5" />
-        <vers num="3.0" edition="rc6" />
-        <vers num="3.0" edition="rc7" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.19" />
-        <vers num="3.0.20" />
-        <vers num="3.0.21" />
-        <vers num="3.0.22" />
-        <vers num="3.0.23" />
-        <vers num="3.0.24" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.2" edition="rc2" />
-        <vers num="3.2" edition="rc3" />
-        <vers num="3.2" edition="rc4" />
-        <vers num="3.2" edition="rc5" />
-        <vers num="3.2" edition="rc6" />
-        <vers num="3.2" edition="rc7" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" />
-        <vers num="3.2.8" />
-        <vers prev="1" num="3.2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1098" published="2012-03-13" name="CVE-2012-1098" modified="2012-07-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving a SafeBuffer object that is manipulated through certain methods.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=799275" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=799275</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/03/1" source="MLIST">[oss-security] 20120302 Re: CVE Request -- Ruby on Rails (v3.0.12) / rubygem-actionpack: Two XSS flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/02/6" source="MLIST">[oss-security] 20120302 CVE Request -- Ruby on Rails (v3.0.12) / rubygem-actionpack: Two XSS flaws</ref>
-      <ref url="http://weblog.rubyonrails.org/2012/3/1/ann-rails-3-0-12-has-been-released" source="CONFIRM">http://weblog.rubyonrails.org/2012/3/1/ann-rails-3-0-12-has-been-released</ref>
-      <ref url="http://groups.google.com/group/rubyonrails-security/msg/1c2e01a5e42722c9?dmode=source&amp;output=gplain" source="MLIST">[rubyonrails-security] 20120301 Possible XSS Security Vulnerability in SafeBuffer#[]</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rubyonrails" name="ruby_on_rails">
-        <vers num="3.0.0" edition="beta" />
-        <vers num="3.0.0" edition="beta2" />
-        <vers num="3.0.0" edition="beta3" />
-        <vers num="3.0.0" edition="beta4" />
-        <vers num="3.0.0" edition="rc" />
-        <vers num="3.0.0" edition="rc2" />
-        <vers num="3.0.1" edition="pre" />
-        <vers num="3.0.10" edition="rc1" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" edition="rc1" />
-        <vers num="3.0.2" edition="pre" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" edition="rc" />
-        <vers num="3.0.4" edition="rc1" />
-        <vers num="3.0.5" edition="rc1" />
-        <vers num="3.0.6" edition="rc1" />
-        <vers num="3.0.6" edition="rc2" />
-        <vers num="3.0.7" edition="rc1" />
-        <vers num="3.0.7" edition="rc2" />
-        <vers num="3.0.8" edition="rc1" />
-        <vers num="3.0.8" edition="rc2" />
-        <vers num="3.0.8" edition="rc3" />
-        <vers num="3.0.8" edition="rc4" />
-        <vers num="3.0.9" edition="rc1" />
-        <vers num="3.0.9" edition="rc2" />
-        <vers num="3.0.9" edition="rc3" />
-        <vers num="3.0.9" edition="rc4" />
-        <vers num="3.0.9" edition="rc5" />
-        <vers num="3.1.0" edition="beta1" />
-        <vers num="3.1.0" edition="rc1" />
-        <vers num="3.1.0" edition="rc2" />
-        <vers num="3.1.0" edition="rc3" />
-        <vers num="3.1.0" edition="rc4" />
-        <vers num="3.1.0" edition="rc5" />
-        <vers num="3.1.0" edition="rc6" />
-        <vers num="3.1.0" edition="rc7" />
-        <vers num="3.1.0" edition="rc8" />
-        <vers num="3.1.1" edition="rc1" />
-        <vers num="3.1.1" edition="rc2" />
-        <vers num="3.1.1" edition="rc3" />
-        <vers num="3.1.2" edition="rc1" />
-        <vers num="3.1.2" edition="rc2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" edition="rc1" />
-        <vers num="3.2.0" edition="rc1" />
-        <vers num="3.2.0" edition="rc2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" edition="rc1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1099" published="2012-03-13" name="CVE-2012-1099" modified="2012-07-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving certain generation of OPTION elements within SELECT elements.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=799276" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=799276</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/03/1" source="MLIST">[oss-security] 20120302 Re: CVE Request -- Ruby on Rails (v3.0.12) / rubygem-actionpack: Two XSS flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/02/6" source="MLIST">[oss-security] 20120302 CVE Request -- Ruby on Rails (v3.0.12) / rubygem-actionpack: Two XSS flaws</ref>
-      <ref url="http://weblog.rubyonrails.org/2012/3/1/ann-rails-3-0-12-has-been-released" source="CONFIRM">http://weblog.rubyonrails.org/2012/3/1/ann-rails-3-0-12-has-been-released</ref>
-      <ref url="http://groups.google.com/group/rubyonrails-security/msg/6fca4f5c47705488?dmode=source&amp;output=gplain" source="MLIST">[rubyonrails-security] 20120301 XSS Vulnerability in the select helper</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rubyonrails" name="ruby_on_rails">
-        <vers num="3.0.0" edition="beta" />
-        <vers num="3.0.0" edition="beta2" />
-        <vers num="3.0.0" edition="beta3" />
-        <vers num="3.0.0" edition="beta4" />
-        <vers num="3.0.0" edition="rc" />
-        <vers num="3.0.0" edition="rc2" />
-        <vers num="3.0.1" edition="pre" />
-        <vers num="3.0.10" edition="rc1" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" edition="rc1" />
-        <vers num="3.0.2" edition="pre" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" edition="rc" />
-        <vers num="3.0.4" edition="rc1" />
-        <vers num="3.0.5" edition="rc1" />
-        <vers num="3.0.6" edition="rc1" />
-        <vers num="3.0.6" edition="rc2" />
-        <vers num="3.0.7" edition="rc1" />
-        <vers num="3.0.7" edition="rc2" />
-        <vers num="3.0.8" edition="rc1" />
-        <vers num="3.0.8" edition="rc2" />
-        <vers num="3.0.8" edition="rc3" />
-        <vers num="3.0.8" edition="rc4" />
-        <vers num="3.0.9" edition="rc1" />
-        <vers num="3.0.9" edition="rc2" />
-        <vers num="3.0.9" edition="rc3" />
-        <vers num="3.0.9" edition="rc4" />
-        <vers num="3.0.9" edition="rc5" />
-        <vers num="3.1.0" edition="beta1" />
-        <vers num="3.1.0" edition="rc1" />
-        <vers num="3.1.0" edition="rc2" />
-        <vers num="3.1.0" edition="rc3" />
-        <vers num="3.1.0" edition="rc4" />
-        <vers num="3.1.0" edition="rc5" />
-        <vers num="3.1.0" edition="rc6" />
-        <vers num="3.1.0" edition="rc7" />
-        <vers num="3.1.0" edition="rc8" />
-        <vers num="3.1.1" edition="rc1" />
-        <vers num="3.1.1" edition="rc2" />
-        <vers num="3.1.1" edition="rc3" />
-        <vers num="3.1.2" edition="rc1" />
-        <vers num="3.1.2" edition="rc2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" edition="rc1" />
-        <vers num="3.2.0" edition="rc1" />
-        <vers num="3.2.0" edition="rc2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" edition="rc1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1106" published="2012-07-03" name="CVE-2012-1106" modified="2012-07-03" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="1.9" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.4" CVSS_base_score="1.9">
-    <desc>
-      <descript source="cve">The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://fedorahosted.org/abrt/changeset/23d6997d7886abe118c28254f7f73f0b19b2d4e0" source="CONFIRM" patch="1">https://fedorahosted.org/abrt/changeset/23d6997d7886abe118c28254f7f73f0b19b2d4e0</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76524" source="XF">abrt-info-disc(76524)</ref>
-      <ref url="http://www.securityfocus.com/bid/54121" source="BID">54121</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0841.html" source="REDHAT">RHSA-2012:0841</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="redhat" name="automatic_bug_reporting_tool">
-        <vers prev="1" num="2.0.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1107" published="2012-09-06" name="CVE-2012-1107" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape file, which triggers a divide-by-zero error.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/taglib/taglib/commit/77d61c6eca4d08b9b025738acf6b926cc750db23" source="CONFIRM" patch="1">https://github.com/taglib/taglib/commit/77d61c6eca4d08b9b025738acf6b926cc750db23</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73666" source="XF">taglib-analyzecurrent-dos(73666)</ref>
-      <ref url="http://www.securityfocus.com/bid/52284" source="BID">52284</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/05/19" source="MLIST">[oss-security] 20120305 Re: CVE-Request taglib vulnerabilities</ref>
-      <ref url="http://www.gentoo.org/security/en/glsa/glsa-201206-16.xml" source="GENTOO">GLSA-201206-16</ref>
-      <ref url="http://secunia.com/advisories/49688" source="SECUNIA" adv="1">49688</ref>
-      <ref url="http://secunia.com/advisories/48211" source="SECUNIA" adv="1">48211</ref>
-      <ref url="http://osvdb.org/79814" source="OSVDB">79814</ref>
-      <ref url="http://mail.kde.org/pipermail/taglib-devel/2012-March/002187.html" source="MLIST">[pipermail] 20120304 multiple security vulnerabilities in taglib</ref>
-      <ref url="http://mail.kde.org/pipermail/taglib-devel/2012-March/002186.html" source="MLIST">[pipermail] 20120304 multiple security vulnerabilities in taglib</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="scott_wheeler" name="taglib">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="1.3.1" />
-        <vers num="1.4" />
-        <vers num="1.5" />
-        <vers num="1.6" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers prev="1" num="1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1108" published="2012-09-06" name="CVE-2012-1108" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted vendorLength field in an ogg file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/taglib/taglib/commit/b3646a07348ffa276ea41a9dae03ddc63ea6c532" source="CONFIRM" patch="1">https://github.com/taglib/taglib/commit/b3646a07348ffa276ea41a9dae03ddc63ea6c532</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73665" source="XF">taglib-parse-dos(73665)</ref>
-      <ref url="http://www.securityfocus.com/bid/52284" source="BID">52284</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/05/19" source="MLIST">[oss-security] 20120305 Re: CVE-Request taglib vulnerabilities</ref>
-      <ref url="http://www.gentoo.org/security/en/glsa/glsa-201206-16.xml" source="GENTOO">GLSA-201206-16</ref>
-      <ref url="http://secunia.com/advisories/49688" source="SECUNIA" adv="1">49688</ref>
-      <ref url="http://secunia.com/advisories/48211" source="SECUNIA" adv="1">48211</ref>
-      <ref url="http://osvdb.org/79813" source="OSVDB">79813</ref>
-      <ref url="http://mail.kde.org/pipermail/taglib-devel/2012-March/002191.html" source="MLIST">[pipermail] 20120305 multiple security vulnerabilities in taglib</ref>
-      <ref url="http://mail.kde.org/pipermail/taglib-devel/2012-March/002186.html" source="MLIST">[pipermail] 20120304 multiple security vulnerabilities in taglib</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="scott_wheeler" name="taglib">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="1.3.1" />
-        <vers num="1.4" />
-        <vers num="1.5" />
-        <vers num="1.6" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers prev="1" num="1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1110" published="2012-09-06" name="CVE-2012-1110" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user, (2) email, (3) email2, (4) f17_zip, or (5) agree parameter to join.php; (6) PATH_INFO, (7) st, (8) f17_city, (9) f17_country, (10) f17_state, (11) f17_zip, (12) f19, (13) wphoto, (14) search, or (15) v parameter to search.php; (16) PATH_INFO or (17) st parameter to photo_search.php; or (18) return parameter to photo_view.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://yehg.net/lab/pr0js/advisories/%5Betano_1.2.x%5D_xss" source="MISC">http://yehg.net/lab/pr0js/advisories/%5Betano_1.2.x%5D_xss</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73669" source="XF">etano-multiple-xss(73669)</ref>
-      <ref url="http://www.securityfocus.com/bid/52295" source="BID">52295</ref>
-      <ref url="http://www.osvdb.org/79830" source="OSVDB">79830</ref>
-      <ref url="http://www.osvdb.org/79829" source="OSVDB">79829</ref>
-      <ref url="http://www.osvdb.org/79828" source="OSVDB">79828</ref>
-      <ref url="http://www.osvdb.org/79827" source="OSVDB">79827</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/05/21" source="MLIST">[oss-security] 20120305 Re: Etano 1.x &lt;= Multiple Cross Site Scripting Vulnerabilities</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/05/15" source="MLIST">[oss-security] 20120306 Etano 1.x &lt;= Multiple Cross Site Scripting Vulnerabilities</ref>
-      <ref url="http://secunia.com/advisories/48165" source="SECUNIA" adv="1">48165</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0013.html" source="BUGTRAQ">20120305 Etano 1.x &lt;= Multiple Cross Site Scripting Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="datemill" name="etano">
-        <vers prev="1" num="1.22" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1112" published="2012-09-06" name="CVE-2012-1112" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in Open-Realty CMS 2.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the select_users_template parameter to index.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://yehg.net/lab/pr0js/advisories/%5Bopen-realty_2.5.8_2.x%5D_lfi" source="MISC">http://yehg.net/lab/pr0js/advisories/%5Bopen-realty_2.5.8_2.x%5D_lfi</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73736" source="XF">openrealty-selectuserstemplate-file-include(73736)</ref>
-      <ref url="http://www.securityfocus.com/bid/52296" source="BID">52296</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/05/23" source="MLIST">[oss-security] 20120305 Re: Open-Realty CMS 2.5.8 (2.x.x) &lt;= </ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/05/14" source="MLIST">[oss-security] 20120306 Open-Realty CMS 2.5.8 (2.x.x) &lt;= </ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0012.html" source="BUGTRAQ">20120305 Open-Realty CMS 2.5.8 (2.x.x) &lt;= </ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="open-realty" name="open-realty">
-        <vers num="2.3.1" />
-        <vers num="2.3.4" />
-        <vers prev="1" num="2.5.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1113" published="2012-04-22" name="CVE-2012-1113" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=812045" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=812045</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078618.html" source="FEDORA">FEDORA-2012-5777</ref>
-      <ref url="http://gallery.menalto.com/gallery_3_0_3_and_gallery_2_3_2" source="CONFIRM">http://gallery.menalto.com/gallery_3_0_3_and_gallery_2_3_2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="maian" name="gallery">
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-      </prod>
-      <prod vendor="menalto" name="gallery">
-        <vers num="2.2.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1118" published="2012-06-29" name="CVE-2012-1118" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly restrict access when the private_bug_view_threshold is set to an array, which allows remote attackers to bypass intended restrictions and perform certain operations on private bug reports.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/mantisbt/mantisbt/commit/eb803ed02105fc919cf5f789e939f2b824162927" source="CONFIRM" patch="1">https://github.com/mantisbt/mantisbt/commit/eb803ed02105fc919cf5f789e939f2b824162927</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/9" source="MLIST">[oss-security] 20120306 Re: CVE request: mantisbt before 1.2.9</ref>
-      <ref url="http://www.mantisbt.org/bugs/view.php?id=10124" source="CONFIRM">http://www.mantisbt.org/bugs/view.php?id=10124</ref>
-      <ref url="http://www.mantisbt.org/bugs/changelog_page.php?version_id=140" source="CONFIRM">http://www.mantisbt.org/bugs/changelog_page.php?version_id=140</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2500" source="DEBIAN">DSA-2500</ref>
-      <ref url="http://secunia.com/advisories/49572" source="SECUNIA" adv="1">49572</ref>
-      <ref url="http://secunia.com/advisories/48258" source="SECUNIA" adv="1">48258</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mantisbt" name="mantisbt">
-        <vers num="0.18.0" />
-        <vers num="0.19.0" edition="rc1" />
-        <vers num="0.19.0a1" />
-        <vers num="0.19.0a2" />
-        <vers num="0.19.1" />
-        <vers num="0.19.2" />
-        <vers num="0.19.3" />
-        <vers num="0.19.4" />
-        <vers num="0.19.5" />
-        <vers num="1.0.0" edition="rc1" />
-        <vers num="1.0.0" edition="rc2" />
-        <vers num="1.0.0" edition="rc3" />
-        <vers num="1.0.0" edition="rc4" />
-        <vers num="1.0.0" edition="rc5" />
-        <vers num="1.0.0a1" />
-        <vers num="1.0.0a2" />
-        <vers num="1.0.0a3" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.2.0" />
-        <vers num="1.2.0a1" />
-        <vers num="1.2.0a2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers prev="1" num="1.2.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1119" published="2012-06-29" name="CVE-2012-1119" modified="2012-08-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/mantisbt/mantisbt/commit/dea7e315f3fc96dfa995e56e8810845fc07a47aa" source="CONFIRM" patch="1">https://github.com/mantisbt/mantisbt/commit/dea7e315f3fc96dfa995e56e8810845fc07a47aa</ref>
-      <ref url="https://github.com/mantisbt/mantisbt/commit/cf5df427f17cf9204645f83e000665780eb9afe6" source="CONFIRM" patch="1">https://github.com/mantisbt/mantisbt/commit/cf5df427f17cf9204645f83e000665780eb9afe6</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/9" source="MLIST">[oss-security] 20120306 Re: CVE request: mantisbt before 1.2.9</ref>
-      <ref url="http://www.mantisbt.org/bugs/view.php?id=13816" source="CONFIRM">http://www.mantisbt.org/bugs/view.php?id=13816</ref>
-      <ref url="http://www.mantisbt.org/bugs/changelog_page.php?version_id=140" source="CONFIRM">http://www.mantisbt.org/bugs/changelog_page.php?version_id=140</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2500" source="DEBIAN">DSA-2500</ref>
-      <ref url="http://secunia.com/advisories/49572" source="SECUNIA" adv="1">49572</ref>
-      <ref url="http://secunia.com/advisories/48258" source="SECUNIA" adv="1">48258</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mantisbt" name="mantisbt">
-        <vers num="0.18.0" />
-        <vers num="0.19.0" edition="a1" />
-        <vers num="0.19.0" edition="a2" />
-        <vers num="0.19.0" edition="rc1" />
-        <vers num="0.19.1" />
-        <vers num="0.19.2" />
-        <vers num="0.19.3" />
-        <vers num="0.19.4" />
-        <vers num="0.19.5" />
-        <vers num="1.0.0" edition="a1" />
-        <vers num="1.0.0" edition="a2" />
-        <vers num="1.0.0" edition="a3" />
-        <vers num="1.0.0" edition="rc1" />
-        <vers num="1.0.0" edition="rc2" />
-        <vers num="1.0.0" edition="rc3" />
-        <vers num="1.0.0" edition="rc4" />
-        <vers num="1.0.0" edition="rc5" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1.0" edition="a1" />
-        <vers num="1.1.0" edition="a2" />
-        <vers num="1.1.0" edition="a3" />
-        <vers num="1.1.0" edition="a4" />
-        <vers num="1.1.0" edition="rc1" />
-        <vers num="1.1.0" edition="rc2" />
-        <vers num="1.1.0" edition="rc3" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.2.0" edition="a1" />
-        <vers num="1.2.0" edition="a2" />
-        <vers num="1.2.0" edition="a3" />
-        <vers num="1.2.0" edition="rc1" />
-        <vers num="1.2.0" edition="rc2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers prev="1" num="1.2.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1120" published="2012-06-29" name="CVE-2012-1120" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:P)" CVSS_score="3.6" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.9" CVSS_base_score="3.6">
-    <desc>
-      <descript source="cve">The SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnote_allow_user_edit_delete and delete_bug_threshold permissions, which allows remote authenticated users with read and write SOAP API privileges to delete arbitrary bug reports and bug notes.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/mantisbt/mantisbt/commit/df7782a65e96aa1c9639a7625a658102134c7fe0" source="CONFIRM" patch="1">https://github.com/mantisbt/mantisbt/commit/df7782a65e96aa1c9639a7625a658102134c7fe0</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/9" source="MLIST">[oss-security] 20120306 Re: CVE request: mantisbt before 1.2.9</ref>
-      <ref url="http://www.mantisbt.org/bugs/view.php?id=13656" source="CONFIRM">http://www.mantisbt.org/bugs/view.php?id=13656</ref>
-      <ref url="http://www.mantisbt.org/bugs/changelog_page.php?version_id=140" source="CONFIRM">http://www.mantisbt.org/bugs/changelog_page.php?version_id=140</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2500" source="DEBIAN">DSA-2500</ref>
-      <ref url="http://secunia.com/advisories/49572" source="SECUNIA" adv="1">49572</ref>
-      <ref url="http://secunia.com/advisories/48258" source="SECUNIA" adv="1">48258</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mantisbt" name="mantisbt">
-        <vers num="0.18.0" />
-        <vers num="0.19.0" edition="a1" />
-        <vers num="0.19.0" edition="a2" />
-        <vers num="0.19.0" edition="rc1" />
-        <vers num="0.19.1" />
-        <vers num="0.19.2" />
-        <vers num="0.19.3" />
-        <vers num="0.19.4" />
-        <vers num="0.19.5" />
-        <vers num="1.0.0" edition="a1" />
-        <vers num="1.0.0" edition="a2" />
-        <vers num="1.0.0" edition="a3" />
-        <vers num="1.0.0" edition="rc1" />
-        <vers num="1.0.0" edition="rc2" />
-        <vers num="1.0.0" edition="rc3" />
-        <vers num="1.0.0" edition="rc4" />
-        <vers num="1.0.0" edition="rc5" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1.0" edition="a1" />
-        <vers num="1.1.0" edition="a2" />
-        <vers num="1.1.0" edition="a3" />
-        <vers num="1.1.0" edition="a4" />
-        <vers num="1.1.0" edition="rc1" />
-        <vers num="1.1.0" edition="rc2" />
-        <vers num="1.1.0" edition="rc3" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.2.0" edition="a1" />
-        <vers num="1.2.0" edition="a2" />
-        <vers num="1.2.0" edition="a3" />
-        <vers num="1.2.0" edition="rc1" />
-        <vers num="1.2.0" edition="rc2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers prev="1" num="1.2.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1121" published="2012-06-29" name="CVE-2012-1121" modified="2012-08-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:P)" CVSS_score="4.9" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="6.8" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to (1) modify or (2) delete global categories.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/mantisbt/mantisbt/commit/9443258724e84cb388aa1865b775beaecd80596d" source="CONFIRM" patch="1">https://github.com/mantisbt/mantisbt/commit/9443258724e84cb388aa1865b775beaecd80596d</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/9" source="MLIST">[oss-security] 20120306 Re: CVE request: mantisbt before 1.2.9</ref>
-      <ref url="http://www.mantisbt.org/bugs/view.php?id=13561" source="CONFIRM">http://www.mantisbt.org/bugs/view.php?id=13561</ref>
-      <ref url="http://www.mantisbt.org/bugs/changelog_page.php?version_id=140" source="CONFIRM">http://www.mantisbt.org/bugs/changelog_page.php?version_id=140</ref>
-      <ref url="http://secunia.com/advisories/48258" source="SECUNIA" adv="1">48258</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mantisbt" name="mantisbt">
-        <vers num="0.18.0" />
-        <vers num="0.19.0" edition="a1" />
-        <vers num="0.19.0" edition="a2" />
-        <vers num="0.19.0" edition="rc1" />
-        <vers num="0.19.1" />
-        <vers num="0.19.2" />
-        <vers num="0.19.3" />
-        <vers num="0.19.4" />
-        <vers num="0.19.5" />
-        <vers num="1.0.0" edition="a1" />
-        <vers num="1.0.0" edition="a2" />
-        <vers num="1.0.0" edition="a3" />
-        <vers num="1.0.0" edition="rc1" />
-        <vers num="1.0.0" edition="rc2" />
-        <vers num="1.0.0" edition="rc3" />
-        <vers num="1.0.0" edition="rc4" />
-        <vers num="1.0.0" edition="rc5" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1.0" edition="a1" />
-        <vers num="1.1.0" edition="a2" />
-        <vers num="1.1.0" edition="a3" />
-        <vers num="1.1.0" edition="a4" />
-        <vers num="1.1.0" edition="rc1" />
-        <vers num="1.1.0" edition="rc2" />
-        <vers num="1.1.0" edition="rc3" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.2.0" edition="a1" />
-        <vers num="1.2.0" edition="a2" />
-        <vers num="1.2.0" edition="a3" />
-        <vers num="1.2.0" edition="rc1" />
-        <vers num="1.2.0" edition="rc2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers prev="1" num="1.2.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1122" published="2012-06-29" name="CVE-2012-1122" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:P)" CVSS_score="3.6" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.9" CVSS_base_score="3.6">
-    <desc>
-      <descript source="cve">bug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold permission of the receiving project when moving a bug report, which allows remote authenticated users with the report_bug_threshold and move_bug_threshold privileges for a project to bypass intended access restrictions and move bug reports to a different project.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/mantisbt/mantisbt/commit/0da3f7ace233208eb3c8d628cc2fd6e56d83839f" source="CONFIRM" patch="1">https://github.com/mantisbt/mantisbt/commit/0da3f7ace233208eb3c8d628cc2fd6e56d83839f</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/9" source="MLIST">[oss-security] 20120306 Re: CVE request: mantisbt before 1.2.9</ref>
-      <ref url="http://www.mantisbt.org/bugs/view.php?id=13748" source="CONFIRM">http://www.mantisbt.org/bugs/view.php?id=13748</ref>
-      <ref url="http://www.mantisbt.org/bugs/changelog_page.php?version_id=140" source="CONFIRM">http://www.mantisbt.org/bugs/changelog_page.php?version_id=140</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2500" source="DEBIAN">DSA-2500</ref>
-      <ref url="http://secunia.com/advisories/49572" source="SECUNIA" adv="1">49572</ref>
-      <ref url="http://secunia.com/advisories/48258" source="SECUNIA" adv="1">48258</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mantisbt" name="mantisbt">
-        <vers num="0.18.0" />
-        <vers num="0.19.0" edition="rc1" />
-        <vers num="0.19.0a1" />
-        <vers num="0.19.0a2" />
-        <vers num="0.19.1" />
-        <vers num="0.19.2" />
-        <vers num="0.19.3" />
-        <vers num="0.19.4" />
-        <vers num="0.19.5" />
-        <vers num="1.0.0" edition="rc1" />
-        <vers num="1.0.0" edition="rc2" />
-        <vers num="1.0.0" edition="rc3" />
-        <vers num="1.0.0" edition="rc4" />
-        <vers num="1.0.0" edition="rc5" />
-        <vers num="1.0.0a1" />
-        <vers num="1.0.0a2" />
-        <vers num="1.0.0a3" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.2.0" />
-        <vers num="1.2.0a1" />
-        <vers num="1.2.0a2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers prev="1" num="1.2.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1123" published="2012-06-29" name="CVE-2012-1123" modified="2012-08-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authentication via a null password.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/mantisbt/mantisbt/commit/f5106be52cf6aa72c521f388e4abb5f0de1f1d7f" source="CONFIRM" patch="1">https://github.com/mantisbt/mantisbt/commit/f5106be52cf6aa72c521f388e4abb5f0de1f1d7f</ref>
-      <ref url="http://www.mantisbt.org/bugs/view.php?id=13901" source="CONFIRM" patch="1">http://www.mantisbt.org/bugs/view.php?id=13901</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/9" source="MLIST">[oss-security] 20120306 Re: CVE request: mantisbt before 1.2.9</ref>
-      <ref url="http://www.mantisbt.org/bugs/changelog_page.php?version_id=140" source="CONFIRM">http://www.mantisbt.org/bugs/changelog_page.php?version_id=140</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2500" source="DEBIAN">DSA-2500</ref>
-      <ref url="http://secunia.com/advisories/49572" source="SECUNIA" adv="1">49572</ref>
-      <ref url="http://secunia.com/advisories/48258" source="SECUNIA" adv="1">48258</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mantisbt" name="mantisbt">
-        <vers num="0.18.0" />
-        <vers num="0.19.0" edition="a1" />
-        <vers num="0.19.0" edition="a2" />
-        <vers num="0.19.0" edition="rc1" />
-        <vers num="0.19.1" />
-        <vers num="0.19.2" />
-        <vers num="0.19.3" />
-        <vers num="0.19.4" />
-        <vers num="0.19.5" />
-        <vers num="1.0.0" edition="a1" />
-        <vers num="1.0.0" edition="a2" />
-        <vers num="1.0.0" edition="a3" />
-        <vers num="1.0.0" edition="rc1" />
-        <vers num="1.0.0" edition="rc2" />
-        <vers num="1.0.0" edition="rc3" />
-        <vers num="1.0.0" edition="rc4" />
-        <vers num="1.0.0" edition="rc5" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1.0" edition="a1" />
-        <vers num="1.1.0" edition="a2" />
-        <vers num="1.1.0" edition="a3" />
-        <vers num="1.1.0" edition="a4" />
-        <vers num="1.1.0" edition="rc1" />
-        <vers num="1.1.0" edition="rc2" />
-        <vers num="1.1.0" edition="rc3" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.2.0" edition="a1" />
-        <vers num="1.2.0" edition="a2" />
-        <vers num="1.2.0" edition="a3" />
-        <vers num="1.2.0" edition="rc1" />
-        <vers num="1.2.0" edition="rc2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers prev="1" num="1.2.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1126" published="2012-04-25" name="CVE-2012-1126" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a BDF font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800581" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800581</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48918" source="SECUNIA">48918</ref>
-      <ref url="http://secunia.com/advisories/48758" source="SECUNIA">48758</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0467.html" source="REDHAT">RHSA-2012:0467</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE">SUSE-SU-2012:0521</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE">SUSE-SU-2012:0483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1127" published="2012-04-25" name="CVE-2012-1127" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800583" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800583</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48918" source="SECUNIA">48918</ref>
-      <ref url="http://secunia.com/advisories/48758" source="SECUNIA">48758</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0467.html" source="REDHAT">RHSA-2012:0467</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE">SUSE-SU-2012:0521</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE">SUSE-SU-2012:0483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1128" published="2012-04-25" name="CVE-2012-1128" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800584" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800584</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1129" published="2012-04-25" name="CVE-2012-1129" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted SFNT string in a Type 42 font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800585" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800585</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48918" source="SECUNIA">48918</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE">SUSE-SU-2012:0521</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE">SUSE-SU-2012:0483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1130" published="2012-04-25" name="CVE-2012-1130" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a PCF font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800587" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800587</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48918" source="SECUNIA">48918</ref>
-      <ref url="http://secunia.com/advisories/48758" source="SECUNIA">48758</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0467.html" source="REDHAT">RHSA-2012:0467</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE">SUSE-SU-2012:0521</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE">SUSE-SU-2012:0483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1131" published="2012-04-25" name="CVE-2012-1131" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, on 64-bit platforms allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors related to the cell table of a font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800589" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800589</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48918" source="SECUNIA">48918</ref>
-      <ref url="http://secunia.com/advisories/48758" source="SECUNIA">48758</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0467.html" source="REDHAT">RHSA-2012:0467</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE">SUSE-SU-2012:0521</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE">SUSE-SU-2012:0483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1132" published="2012-04-25" name="CVE-2012-1132" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted dictionary data in a Type 1 font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800590" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800590</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48918" source="SECUNIA">48918</ref>
-      <ref url="http://secunia.com/advisories/48758" source="SECUNIA">48758</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0467.html" source="REDHAT">RHSA-2012:0467</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE">SUSE-SU-2012:0521</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE">SUSE-SU-2012:0483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1133" published="2012-04-25" name="CVE-2012-1133" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800591" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800591</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2428" source="DEBIAN">DSA-2428</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48918" source="SECUNIA">48918</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE">SUSE-SU-2012:0521</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE">SUSE-SU-2012:0483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1134" published="2012-04-25" name="CVE-2012-1134" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted private-dictionary data in a Type 1 font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800592" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800592</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2428" source="DEBIAN">DSA-2428</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48918" source="SECUNIA">48918</ref>
-      <ref url="http://secunia.com/advisories/48758" source="SECUNIA">48758</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0467.html" source="REDHAT">RHSA-2012:0467</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE">SUSE-SU-2012:0521</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE">SUSE-SU-2012:0483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1135" published="2012-04-25" name="CVE-2012-1135" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the NPUSHB and NPUSHW instructions in a TrueType font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800593" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800593</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48918" source="SECUNIA">48918</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE">SUSE-SU-2012:0521</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE">SUSE-SU-2012:0483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1136" published="2012-04-25" name="CVE-2012-1136" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font that lacks an ENCODING field.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800594" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800594</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2428" source="DEBIAN">DSA-2428</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48918" source="SECUNIA">48918</ref>
-      <ref url="http://secunia.com/advisories/48758" source="SECUNIA">48758</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0467.html" source="REDHAT">RHSA-2012:0467</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE">SUSE-SU-2012:0521</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE">SUSE-SU-2012:0483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1137" published="2012-04-25" name="CVE-2012-1137" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800595" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800595</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48758" source="SECUNIA">48758</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0467.html" source="REDHAT">RHSA-2012:0467</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE">SUSE-SU-2012:0483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1138" published="2012-04-25" name="CVE-2012-1138" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the MIRP instruction in a TrueType font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800597" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800597</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48918" source="SECUNIA">48918</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE">SUSE-SU-2012:0521</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE">SUSE-SU-2012:0483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1139" published="2012-04-25" name="CVE-2012-1139" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800598" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800598</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48918" source="SECUNIA">48918</ref>
-      <ref url="http://secunia.com/advisories/48758" source="SECUNIA">48758</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0467.html" source="REDHAT">RHSA-2012:0467</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE">SUSE-SU-2012:0521</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE">SUSE-SU-2012:0483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1140" published="2012-04-25" name="CVE-2012-1140" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted PostScript font object.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800600" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800600</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48758" source="SECUNIA">48758</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0467.html" source="REDHAT">RHSA-2012:0467</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1141" published="2012-04-25" name="CVE-2012-1141" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted ASCII string in a BDF font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800602" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800602</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48918" source="SECUNIA">48918</ref>
-      <ref url="http://secunia.com/advisories/48758" source="SECUNIA">48758</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0467.html" source="REDHAT">RHSA-2012:0467</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE">SUSE-SU-2012:0521</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE">SUSE-SU-2012:0483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1142" published="2012-04-25" name="CVE-2012-1142" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph-outline data in a font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800604" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800604</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2428" source="DEBIAN">DSA-2428</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48918" source="SECUNIA">48918</ref>
-      <ref url="http://secunia.com/advisories/48758" source="SECUNIA">48758</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0467.html" source="REDHAT">RHSA-2012:0467</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE">SUSE-SU-2012:0521</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE">SUSE-SU-2012:0483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1143" published="2012-04-25" name="CVE-2012-1143" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800606" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800606</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48918" source="SECUNIA">48918</ref>
-      <ref url="http://secunia.com/advisories/48758" source="SECUNIA">48758</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0467.html" source="REDHAT">RHSA-2012:0467</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE">SUSE-SU-2012:0521</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE">SUSE-SU-2012:0483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1144" published="2012-04-25" name="CVE-2012-1144" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800607" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800607</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=733512" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=733512</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/06/16" source="MLIST">[oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-21.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-21.html</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2428" source="DEBIAN">DSA-2428</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201204-04.xml" source="GENTOO">GLSA-201204-04</ref>
-      <ref url="http://secunia.com/advisories/48758" source="SECUNIA">48758</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0467.html" source="REDHAT">RHSA-2012:0467</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freetype" name="freetype">
-        <vers num="1.3.1" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" edition="rc1" />
-        <vers num="2.1.8_rc1" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers prev="1" num="2.4.8" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="1.0" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers prev="1" num="10.0.3" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1145" published="2012-06-15" name="CVE-2012-1145" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">spacewalk-backend in Red Hat Network Satellite 5.4 on Red Hat Enterprise Linux 6 does not properly authorize or authenticate uploads to the NULL organization when mod_wsgi is used, which allows remote attackers to cause a denial of service (/var partition disk consumption and failed updates) via a large number of package uploads.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74498" source="XF">network-satellite-null-sec-bypass(74498)</ref>
-      <ref url="http://www.securitytracker.com/id?1026873" source="SECTRACK">1026873</ref>
-      <ref url="http://www.securityfocus.com/bid/52832" source="BID">52832</ref>
-      <ref url="http://www.osvdb.org/81481" source="OSVDB">81481</ref>
-      <ref url="http://secunia.com/advisories/48664" source="SECUNIA" adv="1">48664</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0436.html" source="REDHAT" adv="1">RHSA-2012:0436</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="red_hat" name="network_satellite">
-        <vers num="5.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1146" published="2012-05-17" name="CVE-2012-1146" modified="2012-05-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The mem_cgroup_usage_unregister_event function in mm/memcontrol.c in the Linux kernel before 3.2.10 does not properly handle multiple events that are attached to the same eventfd, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by registering memory threshold events.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/371528caec553785c37f73fa3926ea0de84f986f" source="CONFIRM">https://github.com/torvalds/linux/commit/371528caec553785c37f73fa3926ea0de84f986f</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=800813" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=800813</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/07/3" source="MLIST">[oss-security] 20120307 Re: CVE request -- kernel: mm: memcg: unregistring of events attached to the same eventfd can lead to oops</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=371528caec553785c37f73fa3926ea0de84f986f" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=371528caec553785c37f73fa3926ea0de84f986f</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="1.2.0" />
-        <vers num="1.3.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.15" />
-        <vers num="2.0.16" />
-        <vers num="2.0.17" />
-        <vers num="2.0.18" />
-        <vers num="2.0.19" />
-        <vers num="2.0.2" />
-        <vers num="2.0.20" />
-        <vers num="2.0.21" />
-        <vers num="2.0.22" />
-        <vers num="2.0.23" />
-        <vers num="2.0.24" />
-        <vers num="2.0.25" />
-        <vers num="2.0.26" />
-        <vers num="2.0.27" />
-        <vers num="2.0.28" />
-        <vers num="2.0.29" />
-        <vers num="2.0.3" />
-        <vers num="2.0.30" />
-        <vers num="2.0.31" />
-        <vers num="2.0.32" />
-        <vers num="2.0.33" />
-        <vers num="2.0.34" />
-        <vers num="2.0.35" />
-        <vers num="2.0.36" />
-        <vers num="2.0.37" />
-        <vers num="2.0.38" />
-        <vers num="2.0.39" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1.132" />
-        <vers num="2.1.89" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.10" />
-        <vers num="2.2.11" />
-        <vers num="2.2.12" />
-        <vers num="2.2.13" edition="pre15" />
-        <vers num="2.2.14" />
-        <vers num="2.2.15" edition="pre16" />
-        <vers num="2.2.16" edition="pre5" />
-        <vers num="2.2.16" edition="pre6" />
-        <vers num="2.2.17" edition="pre14" />
-        <vers num="2.2.18" />
-        <vers num="2.2.19" />
-        <vers num="2.2.2" />
-        <vers num="2.2.20" />
-        <vers num="2.2.21" edition="pre1" />
-        <vers num="2.2.21" edition="pre2" />
-        <vers num="2.2.21" edition="pre3" />
-        <vers num="2.2.21" edition="pre4" />
-        <vers num="2.2.21" edition="rc1" />
-        <vers num="2.2.21" edition="rc2" />
-        <vers num="2.2.21" edition="rc3" />
-        <vers num="2.2.21" edition="rc4" />
-        <vers num="2.2.22" edition="rc1" />
-        <vers num="2.2.22" edition="rc2" />
-        <vers num="2.2.22" edition="rc3" />
-        <vers num="2.2.23" edition="rc1" />
-        <vers num="2.2.23" edition="rc2" />
-        <vers num="2.2.24" edition="rc2" />
-        <vers num="2.2.24" edition="rc3" />
-        <vers num="2.2.24" edition="rc4" />
-        <vers num="2.2.24" edition="rc5" />
-        <vers num="2.2.25" />
-        <vers num="2.2.26" />
-        <vers num="2.2.27" edition="pre1" />
-        <vers num="2.2.27" edition="pre2" />
-        <vers num="2.2.27" edition="rc1" />
-        <vers num="2.2.27" edition="rc2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" edition="rc1" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.13" />
-        <vers num="2.3.14" />
-        <vers num="2.3.15" />
-        <vers num="2.3.16" />
-        <vers num="2.3.17" />
-        <vers num="2.3.18" />
-        <vers num="2.3.19" />
-        <vers num="2.3.2" />
-        <vers num="2.3.20" />
-        <vers num="2.3.21" />
-        <vers num="2.3.22" />
-        <vers num="2.3.23" />
-        <vers num="2.3.24" />
-        <vers num="2.3.25" />
-        <vers num="2.3.26" />
-        <vers num="2.3.27" />
-        <vers num="2.3.28" />
-        <vers num="2.3.29" />
-        <vers num="2.3.3" />
-        <vers num="2.3.30" />
-        <vers num="2.3.31" />
-        <vers num="2.3.32" />
-        <vers num="2.3.33" />
-        <vers num="2.3.34" />
-        <vers num="2.3.35" />
-        <vers num="2.3.36" />
-        <vers num="2.3.37" />
-        <vers num="2.3.38" />
-        <vers num="2.3.39" />
-        <vers num="2.3.4" />
-        <vers num="2.3.40" />
-        <vers num="2.3.41" />
-        <vers num="2.3.42" />
-        <vers num="2.3.43" />
-        <vers num="2.3.44" />
-        <vers num="2.3.45" />
-        <vers num="2.3.46" />
-        <vers num="2.3.47" />
-        <vers num="2.3.48" />
-        <vers num="2.3.49" />
-        <vers num="2.3.5" />
-        <vers num="2.3.50" />
-        <vers num="2.3.51" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.3.99" edition="pre1" />
-        <vers num="2.3.99" edition="pre2" />
-        <vers num="2.3.99" edition="pre3" />
-        <vers num="2.3.99" edition="pre4" />
-        <vers num="2.3.99" edition="pre5" />
-        <vers num="2.3.99" edition="pre6" />
-        <vers num="2.3.99" edition="pre7" />
-        <vers num="2.3.99" edition="pre8" />
-        <vers num="2.3.99" edition="pre9" />
-        <vers num="2.4.0" edition="test1" />
-        <vers num="2.4.0" edition="test10" />
-        <vers num="2.4.0" edition="test11" />
-        <vers num="2.4.0" edition="test12" />
-        <vers num="2.4.0" edition="test2" />
-        <vers num="2.4.0" edition="test3" />
-        <vers num="2.4.0" edition="test4" />
-        <vers num="2.4.0" edition="test5" />
-        <vers num="2.4.0" edition="test6" />
-        <vers num="2.4.0" edition="test7" />
-        <vers num="2.4.0" edition="test8" />
-        <vers num="2.4.0" edition="test9" />
-        <vers num="2.4.1" />
-        <vers num="2.4.10" />
-        <vers num="2.4.11" edition="pre3" />
-        <vers num="2.4.12" />
-        <vers num="2.4.13" />
-        <vers num="2.4.14" />
-        <vers num="2.4.15" />
-        <vers num="2.4.16" />
-        <vers num="2.4.17" />
-        <vers num="2.4.18" edition="pre1" />
-        <vers num="2.4.18" edition="pre2" />
-        <vers num="2.4.18" edition="pre3" />
-        <vers num="2.4.18" edition="pre4" />
-        <vers num="2.4.18" edition="pre5" />
-        <vers num="2.4.18" edition="pre6" />
-        <vers num="2.4.18" edition="pre7" />
-        <vers num="2.4.18" edition="pre8" />
-        <vers num="2.4.18" edition="pre9" />
-        <vers num="2.4.19" edition="pre1" />
-        <vers num="2.4.19" edition="pre2" />
-        <vers num="2.4.19" edition="pre3" />
-        <vers num="2.4.19" edition="pre4" />
-        <vers num="2.4.19" edition="pre5" />
-        <vers num="2.4.19" edition="pre6" />
-        <vers num="2.4.2" />
-        <vers num="2.4.20" />
-        <vers num="2.4.21" edition="pre1" />
-        <vers num="2.4.21" edition="pre4" />
-        <vers num="2.4.21" edition="pre7" />
-        <vers num="2.4.22" edition="pre10" />
-        <vers num="2.4.23" edition="pre9" />
-        <vers num="2.4.24" />
-        <vers num="2.4.25" />
-        <vers num="2.4.26" />
-        <vers num="2.4.27" edition="pre1" />
-        <vers num="2.4.27" edition="pre2" />
-        <vers num="2.4.27" edition="pre3" />
-        <vers num="2.4.27" edition="pre4" />
-        <vers num="2.4.27" edition="pre5" />
-        <vers num="2.4.28" />
-        <vers num="2.4.29" edition="rc1" />
-        <vers num="2.4.29" edition="rc2" />
-        <vers num="2.4.3" edition="pre3" />
-        <vers num="2.4.30" edition="rc2" />
-        <vers num="2.4.30" edition="rc3" />
-        <vers num="2.4.31" edition="pre1" />
-        <vers num="2.4.32" edition="pre1" />
-        <vers num="2.4.32" edition="pre2" />
-        <vers num="2.4.33" edition="pre1" />
-        <vers num="2.4.33.2" />
-        <vers num="2.4.33.3" />
-        <vers num="2.4.33.4" />
-        <vers num="2.4.33.5" />
-        <vers num="2.4.34" edition="rc3" />
-        <vers num="2.4.34.1" />
-        <vers num="2.4.34.2" />
-        <vers num="2.4.35" />
-        <vers num="2.4.35.2" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers num="2.4.8" />
-        <vers num="2.4.9" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.10" />
-        <vers num="2.5.11" />
-        <vers num="2.5.12" />
-        <vers num="2.5.13" />
-        <vers num="2.5.14" />
-        <vers num="2.5.15" />
-        <vers num="2.5.16" />
-        <vers num="2.5.17" />
-        <vers num="2.5.18" />
-        <vers num="2.5.19" />
-        <vers num="2.5.2" />
-        <vers num="2.5.20" />
-        <vers num="2.5.21" />
-        <vers num="2.5.22" />
-        <vers num="2.5.23" />
-        <vers num="2.5.24" />
-        <vers num="2.5.25" />
-        <vers num="2.5.26" />
-        <vers num="2.5.27" />
-        <vers num="2.5.28" />
-        <vers num="2.5.29" />
-        <vers num="2.5.3" />
-        <vers num="2.5.30" />
-        <vers num="2.5.31" />
-        <vers num="2.5.32" />
-        <vers num="2.5.33" />
-        <vers num="2.5.34" />
-        <vers num="2.5.35" />
-        <vers num="2.5.36" />
-        <vers num="2.5.37" />
-        <vers num="2.5.38" />
-        <vers num="2.5.39" />
-        <vers num="2.5.4" />
-        <vers num="2.5.40" />
-        <vers num="2.5.41" />
-        <vers num="2.5.42" />
-        <vers num="2.5.43" />
-        <vers num="2.5.44" />
-        <vers num="2.5.45" />
-        <vers num="2.5.46" />
-        <vers num="2.5.47" />
-        <vers num="2.5.48" />
-        <vers num="2.5.49" />
-        <vers num="2.5.5" />
-        <vers num="2.5.50" />
-        <vers num="2.5.51" />
-        <vers num="2.5.52" />
-        <vers num="2.5.53" />
-        <vers num="2.5.54" />
-        <vers num="2.5.55" />
-        <vers num="2.5.56" />
-        <vers num="2.5.57" />
-        <vers num="2.5.58" />
-        <vers num="2.5.59" />
-        <vers num="2.5.6" />
-        <vers num="2.5.60" />
-        <vers num="2.5.61" />
-        <vers num="2.5.62" />
-        <vers num="2.5.63" />
-        <vers num="2.5.64" />
-        <vers num="2.5.65" />
-        <vers num="2.5.66" />
-        <vers num="2.5.67" />
-        <vers num="2.5.68" />
-        <vers num="2.5.69" />
-        <vers num="2.5.7" />
-        <vers num="2.5.8" />
-        <vers num="2.5.9" />
-        <vers num="2.6.0" edition="test1" />
-        <vers num="2.6.0" edition="test10" />
-        <vers num="2.6.0" edition="test11" />
-        <vers num="2.6.0" edition="test2" />
-        <vers num="2.6.0" edition="test3" />
-        <vers num="2.6.0" edition="test4" />
-        <vers num="2.6.0" edition="test5" />
-        <vers num="2.6.0" edition="test6" />
-        <vers num="2.6.0" edition="test7" />
-        <vers num="2.6.0" edition="test8" />
-        <vers num="2.6.0" edition="test9" />
-        <vers num="2.6.1" edition="rc1" />
-        <vers num="2.6.1" edition="rc2" />
-        <vers num="2.6.1" edition="rc3" />
-        <vers num="2.6.10" edition="rc1" />
-        <vers num="2.6.10" edition="rc2" />
-        <vers num="2.6.10" edition="rc3" />
-        <vers num="2.6.11" edition="rc1" />
-        <vers num="2.6.11" edition="rc2" />
-        <vers num="2.6.11" edition="rc3" />
-        <vers num="2.6.11" edition="rc4" />
-        <vers num="2.6.11" edition="rc5" />
-        <vers num="2.6.11.1" />
-        <vers num="2.6.11.10" />
-        <vers num="2.6.11.11" />
-        <vers num="2.6.11.12" />
-        <vers num="2.6.11.2" />
-        <vers num="2.6.11.3" />
-        <vers num="2.6.11.4" />
-        <vers num="2.6.11.5" />
-        <vers num="2.6.11.6" />
-        <vers num="2.6.11.7" />
-        <vers num="2.6.11.8" />
-        <vers num="2.6.11.9" />
-        <vers num="2.6.12" edition="rc1" />
-        <vers num="2.6.12" edition="rc2" />
-        <vers num="2.6.12" edition="rc3" />
-        <vers num="2.6.12" edition="rc4" />
-        <vers num="2.6.12" edition="rc5" />
-        <vers num="2.6.12" edition="rc6" />
-        <vers num="2.6.12.1" />
-        <vers num="2.6.12.2" />
-        <vers num="2.6.12.3" />
-        <vers num="2.6.12.4" />
-        <vers num="2.6.12.5" />
-        <vers num="2.6.12.6" />
-        <vers num="2.6.13" edition="rc1" />
-        <vers num="2.6.13" edition="rc2" />
-        <vers num="2.6.13" edition="rc3" />
-        <vers num="2.6.13" edition="rc4" />
-        <vers num="2.6.13" edition="rc5" />
-        <vers num="2.6.13" edition="rc6" />
-        <vers num="2.6.13" edition="rc7" />
-        <vers num="2.6.13.1" />
-        <vers num="2.6.13.2" />
-        <vers num="2.6.13.3" />
-        <vers num="2.6.13.4" />
-        <vers num="2.6.13.5" />
-        <vers num="2.6.14" edition="rc1" />
-        <vers num="2.6.14" edition="rc2" />
-        <vers num="2.6.14" edition="rc3" />
-        <vers num="2.6.14" edition="rc4" />
-        <vers num="2.6.14" edition="rc5" />
-        <vers num="2.6.14.1" />
-        <vers num="2.6.14.2" />
-        <vers num="2.6.14.3" />
-        <vers num="2.6.14.4" />
-        <vers num="2.6.14.5" />
-        <vers num="2.6.14.6" />
-        <vers num="2.6.14.7" />
-        <vers num="2.6.15" edition="rc1" />
-        <vers num="2.6.15" edition="rc2" />
-        <vers num="2.6.15" edition="rc3" />
-        <vers num="2.6.15" edition="rc4" />
-        <vers num="2.6.15" edition="rc5" />
-        <vers num="2.6.15" edition="rc6" />
-        <vers num="2.6.15" edition="rc7" />
-        <vers num="2.6.15.1" />
-        <vers num="2.6.15.10" />
-        <vers num="2.6.15.11" />
-        <vers num="2.6.15.2" />
-        <vers num="2.6.15.3" />
-        <vers num="2.6.15.4" />
-        <vers num="2.6.15.5" />
-        <vers num="2.6.15.6" />
-        <vers num="2.6.15.7" />
-        <vers num="2.6.15.8" />
-        <vers num="2.6.15.9" />
-        <vers num="2.6.16" edition="rc1" />
-        <vers num="2.6.16" edition="rc2" />
-        <vers num="2.6.16" edition="rc3" />
-        <vers num="2.6.16" edition="rc4" />
-        <vers num="2.6.16" edition="rc5" />
-        <vers num="2.6.16" edition="rc6" />
-        <vers num="2.6.16" edition="rc7" />
-        <vers num="2.6.16.1" />
-        <vers num="2.6.16.10" />
-        <vers num="2.6.16.11" />
-        <vers num="2.6.16.12" />
-        <vers num="2.6.16.13" />
-        <vers num="2.6.16.14" />
-        <vers num="2.6.16.15" />
-        <vers num="2.6.16.16" />
-        <vers num="2.6.16.17" />
-        <vers num="2.6.16.18" />
-        <vers num="2.6.16.19" />
-        <vers num="2.6.16.2" />
-        <vers num="2.6.16.20" />
-        <vers num="2.6.16.21" />
-        <vers num="2.6.16.22" />
-        <vers num="2.6.16.23" />
-        <vers num="2.6.16.24" />
-        <vers num="2.6.16.25" />
-        <vers num="2.6.16.26" />
-        <vers num="2.6.16.27" />
-        <vers num="2.6.16.28" />
-        <vers num="2.6.16.29" />
-        <vers num="2.6.16.3" />
-        <vers num="2.6.16.30" />
-        <vers num="2.6.16.31" />
-        <vers num="2.6.16.32" />
-        <vers num="2.6.16.33" />
-        <vers num="2.6.16.34" />
-        <vers num="2.6.16.35" />
-        <vers num="2.6.16.36" />
-        <vers num="2.6.16.37" />
-        <vers num="2.6.16.38" />
-        <vers num="2.6.16.39" />
-        <vers num="2.6.16.4" />
-        <vers num="2.6.16.40" />
-        <vers num="2.6.16.41" />
-        <vers num="2.6.16.42" />
-        <vers num="2.6.16.43" />
-        <vers num="2.6.16.44" />
-        <vers num="2.6.16.45" />
-        <vers num="2.6.16.46" />
-        <vers num="2.6.16.47" />
-        <vers num="2.6.16.48" />
-        <vers num="2.6.16.49" />
-        <vers num="2.6.16.5" />
-        <vers num="2.6.16.50" />
-        <vers num="2.6.16.51" />
-        <vers num="2.6.16.52" />
-        <vers num="2.6.16.53" />
-        <vers num="2.6.16.54" />
-        <vers num="2.6.16.55" />
-        <vers num="2.6.16.56" />
-        <vers num="2.6.16.57" />
-        <vers num="2.6.16.58" />
-        <vers num="2.6.16.59" />
-        <vers num="2.6.16.6" />
-        <vers num="2.6.16.60" />
-        <vers num="2.6.16.61" />
-        <vers num="2.6.16.62" />
-        <vers num="2.6.16.7" />
-        <vers num="2.6.16.8" />
-        <vers num="2.6.16.9" />
-        <vers num="2.6.17" edition="rc1" />
-        <vers num="2.6.17" edition="rc2" />
-        <vers num="2.6.17" edition="rc3" />
-        <vers num="2.6.17" edition="rc4" />
-        <vers num="2.6.17" edition="rc5" />
-        <vers num="2.6.17" edition="rc6" />
-        <vers num="2.6.17.1" />
-        <vers num="2.6.17.10" />
-        <vers num="2.6.17.11" />
-        <vers num="2.6.17.12" />
-        <vers num="2.6.17.13" />
-        <vers num="2.6.17.14" />
-        <vers num="2.6.17.2" />
-        <vers num="2.6.17.3" />
-        <vers num="2.6.17.4" />
-        <vers num="2.6.17.5" />
-        <vers num="2.6.17.6" />
-        <vers num="2.6.17.7" />
-        <vers num="2.6.17.8" />
-        <vers num="2.6.17.9" />
-        <vers num="2.6.18" edition="rc1" />
-        <vers num="2.6.18" edition="rc2" />
-        <vers num="2.6.18" edition="rc3" />
-        <vers num="2.6.18" edition="rc4" />
-        <vers num="2.6.18" edition="rc5" />
-        <vers num="2.6.18" edition="rc6" />
-        <vers num="2.6.18" edition="rc7" />
-        <vers num="2.6.18.1" />
-        <vers num="2.6.18.2" />
-        <vers num="2.6.18.3" />
-        <vers num="2.6.18.4" />
-        <vers num="2.6.18.5" />
-        <vers num="2.6.18.6" />
-        <vers num="2.6.18.7" />
-        <vers num="2.6.18.8" />
-        <vers num="2.6.19" edition="rc1" />
-        <vers num="2.6.19" edition="rc2" />
-        <vers num="2.6.19" edition="rc3" />
-        <vers num="2.6.19" edition="rc4" />
-        <vers num="2.6.19.1" />
-        <vers num="2.6.19.2" />
-        <vers num="2.6.19.3" />
-        <vers num="2.6.19.4" />
-        <vers num="2.6.19.5" />
-        <vers num="2.6.19.6" />
-        <vers num="2.6.19.7" />
-        <vers num="2.6.2" edition="rc1" />
-        <vers num="2.6.2" edition="rc2" />
-        <vers num="2.6.2" edition="rc3" />
-        <vers num="2.6.20" edition="rc2" />
-        <vers num="2.6.20.1" />
-        <vers num="2.6.20.10" />
-        <vers num="2.6.20.11" />
-        <vers num="2.6.20.12" />
-        <vers num="2.6.20.13" />
-        <vers num="2.6.20.14" />
-        <vers num="2.6.20.15" />
-        <vers num="2.6.20.16" />
-        <vers num="2.6.20.17" />
-        <vers num="2.6.20.18" />
-        <vers num="2.6.20.19" />
-        <vers num="2.6.20.2" />
-        <vers num="2.6.20.20" />
-        <vers num="2.6.20.21" />
-        <vers num="2.6.20.3" />
-        <vers num="2.6.20.4" />
-        <vers num="2.6.20.5" />
-        <vers num="2.6.20.6" />
-        <vers num="2.6.20.7" />
-        <vers num="2.6.20.8" />
-        <vers num="2.6.20.9" />
-        <vers num="2.6.21" edition="git1" />
-        <vers num="2.6.21" edition="git2" />
-        <vers num="2.6.21" edition="git3" />
-        <vers num="2.6.21" edition="git4" />
-        <vers num="2.6.21" edition="git5" />
-        <vers num="2.6.21" edition="git6" />
-        <vers num="2.6.21" edition="git7" />
-        <vers num="2.6.21" edition="rc3" />
-        <vers num="2.6.21" edition="rc4" />
-        <vers num="2.6.21" edition="rc5" />
-        <vers num="2.6.21" edition="rc6" />
-        <vers num="2.6.21" edition="rc7" />
-        <vers num="2.6.21.1" />
-        <vers num="2.6.21.2" />
-        <vers num="2.6.21.3" />
-        <vers num="2.6.21.4" />
-        <vers num="2.6.21.5" />
-        <vers num="2.6.21.6" />
-        <vers num="2.6.21.7" />
-        <vers num="2.6.22" />
-        <vers num="2.6.22.1" />
-        <vers num="2.6.22.10" />
-        <vers num="2.6.22.11" />
-        <vers num="2.6.22.12" />
-        <vers num="2.6.22.13" />
-        <vers num="2.6.22.14" />
-        <vers num="2.6.22.15" />
-        <vers num="2.6.22.16" />
-        <vers num="2.6.22.17" />
-        <vers num="2.6.22.18" />
-        <vers num="2.6.22.19" />
-        <vers num="2.6.22.2" />
-        <vers num="2.6.22.20" />
-        <vers num="2.6.22.3" />
-        <vers num="2.6.22.4" />
-        <vers num="2.6.22.5" />
-        <vers num="2.6.22.6" />
-        <vers num="2.6.22.7" />
-        <vers num="2.6.22.8" />
-        <vers num="2.6.27.41" />
-        <vers num="2.6.27.42" />
-        <vers num="2.6.27.43" />
-        <vers num="2.6.27.44" />
-        <vers num="2.6.27.45" />
-        <vers num="2.6.27.46" />
-        <vers num="2.6.27.47" />
-        <vers num="2.6.27.48" />
-        <vers num="2.6.27.49" />
-        <vers num="2.6.27.5" />
-        <vers num="2.6.27.50" />
-        <vers num="2.6.27.51" />
-        <vers num="2.6.27.52" />
-        <vers num="2.6.27.53" />
-        <vers num="2.6.27.54" />
-        <vers num="2.6.27.55" />
-        <vers num="2.6.27.56" />
-        <vers num="2.6.27.57" />
-        <vers num="2.6.27.58" />
-        <vers num="2.6.27.59" />
-        <vers num="2.6.27.6" />
-        <vers num="2.6.27.60" />
-        <vers num="2.6.27.61" />
-        <vers num="2.6.27.62" />
-        <vers num="2.6.27.7" />
-        <vers num="2.6.27.8" />
-        <vers num="2.6.27.9" />
-        <vers num="2.6.28" />
-        <vers num="2.6.28.1" />
-        <vers num="2.6.28.10" />
-        <vers num="2.6.28.2" />
-        <vers num="2.6.28.3" />
-        <vers num="2.6.28.4" />
-        <vers num="2.6.28.5" />
-        <vers num="2.6.28.6" />
-        <vers num="2.6.28.7" />
-        <vers num="2.6.28.8" />
-        <vers num="2.6.28.9" />
-        <vers num="2.6.29" />
-        <vers num="2.6.29.1" />
-        <vers num="2.6.29.2" />
-        <vers num="2.6.29.3" />
-        <vers num="2.6.29.4" />
-        <vers num="2.6.29.5" />
-        <vers num="2.6.29.6" />
-        <vers num="2.6.3" edition="rc1" />
-        <vers num="2.6.3" edition="rc2" />
-        <vers num="2.6.3" edition="rc3" />
-        <vers num="2.6.3" edition="rc4" />
-        <vers num="2.6.32" />
-        <vers num="2.6.32.1" />
-        <vers num="2.6.32.10" />
-        <vers num="2.6.32.11" />
-        <vers num="2.6.32.12" />
-        <vers num="2.6.32.13" />
-        <vers num="2.6.32.14" />
-        <vers num="2.6.32.15" />
-        <vers num="2.6.32.16" />
-        <vers num="2.6.32.17" />
-        <vers num="2.6.32.18" />
-        <vers num="2.6.32.2" />
-        <vers num="2.6.32.28" />
-        <vers num="2.6.32.29" />
-        <vers num="2.6.32.3" />
-        <vers num="2.6.32.30" />
-        <vers num="2.6.32.31" />
-        <vers num="2.6.32.32" />
-        <vers num="2.6.32.33" />
-        <vers num="2.6.32.34" />
-        <vers num="2.6.32.35" />
-        <vers num="2.6.32.36" />
-        <vers num="2.6.32.37" />
-        <vers num="2.6.32.38" />
-        <vers num="2.6.32.39" />
-        <vers num="2.6.32.4" />
-        <vers num="2.6.32.40" />
-        <vers num="2.6.32.41" />
-        <vers num="2.6.32.42" />
-        <vers num="2.6.32.43" />
-        <vers num="2.6.32.44" />
-        <vers num="2.6.32.45" />
-        <vers num="2.6.32.46" />
-        <vers num="2.6.32.47" />
-        <vers num="2.6.32.48" />
-        <vers num="2.6.32.49" />
-        <vers num="2.6.32.5" />
-        <vers num="2.6.32.50" />
-        <vers num="2.6.32.51" />
-        <vers num="2.6.32.52" />
-        <vers num="2.6.32.53" />
-        <vers num="2.6.32.54" />
-        <vers num="2.6.32.55" />
-        <vers num="2.6.32.56" />
-        <vers num="2.6.32.57" />
-        <vers num="2.6.32.58" />
-        <vers num="2.6.32.6" />
-        <vers num="2.6.32.7" />
-        <vers num="2.6.32.8" />
-        <vers num="2.6.32.9" />
-        <vers num="2.6.33.10" />
-        <vers num="2.6.33.11" />
-        <vers num="2.6.33.12" />
-        <vers num="2.6.33.13" />
-        <vers num="2.6.33.14" />
-        <vers num="2.6.33.15" />
-        <vers num="2.6.33.16" />
-        <vers num="2.6.33.17" />
-        <vers num="2.6.33.18" />
-        <vers num="2.6.33.19" />
-        <vers num="2.6.33.20" />
-        <vers num="2.6.33.8" />
-        <vers num="2.6.33.9" />
-        <vers num="2.6.34.1" />
-        <vers num="2.6.34.10" />
-        <vers num="2.6.34.2" />
-        <vers num="2.6.34.3" />
-        <vers num="2.6.34.8" />
-        <vers num="2.6.34.9" />
-        <vers num="2.6.35.1" />
-        <vers num="2.6.35.10" />
-        <vers num="2.6.35.11" />
-        <vers num="2.6.35.12" />
-        <vers num="2.6.35.13" />
-        <vers num="2.6.37" edition="rc1" />
-        <vers num="2.6.37" edition="rc2" />
-        <vers num="2.6.37" edition="rc3" />
-        <vers num="2.6.37" edition="rc4" />
-        <vers num="2.6.37" edition="rc5" />
-        <vers num="2.6.38" edition="rc1" />
-        <vers num="2.6.38" edition="rc2" />
-        <vers num="2.6.38" edition="rc3" />
-        <vers num="2.6.38" edition="rc4" />
-        <vers num="2.6.38" edition="rc5" />
-        <vers num="2.6.38" edition="rc6" />
-        <vers num="2.6.38" edition="rc7" />
-        <vers num="2.6.38" edition="rc8" />
-        <vers num="2.6.39" edition="rc1" />
-        <vers num="2.6.39" edition="rc2" />
-        <vers num="2.6.39" edition="rc3" />
-        <vers num="2.6.39" edition="rc4" />
-        <vers num="2.6.39" edition="rc5" />
-        <vers num="2.6.39" edition="rc6" />
-        <vers num="2.6.39" edition="rc7" />
-        <vers num="2.6.4" edition="rc1" />
-        <vers num="2.6.4" edition="rc2" />
-        <vers num="2.6.4" edition="rc3" />
-        <vers num="2.6.5" edition="rc1" />
-        <vers num="2.6.5" edition="rc2" />
-        <vers num="2.6.5" edition="rc3" />
-        <vers num="2.6.6" edition="rc1" />
-        <vers num="2.6.6" edition="rc2" />
-        <vers num="2.6.6" edition="rc3" />
-        <vers num="2.6.7" edition="rc1" />
-        <vers num="2.6.7" edition="rc2" />
-        <vers num="2.6.7" edition="rc3" />
-        <vers num="2.6.8" edition="rc1" />
-        <vers num="2.6.8" edition="rc2" />
-        <vers num="2.6.8" edition="rc3" />
-        <vers num="2.6.8" edition="rc4" />
-        <vers num="2.6.8.1" />
-        <vers num="2.6.9" edition="rc1" />
-        <vers num="2.6.9" edition="rc2" />
-        <vers num="2.6.9" edition="rc3" />
-        <vers num="2.6.9" edition="rc4" />
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0" edition="rc2" />
-        <vers num="3.0" edition="rc3" />
-        <vers num="3.0" edition="rc4" />
-        <vers num="3.0" edition="rc5" />
-        <vers num="3.0" edition="rc6" />
-        <vers num="3.0" edition="rc7" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.19" />
-        <vers num="3.0.20" />
-        <vers num="3.0.21" />
-        <vers num="3.0.22" />
-        <vers num="3.0.23" />
-        <vers num="3.0.24" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.2" edition="rc2" />
-        <vers num="3.2" edition="rc3" />
-        <vers num="3.2" edition="rc4" />
-        <vers num="3.2" edition="rc5" />
-        <vers num="3.2" edition="rc6" />
-        <vers num="3.2" edition="rc7" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" />
-        <vers num="3.2.8" />
-        <vers prev="1" num="3.2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1147" published="2012-07-03" name="CVE-2012-1147" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://trac.wxwidgets.org/ticket/11432" source="MISC">http://trac.wxwidgets.org/ticket/11432</ref>
-      <ref url="http://trac.wxwidgets.org/ticket/11194" source="MISC">http://trac.wxwidgets.org/ticket/11194</ref>
-      <ref url="http://sourceforge.net/tracker/?func=detail&amp;aid=2895533&amp;group_id=10127&amp;atid=110127" source="CONFIRM">http://sourceforge.net/tracker/?func=detail&amp;aid=2895533&amp;group_id=10127&amp;atid=110127</ref>
-      <ref url="http://sourceforge.net/projects/expat/files/expat/2.1.0/" source="CONFIRM">http://sourceforge.net/projects/expat/files/expat/2.1.0/</ref>
-      <ref url="http://expat.cvs.sourceforge.net/viewvc/expat/expat/xmlwf/readfilemap.c?r1=1.14&amp;r2=1.15" source="CONFIRM">http://expat.cvs.sourceforge.net/viewvc/expat/expat/xmlwf/readfilemap.c?r1=1.14&amp;r2=1.15</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="libexpat" name="expat">
-        <vers num="1.95.1" />
-        <vers num="1.95.2" />
-        <vers num="1.95.4" />
-        <vers num="1.95.5" />
-        <vers num="1.95.6" />
-        <vers num="1.95.7" />
-        <vers num="1.95.8" />
-        <vers num="2.0.0" />
-        <vers prev="1" num="2.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1148" published="2012-07-03" name="CVE-2012-1148" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmlparse.c?r1=1.166&amp;r2=1.167" source="CONFIRM" patch="1">http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmlparse.c?r1=1.166&amp;r2=1.167</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:041" source="MANDRIVA">MDVSA-2012:041</ref>
-      <ref url="http://sourceforge.net/tracker/?func=detail&amp;atid=110127&amp;aid=2958794&amp;group_id=10127" source="CONFIRM">http://sourceforge.net/tracker/?func=detail&amp;atid=110127&amp;aid=2958794&amp;group_id=10127</ref>
-      <ref url="http://sourceforge.net/projects/expat/files/expat/2.1.0/" source="CONFIRM">http://sourceforge.net/projects/expat/files/expat/2.1.0/</ref>
-      <ref url="http://secunia.com/advisories/49504" source="SECUNIA" adv="1">49504</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0731.html" source="REDHAT">RHSA-2012:0731</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="libexpat" name="expat">
-        <vers num="1.95.1" />
-        <vers num="1.95.2" />
-        <vers num="1.95.4" />
-        <vers num="1.95.5" />
-        <vers num="1.95.6" />
-        <vers num="1.95.7" />
-        <vers num="1.95.8" />
-        <vers num="2.0.0" />
-        <vers prev="1" num="2.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1149" published="2012-06-21" name="CVE-2012-1149" modified="2012-06-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JPEG image in a .DOC file, which triggers a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://securitytracker.com/id?1027068" source="SECTRACK" patch="1">1027068</ref>
-      <ref url="http://www.securityfocus.com/bid/53570" source="BID">53570</ref>
-      <ref url="http://www.osvdb.org/81988" source="OSVDB">81988</ref>
-      <ref url="http://www.openoffice.org/security/cves/CVE-2012-1149.html" source="CONFIRM">http://www.openoffice.org/security/cves/CVE-2012-1149.html</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:091" source="MANDRIVA">MDVSA-2012:091</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:090" source="MANDRIVA">MDVSA-2012:090</ref>
-      <ref url="http://www.libreoffice.org/advisories/cve-2012-1149%20/" source="CONFIRM">http://www.libreoffice.org/advisories/cve-2012-1149 /</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2487" source="DEBIAN">DSA-2487</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2473" source="DEBIAN">DSA-2473</ref>
-      <ref url="http://secunia.com/advisories/49392" source="SECUNIA" adv="1">49392</ref>
-      <ref url="http://secunia.com/advisories/49373" source="SECUNIA" adv="1">49373</ref>
-      <ref url="http://secunia.com/advisories/47244" source="SECUNIA" adv="1">47244</ref>
-      <ref url="http://secunia.com/advisories/46992" source="SECUNIA" adv="1">46992</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0705.html" source="REDHAT">RHSA-2012:0705</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081319.html" source="FEDORA">FEDORA-2012-8042</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082168.html" source="FEDORA">FEDORA-2012-8114</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="openoffice.org">
-        <vers num="3.3" />
-        <vers num="3.4" edition="beta" />
-      </prod>
-      <prod vendor="libreoffice" name="libreoffice">
-        <vers num="3.3.0" />
-        <vers num="3.3.1" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers num="3.3.4" />
-        <vers num="3.4.0" />
-        <vers num="3.4.1" />
-        <vers num="3.4.2" />
-        <vers num="3.4.5" />
-        <vers num="3.5" />
-        <vers prev="1" num="3.5.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1151" published="2012-09-09" name="CVE-2012-1151" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostgreSQL database servers to cause a denial of service (process crash) via format string specifiers in (1) a crafted database warning to the pg_warn function or (2) a crafted DBD statement to the dbd_st_prepare function.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://rt.cpan.org/Public/Bug/Display.html?id=75642" source="CONFIRM">https://rt.cpan.org/Public/Bug/Display.html?id=75642</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=801733" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=801733</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73855" source="XF">dbdpg-dbdstprepare-format-string(73855)</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73854" source="XF">dbdpg-pgwarn-format-string(73854)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/10/4" source="MLIST">[oss-security] 20120309 Re: CVE Request -- libdbd-pg-perl / perl-DBD-Pg &amp;&amp; libyaml-libyaml-perl / perl-YAML-LibYAML: Multiple format string flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/09/6" source="MLIST">[oss-security] 20120309 CVE Request -- libdbd-pg-perl / perl-DBD-Pg &amp;&amp; libyaml-libyaml-perl / perl-YAML-LibYAML: Multiple format string flaws</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2431" source="DEBIAN">DSA-2431</ref>
-      <ref url="http://secunia.com/advisories/48319" source="SECUNIA" adv="1">48319</ref>
-      <ref url="http://secunia.com/advisories/48307" source="SECUNIA" adv="1">48307</ref>
-      <ref url="http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.19.1/Changes" source="CONFIRM">http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.19.1/Changes</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661536" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661536</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="perl" name="perl">
-        <vers num="0.1" />
-        <vers num="0.2" />
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="0.52" />
-        <vers num="0.61" />
-        <vers num="0.62" />
-        <vers num="0.63" />
-        <vers num="0.64" />
-        <vers num="0.65" />
-        <vers num="0.66" />
-        <vers num="0.67" />
-        <vers num="0.68" />
-        <vers num="0.69" />
-        <vers num="0.70" />
-        <vers num="0.71" />
-        <vers num="0.72" />
-        <vers num="0.73" />
-        <vers num="0.80" />
-        <vers num="0.81" />
-        <vers num="0.82" />
-        <vers num="0.83" />
-        <vers num="0.84" />
-        <vers num="0.85" />
-        <vers num="0.86" />
-        <vers num="0.87" />
-        <vers num="0.88" />
-        <vers num="0.89" />
-        <vers num="0.90" />
-        <vers num="0.91" />
-        <vers num="0.92" />
-        <vers num="0.93" />
-        <vers num="0.94" />
-        <vers num="0.95" />
-        <vers num="0.96" />
-        <vers num="0.97" />
-        <vers num="0.98" />
-        <vers num="0.99" />
-        <vers num="1.00" />
-        <vers num="1.01" />
-        <vers num="1.20" />
-        <vers num="1.21" />
-        <vers num="1.22" />
-        <vers num="1.31" />
-        <vers num="1.32" />
-        <vers num="1.40" />
-        <vers num="1.41" />
-        <vers num="1.42" />
-        <vers num="1.43" />
-        <vers num="1.44" />
-        <vers num="1.45" />
-        <vers num="1.46" />
-        <vers num="1.47" />
-        <vers num="1.48" />
-        <vers num="1.49" />
-        <vers num="2.0.0" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.10.0" />
-        <vers num="2.10.1" />
-        <vers num="2.10.2" />
-        <vers num="2.10.3" />
-        <vers num="2.10.4" />
-        <vers num="2.10.5" />
-        <vers num="2.10.6" />
-        <vers num="2.10.7" />
-        <vers num="2.11.0" />
-        <vers num="2.11.1" />
-        <vers num="2.11.2" />
-        <vers num="2.11.3" />
-        <vers num="2.11.4" />
-        <vers num="2.11.5" />
-        <vers num="2.11.6" />
-        <vers num="2.11.7" />
-        <vers num="2.11.8" />
-        <vers num="2.12.0" />
-        <vers num="2.13.0" />
-        <vers num="2.14.0" />
-        <vers num="2.14.1" />
-        <vers num="2.15.0" />
-        <vers num="2.15.1" />
-        <vers num="2.16.0" />
-        <vers num="2.16.1" />
-        <vers num="2.17.0" />
-        <vers num="2.17.1" />
-        <vers num="2.17.2" />
-        <vers num="2.18.0" />
-        <vers prev="1" num="2.18.1" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.3.0" />
-        <vers num="2.4.0" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8.0" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" />
-        <vers num="2.8.5" />
-        <vers num="2.8.6" />
-        <vers num="2.8.7" />
-        <vers num="2.8.8" />
-        <vers num="2.9.0" />
-        <vers num="2.9.1" />
-        <vers num="2.9.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1152" published="2012-09-09" name="CVE-2012-1152" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Multiple format string vulnerabilities in the error reporting functionality in the YAML::LibYAML (aka YAML-LibYAML and perl-YAML-LibYAML) module 0.38 for Perl allow remote attackers to cause a denial of service (process crash) via format string specifiers in a (1) YAML stream to the Load function, (2) YAML node to the load_node function, (3) YAML mapping to the load_mapping function, or (4) YAML sequence to the load_sequence function.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://rt.cpan.org/Public/Bug/Display.html?id=75365" source="MISC">https://rt.cpan.org/Public/Bug/Display.html?id=75365</ref>
-      <ref url="https://rt.cpan.org/Public/Bug/Display.html?id=46507" source="MISC">https://rt.cpan.org/Public/Bug/Display.html?id=46507</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=801738" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=801738</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73856" source="XF">yaml-load-format-string(73856)</ref>
-      <ref url="http://www.securityfocus.com/bid/52381" source="BID">52381</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/10/4" source="MLIST">[oss-security] 20120309 Re: CVE Request -- libdbd-pg-perl / perl-DBD-Pg &amp;&amp; libyaml-libyaml-perl / perl-YAML-LibYAML: Multiple format string flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/09/6" source="MLIST">[oss-security] 20120309 CVE Request -- libdbd-pg-perl / perl-DBD-Pg &amp;&amp; libyaml-libyaml-perl / perl-YAML-LibYAML: Multiple format string flaws</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2432" source="DEBIAN">DSA-2432</ref>
-      <ref url="http://secunia.com/advisories/48317" source="SECUNIA" adv="1">48317</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077782.html" source="FEDORA">FEDORA-2012-4871</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077023.html" source="FEDORA">FEDORA-2012-5035</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077004.html" source="FEDORA">FEDORA-2012-4997</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661548" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661548</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ingy" name="yaml::libyaml">
-        <vers num="0.38" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1162" published="2012-07-12" name="CVE-2012-1162" modified="2012-07-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a zip archive with the number of directories set to 0, related to an "incorrect loop construct."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/29/11" source="MLIST">[oss-security] 20120329 Re: CVE-2012-1162 / -1163: Incorrect loop construct and numeric  overflow in libzip</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/21/2" source="MLIST">[oss-security] 20120321 CVE-2012-1162 / -1163: Incorrect loop construct and numeric  overflow in libzip</ref>
-      <ref url="http://www.nih.at/libzip/NEWS.html" source="CONFIRM">http://www.nih.at/libzip/NEWS.html</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:034" source="MANDRIVA">MDVSA-2012:034</ref>
-      <ref url="http://www.gentoo.org/security/en/glsa/glsa-201203-23.xml" source="GENTOO">GLSA-201203-23</ref>
-      <ref url="http://nih.at/listarchive/libzip-discuss/msg00252.html" source="MLIST">[libzip-discuss] 20120320 libzip-0.10.1 security fix release</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nih" name="libzip">
-        <vers num="0.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1163" published="2012-07-12" name="CVE-2012-1163" modified="2012-07-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size and offset values for the central directory in a zip archive, which triggers "improper restrictions of operations within the bounds of a memory buffer" and an information leak.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/29/11" source="MLIST">[oss-security] 20120329 Re: CVE-2012-1162 / -1163: Incorrect loop construct and numeric  overflow in libzip</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/21/2" source="MLIST">[oss-security] 20120321 CVE-2012-1162 / -1163: Incorrect loop construct and numeric  overflow in libzip</ref>
-      <ref url="http://www.nih.at/libzip/NEWS.html" source="CONFIRM">http://www.nih.at/libzip/NEWS.html</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:034" source="MANDRIVA">MDVSA-2012:034</ref>
-      <ref url="http://www.gentoo.org/security/en/glsa/glsa-201203-23.xml" source="GENTOO">GLSA-201203-23</ref>
-      <ref url="http://nih.at/listarchive/libzip-discuss/msg00252.html" source="MLIST">[libzip-discuss] 20120320 libzip-0.10.1 security fix release</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nih" name="libzip">
-        <vers num="0.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1164" published="2012-06-29" name="CVE-2012-1164" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:N/A:P)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openldap.org/software/release/changes.html" source="CONFIRM">http://www.openldap.org/software/release/changes.html</ref>
-      <ref url="http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7143" source="CONFIRM" adv="1">http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7143</ref>
-      <ref url="http://secunia.com/advisories/49607" source="SECUNIA" adv="1">49607</ref>
-      <ref url="http://secunia.com/advisories/48372" source="SECUNIA" adv="1">48372</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0899.html" source="REDHAT">RHSA-2012:0899</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openldap" name="openldap">
-        <vers num="2.4.10" />
-        <vers num="2.4.11" />
-        <vers num="2.4.12" />
-        <vers num="2.4.13" />
-        <vers num="2.4.14" />
-        <vers num="2.4.15" />
-        <vers num="2.4.16" />
-        <vers num="2.4.17" />
-        <vers num="2.4.18" />
-        <vers num="2.4.19" />
-        <vers num="2.4.20" />
-        <vers num="2.4.21" />
-        <vers num="2.4.22" />
-        <vers num="2.4.23" />
-        <vers num="2.4.24" />
-        <vers num="2.4.25" />
-        <vers num="2.4.26" />
-        <vers num="2.4.27" />
-        <vers num="2.4.28" />
-        <vers prev="1" num="2.4.29" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers num="2.4.8" />
-        <vers num="2.4.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1165" published="2012-03-15" name="CVE-2012-1165" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message, a different vulnerability than CVE-2006-7250.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.ubuntu.com/usn/USN-1424-1" source="UBUNTU">USN-1424-1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/13/2" source="MLIST">[oss-security] 20120312 Re: CVE request: openssl: null pointer dereference issue</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/12/7" source="MLIST">[oss-security] 20120312 Re: CVE request: openssl: null pointer dereference issue</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/12/6" source="MLIST">[oss-security] 20120312 Re: CVE request: openssl: null pointer dereference issue</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/12/3" source="MLIST">[oss-security] 20120312 Re: CVE request: openssl: null pointer dereference issue</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2454" source="DEBIAN">DSA-2454</ref>
-      <ref url="http://secunia.com/advisories/48895" source="SECUNIA">48895</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134039053214295&amp;w=2" source="HP">HPSBOV02793</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134039053214295&amp;w=2" source="HP">SSRT100891</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077086.html" source="FEDORA">FEDORA-2012-4665</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">SSRT100877</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">HPSBMU02786</ref>
-      <ref url="http://cvs.openssl.org/chngview?cn=22252" source="CONFIRM">http://cvs.openssl.org/chngview?cn=22252</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openssl" name="openssl">
-        <vers num="0.9.1c" />
-        <vers num="0.9.2b" />
-        <vers num="0.9.3" />
-        <vers num="0.9.3a" />
-        <vers num="0.9.4" />
-        <vers num="0.9.5" edition="beta1" />
-        <vers num="0.9.5" edition="beta2" />
-        <vers num="0.9.5a" edition="beta1" />
-        <vers num="0.9.5a" edition="beta2" />
-        <vers num="0.9.6" edition="beta1" />
-        <vers num="0.9.6" edition="beta2" />
-        <vers num="0.9.6" edition="beta3" />
-        <vers num="0.9.6a" edition="beta1" />
-        <vers num="0.9.6a" edition="beta2" />
-        <vers num="0.9.6a" edition="beta3" />
-        <vers num="0.9.6b" />
-        <vers num="0.9.6c" />
-        <vers num="0.9.6d" />
-        <vers num="0.9.6e" />
-        <vers num="0.9.6f" />
-        <vers num="0.9.6g" />
-        <vers num="0.9.6h" />
-        <vers num="0.9.6i" />
-        <vers num="0.9.6j" />
-        <vers num="0.9.6k" />
-        <vers num="0.9.6l" />
-        <vers num="0.9.6m" />
-        <vers num="0.9.7" edition="beta1" />
-        <vers num="0.9.7" edition="beta2" />
-        <vers num="0.9.7" edition="beta3" />
-        <vers num="0.9.7" edition="beta4" />
-        <vers num="0.9.7" edition="beta5" />
-        <vers num="0.9.7" edition="beta6" />
-        <vers num="0.9.7a" />
-        <vers num="0.9.7b" />
-        <vers num="0.9.7c" />
-        <vers num="0.9.7d" />
-        <vers num="0.9.7e" />
-        <vers num="0.9.7f" />
-        <vers num="0.9.7g" />
-        <vers num="0.9.7h" />
-        <vers num="0.9.7i" />
-        <vers num="0.9.7j" />
-        <vers num="0.9.7k" />
-        <vers num="0.9.7l" />
-        <vers num="0.9.7m" />
-        <vers num="0.9.8" />
-        <vers num="0.9.8a" />
-        <vers num="0.9.8b" />
-        <vers num="0.9.8c" />
-        <vers num="0.9.8d" />
-        <vers num="0.9.8e" />
-        <vers num="0.9.8f" />
-        <vers num="0.9.8g" />
-        <vers num="0.9.8h" />
-        <vers num="0.9.8i" />
-        <vers num="0.9.8j" />
-        <vers num="0.9.8k" />
-        <vers num="0.9.8l" />
-        <vers num="0.9.8m" edition="beta1" />
-        <vers num="0.9.8n" />
-        <vers num="0.9.8o" />
-        <vers num="0.9.8p" />
-        <vers num="0.9.8q" />
-        <vers num="0.9.8r" />
-        <vers num="0.9.8s" />
-        <vers prev="1" num="0.9.8t" />
-        <vers num="1.0.0" edition="beta1" />
-        <vers num="1.0.0" edition="beta2" />
-        <vers num="1.0.0" edition="beta3" />
-        <vers num="1.0.0" edition="beta4" />
-        <vers num="1.0.0" edition="beta5" />
-        <vers num="1.0.0a" />
-        <vers num="1.0.0b" />
-        <vers num="1.0.0c" />
-        <vers num="1.0.0d" />
-        <vers num="1.0.0e" />
-        <vers num="1.0.0f" />
-        <vers num="1.0.0g" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1172" published="2012-05-23" name="CVE-2012-1172" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:P)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://svn.php.net/viewvc/php/php-src/branches/PHP_5_4/main/rfc1867.c?r1=321664&amp;r2=321663&amp;pathrev=321664" source="CONFIRM" patch="1">http://svn.php.net/viewvc/php/php-src/branches/PHP_5_4/main/rfc1867.c?r1=321664&amp;r2=321663&amp;pathrev=321664</ref>
-      <ref url="https://students.mimuw.edu.pl/~ai292615/php_multipleupload_overwrite.pdf" source="MISC">https://students.mimuw.edu.pl/~ai292615/php_multipleupload_overwrite.pdf</ref>
-      <ref url="https://nealpoole.com/blog/2011/10/directory-traversal-via-php-multi-file-uploads/" source="MISC">https://nealpoole.com/blog/2011/10/directory-traversal-via-php-multi-file-uploads/</ref>
-      <ref url="https://bugs.php.net/bug.php?id=55500" source="CONFIRM">https://bugs.php.net/bug.php?id=55500</ref>
-      <ref url="https://bugs.php.net/bug.php?id=54374" source="CONFIRM">https://bugs.php.net/bug.php?id=54374</ref>
-      <ref url="https://bugs.php.net/bug.php?id=49683" source="MISC">https://bugs.php.net/bug.php?id=49683</ref>
-      <ref url="https://bugs.php.net/bug.php?id=48597" source="MISC">https://bugs.php.net/bug.php?id=48597</ref>
-      <ref url="http://www.php.net/ChangeLog-5.php#5.4.0" source="CONFIRM">http://www.php.net/ChangeLog-5.php#5.4.0</ref>
-      <ref url="http://svn.php.net/viewvc?view=revision&amp;revision=321664" source="CONFIRM">http://svn.php.net/viewvc?view=revision&amp;revision=321664</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/03/13/4" source="MLIST">[oss-security] 20120313 Re: CVE request for PHP 5.3.x Corrupted $_FILES indices lead to security concern</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134012830914727&amp;w=2" source="HP">HPSBUX02791</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134012830914727&amp;w=2" source="HP">SSRT100856</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080070.html" source="FEDORA">FEDORA-2012-6869</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080041.html" source="FEDORA">FEDORA-2012-6907</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080037.html" source="FEDORA">FEDORA-2012-6911</ref>
-      <ref url="http://isisblogs.poly.edu/2011/08/11/php-not-properly-checking-params/" source="MISC">http://isisblogs.poly.edu/2011/08/11/php-not-properly-checking-params/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="5.0.0" edition="beta1" />
-        <vers num="5.0.0" edition="beta2" />
-        <vers num="5.0.0" edition="beta3" />
-        <vers num="5.0.0" edition="beta4" />
-        <vers num="5.0.0" edition="rc1" />
-        <vers num="5.0.0" edition="rc2" />
-        <vers num="5.0.0" edition="rc3" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.1.0" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers num="5.2.0" />
-        <vers num="5.2.1" />
-        <vers num="5.2.10" />
-        <vers num="5.2.11" />
-        <vers num="5.2.12" />
-        <vers num="5.2.13" />
-        <vers num="5.2.14" />
-        <vers num="5.2.15" />
-        <vers num="5.2.16" />
-        <vers num="5.2.17" />
-        <vers num="5.2.2" />
-        <vers num="5.2.3" />
-        <vers num="5.2.4" />
-        <vers num="5.2.5" />
-        <vers num="5.2.6" />
-        <vers num="5.2.7" />
-        <vers num="5.2.8" />
-        <vers num="5.2.9" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers prev="1" num="5.3.10" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers num="5.3.8" />
-        <vers num="5.3.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1173" published="2012-06-04" name="CVE-2012-1173" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/14302713" source="SUSE">openSUSE-SU-2012:0539</ref>
-      <ref url="https://downloads.avaya.com/css/P8/documents/100161772" source="CONFIRM">https://downloads.avaya.com/css/P8/documents/100161772</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74656" source="XF">libtiff-gttileseparate-bo(74656)</ref>
-      <ref url="http://www.securityfocus.com/bid/52891" source="BID">52891</ref>
-      <ref url="http://www.osvdb.org/81025" source="OSVDB">81025</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2447" source="DEBIAN">DSA-2447</ref>
-      <ref url="http://ubuntu.com/usn/usn-1416-1" source="UBUNTU">USN-1416-1</ref>
-      <ref url="http://secunia.com/advisories/48893" source="SECUNIA" adv="1">48893</ref>
-      <ref url="http://secunia.com/advisories/48757" source="SECUNIA" adv="1">48757</ref>
-      <ref url="http://secunia.com/advisories/48735" source="SECUNIA" adv="1">48735</ref>
-      <ref url="http://secunia.com/advisories/48722" source="SECUNIA" adv="1">48722</ref>
-      <ref url="http://secunia.com/advisories/48684" source="SECUNIA" adv="1">48684</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0468.html" source="REDHAT">RHSA-2012:0468</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078835.html" source="FEDORA">FEDORA-2012-5410</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078403.html" source="FEDORA">FEDORA-2012-5406</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077463.html" source="FEDORA">FEDORA-2012-5463</ref>
-      <ref url="http://home.gdal.org/private/zdi-can-1221/zdi-can-1221.txt" source="MISC">http://home.gdal.org/private/zdi-can-1221/zdi-can-1221.txt</ref>
-      <ref url="http://bugzilla.maptools.org/show_bug.cgi?id=2369" source="CONFIRM">http://bugzilla.maptools.org/show_bug.cgi?id=2369</ref>
-      <ref url="http://bugzilla.maptools.org/attachment.cgi?id=477&amp;action=diff" source="MISC">http://bugzilla.maptools.org/attachment.cgi?id=477&amp;action=diff</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="libtiff" name="libtiff">
-        <vers num="3.9.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1174" published="2012-07-12" name="CVE-2012-1174" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:N/I:P/A:P)" CVSS_score="3.3" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.4" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://cgit.freedesktop.org/systemd/systemd/commit/?id=5ebff5337594d690b322078c512eb222d34aaa82" source="CONFIRM" patch="1">http://cgit.freedesktop.org/systemd/systemd/commit/?id=5ebff5337594d690b322078c512eb222d34aaa82</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=803358" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=803358</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/16/21" source="MLIST">[oss-security] 20120316 [Notification] CVE-2012-1174 systemd: TOCTOU race condition by removing  user session</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:030" source="MANDRIVA">MDVSA-2012:030</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079075.html" source="FEDORA">FEDORA-2012-6456</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="systemd">
-        <vers num="43" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1175" published="2012-08-26" name="CVE-2012-1175" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=803443" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=803443</ref>
-      <ref url="http://www.securityfocus.com/bid/52446" source="BID">52446</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/14/6" source="MLIST">[oss-security] 20120314 Re: CVE request: gnash integer overflow</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/14/5" source="MLIST">[oss-security] 20120314 CVE request: gnash integer overflow</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2435" source="DEBIAN">DSA-2435</ref>
-      <ref url="http://secunia.com/advisories/48466" source="SECUNIA">48466</ref>
-      <ref url="http://secunia.com/advisories/47183" source="SECUNIA">47183</ref>
-      <ref url="http://git.savannah.gnu.org/cgit/gnash.git/commit/?id=bb4dc77eecb6ed1b967e3ecbce3dac6c5e6f1527" source="CONFIRM">http://git.savannah.gnu.org/cgit/gnash.git/commit/?id=bb4dc77eecb6ed1b967e3ecbce3dac6c5e6f1527</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnu" name="gnash">
-        <vers num="0.8.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1176" published="2012-08-26" name="CVE-2012-1176" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service (application crash) via a 4-byte utf-8 sequence.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/pediapress/pyfribidi/issues/2%29:" source="CONFIRM">https://github.com/pediapress/pyfribidi/issues/2%29:</ref>
-      <ref url="https://github.com/pediapress/pyfribidi/commit/d2860c655357975e7b32d84e6b45e98f0dcecd7a" source="CONFIRM">https://github.com/pediapress/pyfribidi/commit/d2860c655357975e7b32d84e6b45e98f0dcecd7a</ref>
-      <ref url="https://bugzilla.wikimedia.org/show_bug.cgi?id=35055" source="MISC">https://bugzilla.wikimedia.org/show_bug.cgi?id=35055</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=801896" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=801896</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74001" source="XF">fribidi-utf8-bo(74001)</ref>
-      <ref url="http://www.securityfocus.com/bid/52451" source="BID">52451</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/14/9" source="MLIST">[oss-security] 20120314 Re: CVE request: pyfribidi buffer overflow flaw</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/14/4" source="MLIST">[oss-security] 20120314 CVE request: pyfribidi buffer overflow flaw</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075293.html" source="FEDORA">FEDORA-2012-3513</ref>
-      <ref url="http://groups.google.com/group/linux.debian.bugs.dist/browse_thread/thread/aacd036037217998/8d095f85f3665bff?lnk=raot" source="MISC">http://groups.google.com/group/linux.debian.bugs.dist/browse_thread/thread/aacd036037217998/8d095f85f3665bff?lnk=raot</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663189" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663189</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="fribidi" name="pyfribidi">
-        <vers prev="1" num="0.10.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1177" published="2012-08-26" name="CVE-2012-1177" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="5.1" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="4.9" CVSS_base_score="5.1">
-    <desc>
-      <descript source="cve">libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-      <sec_prot user="1" />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=752088" source="MISC">https://bugzilla.novell.com/show_bug.cgi?id=752088</ref>
-      <ref url="https://bugzilla.gnome.org/show_bug.cgi?id=671535" source="MISC">https://bugzilla.gnome.org/show_bug.cgi?id=671535</ref>
-      <ref url="https://bugs.launchpad.net/ubuntu/+source/libgdata/+bug/938812" source="MISC">https://bugs.launchpad.net/ubuntu/+source/libgdata/+bug/938812</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/14/8" source="MLIST">[oss-security] 20120314 Re: CVE Request: libgdata did not verify SSL certificates</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/14/3" source="MLIST">[oss-security] 20120314 Re: CVE Request: libgdata did not verify SSL certificates</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/14/1" source="MLIST">[oss-security] 20120314 CVE Request: libgdata did not verify SSL certificates</ref>
-      <ref url="http://git.gnome.org/browse/libgdata/commit/?id=6799f2c525a584dc998821a6ce897e463dad7840" source="CONFIRM">http://git.gnome.org/browse/libgdata/commit/?id=6799f2c525a584dc998821a6ce897e463dad7840</ref>
-      <ref url="http://git.gnome.org/browse/libgdata/commit/?h=libgdata-0-10&amp;id=8eff8fa9138859e03e58c2aa76600ab63eb5c29c" source="CONFIRM">http://git.gnome.org/browse/libgdata/commit/?h=libgdata-0-10&amp;id=8eff8fa9138859e03e58c2aa76600ab63eb5c29c</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnome" name="libgdata">
-        <vers prev="1" num="0.10.1" />
-        <vers prev="1" num="0.11.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1178" published="2012-03-15" name="CVE-2012-1178" modified="2012-03-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The msn_oim_report_to_user function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service (application crash) via an OIM message that lacks UTF-8 encoding.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://pidgin.im/news/security/?id=61" source="CONFIRM" adv="1">http://pidgin.im/news/security/?id=61</ref>
-      <ref url="http://developer.pidgin.im/viewmtn/revision/info/3053d6a37cc6d8774aba7607b992a4408216adcd" source="CONFIRM">http://developer.pidgin.im/viewmtn/revision/info/3053d6a37cc6d8774aba7607b992a4408216adcd</ref>
-      <ref url="http://developer.pidgin.im/viewmtn/revision/diff/60f8379d0a610538cf42e0dd9ab1436c8b9308cd/with/3053d6a37cc6d8774aba7607b992a4408216adcd/libpurple/protocols/msn/oim.c" source="CONFIRM">http://developer.pidgin.im/viewmtn/revision/diff/60f8379d0a610538cf42e0dd9ab1436c8b9308cd/with/3053d6a37cc6d8774aba7607b992a4408216adcd/libpurple/protocols/msn/oim.c</ref>
-      <ref url="http://developer.pidgin.im/ticket/14884" source="CONFIRM">http://developer.pidgin.im/ticket/14884</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pidgin" name="pidgin">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.10.0" />
-        <vers prev="1" num="2.10.1" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-        <vers num="2.5.4" />
-        <vers num="2.5.5" />
-        <vers num="2.5.6" />
-        <vers num="2.5.7" />
-        <vers num="2.5.8" />
-        <vers num="2.5.9" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.11" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-        <vers num="2.8.0" />
-        <vers num="2.9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1179" published="2012-05-17" name="CVE-2012-1179" modified="2012-05-17" CVSS_version="2.0" CVSS_vector="(AV:A/AC:M/Au:S/C:N/I:N/A:C)" CVSS_score="5.2" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="4.4" CVSS_base_score="5.2">
-    <desc>
-      <descript source="cve">The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service (host OS crash) by leveraging administrative access to the guest OS, related to the pmd_none_or_clear_bad function and page faults for huge pages.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/4a1d704194a441bf83c636004a479e01360ec850" source="CONFIRM">https://github.com/torvalds/linux/commit/4a1d704194a441bf83c636004a479e01360ec850</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=803793" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=803793</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/15/7" source="MLIST">[oss-security] 20120315 CVE-2012-1179 kernel: thp: __split_huge_page() mapcount != page_mapcount BUG_ON()</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.1" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers prev="1" num="3.3" edition="rc7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1180" published="2012-04-17" name="CVE-2012-1180" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/15/5" source="MLIST" patch="1">[oss-security] 20120315 CVE Request: nginx fix for malformed HTTP responses from upstream servers</ref>
-      <ref url="http://nginx.org/en/security_advisories.html" source="CONFIRM" patch="1" adv="1">http://nginx.org/en/security_advisories.html</ref>
-      <ref url="http://nginx.org/download/patch.2012.memory.txt" source="CONFIRM" patch="1">http://nginx.org/download/patch.2012.memory.txt</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=803856" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=803856</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74191" source="XF">nginx-ngxcpystrn-info-disclosure(74191)</ref>
-      <ref url="http://www.securitytracker.com/id?1026827" source="SECTRACK">1026827</ref>
-      <ref url="http://www.securityfocus.com/bid/52578" source="BID">52578</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/15/9" source="MLIST">[oss-security] 20120315 Re: CVE Request: nginx fix for malformed HTTP responses from upstream servers</ref>
-      <ref url="http://trac.nginx.org/nginx/changeset/4531/nginx" source="CONFIRM">http://trac.nginx.org/nginx/changeset/4531/nginx</ref>
-      <ref url="http://trac.nginx.org/nginx/changeset/4530/nginx" source="CONFIRM">http://trac.nginx.org/nginx/changeset/4530/nginx</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201203-22.xml" source="GENTOO">GLSA-201203-22</ref>
-      <ref url="http://secunia.com/advisories/48577" source="SECUNIA">48577</ref>
-      <ref url="http://secunia.com/advisories/48465" source="SECUNIA">48465</ref>
-      <ref url="http://seclists.org/bugtraq/2012/Mar/65" source="BUGTRAQ">20120315 nginx fix for malformed HTTP responses from upstream servers</ref>
-      <ref url="http://osvdb.org/80124" source="OSVDB">80124</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076671.html" source="FEDORA">FEDORA-2012-4006</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076646.html" source="FEDORA">FEDORA-2012-3991</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077966.html" source="FEDORA">FEDORA-2012-3846</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="igor_sysoev" name="nginx">
-        <vers num="0.1.0" />
-        <vers num="0.1.1" />
-        <vers num="0.1.10" />
-        <vers num="0.1.11" />
-        <vers num="0.1.12" />
-        <vers num="0.1.13" />
-        <vers num="0.1.14" />
-        <vers num="0.1.15" />
-        <vers num="0.1.16" />
-        <vers num="0.1.17" />
-        <vers num="0.1.18" />
-        <vers num="0.1.19" />
-        <vers num="0.1.2" />
-        <vers num="0.1.20" />
-        <vers num="0.1.21" />
-        <vers num="0.1.22" />
-        <vers num="0.1.23" />
-        <vers num="0.1.24" />
-        <vers num="0.1.25" />
-        <vers num="0.1.26" />
-        <vers num="0.1.27" />
-        <vers num="0.1.28" />
-        <vers num="0.1.29" />
-        <vers num="0.1.3" />
-        <vers num="0.1.30" />
-        <vers num="0.1.31" />
-        <vers num="0.1.32" />
-        <vers num="0.1.33" />
-        <vers num="0.1.34" />
-        <vers num="0.1.35" />
-        <vers num="0.1.36" />
-        <vers num="0.1.37" />
-        <vers num="0.1.38" />
-        <vers num="0.1.39" />
-        <vers num="0.1.4" />
-        <vers num="0.1.40" />
-        <vers num="0.1.41" />
-        <vers num="0.1.42" />
-        <vers num="0.1.43" />
-        <vers num="0.1.44" />
-        <vers num="0.1.45" />
-        <vers num="0.1.5" />
-        <vers num="0.1.6" />
-        <vers num="0.1.7" />
-        <vers num="0.1.8" />
-        <vers num="0.1.9" />
-        <vers num="0.2.0" />
-        <vers num="0.2.1" />
-        <vers num="0.2.2" />
-        <vers num="0.2.3" />
-        <vers num="0.2.4" />
-        <vers num="0.2.5" />
-        <vers num="0.2.6" />
-        <vers num="0.3.0" />
-        <vers num="0.3.1" />
-        <vers num="0.3.10" />
-        <vers num="0.3.11" />
-        <vers num="0.3.12" />
-        <vers num="0.3.13" />
-        <vers num="0.3.14" />
-        <vers num="0.3.15" />
-        <vers num="0.3.16" />
-        <vers num="0.3.17" />
-        <vers num="0.3.18" />
-        <vers num="0.3.19" />
-        <vers num="0.3.2" />
-        <vers num="0.3.20" />
-        <vers num="0.3.21" />
-        <vers num="0.3.22" />
-        <vers num="0.3.23" />
-        <vers num="0.3.24" />
-        <vers num="0.3.25" />
-        <vers num="0.3.26" />
-        <vers num="0.3.27" />
-        <vers num="0.3.28" />
-        <vers num="0.3.29" />
-        <vers num="0.3.3" />
-        <vers num="0.3.30" />
-        <vers num="0.3.31" />
-        <vers num="0.3.32" />
-        <vers num="0.3.33" />
-        <vers num="0.3.34" />
-        <vers num="0.3.35" />
-        <vers num="0.3.36" />
-        <vers num="0.3.37" />
-        <vers num="0.3.38" />
-        <vers num="0.3.39" />
-        <vers num="0.3.4" />
-        <vers num="0.3.40" />
-        <vers num="0.3.41" />
-        <vers num="0.3.42" />
-        <vers num="0.3.43" />
-        <vers num="0.3.44" />
-        <vers num="0.3.45" />
-        <vers num="0.3.46" />
-        <vers num="0.3.47" />
-        <vers num="0.3.48" />
-        <vers num="0.3.49" />
-        <vers num="0.3.5" />
-        <vers num="0.3.50" />
-        <vers num="0.3.51" />
-        <vers num="0.3.52" />
-        <vers num="0.3.53" />
-        <vers num="0.3.54" />
-        <vers num="0.3.55" />
-        <vers num="0.3.56" />
-        <vers num="0.3.57" />
-        <vers num="0.3.58" />
-        <vers num="0.3.59" />
-        <vers num="0.3.6" />
-        <vers num="0.3.60" />
-        <vers num="0.3.61" />
-        <vers num="0.3.7" />
-        <vers num="0.3.8" />
-        <vers num="0.3.9" />
-        <vers num="0.4.0" />
-        <vers num="0.4.1" />
-        <vers num="0.4.10" />
-        <vers num="0.4.11" />
-        <vers num="0.4.12" />
-        <vers num="0.4.13" />
-        <vers num="0.4.14" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" />
-        <vers num="0.5.0" />
-        <vers num="0.5.1" />
-        <vers num="0.5.10" />
-        <vers num="0.5.11" />
-        <vers num="0.5.12" />
-        <vers num="0.5.13" />
-        <vers num="0.5.14" />
-        <vers num="0.5.15" />
-        <vers num="0.5.16" />
-        <vers num="0.5.17" />
-        <vers num="0.5.18" />
-        <vers num="0.5.19" />
-        <vers num="0.5.2" />
-        <vers num="0.5.20" />
-        <vers num="0.5.21" />
-        <vers num="0.5.22" />
-        <vers num="0.5.23" />
-        <vers num="0.5.24" />
-        <vers num="0.5.25" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.5" />
-        <vers num="0.5.6" />
-        <vers num="0.5.7" />
-        <vers num="0.5.8" />
-        <vers num="0.5.9" />
-        <vers num="0.6.0" />
-        <vers num="0.6.1" />
-        <vers num="0.6.10" />
-        <vers num="0.6.11" />
-        <vers num="0.6.12" />
-        <vers num="0.6.13" />
-        <vers num="0.6.14" />
-        <vers num="0.6.15" />
-        <vers num="0.6.16" />
-        <vers num="0.6.17" />
-        <vers num="0.6.18" />
-        <vers num="0.6.19" />
-        <vers num="0.6.2" />
-        <vers num="0.6.20" />
-        <vers num="0.6.21" />
-        <vers num="0.6.22" />
-        <vers num="0.6.23" />
-        <vers num="0.6.24" />
-        <vers num="0.6.25" />
-        <vers num="0.6.26" />
-        <vers num="0.6.27" />
-        <vers num="0.6.28" />
-        <vers num="0.6.29" />
-        <vers num="0.6.3" />
-        <vers num="0.6.30" />
-        <vers num="0.6.31" />
-        <vers num="0.6.4" />
-        <vers num="0.6.5" />
-        <vers num="0.6.6" />
-        <vers num="0.6.7" />
-        <vers num="0.6.8" />
-        <vers num="0.6.9" />
-        <vers num="0.7.0" />
-        <vers num="0.7.1" />
-        <vers num="0.7.10" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.13" />
-        <vers num="0.7.14" />
-        <vers num="0.7.15" />
-        <vers num="0.7.16" />
-        <vers num="0.7.17" />
-        <vers num="0.7.18" />
-        <vers num="0.7.19" />
-        <vers num="0.7.2" />
-        <vers num="0.7.20" />
-        <vers num="0.7.21" />
-        <vers num="0.7.22" />
-        <vers num="0.7.23" />
-        <vers num="0.7.24" />
-        <vers num="0.7.25" />
-        <vers num="0.7.26" />
-        <vers num="0.7.27" />
-        <vers num="0.7.28" />
-        <vers num="0.7.29" />
-        <vers num="0.7.3" />
-        <vers num="0.7.30" />
-        <vers num="0.7.31" />
-        <vers num="0.7.32" />
-        <vers num="0.7.33" />
-        <vers num="0.7.34" />
-        <vers num="0.7.35" />
-        <vers num="0.7.36" />
-        <vers num="0.7.37" />
-        <vers num="0.7.38" />
-        <vers num="0.7.39" />
-        <vers num="0.7.4" />
-        <vers num="0.7.40" />
-        <vers num="0.7.41" />
-        <vers num="0.7.42" />
-        <vers num="0.7.43" />
-        <vers num="0.7.44" />
-        <vers num="0.7.45" />
-        <vers num="0.7.46" />
-        <vers num="0.7.47" />
-        <vers num="0.7.48" />
-        <vers num="0.7.49" />
-        <vers num="0.7.5" />
-        <vers num="0.7.50" />
-        <vers num="0.7.51" />
-        <vers num="0.7.52" />
-        <vers num="0.7.53" />
-        <vers num="0.7.54" />
-        <vers num="0.7.55" />
-        <vers num="0.7.56" />
-        <vers num="0.7.57" />
-        <vers num="0.7.58" />
-        <vers num="0.7.59" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.12" />
-        <vers num="0.8.13" />
-        <vers num="0.8.14" />
-        <vers num="0.8.15" />
-        <vers num="0.8.16" />
-        <vers num="0.8.17" />
-        <vers num="0.8.18" />
-        <vers num="0.8.19" />
-        <vers num="0.8.2" />
-        <vers num="0.8.20" />
-        <vers num="0.8.21" />
-        <vers num="0.8.22" />
-        <vers num="0.8.23" />
-        <vers num="0.8.24" />
-        <vers num="0.8.25" />
-        <vers num="0.8.26" />
-        <vers num="0.8.27" />
-        <vers num="0.8.28" />
-        <vers num="0.8.29" />
-        <vers num="0.8.3" />
-        <vers num="0.8.30" />
-        <vers num="0.8.31" />
-        <vers num="0.8.32" />
-        <vers num="0.8.33" />
-        <vers num="0.8.34" />
-        <vers num="0.8.35" />
-        <vers num="0.8.36" />
-        <vers num="0.8.37" />
-        <vers num="0.8.38" />
-        <vers num="0.8.39" />
-        <vers num="0.8.4" />
-        <vers num="0.8.40" />
-        <vers num="0.8.41" />
-        <vers num="0.8.42" />
-        <vers num="0.8.43" />
-        <vers num="0.8.44" />
-        <vers num="0.8.45" />
-        <vers num="0.8.46" />
-        <vers num="0.8.47" />
-        <vers num="0.8.48" />
-        <vers num="0.8.49" />
-        <vers num="0.8.5" />
-        <vers num="0.8.50" />
-        <vers num="0.8.51" />
-        <vers num="0.8.52" />
-        <vers num="0.8.53" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.8.9" />
-        <vers num="0.9.0" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="0.9.4" />
-        <vers num="0.9.5" />
-        <vers num="0.9.6" />
-        <vers num="0.9.7" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.10" />
-        <vers num="1.0.11" />
-        <vers num="1.0.12" />
-        <vers num="1.0.13" />
-        <vers prev="1" num="1.0.14" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1181" published="2012-03-19" name="CVE-2012-1181" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service (memory consumption) via a series of HTTP requests that triggers a process count higher than the intended limit.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://issues.apache.org/bugzilla/show_bug.cgi?id=49902" source="CONFIRM" patch="1">https://issues.apache.org/bugzilla/show_bug.cgi?id=49902</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74181" source="XF">apache-modfcgid-dos(74181)</ref>
-      <ref url="http://www.securityfocus.com/bid/52565" source="BID">52565</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/16/2" source="MLIST">[oss-security] 20120315 Re: CVE-request: apache's mod-fcgid does not respect configured FcgidMaxProcessesPerClass in VirtualHost</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/15/10" source="MLIST">[oss-security] 20120315 CVE-request: apache's mod-fcgid does not respect configured FcgidMaxProcessesPerClass in VirtualHost</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2436" source="DEBIAN">DSA-2436</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615814" source="CONFIRM">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615814</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="mod_fcgid">
-        <vers num="2.3.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1182" published="2012-04-10" name="CVE-2012-1182" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.samba.org/samba/security/CVE-2012-1182" source="CONFIRM" adv="1">https://www.samba.org/samba/security/CVE-2012-1182</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1423-1" source="UBUNTU">USN-1423-1</ref>
-      <ref url="http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578" source="CONFIRM">http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578</ref>
-      <ref url="http://support.apple.com/kb/HT5281" source="CONFIRM">http://support.apple.com/kb/HT5281</ref>
-      <ref url="http://secunia.com/advisories/48999" source="SECUNIA">48999</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080567.html" source="FEDORA">FEDORA-2012-6382</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/May/msg00001.html" source="APPLE">APPLE-SA-2012-05-09-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="samba" name="samba">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" edition="a" />
-        <vers num="3.0.14a" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.19" />
-        <vers num="3.0.2" edition="a" />
-        <vers num="3.0.20" edition="a" />
-        <vers num="3.0.20" edition="b" />
-        <vers num="3.0.20a" />
-        <vers num="3.0.20b" />
-        <vers num="3.0.21" edition="a" />
-        <vers num="3.0.21" edition="b" />
-        <vers num="3.0.21" edition="c" />
-        <vers num="3.0.21a" />
-        <vers num="3.0.21b" />
-        <vers num="3.0.21c" />
-        <vers num="3.0.22" />
-        <vers num="3.0.23" edition="a" />
-        <vers num="3.0.23" edition="b" />
-        <vers num="3.0.23" edition="c" />
-        <vers num="3.0.23" edition="d" />
-        <vers num="3.0.23a" />
-        <vers num="3.0.23b" />
-        <vers num="3.0.23c" />
-        <vers num="3.0.23d" />
-        <vers num="3.0.24" />
-        <vers num="3.0.25" edition="a" />
-        <vers num="3.0.25" edition="b" />
-        <vers num="3.0.25" edition="c" />
-        <vers num="3.0.25" edition="pre1" />
-        <vers num="3.0.25" edition="pre2" />
-        <vers num="3.0.25" edition="rc1" />
-        <vers num="3.0.25" edition="rc2" />
-        <vers num="3.0.25" edition="rc3" />
-        <vers num="3.0.25a" />
-        <vers num="3.0.25b" />
-        <vers num="3.0.25c" />
-        <vers num="3.0.26" edition="a" />
-        <vers num="3.0.26a" />
-        <vers num="3.0.27" edition="a" />
-        <vers num="3.0.28" edition="a" />
-        <vers num="3.0.29" />
-        <vers num="3.0.2a" />
-        <vers num="3.0.3" />
-        <vers num="3.0.30" />
-        <vers num="3.0.31" />
-        <vers num="3.0.32" />
-        <vers num="3.0.33" />
-        <vers num="3.0.34" />
-        <vers num="3.0.35" />
-        <vers num="3.0.36" />
-        <vers num="3.0.37" />
-        <vers num="3.0.4" edition="rc1" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.2.0" />
-        <vers num="3.2.1" />
-        <vers num="3.2.10" />
-        <vers num="3.2.11" />
-        <vers num="3.2.12" />
-        <vers num="3.2.13" />
-        <vers num="3.2.14" />
-        <vers num="3.2.15" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" />
-        <vers num="3.2.8" />
-        <vers num="3.2.9" />
-        <vers num="3.3.0" />
-        <vers num="3.3.1" />
-        <vers num="3.3.10" />
-        <vers num="3.3.11" />
-        <vers num="3.3.12" />
-        <vers num="3.3.13" />
-        <vers num="3.3.14" />
-        <vers num="3.3.15" />
-        <vers num="3.3.16" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers num="3.3.4" />
-        <vers num="3.3.5" />
-        <vers num="3.3.6" />
-        <vers num="3.3.7" />
-        <vers num="3.3.8" />
-        <vers num="3.3.9" />
-        <vers num="3.4.0" />
-        <vers num="3.4.1" />
-        <vers num="3.4.10" />
-        <vers num="3.4.11" />
-        <vers num="3.4.12" />
-        <vers num="3.4.13" />
-        <vers num="3.4.14" />
-        <vers prev="1" num="3.4.15" />
-        <vers num="3.4.2" />
-        <vers num="3.4.3" />
-        <vers num="3.4.4" />
-        <vers num="3.4.5" />
-        <vers num="3.4.6" />
-        <vers num="3.4.7" />
-        <vers num="3.4.8" />
-        <vers num="3.4.9" />
-        <vers num="3.5.0" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6.0" />
-        <vers num="3.6.1" />
-        <vers num="3.6.2" />
-        <vers num="3.6.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1185" published="2012-06-05" name="CVE-2012-1185" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset value in the ResolutionUnit tag in the EXIF IFD0 of an image.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0247.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1185" source="MISC" patch="1">https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1185</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/19/5" source="MLIST" patch="1">[oss-security] 20120319 CVE-2012-1185 / CVE-2012-1186 assignment notification - incomplete  ImageMagick fixes for CVE-2012-0247 / CVE-2012-0248</ref>
-      <ref url="http://trac.imagemagick.org/changeset/6998/ImageMagick/branches/ImageMagick-6.7.5/magick/property.c" source="CONFIRM" patch="1">http://trac.imagemagick.org/changeset/6998/ImageMagick/branches/ImageMagick-6.7.5/magick/property.c</ref>
-      <ref url="http://trac.imagemagick.org/changeset/6998/ImageMagick/branches/ImageMagick-6.7.5/magick/profile.c" source="CONFIRM" patch="1">http://trac.imagemagick.org/changeset/6998/ImageMagick/branches/ImageMagick-6.7.5/magick/profile.c</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76140" source="XF">imagemagick-profile-code-execution(76140)</ref>
-      <ref url="http://www.securityfocus.com/bid/51957" source="BID">51957</ref>
-      <ref url="http://www.osvdb.org/80556" source="OSVDB">80556</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2462" source="DEBIAN">DSA-2462</ref>
-      <ref url="http://ubuntu.com/usn/usn-1435-1" source="UBUNTU">USN-1435-1</ref>
-      <ref url="http://secunia.com/advisories/49317" source="SECUNIA" adv="1">49317</ref>
-      <ref url="http://secunia.com/advisories/49043" source="SECUNIA" adv="1">49043</ref>
-      <ref url="http://secunia.com/advisories/48974" source="SECUNIA" adv="1">48974</ref>
-      <ref url="http://secunia.com/advisories/47926" source="SECUNIA" adv="1">47926</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html" source="SUSE">openSUSE-SU-2012:0692</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="imagemagick" name="imagemagick">
-        <vers num="4.2.7" />
-        <vers num="4.2.9" />
-        <vers num="5.2" />
-        <vers num="5.2.0" />
-        <vers num="5.2.4.3" />
-        <vers num="5.2.6" />
-        <vers num="5.3" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers num="5.3.8" />
-        <vers num="5.3.8.2" />
-        <vers num="5.3.9" />
-        <vers num="5.4" />
-        <vers num="5.4.0.5" />
-        <vers num="5.4.1.2" />
-        <vers num="5.4.2.3" />
-        <vers num="5.4.3" />
-        <vers num="5.4.3.11" />
-        <vers num="5.4.4.5" />
-        <vers num="5.4.5.1" />
-        <vers num="5.4.6.3" />
-        <vers num="5.4.7" />
-        <vers num="5.4.7.4" />
-        <vers num="5.4.8" />
-        <vers num="5.4.8.3" />
-        <vers num="5.4.9.1" />
-        <vers num="5.5" />
-        <vers num="5.5.1.4" />
-        <vers num="5.5.2.5" />
-        <vers num="5.5.3.2" />
-        <vers num="5.5.3.2.1.2.0" />
-        <vers num="5.5.4" />
-        <vers num="5.5.4.4" />
-        <vers num="5.5.5.3" />
-        <vers num="5.5.6" />
-        <vers num="5.5.6.0_2003-04-09" />
-        <vers num="5.5.6.0_20030409" />
-        <vers num="5.5.7" />
-        <vers num="5.5.7.15" />
-        <vers num="5.5.7.31" />
-        <vers num="5.5.7.35" />
-        <vers num="5.5.7q16" />
-        <vers num="5.5.7q8" />
-        <vers num="6.0" />
-        <vers num="6.0.0.7" />
-        <vers num="6.0.1" />
-        <vers num="6.0.1.4" />
-        <vers num="6.0.2" />
-        <vers num="6.0.2.5" />
-        <vers num="6.0.2.7" />
-        <vers num="6.0.3" />
-        <vers num="6.0.3.5" />
-        <vers num="6.0.4" />
-        <vers num="6.0.4.4" />
-        <vers num="6.0.5" />
-        <vers num="6.0.5.3" />
-        <vers num="6.0.6" />
-        <vers num="6.0.6.1" />
-        <vers num="6.0.6.2" />
-        <vers num="6.0.7" />
-        <vers num="6.0.7.3" />
-        <vers num="6.0.8" />
-        <vers num="6.0.8.3" />
-        <vers num="6.1" />
-        <vers num="6.1.0.9" />
-        <vers num="6.1.1" />
-        <vers num="6.1.1.6" />
-        <vers num="6.1.2" />
-        <vers num="6.1.2.7" />
-        <vers num="6.1.3" />
-        <vers num="6.1.3.7" />
-        <vers num="6.1.4" />
-        <vers num="6.1.4.5" />
-        <vers num="6.1.5" />
-        <vers num="6.1.5.8" />
-        <vers num="6.1.6" />
-        <vers num="6.1.6.9" />
-        <vers num="6.1.7" />
-        <vers num="6.1.7.5" />
-        <vers num="6.1.8" />
-        <vers num="6.1.8.7" />
-        <vers num="6.1.9.4" />
-        <vers num="6.2" />
-        <vers num="6.2.0.3" />
-        <vers num="6.2.0.4" />
-        <vers num="6.2.0.7" />
-        <vers num="6.2.0.8" />
-        <vers num="6.2.1" />
-        <vers num="6.2.1.7" />
-        <vers num="6.2.2" />
-        <vers num="6.2.2.5" />
-        <vers num="6.2.3" />
-        <vers num="6.2.3.4" />
-        <vers num="6.2.3.6" />
-        <vers num="6.2.4" />
-        <vers num="6.2.4.3" />
-        <vers num="6.2.4.5" />
-        <vers num="6.2.5" />
-        <vers num="6.2.6" />
-        <vers num="6.2.7" />
-        <vers num="6.2.8" />
-        <vers num="6.2.8.0" />
-        <vers num="6.2.8.1" />
-        <vers num="6.2.8.2" />
-        <vers num="6.2.8.3" />
-        <vers num="6.2.9" />
-        <vers num="6.2.9.2" />
-        <vers num="6.3.0.0" />
-        <vers num="6.3.0.1" />
-        <vers num="6.3.0.2" />
-        <vers num="6.3.0.3" />
-        <vers num="6.3.0.4" />
-        <vers num="6.3.0.5" />
-        <vers num="6.3.0.7" />
-        <vers num="6.3.0.8" />
-        <vers num="6.3.1" />
-        <vers num="6.3.1-6" />
-        <vers num="6.3.1-7" />
-        <vers num="6.3.1.0" />
-        <vers num="6.3.1.1" />
-        <vers num="6.3.1.2." />
-        <vers num="6.3.1.3" />
-        <vers num="6.3.1.4" />
-        <vers num="6.3.1.5" />
-        <vers num="6.3.1.6" />
-        <vers num="6.3.1.7" />
-        <vers num="6.3.2" />
-        <vers num="6.3.2-1" />
-        <vers num="6.3.2-2" />
-        <vers num="6.3.2-3" />
-        <vers num="6.3.2-4" />
-        <vers num="6.3.2-5" />
-        <vers num="6.3.2-6" />
-        <vers num="6.3.2-7" />
-        <vers num="6.3.2-8" />
-        <vers num="6.3.2.0" />
-        <vers num="6.3.2.1" />
-        <vers num="6.3.2.2" />
-        <vers num="6.3.2.3" />
-        <vers num="6.3.2.4" />
-        <vers num="6.3.2.5" />
-        <vers num="6.3.2.6" />
-        <vers num="6.3.2.7" />
-        <vers num="6.3.2.8" />
-        <vers num="6.3.3" />
-        <vers num="6.3.3-1" />
-        <vers num="6.3.3-2" />
-        <vers num="6.3.3-3" />
-        <vers num="6.3.3-4" />
-        <vers num="6.3.3-5" />
-        <vers num="6.3.3-6" />
-        <vers num="6.3.3-7" />
-        <vers num="6.3.3-8" />
-        <vers num="6.3.3-9" />
-        <vers num="6.3.3.0" />
-        <vers num="6.3.3.1" />
-        <vers num="6.3.3.2" />
-        <vers num="6.3.3.3" />
-        <vers num="6.3.3.4" />
-        <vers num="6.3.3_3" />
-        <vers num="6.3.3_5" />
-        <vers num="6.3.3_6" />
-        <vers num="6.3.4" />
-        <vers num="6.3.4-1" />
-        <vers num="6.3.4-10" />
-        <vers num="6.3.4-2" />
-        <vers num="6.3.4-3" />
-        <vers num="6.3.4-4" />
-        <vers num="6.3.4-5" />
-        <vers num="6.3.4-6" />
-        <vers num="6.3.4-8" />
-        <vers num="6.3.4-9" />
-        <vers num="6.3.5" />
-        <vers num="6.3.5-10" />
-        <vers num="6.3.5-4" />
-        <vers num="6.3.5-5" />
-        <vers num="6.3.5-6" />
-        <vers num="6.3.5-7" />
-        <vers num="6.3.5-9" />
-        <vers num="6.3.6" />
-        <vers num="6.3.6-1" />
-        <vers num="6.3.6-10" />
-        <vers num="6.3.6-2" />
-        <vers num="6.3.6-3" />
-        <vers num="6.3.6-4" />
-        <vers num="6.3.6-5" />
-        <vers num="6.3.6-6" />
-        <vers num="6.3.6-7" />
-        <vers num="6.3.6-8" />
-        <vers num="6.3.6-9" />
-        <vers num="6.3.7" />
-        <vers num="6.3.7-1" />
-        <vers num="6.3.7-10" />
-        <vers num="6.3.7-2" />
-        <vers num="6.3.7-3" />
-        <vers num="6.3.7-4" />
-        <vers num="6.3.7-5" />
-        <vers num="6.3.7-7" />
-        <vers num="6.3.7-9" />
-        <vers num="6.3.8" />
-        <vers num="6.3.8-1" />
-        <vers num="6.3.8-10" />
-        <vers num="6.3.8-2" />
-        <vers num="6.3.8-3" />
-        <vers num="6.3.8-5" />
-        <vers num="6.3.8-6" />
-        <vers num="6.3.8-7" />
-        <vers num="6.3.8-9" />
-        <vers num="6.3.9" />
-        <vers num="6.3.9-1" />
-        <vers num="6.3.9-10" />
-        <vers num="6.3.9-2" />
-        <vers num="6.3.9-4" />
-        <vers num="6.3.9-5" />
-        <vers num="6.3.9-6" />
-        <vers num="6.3.9-7" />
-        <vers num="6.3.9-8" />
-        <vers num="6.3.9-9" />
-        <vers num="6.4.0" />
-        <vers num="6.4.0-1" />
-        <vers num="6.4.0-10" />
-        <vers num="6.4.0-11" />
-        <vers num="6.4.0-4" />
-        <vers num="6.4.0-5" />
-        <vers num="6.4.0-6" />
-        <vers num="6.4.0-7" />
-        <vers num="6.4.0-8" />
-        <vers num="6.4.1" />
-        <vers num="6.4.1-1" />
-        <vers num="6.4.1-2" />
-        <vers num="6.4.1-3" />
-        <vers num="6.4.1-4" />
-        <vers num="6.4.1-5" />
-        <vers num="6.4.1-6" />
-        <vers num="6.4.1-7" />
-        <vers num="6.4.1-8" />
-        <vers num="6.4.1-9" />
-        <vers num="6.4.2" />
-        <vers num="6.4.2-1" />
-        <vers num="6.4.2-10" />
-        <vers num="6.4.2-2" />
-        <vers num="6.4.2-4" />
-        <vers num="6.4.2-5" />
-        <vers num="6.4.2-6" />
-        <vers num="6.4.2-7" />
-        <vers num="6.4.2-8" />
-        <vers num="6.4.2-9" />
-        <vers num="6.4.3" />
-        <vers num="6.4.3-1" />
-        <vers num="6.4.3-10" />
-        <vers num="6.4.3-2" />
-        <vers num="6.4.3-3" />
-        <vers num="6.4.3-5" />
-        <vers num="6.4.3-6" />
-        <vers num="6.4.3-7" />
-        <vers num="6.4.3-8" />
-        <vers num="6.4.4" />
-        <vers num="6.4.4-1" />
-        <vers num="6.4.4-3" />
-        <vers num="6.4.4-5" />
-        <vers num="6.4.4-7" />
-        <vers num="6.4.4-8" />
-        <vers num="6.4.5" />
-        <vers num="6.4.5-1" />
-        <vers num="6.4.5-2" />
-        <vers num="6.4.5-3" />
-        <vers num="6.4.5-4" />
-        <vers num="6.4.5-6" />
-        <vers num="6.4.5-7" />
-        <vers num="6.4.5-9" />
-        <vers num="6.4.6" />
-        <vers num="6.4.6-1" />
-        <vers num="6.4.6-2" />
-        <vers num="6.4.6-3" />
-        <vers num="6.4.6-4" />
-        <vers num="6.4.6-5" />
-        <vers num="6.4.6-6" />
-        <vers num="6.4.6-8" />
-        <vers num="6.4.6-9" />
-        <vers num="6.4.7-1" />
-        <vers num="6.4.7-10" />
-        <vers num="6.4.7-2" />
-        <vers num="6.4.7-3" />
-        <vers num="6.4.7-4" />
-        <vers num="6.4.7-5" />
-        <vers num="6.4.7-6" />
-        <vers num="6.4.7-7" />
-        <vers num="6.4.7-8" />
-        <vers num="6.4.7-9" />
-        <vers num="6.4.8" />
-        <vers num="6.4.8-1" />
-        <vers num="6.4.8-10" />
-        <vers num="6.4.8-2" />
-        <vers num="6.4.8-3" />
-        <vers num="6.4.8-4" />
-        <vers num="6.4.8-5" />
-        <vers num="6.4.8-6" />
-        <vers num="6.4.8-7" />
-        <vers num="6.4.8-8" />
-        <vers num="6.4.8-9" />
-        <vers num="6.4.9" />
-        <vers num="6.4.9-10" />
-        <vers num="6.4.9-2" />
-        <vers num="6.4.9-3" />
-        <vers num="6.4.9-5" />
-        <vers num="6.4.9-7" />
-        <vers num="6.4.9-8" />
-        <vers num="6.4.9-9" />
-        <vers num="6.5.0" />
-        <vers num="6.5.0-1" />
-        <vers num="6.5.0-10" />
-        <vers num="6.5.0-2" />
-        <vers num="6.5.0-3" />
-        <vers num="6.5.0-4" />
-        <vers num="6.5.0-5" />
-        <vers num="6.5.0-6" />
-        <vers num="6.5.0-7" />
-        <vers num="6.5.0-8" />
-        <vers num="6.5.0-9" />
-        <vers num="6.5.1" />
-        <vers num="6.5.1-1" />
-        <vers num="6.5.1-10" />
-        <vers num="6.5.1-2" />
-        <vers num="6.5.1-3" />
-        <vers num="6.5.1-4" />
-        <vers num="6.5.1-5" />
-        <vers num="6.5.1-6" />
-        <vers num="6.5.1-7" />
-        <vers num="6.5.1-9" />
-        <vers num="6.5.2" />
-        <vers num="6.5.2-1" />
-        <vers num="6.5.2-10" />
-        <vers num="6.5.2-2" />
-        <vers num="6.5.2-3" />
-        <vers num="6.5.2-4" />
-        <vers num="6.5.2-5" />
-        <vers num="6.5.2-6" />
-        <vers num="6.5.2-7" />
-        <vers num="6.5.2-8" />
-        <vers num="6.5.2-9" />
-        <vers num="6.5.3" />
-        <vers num="6.5.3-1" />
-        <vers num="6.5.3-10" />
-        <vers num="6.5.3-3" />
-        <vers num="6.5.3-4" />
-        <vers num="6.5.3-5" />
-        <vers num="6.5.3-6" />
-        <vers num="6.5.3-7" />
-        <vers num="6.5.3-8" />
-        <vers num="6.5.4" />
-        <vers num="6.5.4-1" />
-        <vers num="6.5.4-10" />
-        <vers num="6.5.4-2" />
-        <vers num="6.5.4-3" />
-        <vers num="6.5.4-4" />
-        <vers num="6.5.4-5" />
-        <vers num="6.5.4-6" />
-        <vers num="6.5.4-7" />
-        <vers num="6.5.4-8" />
-        <vers num="6.5.4-9" />
-        <vers num="6.5.5" />
-        <vers num="6.5.5-1" />
-        <vers num="6.5.5-10" />
-        <vers num="6.5.5-2" />
-        <vers num="6.5.5-3" />
-        <vers num="6.5.5-4" />
-        <vers num="6.5.5-5" />
-        <vers num="6.5.5-6" />
-        <vers num="6.5.5-7" />
-        <vers num="6.5.5-8" />
-        <vers num="6.5.5-9" />
-        <vers num="6.5.6" />
-        <vers num="6.5.6-10" />
-        <vers num="6.5.6-2" />
-        <vers num="6.5.6-3" />
-        <vers num="6.5.6-4" />
-        <vers num="6.5.6-5" />
-        <vers num="6.5.6-6" />
-        <vers num="6.5.6-7" />
-        <vers num="6.5.6-8" />
-        <vers num="6.5.6-9" />
-        <vers num="6.5.7" />
-        <vers num="6.5.7-1" />
-        <vers num="6.5.7-2" />
-        <vers num="6.5.7-3" />
-        <vers num="6.5.7-4" />
-        <vers num="6.5.7-5" />
-        <vers num="6.5.7-6" />
-        <vers num="6.5.7-7" />
-        <vers num="6.5.7-8" />
-        <vers num="6.5.7-9" />
-        <vers num="6.5.8" />
-        <vers num="6.5.8-1" />
-        <vers num="6.5.8-2" />
-        <vers num="6.5.8-3" />
-        <vers num="6.5.8-4" />
-        <vers num="6.5.8-5" />
-        <vers num="6.5.8-6" />
-        <vers num="6.5.8-7" />
-        <vers num="6.5.8-8" />
-        <vers num="6.5.8-9" />
-        <vers num="6.5.9" />
-        <vers num="6.5.9-1" />
-        <vers num="6.5.9-10" />
-        <vers num="6.5.9-2" />
-        <vers num="6.5.9-3" />
-        <vers num="6.5.9-4" />
-        <vers num="6.5.9-5" />
-        <vers num="6.5.9-6" />
-        <vers num="6.5.9-7" />
-        <vers num="6.5.9-8" />
-        <vers num="6.6.0" />
-        <vers num="6.6.0-1" />
-        <vers num="6.6.0-10" />
-        <vers num="6.6.0-2" />
-        <vers num="6.6.0-4" />
-        <vers num="6.6.0-5" />
-        <vers num="6.6.0-6" />
-        <vers num="6.6.0-7" />
-        <vers num="6.6.0-8" />
-        <vers num="6.6.0-9" />
-        <vers num="6.6.1" />
-        <vers num="6.6.1-1" />
-        <vers num="6.6.1-10" />
-        <vers num="6.6.1-2" />
-        <vers num="6.6.1-3" />
-        <vers num="6.6.1-4" />
-        <vers num="6.6.1-5" />
-        <vers num="6.6.1-6" />
-        <vers num="6.6.1-7" />
-        <vers num="6.6.1-8" />
-        <vers num="6.6.1-9" />
-        <vers num="6.6.2" />
-        <vers num="6.6.2-1" />
-        <vers num="6.6.2-10" />
-        <vers num="6.6.2-2" />
-        <vers num="6.6.2-3" />
-        <vers num="6.6.2-4" />
-        <vers num="6.6.2-5" />
-        <vers num="6.6.2-6" />
-        <vers num="6.6.2-7" />
-        <vers num="6.6.2-8" />
-        <vers num="6.6.2-9" />
-        <vers num="6.6.3" />
-        <vers num="6.6.3-1" />
-        <vers num="6.6.3-10" />
-        <vers num="6.6.3-2" />
-        <vers num="6.6.3-3" />
-        <vers num="6.6.3-4" />
-        <vers num="6.6.3-5" />
-        <vers num="6.6.3-6" />
-        <vers num="6.6.3-7" />
-        <vers num="6.6.4" />
-        <vers num="6.6.4-1" />
-        <vers num="6.6.4-10" />
-        <vers num="6.6.4-2" />
-        <vers num="6.6.4-4" />
-        <vers num="6.6.4-5" />
-        <vers num="6.6.4-6" />
-        <vers num="6.6.4-7" />
-        <vers num="6.6.4-8" />
-        <vers num="6.6.4-9" />
-        <vers num="6.6.5" />
-        <vers num="6.6.5-1" />
-        <vers num="6.6.5-10" />
-        <vers num="6.6.5-2" />
-        <vers num="6.6.5-3" />
-        <vers num="6.6.5-4" />
-        <vers num="6.6.5-5" />
-        <vers num="6.6.5-6" />
-        <vers num="6.6.5-7" />
-        <vers num="6.6.5-8" />
-        <vers num="6.6.5-9" />
-        <vers num="6.6.6-0" />
-        <vers num="6.6.6-1" />
-        <vers num="6.6.6-10" />
-        <vers num="6.6.6-2" />
-        <vers num="6.6.6-3" />
-        <vers num="6.6.6-4" />
-        <vers num="6.6.6-5" />
-        <vers num="6.6.6-6" />
-        <vers num="6.6.6-7" />
-        <vers num="6.6.6-8" />
-        <vers num="6.6.6-9" />
-        <vers num="6.6.7-0" />
-        <vers num="6.6.7-1" />
-        <vers num="6.6.7-10" />
-        <vers num="6.6.7-2" />
-        <vers num="6.6.7-3" />
-        <vers num="6.6.7-4" />
-        <vers num="6.6.7-5" />
-        <vers num="6.6.7-6" />
-        <vers num="6.6.7-7" />
-        <vers num="6.6.7-8" />
-        <vers num="6.6.7-9" />
-        <vers num="6.6.8-0" />
-        <vers num="6.6.9-0" />
-        <vers num="6.6.9-1" />
-        <vers num="6.6.9-10" />
-        <vers num="6.6.9-2" />
-        <vers num="6.6.9-3" />
-        <vers num="6.6.9-4" />
-        <vers num="6.6.9-5" />
-        <vers num="6.6.9-6" />
-        <vers num="6.6.9-7" />
-        <vers num="6.6.9-8" />
-        <vers num="6.6.9-9" />
-        <vers num="6.7.0-0" />
-        <vers num="6.7.0-1" />
-        <vers num="6.7.0-10" />
-        <vers num="6.7.0-2" />
-        <vers num="6.7.0-3" />
-        <vers num="6.7.0-4" />
-        <vers num="6.7.0-5" />
-        <vers num="6.7.0-6" />
-        <vers num="6.7.0-7" />
-        <vers num="6.7.0-8" />
-        <vers num="6.7.0-9" />
-        <vers num="6.7.1-0" />
-        <vers num="6.7.1-1" />
-        <vers num="6.7.1-10" />
-        <vers num="6.7.1-2" />
-        <vers num="6.7.1-3" />
-        <vers num="6.7.1-4" />
-        <vers num="6.7.1-5" />
-        <vers num="6.7.1-6" />
-        <vers num="6.7.1-7" />
-        <vers num="6.7.1-8" />
-        <vers num="6.7.1-9" />
-        <vers num="6.7.2-0" />
-        <vers num="6.7.2-1" />
-        <vers num="6.7.2-10" />
-        <vers num="6.7.2-2" />
-        <vers num="6.7.2-3" />
-        <vers num="6.7.2-4" />
-        <vers num="6.7.2-5" />
-        <vers num="6.7.2-6" />
-        <vers num="6.7.2-7" />
-        <vers num="6.7.2-8" />
-        <vers num="6.7.2-9" />
-        <vers num="6.7.3-0" />
-        <vers num="6.7.3-1" />
-        <vers num="6.7.3-10" />
-        <vers num="6.7.3-2" />
-        <vers num="6.7.3-3" />
-        <vers num="6.7.3-4" />
-        <vers num="6.7.3-5" />
-        <vers num="6.7.3-6" />
-        <vers num="6.7.3-7" />
-        <vers num="6.7.3-8" />
-        <vers num="6.7.3-9" />
-        <vers num="6.7.4-0" />
-        <vers num="6.7.4-1" />
-        <vers num="6.7.4-10" />
-        <vers num="6.7.4-2" />
-        <vers num="6.7.4-3" />
-        <vers num="6.7.4-4" />
-        <vers num="6.7.4-5" />
-        <vers num="6.7.4-6" />
-        <vers num="6.7.4-7" />
-        <vers num="6.7.4-8" />
-        <vers num="6.7.4-9" />
-        <vers prev="1" num="6.7.5-0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1186" published="2012-06-05" name="CVE-2012-1186" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted IOP tag offsets in the IFD in an image.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51957" source="BID" patch="1">51957</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1186" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1186</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76139" source="XF">imagemagick-syncimageprofiles-dos(76139)</ref>
-      <ref url="http://www.osvdb.org/80555" source="OSVDB">80555</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/19/5" source="MLIST">[oss-security] 20120319 Subject: CVE-2012-1185 / CVE-2012-1186 assignment notification - incomplete  ImageMagick fixes for CVE-2012-0247 / CVE-2012-0248</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2462" source="DEBIAN">DSA-2462</ref>
-      <ref url="http://ubuntu.com/usn/usn-1435-1" source="UBUNTU">USN-1435-1</ref>
-      <ref url="http://trac.imagemagick.org/changeset/6998/ImageMagick/branches/ImageMagick-6.7.5/magick/profile.c" source="CONFIRM">http://trac.imagemagick.org/changeset/6998/ImageMagick/branches/ImageMagick-6.7.5/magick/profile.c</ref>
-      <ref url="http://secunia.com/advisories/49317" source="SECUNIA" adv="1">49317</ref>
-      <ref url="http://secunia.com/advisories/49043" source="SECUNIA" adv="1">49043</ref>
-      <ref url="http://secunia.com/advisories/48974" source="SECUNIA" adv="1">48974</ref>
-      <ref url="http://secunia.com/advisories/47926" source="SECUNIA" adv="1">47926</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html" source="SUSE">openSUSE-SU-2012:0692</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="imagemagick" name="imagemagick">
-        <vers num="4.2.7" />
-        <vers num="4.2.9" />
-        <vers num="5.2" />
-        <vers num="5.2.0" />
-        <vers num="5.2.4.3" />
-        <vers num="5.2.6" />
-        <vers num="5.3" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers num="5.3.8" />
-        <vers num="5.3.8.2" />
-        <vers num="5.3.9" />
-        <vers num="5.4" />
-        <vers num="5.4.0.5" />
-        <vers num="5.4.1.2" />
-        <vers num="5.4.2.3" />
-        <vers num="5.4.3" />
-        <vers num="5.4.3.11" />
-        <vers num="5.4.4.5" />
-        <vers num="5.4.5.1" />
-        <vers num="5.4.6.3" />
-        <vers num="5.4.7" />
-        <vers num="5.4.7.4" />
-        <vers num="5.4.8" />
-        <vers num="5.4.8.3" />
-        <vers num="5.4.9.1" />
-        <vers num="5.5" />
-        <vers num="5.5.1.4" />
-        <vers num="5.5.2.5" />
-        <vers num="5.5.3.2" />
-        <vers num="5.5.3.2.1.2.0" />
-        <vers num="5.5.4" />
-        <vers num="5.5.4.4" />
-        <vers num="5.5.5.3" />
-        <vers num="5.5.6" />
-        <vers num="5.5.6.0_2003-04-09" />
-        <vers num="5.5.6.0_20030409" />
-        <vers num="5.5.7" />
-        <vers num="5.5.7.15" />
-        <vers num="5.5.7.31" />
-        <vers num="5.5.7.35" />
-        <vers num="5.5.7q16" />
-        <vers num="5.5.7q8" />
-        <vers num="6.0" />
-        <vers num="6.0.0.7" />
-        <vers num="6.0.1" />
-        <vers num="6.0.1.4" />
-        <vers num="6.0.2" />
-        <vers num="6.0.2.5" />
-        <vers num="6.0.2.7" />
-        <vers num="6.0.3" />
-        <vers num="6.0.3.5" />
-        <vers num="6.0.4" />
-        <vers num="6.0.4.4" />
-        <vers num="6.0.5" />
-        <vers num="6.0.5.3" />
-        <vers num="6.0.6" />
-        <vers num="6.0.6.1" />
-        <vers num="6.0.6.2" />
-        <vers num="6.0.7" />
-        <vers num="6.0.7.3" />
-        <vers num="6.0.8" />
-        <vers num="6.0.8.3" />
-        <vers num="6.1" />
-        <vers num="6.1.0.9" />
-        <vers num="6.1.1" />
-        <vers num="6.1.1.6" />
-        <vers num="6.1.2" />
-        <vers num="6.1.2.7" />
-        <vers num="6.1.3" />
-        <vers num="6.1.3.7" />
-        <vers num="6.1.4" />
-        <vers num="6.1.4.5" />
-        <vers num="6.1.5" />
-        <vers num="6.1.5.8" />
-        <vers num="6.1.6" />
-        <vers num="6.1.6.9" />
-        <vers num="6.1.7" />
-        <vers num="6.1.7.5" />
-        <vers num="6.1.8" />
-        <vers num="6.1.8.7" />
-        <vers num="6.1.9.4" />
-        <vers num="6.2" />
-        <vers num="6.2.0.3" />
-        <vers num="6.2.0.4" />
-        <vers num="6.2.0.7" />
-        <vers num="6.2.0.8" />
-        <vers num="6.2.1" />
-        <vers num="6.2.1.7" />
-        <vers num="6.2.2" />
-        <vers num="6.2.2.5" />
-        <vers num="6.2.3" />
-        <vers num="6.2.3.4" />
-        <vers num="6.2.3.6" />
-        <vers num="6.2.4" />
-        <vers num="6.2.4.3" />
-        <vers num="6.2.4.5" />
-        <vers num="6.2.5" />
-        <vers num="6.2.6" />
-        <vers num="6.2.7" />
-        <vers num="6.2.8" />
-        <vers num="6.2.8.0" />
-        <vers num="6.2.8.1" />
-        <vers num="6.2.8.2" />
-        <vers num="6.2.8.3" />
-        <vers num="6.2.9" />
-        <vers num="6.2.9.2" />
-        <vers num="6.3.0.0" />
-        <vers num="6.3.0.1" />
-        <vers num="6.3.0.2" />
-        <vers num="6.3.0.3" />
-        <vers num="6.3.0.4" />
-        <vers num="6.3.0.5" />
-        <vers num="6.3.0.7" />
-        <vers num="6.3.0.8" />
-        <vers num="6.3.1" />
-        <vers num="6.3.1-6" />
-        <vers num="6.3.1-7" />
-        <vers num="6.3.1.0" />
-        <vers num="6.3.1.1" />
-        <vers num="6.3.1.2." />
-        <vers num="6.3.1.3" />
-        <vers num="6.3.1.4" />
-        <vers num="6.3.1.5" />
-        <vers num="6.3.1.6" />
-        <vers num="6.3.1.7" />
-        <vers num="6.3.2" />
-        <vers num="6.3.2-1" />
-        <vers num="6.3.2-2" />
-        <vers num="6.3.2-3" />
-        <vers num="6.3.2-4" />
-        <vers num="6.3.2-5" />
-        <vers num="6.3.2-6" />
-        <vers num="6.3.2-7" />
-        <vers num="6.3.2-8" />
-        <vers num="6.3.2.0" />
-        <vers num="6.3.2.1" />
-        <vers num="6.3.2.2" />
-        <vers num="6.3.2.3" />
-        <vers num="6.3.2.4" />
-        <vers num="6.3.2.5" />
-        <vers num="6.3.2.6" />
-        <vers num="6.3.2.7" />
-        <vers num="6.3.2.8" />
-        <vers num="6.3.3" />
-        <vers num="6.3.3-1" />
-        <vers num="6.3.3-2" />
-        <vers num="6.3.3-3" />
-        <vers num="6.3.3-4" />
-        <vers num="6.3.3-5" />
-        <vers num="6.3.3-6" />
-        <vers num="6.3.3-7" />
-        <vers num="6.3.3-8" />
-        <vers num="6.3.3-9" />
-        <vers num="6.3.3.0" />
-        <vers num="6.3.3.1" />
-        <vers num="6.3.3.2" />
-        <vers num="6.3.3.3" />
-        <vers num="6.3.3.4" />
-        <vers num="6.3.3_3" />
-        <vers num="6.3.3_5" />
-        <vers num="6.3.3_6" />
-        <vers num="6.3.4" />
-        <vers num="6.3.4-1" />
-        <vers num="6.3.4-10" />
-        <vers num="6.3.4-2" />
-        <vers num="6.3.4-3" />
-        <vers num="6.3.4-4" />
-        <vers num="6.3.4-5" />
-        <vers num="6.3.4-6" />
-        <vers num="6.3.4-8" />
-        <vers num="6.3.4-9" />
-        <vers num="6.3.5" />
-        <vers num="6.3.5-10" />
-        <vers num="6.3.5-4" />
-        <vers num="6.3.5-5" />
-        <vers num="6.3.5-6" />
-        <vers num="6.3.5-7" />
-        <vers num="6.3.5-9" />
-        <vers num="6.3.6" />
-        <vers num="6.3.6-1" />
-        <vers num="6.3.6-10" />
-        <vers num="6.3.6-2" />
-        <vers num="6.3.6-3" />
-        <vers num="6.3.6-4" />
-        <vers num="6.3.6-5" />
-        <vers num="6.3.6-6" />
-        <vers num="6.3.6-7" />
-        <vers num="6.3.6-8" />
-        <vers num="6.3.6-9" />
-        <vers num="6.3.7" />
-        <vers num="6.3.7-1" />
-        <vers num="6.3.7-10" />
-        <vers num="6.3.7-2" />
-        <vers num="6.3.7-3" />
-        <vers num="6.3.7-4" />
-        <vers num="6.3.7-5" />
-        <vers num="6.3.7-7" />
-        <vers num="6.3.7-9" />
-        <vers num="6.3.8" />
-        <vers num="6.3.8-1" />
-        <vers num="6.3.8-10" />
-        <vers num="6.3.8-2" />
-        <vers num="6.3.8-3" />
-        <vers num="6.3.8-5" />
-        <vers num="6.3.8-6" />
-        <vers num="6.3.8-7" />
-        <vers num="6.3.8-9" />
-        <vers num="6.3.9" />
-        <vers num="6.3.9-1" />
-        <vers num="6.3.9-10" />
-        <vers num="6.3.9-2" />
-        <vers num="6.3.9-4" />
-        <vers num="6.3.9-5" />
-        <vers num="6.3.9-6" />
-        <vers num="6.3.9-7" />
-        <vers num="6.3.9-8" />
-        <vers num="6.3.9-9" />
-        <vers num="6.4.0" />
-        <vers num="6.4.0-1" />
-        <vers num="6.4.0-10" />
-        <vers num="6.4.0-11" />
-        <vers num="6.4.0-4" />
-        <vers num="6.4.0-5" />
-        <vers num="6.4.0-6" />
-        <vers num="6.4.0-7" />
-        <vers num="6.4.0-8" />
-        <vers num="6.4.1" />
-        <vers num="6.4.1-1" />
-        <vers num="6.4.1-2" />
-        <vers num="6.4.1-3" />
-        <vers num="6.4.1-4" />
-        <vers num="6.4.1-5" />
-        <vers num="6.4.1-6" />
-        <vers num="6.4.1-7" />
-        <vers num="6.4.1-8" />
-        <vers num="6.4.1-9" />
-        <vers num="6.4.2" />
-        <vers num="6.4.2-1" />
-        <vers num="6.4.2-10" />
-        <vers num="6.4.2-2" />
-        <vers num="6.4.2-4" />
-        <vers num="6.4.2-5" />
-        <vers num="6.4.2-6" />
-        <vers num="6.4.2-7" />
-        <vers num="6.4.2-8" />
-        <vers num="6.4.2-9" />
-        <vers num="6.4.3" />
-        <vers num="6.4.3-1" />
-        <vers num="6.4.3-10" />
-        <vers num="6.4.3-2" />
-        <vers num="6.4.3-3" />
-        <vers num="6.4.3-5" />
-        <vers num="6.4.3-6" />
-        <vers num="6.4.3-7" />
-        <vers num="6.4.3-8" />
-        <vers num="6.4.4" />
-        <vers num="6.4.4-1" />
-        <vers num="6.4.4-3" />
-        <vers num="6.4.4-5" />
-        <vers num="6.4.4-7" />
-        <vers num="6.4.4-8" />
-        <vers num="6.4.5" />
-        <vers num="6.4.5-1" />
-        <vers num="6.4.5-2" />
-        <vers num="6.4.5-3" />
-        <vers num="6.4.5-4" />
-        <vers num="6.4.5-6" />
-        <vers num="6.4.5-7" />
-        <vers num="6.4.5-9" />
-        <vers num="6.4.6" />
-        <vers num="6.4.6-1" />
-        <vers num="6.4.6-2" />
-        <vers num="6.4.6-3" />
-        <vers num="6.4.6-4" />
-        <vers num="6.4.6-5" />
-        <vers num="6.4.6-6" />
-        <vers num="6.4.6-8" />
-        <vers num="6.4.6-9" />
-        <vers num="6.4.7-1" />
-        <vers num="6.4.7-10" />
-        <vers num="6.4.7-2" />
-        <vers num="6.4.7-3" />
-        <vers num="6.4.7-4" />
-        <vers num="6.4.7-5" />
-        <vers num="6.4.7-6" />
-        <vers num="6.4.7-7" />
-        <vers num="6.4.7-8" />
-        <vers num="6.4.7-9" />
-        <vers num="6.4.8" />
-        <vers num="6.4.8-1" />
-        <vers num="6.4.8-10" />
-        <vers num="6.4.8-2" />
-        <vers num="6.4.8-3" />
-        <vers num="6.4.8-4" />
-        <vers num="6.4.8-5" />
-        <vers num="6.4.8-6" />
-        <vers num="6.4.8-7" />
-        <vers num="6.4.8-8" />
-        <vers num="6.4.8-9" />
-        <vers num="6.4.9" />
-        <vers num="6.4.9-10" />
-        <vers num="6.4.9-2" />
-        <vers num="6.4.9-3" />
-        <vers num="6.4.9-5" />
-        <vers num="6.4.9-7" />
-        <vers num="6.4.9-8" />
-        <vers num="6.4.9-9" />
-        <vers num="6.5.0" />
-        <vers num="6.5.0-1" />
-        <vers num="6.5.0-10" />
-        <vers num="6.5.0-2" />
-        <vers num="6.5.0-3" />
-        <vers num="6.5.0-4" />
-        <vers num="6.5.0-5" />
-        <vers num="6.5.0-6" />
-        <vers num="6.5.0-7" />
-        <vers num="6.5.0-8" />
-        <vers num="6.5.0-9" />
-        <vers num="6.5.1" />
-        <vers num="6.5.1-1" />
-        <vers num="6.5.1-10" />
-        <vers num="6.5.1-2" />
-        <vers num="6.5.1-3" />
-        <vers num="6.5.1-4" />
-        <vers num="6.5.1-5" />
-        <vers num="6.5.1-6" />
-        <vers num="6.5.1-7" />
-        <vers num="6.5.1-9" />
-        <vers num="6.5.2" />
-        <vers num="6.5.2-1" />
-        <vers num="6.5.2-10" />
-        <vers num="6.5.2-2" />
-        <vers num="6.5.2-3" />
-        <vers num="6.5.2-4" />
-        <vers num="6.5.2-5" />
-        <vers num="6.5.2-6" />
-        <vers num="6.5.2-7" />
-        <vers num="6.5.2-8" />
-        <vers num="6.5.2-9" />
-        <vers num="6.5.3" />
-        <vers num="6.5.3-1" />
-        <vers num="6.5.3-10" />
-        <vers num="6.5.3-3" />
-        <vers num="6.5.3-4" />
-        <vers num="6.5.3-5" />
-        <vers num="6.5.3-6" />
-        <vers num="6.5.3-7" />
-        <vers num="6.5.3-8" />
-        <vers num="6.5.4" />
-        <vers num="6.5.4-1" />
-        <vers num="6.5.4-10" />
-        <vers num="6.5.4-2" />
-        <vers num="6.5.4-3" />
-        <vers num="6.5.4-4" />
-        <vers num="6.5.4-5" />
-        <vers num="6.5.4-6" />
-        <vers num="6.5.4-7" />
-        <vers num="6.5.4-8" />
-        <vers num="6.5.4-9" />
-        <vers num="6.5.5" />
-        <vers num="6.5.5-1" />
-        <vers num="6.5.5-10" />
-        <vers num="6.5.5-2" />
-        <vers num="6.5.5-3" />
-        <vers num="6.5.5-4" />
-        <vers num="6.5.5-5" />
-        <vers num="6.5.5-6" />
-        <vers num="6.5.5-7" />
-        <vers num="6.5.5-8" />
-        <vers num="6.5.5-9" />
-        <vers num="6.5.6" />
-        <vers num="6.5.6-10" />
-        <vers num="6.5.6-2" />
-        <vers num="6.5.6-3" />
-        <vers num="6.5.6-4" />
-        <vers num="6.5.6-5" />
-        <vers num="6.5.6-6" />
-        <vers num="6.5.6-7" />
-        <vers num="6.5.6-8" />
-        <vers num="6.5.6-9" />
-        <vers num="6.5.7" />
-        <vers num="6.5.7-1" />
-        <vers num="6.5.7-2" />
-        <vers num="6.5.7-3" />
-        <vers num="6.5.7-4" />
-        <vers num="6.5.7-5" />
-        <vers num="6.5.7-6" />
-        <vers num="6.5.7-7" />
-        <vers num="6.5.7-8" />
-        <vers num="6.5.7-9" />
-        <vers num="6.5.8" />
-        <vers num="6.5.8-1" />
-        <vers num="6.5.8-2" />
-        <vers num="6.5.8-3" />
-        <vers num="6.5.8-4" />
-        <vers num="6.5.8-5" />
-        <vers num="6.5.8-6" />
-        <vers num="6.5.8-7" />
-        <vers num="6.5.8-8" />
-        <vers num="6.5.8-9" />
-        <vers num="6.5.9" />
-        <vers num="6.5.9-1" />
-        <vers num="6.5.9-10" />
-        <vers num="6.5.9-2" />
-        <vers num="6.5.9-3" />
-        <vers num="6.5.9-4" />
-        <vers num="6.5.9-5" />
-        <vers num="6.5.9-6" />
-        <vers num="6.5.9-7" />
-        <vers num="6.5.9-8" />
-        <vers num="6.6.0" />
-        <vers num="6.6.0-1" />
-        <vers num="6.6.0-10" />
-        <vers num="6.6.0-2" />
-        <vers num="6.6.0-4" />
-        <vers num="6.6.0-5" />
-        <vers num="6.6.0-6" />
-        <vers num="6.6.0-7" />
-        <vers num="6.6.0-8" />
-        <vers num="6.6.0-9" />
-        <vers num="6.6.1" />
-        <vers num="6.6.1-1" />
-        <vers num="6.6.1-10" />
-        <vers num="6.6.1-2" />
-        <vers num="6.6.1-3" />
-        <vers num="6.6.1-4" />
-        <vers num="6.6.1-5" />
-        <vers num="6.6.1-6" />
-        <vers num="6.6.1-7" />
-        <vers num="6.6.1-8" />
-        <vers num="6.6.1-9" />
-        <vers num="6.6.2" />
-        <vers num="6.6.2-1" />
-        <vers num="6.6.2-10" />
-        <vers num="6.6.2-2" />
-        <vers num="6.6.2-3" />
-        <vers num="6.6.2-4" />
-        <vers num="6.6.2-5" />
-        <vers num="6.6.2-6" />
-        <vers num="6.6.2-7" />
-        <vers num="6.6.2-8" />
-        <vers num="6.6.2-9" />
-        <vers num="6.6.3" />
-        <vers num="6.6.3-1" />
-        <vers num="6.6.3-10" />
-        <vers num="6.6.3-2" />
-        <vers num="6.6.3-3" />
-        <vers num="6.6.3-4" />
-        <vers num="6.6.3-5" />
-        <vers num="6.6.3-6" />
-        <vers num="6.6.3-7" />
-        <vers num="6.6.4" />
-        <vers num="6.6.4-1" />
-        <vers num="6.6.4-10" />
-        <vers num="6.6.4-2" />
-        <vers num="6.6.4-4" />
-        <vers num="6.6.4-5" />
-        <vers num="6.6.4-6" />
-        <vers num="6.6.4-7" />
-        <vers num="6.6.4-8" />
-        <vers num="6.6.4-9" />
-        <vers num="6.6.5" />
-        <vers num="6.6.5-1" />
-        <vers num="6.6.5-10" />
-        <vers num="6.6.5-2" />
-        <vers num="6.6.5-3" />
-        <vers num="6.6.5-4" />
-        <vers num="6.6.5-5" />
-        <vers num="6.6.5-6" />
-        <vers num="6.6.5-7" />
-        <vers num="6.6.5-8" />
-        <vers num="6.6.5-9" />
-        <vers num="6.6.6-0" />
-        <vers num="6.6.6-1" />
-        <vers num="6.6.6-10" />
-        <vers num="6.6.6-2" />
-        <vers num="6.6.6-3" />
-        <vers num="6.6.6-4" />
-        <vers num="6.6.6-5" />
-        <vers num="6.6.6-6" />
-        <vers num="6.6.6-7" />
-        <vers num="6.6.6-8" />
-        <vers num="6.6.6-9" />
-        <vers num="6.6.7-0" />
-        <vers num="6.6.7-1" />
-        <vers num="6.6.7-10" />
-        <vers num="6.6.7-2" />
-        <vers num="6.6.7-3" />
-        <vers num="6.6.7-4" />
-        <vers num="6.6.7-5" />
-        <vers num="6.6.7-6" />
-        <vers num="6.6.7-7" />
-        <vers num="6.6.7-8" />
-        <vers num="6.6.7-9" />
-        <vers num="6.6.8-0" />
-        <vers num="6.6.9-0" />
-        <vers num="6.6.9-1" />
-        <vers num="6.6.9-10" />
-        <vers num="6.6.9-2" />
-        <vers num="6.6.9-3" />
-        <vers num="6.6.9-4" />
-        <vers num="6.6.9-5" />
-        <vers num="6.6.9-6" />
-        <vers num="6.6.9-7" />
-        <vers num="6.6.9-8" />
-        <vers num="6.6.9-9" />
-        <vers num="6.7.0-0" />
-        <vers num="6.7.0-1" />
-        <vers num="6.7.0-10" />
-        <vers num="6.7.0-2" />
-        <vers num="6.7.0-3" />
-        <vers num="6.7.0-4" />
-        <vers num="6.7.0-5" />
-        <vers num="6.7.0-6" />
-        <vers num="6.7.0-7" />
-        <vers num="6.7.0-8" />
-        <vers num="6.7.0-9" />
-        <vers num="6.7.1-0" />
-        <vers num="6.7.1-1" />
-        <vers num="6.7.1-10" />
-        <vers num="6.7.1-2" />
-        <vers num="6.7.1-3" />
-        <vers num="6.7.1-4" />
-        <vers num="6.7.1-5" />
-        <vers num="6.7.1-6" />
-        <vers num="6.7.1-7" />
-        <vers num="6.7.1-8" />
-        <vers num="6.7.1-9" />
-        <vers num="6.7.2-0" />
-        <vers num="6.7.2-1" />
-        <vers num="6.7.2-10" />
-        <vers num="6.7.2-2" />
-        <vers num="6.7.2-3" />
-        <vers num="6.7.2-4" />
-        <vers num="6.7.2-5" />
-        <vers num="6.7.2-6" />
-        <vers num="6.7.2-7" />
-        <vers num="6.7.2-8" />
-        <vers num="6.7.2-9" />
-        <vers num="6.7.3-0" />
-        <vers num="6.7.3-1" />
-        <vers num="6.7.3-10" />
-        <vers num="6.7.3-2" />
-        <vers num="6.7.3-3" />
-        <vers num="6.7.3-4" />
-        <vers num="6.7.3-5" />
-        <vers num="6.7.3-6" />
-        <vers num="6.7.3-7" />
-        <vers num="6.7.3-8" />
-        <vers num="6.7.3-9" />
-        <vers num="6.7.4-0" />
-        <vers num="6.7.4-1" />
-        <vers num="6.7.4-10" />
-        <vers num="6.7.4-2" />
-        <vers num="6.7.4-3" />
-        <vers num="6.7.4-4" />
-        <vers num="6.7.4-5" />
-        <vers num="6.7.4-6" />
-        <vers num="6.7.4-7" />
-        <vers num="6.7.4-8" />
-        <vers num="6.7.4-9" />
-        <vers num="6.7.5-0" />
-        <vers num="6.7.5-1" />
-        <vers num="6.7.5-2" />
-        <vers num="6.7.5-3" />
-        <vers num="6.7.5-4" />
-        <vers num="6.7.5-5" />
-        <vers num="6.7.5-6" />
-        <vers num="6.7.5-7" />
-        <vers prev="1" num="6.7.5-8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1190" published="2012-05-03" name="CVE-2012-1190" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the replication-setup functionality in js/replication.js in phpMyAdmin 3.4.x before 3.4.10.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted database name.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/phpmyadmin/phpmyadmin/commit/86073d532aed656550cb731aa5b4288b126ae7a6" source="CONFIRM" patch="1">https://github.com/phpmyadmin/phpmyadmin/commit/86073d532aed656550cb731aa5b4288b126ae7a6</ref>
-      <ref url="http://www.phpmyadmin.net/home_page/security/PMASA-2012-1.php" source="CONFIRM" patch="1" adv="1">http://www.phpmyadmin.net/home_page/security/PMASA-2012-1.php</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079566.html" source="FEDORA">FEDORA-2012-5599</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="phpmyadmin" name="phpmyadmin">
-        <vers num="3.4.0.0" />
-        <vers num="3.4.1.0" />
-        <vers num="3.4.10.0" />
-        <vers num="3.4.2.0" />
-        <vers num="3.4.3.0" />
-        <vers num="3.4.3.1" />
-        <vers num="3.4.3.2" />
-        <vers num="3.4.4.0" />
-        <vers num="3.4.5.0" />
-        <vers num="3.4.6.0" />
-        <vers num="3.4.7" />
-        <vers num="3.4.7.0" />
-        <vers num="3.4.7.1" />
-        <vers num="3.4.8.0" />
-        <vers num="3.4.9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1191" published="2012-02-17" name="CVE-2012-1191" modified="2012-02-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The resolver in dnscache in Daniel J. Bernstein djbdns 1.05 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.isc.org/files/imce/ghostdomain_camera.pdf" source="MISC">https://www.isc.org/files/imce/ghostdomain_camera.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="d.j.bernstein" name="djbdns">
-        <vers num="1.05" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1192" published="2012-02-17" name="CVE-2012-1192" modified="2012-02-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.isc.org/files/imce/ghostdomain_camera.pdf" source="MISC">https://www.isc.org/files/imce/ghostdomain_camera.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="unbound" name="unbound">
-        <vers num="0.0" />
-        <vers num="0.1" />
-        <vers num="0.10" />
-        <vers num="0.11" />
-        <vers num="0.2" />
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="0.6" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.8" />
-        <vers num="0.9" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.3.4" />
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers prev="1" num="1.4.10" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1193" published="2012-02-17" name="CVE-2012-1193" modified="2012-02-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The resolver in PowerDNS Recursor (aka pdns_recursor) 3.3 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.isc.org/files/imce/ghostdomain_camera.pdf" source="MISC">https://www.isc.org/files/imce/ghostdomain_camera.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="powerdns" name="powerdns_recursor">
-        <vers num="3.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1194" published="2012-02-17" name="CVE-2012-1194" modified="2012-02-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.isc.org/files/imce/ghostdomain_camera.pdf" source="MISC">https://www.isc.org/files/imce/ghostdomain_camera.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers prev="1" num="-" edition="gold" />
-        <vers prev="1" num="-" edition="sp2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1195" published="2012-02-17" name="CVE-2012-1195" modified="2012-02-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web service in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via a PutUpdateFileCore command in a RunAMTCommand SOAP request, then accessing the file via a direct request to the file in the web root.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73207" source="XF">thinkmanagement-serversetup-file-upload(73207)</ref>
-      <ref url="http://www.securitytracker.com/id?1026693" source="SECTRACK">1026693</ref>
-      <ref url="http://www.securityfocus.com/bid/52023" source="BID">52023</ref>
-      <ref url="http://secunia.com/advisories/47666" source="SECUNIA" adv="1">47666</ref>
-      <ref url="http://osvdb.org/79276" source="OSVDB">79276</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="landesk" name="lenovo_thinkmanagement_console">
-        <vers num="9.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1196" published="2012-02-17" name="CVE-2012-1196" modified="2012-02-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a .. (dot dot) in the filename parameter in a SetTaskLogByFile SOAP request.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73208" source="XF">thinkmanagement-vulcore-dir-traversal(73208)</ref>
-      <ref url="http://www.securitytracker.com/id?1026693" source="SECTRACK">1026693</ref>
-      <ref url="http://www.securityfocus.com/bid/52023" source="BID">52023</ref>
-      <ref url="http://secunia.com/advisories/47666" source="SECUNIA" adv="1">47666</ref>
-      <ref url="http://osvdb.org/79277" source="OSVDB">79277</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="landesk" name="lenovo_thinkmanagement_console">
-        <vers num="9.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1197" published="2012-02-17" name="CVE-2012-1197" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Integer overflow in the IDE_ACDStd.apl module for ACDSee 14.1 Build 137 allows remote attackers to execute arbitrary code via crafted "image dimension values" in a BMP file, which triggers a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73242" source="XF">acdsee-bmp-image-bo(73242)</ref>
-      <ref url="http://www.securityfocus.com/bid/52047" source="BID">52047</ref>
-      <ref url="http://secunia.com/advisories/47450" source="SECUNIA" adv="1">47450</ref>
-      <ref url="http://osvdb.org/79305" source="OSVDB">79305</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="acd_systems" name="acdsee">
-        <vers num="14.1_build_137" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1198" published="2012-02-17" name="CVE-2012-1198" modified="2012-07-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">base_ag_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allows remote attackers to execute arbitrary code by uploading contents of the file with an executable extension via a create action, then accessing it via a view action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73201" source="XF">base-baseagmain-security-bypass(73201)</ref>
-      <ref url="http://www.securityfocus.com/bid/51979" source="BID">51979</ref>
-      <ref url="http://packetstormsecurity.org/files/109663/BASE-1.4.5-Remote-File-Inclusion-Shell-Creation.html" source="MISC">http://packetstormsecurity.org/files/109663/BASE-1.4.5-Remote-File-Inclusion-Shell-Creation.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="secureideas" name="basic_analysis_and_security_engine">
-        <vers num="1.4.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1199" published="2012-02-17" name="CVE-2012-1199" modified="2012-07-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) BASE_path parameter to base_ag_main.php, (2) base_db_setup.php, (3) base_graph_common.php, (4) base_graph_display.php, (5) base_graph_form.php, (6) base_graph_main.php, (7) base_local_rules.php, (8) base_logout.php, (9) base_main.php, (10) base_maintenance.php, (11) base_payload.php, (12) base_qry_alert.php, (13) base_qry_common.php, (14) base_qry_main.php, (15) base_stat_alerts.php, (16) base_stat_class.php, (17) base_stat_common.php, (18) base_stat_ipaddr.php, (19) base_stat_iplink.php, (20) base_stat_ports.php, (21) base_stat_sensor.php, (22) base_stat_time.php, (23) base_stat_uaddr.php, (24) base_user.php, (25) index.php, (26) admin/base_roleadmin.php, (27) admin/base_useradmin.php, (28) admin/index.php, (29) help/base_setup_help.php, (30) includes/base_action.inc.php, (31) includes/base_cache.inc.php, (32) includes/base_db.inc.php, (33) includes/base_db.inc.php, (34) includes/base_include.inc.php, (35) includes/base_output_html.inc.php, (36) includes/base_output_query.inc.php, (37) includes/base_state_criteria.inc.php, (38) includes/base_state_query.inc.php or (39) setup/base_conf_contents.php; (40) GLOBALS[user_session_path] parameter to includes/base_state_common.inc.php; (41) BASE_Language parameter to setup/base_conf_contents.php; or (42) ado_inc_php parameter to setup/setup2.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73200" source="XF">base-multiple-file-include(73200)</ref>
-      <ref url="http://www.securityfocus.com/bid/51979" source="BID">51979</ref>
-      <ref url="http://packetstormsecurity.org/files/109663/BASE-1.4.5-Remote-File-Inclusion-Shell-Creation.html" source="MISC">http://packetstormsecurity.org/files/109663/BASE-1.4.5-Remote-File-Inclusion-Shell-Creation.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="secureideas" name="basic_analysis_and_security_engine">
-        <vers num="1.4.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1200" published="2012-02-17" name="CVE-2012-1200" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple PHP remote file inclusion vulnerabilities in Nova CMS allow remote attackers to execute arbitrary PHP code via a URL in the (1) fileType parameter to optimizer/index.php, (2) id parameter to administrator/modules/moduleslist.php, (3) filename parameter to includes/function/gets.php, or (4) conf[blockfile] parameter to includes/function/usertpl.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73159" source="XF">novacms-multiple-file-include(73159)</ref>
-      <ref url="http://www.securityfocus.com/bid/51976" source="BID">51976</ref>
-      <ref url="http://packetstormsecurity.org/files/109669/Nova-CMS-Remote-File-Inclusion.html" source="MISC">http://packetstormsecurity.org/files/109669/Nova-CMS-Remote-File-Inclusion.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nova-cms" name="nova_cms">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1205" published="2012-02-24" name="CVE-2012-1205" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://wordpress.org/extend/plugins/relocate-upload/changelog/" source="CONFIRM" patch="1">http://wordpress.org/extend/plugins/relocate-upload/changelog/</ref>
-      <ref url="http://plugins.trac.wordpress.org/changeset/504380/relocate-upload" source="CONFIRM" patch="1">http://plugins.trac.wordpress.org/changeset/504380/relocate-upload</ref>
-      <ref url="http://www.securityfocus.com/bid/49693" source="BID">49693</ref>
-      <ref url="http://secunia.com/advisories/47976" source="SECUNIA" adv="1">47976</ref>
-      <ref url="http://osvdb.org/79250" source="OSVDB">79250</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="alanft" name="relocate-upload">
-        <vers num="0.10" />
-        <vers num="0.11" />
-        <vers prev="1" num="0.14" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1206" published="2012-02-24" name="CVE-2012-1206" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple integer overflows in Hancom Office 2010 SE 8.5.5 allow remote attackers to execute arbitrary code via large dimension values in a (1) JPG image to the ImportGR in the JPG image filter module (HncJpeg10.flt) or (2) PNG image to the PNG image filter module (HncPng10.flt), which triggers a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73026" source="XF">hancom-png-bo(73026)</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73025" source="XF">hancom-importgr-bo(73025)</ref>
-      <ref url="http://www.securityfocus.com/bid/51892" source="BID">51892</ref>
-      <ref url="http://www.hancom.co.kr/notice.noticeView.do?targetRow=1&amp;notice_seqno=100" source="MISC">http://www.hancom.co.kr/notice.noticeView.do?targetRow=1&amp;notice_seqno=100</ref>
-      <ref url="http://secunia.com/advisories/47386" source="SECUNIA" adv="1">47386</ref>
-      <ref url="http://osvdb.org/78907" source="OSVDB">78907</ref>
-      <ref url="http://osvdb.org/78906" source="OSVDB">78906</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hancom" name="hancom_office_2010_se">
-        <vers num="8.5.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1207" published="2012-02-24" name="CVE-2012-1207" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in frontend/core/engine/javascript.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter to frontend/js.php.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/forkcms/forkcms/commit/a9986b86c53de0582248b39605660fbba0c21a29" source="CONFIRM" patch="1">https://github.com/forkcms/forkcms/commit/a9986b86c53de0582248b39605660fbba0c21a29</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73169" source="XF">forkcms-js-file-include(73169)</ref>
-      <ref url="http://www.securityfocus.com/bid/51972" source="BID">51972</ref>
-      <ref url="http://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released" source="CONFIRM">http://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released</ref>
-      <ref url="http://packetstormsecurity.org/files/109709/Fork-CMS-3.2.4-Cross-Site-Scripting-Local-File-Inclusion.html" source="MISC">http://packetstormsecurity.org/files/109709/Fork-CMS-3.2.4-Cross-Site-Scripting-Local-File-Inclusion.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="fork-cms" name="fork_cms">
-        <vers num="3.2.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1208" published="2012-02-24" name="CVE-2012-1208" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) report parameter to blog/settings or (2) error parameter to users/index.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/forkcms/forkcms/commit/df75e0797a6540c4d656969a2e7df7689603b2cf" source="CONFIRM" patch="1">https://github.com/forkcms/forkcms/commit/df75e0797a6540c4d656969a2e7df7689603b2cf</ref>
-      <ref url="https://github.com/forkcms/forkcms/commit/d65c083adc91c88d21bd9a0df4c2688df634c6ff" source="CONFIRM" patch="1">https://github.com/forkcms/forkcms/commit/d65c083adc91c88d21bd9a0df4c2688df634c6ff</ref>
-      <ref url="https://github.com/forkcms/forkcms/commit/8fa74dd3e2e32723cd121177dce6aeac37e29df6" source="CONFIRM" patch="1">https://github.com/forkcms/forkcms/commit/8fa74dd3e2e32723cd121177dce6aeac37e29df6</ref>
-      <ref url="http://www.securityfocus.com/bid/51972" source="BID">51972</ref>
-      <ref url="http://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released" source="CONFIRM">http://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released</ref>
-      <ref url="http://secunia.com/advisories/47937" source="SECUNIA" adv="1">47937</ref>
-      <ref url="http://packetstormsecurity.org/files/109709/Fork-CMS-3.2.4-Cross-Site-Scripting-Local-File-Inclusion.html" source="MISC">http://packetstormsecurity.org/files/109709/Fork-CMS-3.2.4-Cross-Site-Scripting-Local-File-Inclusion.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="fork-cms" name="fork_cms">
-        <vers num="3.2.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1209" published="2012-02-24" name="CVE-2012-1209" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/forkcms/forkcms/commit/df75e0797a6540c4d656969a2e7df7689603b2cf" source="CONFIRM" patch="1">https://github.com/forkcms/forkcms/commit/df75e0797a6540c4d656969a2e7df7689603b2cf</ref>
-      <ref url="https://github.com/forkcms/forkcms/commit/c8ec9c58a6b3c46cdd924532c1de99bcda6072ed" source="CONFIRM" patch="1">https://github.com/forkcms/forkcms/commit/c8ec9c58a6b3c46cdd924532c1de99bcda6072ed</ref>
-      <ref url="http://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released" source="CONFIRM">http://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="fork-cms" name="fork_cms">
-        <vers num="3.2.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1210" published="2012-02-24" name="CVE-2012-1210" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in pfile/file.php in Powie pFile 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73166" source="XF">pfile-file-sql-injection(73166)</ref>
-      <ref url="http://www.securityfocus.com/bid/51982" source="BID">51982</ref>
-      <ref url="http://packetstormsecurity.org/files/109670/Pfile-1.02-Cross-Site-Scripting-SQL-Injection.html" source="MISC">http://packetstormsecurity.org/files/109670/Pfile-1.02-Cross-Site-Scripting-SQL-Injection.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="powie" name="pfile">
-        <vers num="1.02" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1211" published="2012-02-24" name="CVE-2012-1211" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in pfile/kommentar.php in Powie pFile 1.02 allows remote attackers to inject arbitrary web script or HTML via the filecat parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73165" source="XF">pfile-kommentar-xss(73165)</ref>
-      <ref url="http://www.securityfocus.com/bid/51982" source="BID">51982</ref>
-      <ref url="http://packetstormsecurity.org/files/109670/Pfile-1.02-Cross-Site-Scripting-SQL-Injection.html" source="MISC">http://packetstormsecurity.org/files/109670/Pfile-1.02-Cross-Site-Scripting-SQL-Injection.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="powie" name="pfile">
-        <vers num="1.02" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1212" published="2012-02-24" name="CVE-2012-1212" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the smwfOnSfSetTargetName function in extensions/SMWHalo/includes/SMW_Initialize.php in Semantic Enterprise Wiki (SMW+) 1.5.6, 1.6.0_2 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter to index.php/Special:FormEdit.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73167" source="XF">smw-target-xss(73167)</ref>
-      <ref url="http://www.securityfocus.com/bid/51980" source="BID">51980</ref>
-      <ref url="http://st2tea.blogspot.com/2012/02/smw-enterprise-wiki-156-cross-site.html" source="MISC">http://st2tea.blogspot.com/2012/02/smw-enterprise-wiki-156-cross-site.html</ref>
-      <ref url="http://secunia.com/advisories/47968" source="SECUNIA" adv="1">47968</ref>
-      <ref url="http://packetstormsecurity.org/files/109637/SMW-1.5.6-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/109637/SMW-1.5.6-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="smwplus" name="smw+">
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.5.0" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.6" />
-        <vers num="1.5.6-1" />
-        <vers num="1.6.0" />
-        <vers prev="1" num="1.6.0_2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1213" published="2012-02-24" name="CVE-2012-1213" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client allows remote attackers to inject arbitrary web script or HTML via the view parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73168" source="XF">zimbra-view-xss(73168)</ref>
-      <ref url="http://www.securityfocus.com/bid/51974" source="BID">51974</ref>
-      <ref url="http://st2tea.blogspot.com/2012/02/zimbra-cross-site-scripting.html" source="MISC">http://st2tea.blogspot.com/2012/02/zimbra-cross-site-scripting.html</ref>
-      <ref url="http://packetstormsecurity.org/files/109710/Zimbra-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/109710/Zimbra-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="zimbra" name="zimbra">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1214" published="2012-02-21" name="CVE-2012-1214" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Add friends module in Yoono Desktop Application before 1.8.21 allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73149" source="XF">yoono-addfriends-xss(73149)</ref>
-      <ref url="http://support.yoono.com/yoono/topics/xss-w35in" source="CONFIRM">http://support.yoono.com/yoono/topics/xss-w35in</ref>
-      <ref url="http://packetstormsecurity.org/files/109618/Yoono-Desktop-1.8.16-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/109618/Yoono-Desktop-1.8.16-Cross-Site-Scripting.html</ref>
-      <ref url="http://packetstormsecurity.org/files/109618/#comment-10343" source="MISC">http://packetstormsecurity.org/files/109618/#comment-10343</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="yoono" name="yoono_desktop">
-        <vers prev="1" num="1.8.20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1215" published="2012-02-21" name="CVE-2012-1215" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73150" source="XF">yoonofirefoxextension-addfriends-xss(73150)</ref>
-      <ref url="http://www.securityfocus.com/bid/51970" source="BID">51970</ref>
-      <ref url="http://support.yoono.com/yoono/topics/xss-w35in" source="CONFIRM">http://support.yoono.com/yoono/topics/xss-w35in</ref>
-      <ref url="http://packetstormsecurity.org/files/109617/Yoono-Firefox-7.7.0-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/109617/Yoono-Firefox-7.7.0-Cross-Site-Scripting.html</ref>
-      <ref url="http://packetstormsecurity.org/files/109617/#comment-10344" source="MISC">http://packetstormsecurity.org/files/109617/#comment-10344</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="yoono" name="yoono_for_firefox">
-        <vers prev="1" num="7.7.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1216" published="2012-02-21" name="CVE-2012-1216" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in PBBoard 2.1.4 allow remote attackers to hijack the authentication of administrators for requests that (1) upload a file via an add action or (2) change the contents of a file via a dit action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://secunia.com/advisories/47948" source="SECUNIA" adv="1">47948</ref>
-      <ref url="http://packetstormsecurity.org/files/109706/PBBoard-2.1.4-Cross-Site-Request-Forgery-Shell-Upload.html" source="MISC">http://packetstormsecurity.org/files/109706/PBBoard-2.1.4-Cross-Site-Request-Forgery-Shell-Upload.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pbboard" name="pbboard">
-        <vers num="2.1.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1217" published="2012-02-21" name="CVE-2012-1217" modified="2012-02-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrary web script or HTML via the team parameter to (1) prospects.php, (2) prospect.php, or (3) team.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73154" source="XF">sths-prospects-team-sql-injection(73154)</ref>
-      <ref url="http://www.securityfocus.com/bid/51991" source="BID">51991</ref>
-      <ref url="http://packetstormsecurity.org/files/109665/STHS-v2-Web-Portal-2.2-SQL-Injection.html" source="MISC">http://packetstormsecurity.org/files/109665/STHS-v2-Web-Portal-2.2-SQL-Injection.html</ref>
-      <ref url="http://0nto.wordpress.com/2012/02/13/sths-v2-web-portal-2-2-sql-injection-vulnerabilty/" source="MISC">http://0nto.wordpress.com/2012/02/13/sths-v2-web-portal-2-2-sql-injection-vulnerabilty/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="simhl" name="sths_v2_web_portal">
-        <vers num="2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1218" published="2012-02-21" name="CVE-2012-1218" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in freelancerKit 2.35 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to the (1) notes and (2) tickets components.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73105" source="XF">freelancerkit-multiple-sql-injection(73105)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=402" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=402</ref>
-      <ref url="http://www.securityfocus.com/bid/51946" source="BID">51946</ref>
-      <ref url="http://secunia.com/advisories/47766" source="SECUNIA" adv="1">47766</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freelancerkit" name="freelancerkit">
-        <vers num="2.35" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1219" published="2012-02-21" name="CVE-2012-1219" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML via the (1) ticket parameter to tickets.php, (2) title parameter to notes.php, or (3) task parameter to todo.php.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73104" source="XF">freelancerkit-multiple-xss(73104)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=402" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=402</ref>
-      <ref url="http://www.securityfocus.com/bid/51946" source="BID">51946</ref>
-      <ref url="http://secunia.com/advisories/47766" source="SECUNIA" adv="1">47766</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freelancerkit" name="freelancerkit">
-        <vers num="2.35" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1220" published="2012-02-21" name="CVE-2012-1220" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in modules/config/admin_utente.php in GAzie 5.20 and earlier allows remote attackers to hijack the authentication of administrators for requests that change account information via an update action, as demonstrated by changing the password.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72991" source="XF">gazie-adminutente-csrf(72991)</ref>
-      <ref url="http://www.exploit-db.com/exploits/18464" source="EXPLOIT-DB">18464</ref>
-      <ref url="http://secunia.com/advisories/47947" source="SECUNIA" adv="1">47947</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="devincentiis" name="gazie">
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.15" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="4.0.1" />
-        <vers num="4.0.10" />
-        <vers num="4.0.11" />
-        <vers num="4.0.12" />
-        <vers num="4.0.13" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" />
-        <vers num="4.0.8" />
-        <vers num="4.0.9" />
-        <vers num="5.0" />
-        <vers num="5.1" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="5.13" />
-        <vers num="5.14" />
-        <vers num="5.15" />
-        <vers num="5.16" />
-        <vers num="5.17" />
-        <vers num="5.18" />
-        <vers num="5.19" />
-        <vers num="5.2" />
-        <vers prev="1" num="5.20" />
-        <vers num="5.3" />
-        <vers num="5.4" />
-        <vers num="5.5" />
-        <vers num="5.6" />
-        <vers num="5.7" />
-        <vers num="5.8" />
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1221" published="2012-02-21" name="CVE-2012-1221" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in the telnet server in RabidHamster R2/Extreme 1.65 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the File command.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73114" source="XF">r2-file-dir-traversal(73114)</ref>
-      <ref url="http://www.securityfocus.com/bid/52061" source="BID">52061</ref>
-      <ref url="http://www.osvdb.org/79094" source="OSVDB">79094</ref>
-      <ref url="http://secunia.com/advisories/47966" source="SECUNIA" adv="1">47966</ref>
-      <ref url="http://aluigi.org/adv/r2_1-adv.txt" source="MISC">http://aluigi.org/adv/r2_1-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rabidhamster" name="r2/">
-        <vers prev="1" num="extreme" edition="1.65" />
-      </prod>
-      <prod vendor="rabidhamster" name="r2/extreme">
-        <vers num="1.51" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1222" published="2012-02-21" name="CVE-2012-1222" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:C/I:C/A:C)" CVSS_score="8.5" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="6.8" CVSS_base_score="8.5">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in RabidHamster R2/Extreme 1.65 and earlier allows remote authenticated users to execute arbitrary code via a long string to TCP port 23.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73113" source="XF">r2-file-bo(73113)</ref>
-      <ref url="http://www.securityfocus.com/bid/52061" source="BID">52061</ref>
-      <ref url="http://secunia.com/advisories/47966" source="SECUNIA" adv="1">47966</ref>
-      <ref url="http://osvdb.org/79093" source="OSVDB">79093</ref>
-      <ref url="http://aluigi.org/adv/r2_1-adv.txt" source="MISC">http://aluigi.org/adv/r2_1-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rabidhamster" name="r2/extreme">
-        <vers num="1.51" />
-        <vers prev="1" num="1.65" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1223" published="2012-02-21" name="CVE-2012-1223" modified="2012-02-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote attackers to obtain the PIN number via a brute force attack.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73115" source="XF">r2-telnet-unauth-access(73115)</ref>
-      <ref url="http://secunia.com/advisories/47966" source="SECUNIA" adv="1">47966</ref>
-      <ref url="http://osvdb.org/79095" source="OSVDB">79095</ref>
-      <ref url="http://aluigi.org/adv/r2_1-adv.txt" source="MISC">http://aluigi.org/adv/r2_1-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rabidhamster" name="r2/extreme">
-        <vers num="1.51" />
-        <vers prev="1" num="1.65" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1224" published="2012-02-21" name="CVE-2012-1224" modified="2012-02-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in system/classes/login.php in ContentLion Alpha 1.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.darksecurity.de/advisories/2012/SSCHADV2012-004.txt" source="MISC">http://www.darksecurity.de/advisories/2012/SSCHADV2012-004.txt</ref>
-      <ref url="http://osvdb.org/78833" source="OSVDB">78833</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="contentlion" name="contentlion_alpha">
-        <vers num="1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1225" published="2012-02-21" name="CVE-2012-1225" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) memberslist parameter (aka Member List) in list.php or (2) rowid parameter to adherents/fiche.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/51956" source="BID">51956</ref>
-      <ref url="http://secunia.com/advisories/47969" source="SECUNIA" adv="1">47969</ref>
-      <ref url="http://osvdb.org/79011" source="OSVDB">79011</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0056.html" source="BUGTRAQ">20120210 Dolibarr CMS v3.2.0 Alpha - SQL Injection Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dolibarr" name="dolibarr">
-        <vers num="2.5.0" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.8.0" />
-        <vers num="2.8.1" />
-        <vers num="2.9.0" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.1.0" edition="rc" />
-        <vers prev="1" num="3.2.0" edition="alpha" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1226" published="2012-02-21" name="CVE-2012-1226" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the (1) file parameter to document.php or (2) backtopage parameter in a create action to comm/action/fiche.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-      <sec_prot other="1" />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/Dolibarr/dolibarr/commit/8f9b9987ffb42cfbe907fe31ded3001bfc1b3417" source="CONFIRM">https://github.com/Dolibarr/dolibarr/commit/8f9b9987ffb42cfbe907fe31ded3001bfc1b3417</ref>
-      <ref url="https://github.com/Dolibarr/dolibarr/commit/5381986e50dd6055f2b3b63281eaacffa0449da2" source="CONFIRM">https://github.com/Dolibarr/dolibarr/commit/5381986e50dd6055f2b3b63281eaacffa0449da2</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73136" source="XF">dolibarr-multiple-file-include(73136)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=428" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=428</ref>
-      <ref url="http://www.securityfocus.com/archive/1/521583" source="BUGTRAQ">20120210 Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities</ref>
-      <ref url="http://www.exploit-db.com/exploits/18480" source="EXPLOIT-DB">18480</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0168.html" source="BUGTRAQ">20120227 Re: Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dolibarr" name="dolibarr">
-        <vers num="3.2.0" edition="alpha" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1227" published="2012-02-21" name="CVE-2012-1227" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that (1) modify the admin email address or (2) modify the blog title via a settings action; (3) add a page via an editpage action, or (4) add a categorie via the blog module.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/18474" source="EXPLOIT-DB">18474</ref>
-      <ref url="http://secunia.com/advisories/47934" source="SECUNIA" adv="1">47934</ref>
-      <ref url="http://osvdb.org/79005" source="OSVDB">79005</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pluck-cms" name="pluck">
-        <vers num="4.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1234" published="2012-02-21" name="CVE-2012-1234" modified="2012-02-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to execute arbitrary SQL commands via a malformed URL.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0234.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="advantech" name="advantech_webaccess">
-        <vers num="5.0" />
-        <vers prev="1" num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1235" published="2012-02-21" name="CVE-2012-1235" modified="2012-02-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0235.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="advantech" name="advantech_webaccess">
-        <vers num="5.0" />
-        <vers prev="1" num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1236" published="2012-03-19" name="CVE-2012-1236" modified="2012-06-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in Janetter before 3.3.0.0 (aka 3.3.0) allow remote attackers to hijack the authentication of arbitrary users for requests that (1) tweet, (2) upload an image file, or (3) execute arbitrary commands.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://secunia.com/advisories/48480" source="SECUNIA">48480</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000027" source="JVNDB">JVNDB-2012-000027</ref>
-      <ref url="http://jvn.jp/en/jp/JVN83459967/index.html" source="JVN">JVN#83459967</ref>
-      <ref url="http://janetter.net/history.html" source="CONFIRM">http://janetter.net/history.html</ref>
-      <ref url="http://blog.janetter.net/" source="CONFIRM">http://blog.janetter.net/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="janetter" name="janetter">
-        <vers num="1.0.0.0" />
-        <vers num="1.1.0.0" />
-        <vers num="1.2.0.0" />
-        <vers num="1.2.1.0" />
-        <vers num="1.3.0.0" />
-        <vers num="1.4.0.0" />
-        <vers num="1.5.0.0" />
-        <vers num="1.6.0.0" />
-        <vers num="1.6.1.0" />
-        <vers num="1.6.2.0" />
-        <vers num="1.6.3.0" />
-        <vers num="1.7.0.0" />
-        <vers num="1.7.1.0" />
-        <vers num="1.7.2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.1.0" />
-        <vers num="2.0.2.0" />
-        <vers num="2.0.3.0" />
-        <vers num="2.1.0.0" />
-        <vers num="2.1.1.0" />
-        <vers num="2.1.1.1" />
-        <vers num="2.1.1.2" />
-        <vers num="2.2.0.0" />
-        <vers num="2.3.0.0" />
-        <vers num="2.4.0.0" />
-        <vers num="2.5.0.0" />
-        <vers num="2.5.1.0" />
-        <vers num="3.0.0.0" />
-        <vers num="3.1.0.0" />
-        <vers num="3.1.0.1" />
-        <vers num="3.1.1.0" />
-        <vers num="3.2.0.0" />
-        <vers num="3.2.1.0" />
-        <vers prev="1" num="3.2.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1237" published="2012-04-06" name="CVE-2012-1237" modified="2012-04-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://oss.icz.co.jp/news/?p=501" source="CONFIRM" patch="1">http://oss.icz.co.jp/news/?p=501</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000029" source="JVNDB">JVNDB-2012-000029</ref>
-      <ref url="http://jvn.jp/en/jp/JVN44913777/index.html" source="JVN">JVN#44913777</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="icz" name="sencha_sns">
-        <vers num="1.0.0" />
-        <vers prev="1" num="1.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1238" published="2012-04-06" name="CVE-2012-1238" modified="2012-04-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Session fixation vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack web sessions via unspecified vectors.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/384.html 'CWE-384: Session Fixation'</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://oss.icz.co.jp/news/?p=501" source="CONFIRM" patch="1">http://oss.icz.co.jp/news/?p=501</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000030" source="JVNDB">JVNDB-2012-000030</ref>
-      <ref url="http://jvn.jp/en/jp/JVN97200417/index.html" source="JVN">JVN#97200417</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="icz" name="sencha_sns">
-        <vers num="1.0.0" />
-        <vers prev="1" num="1.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1239" published="2012-04-06" name="CVE-2012-1239" modified="2012-04-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmware 30x through 302, 35x through 354, and 4xx through 421 allows remote attackers to bypass authentication and obtain administrative privileges via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-      <sec_prot admin="1" />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.toshibatec.co.jp/information/2012/20120405/" source="CONFIRM">http://www.toshibatec.co.jp/information/2012/20120405/</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000028" source="JVNDB">JVNDB-2012-000028</ref>
-      <ref url="http://jvn.jp/en/jp/JVN92830293/index.html" source="JVN">JVN#92830293</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="toshibatec" name="e-studio-167_with_network_printer_kit_firmware">
-        <vers num="t282cn0j421" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-181_with_network_printer_kit_firmware">
-        <vers num="t282cn0j421" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-182_with_network_printer_kit_firmware">
-        <vers num="t282cn0j421" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-207_with_network_printer_kit_firmware">
-        <vers num="t282cn0j421" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-232_firmware">
-        <vers num="t377sy0j354" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-2330c_firmware">
-        <vers num="t450sy0j302" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-2500c_firmware">
-        <vers num="t380sy0j354" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-255_firmware">
-        <vers num="t470sy0j302" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-255p_firmware">
-        <vers num="t470sy0j302" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-281c_firmware">
-        <vers num="t410sy0j354" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-282_firmware">
-        <vers num="t377sy0j354" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-2830c_firmware">
-        <vers num="t450sy0j302" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-3500c_firmware">
-        <vers num="t380sy0j354" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-3510c_firmware">
-        <vers num="t380sy0j354" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-351c_firmware">
-        <vers num="t410sy0j354" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-3520c_firmware">
-        <vers num="t450sy0j302" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-352_firmware">
-        <vers num="t364sy0j354" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-355_firmware">
-        <vers num="t470sy0j302" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-451c_firmware">
-        <vers num="t410sy0j354" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-4520c_firmware">
-        <vers num="t450sy0j302" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-452_firmware">
-        <vers num="t364sy0j354" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-455_firmware">
-        <vers num="t470sy0j302" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-5520c_firmware">
-        <vers num="t430sy0j302" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-600_firmware">
-        <vers num="t390sy0j354" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-6520c_firmware">
-        <vers num="t430sy0j302" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-6530c_firmware">
-        <vers num="t430sy0j302" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-655_firmware">
-        <vers num="t100sy0j302" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-720_firmware">
-        <vers num="t390sy0j354" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-755_firmware">
-        <vers num="t100sy0j302" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-850_firmware">
-        <vers num="t390sy0j354" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-855_firmware">
-        <vers num="t100sy0j302" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-tf-182_with_network_printer_kit_firmware">
-        <vers num="t282cn0j421" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-167_with_network_printer_kit">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-181_with_network_printer_kit">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-182_with_network_printer_kit">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-207_with_network_printer_kit">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-232">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-2330c">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-2500c">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-255">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-255p">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-281c">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-282">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-2830c">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-3500c">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-3510c">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-351c">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-352">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-3520c">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-355">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-451c">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-452">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-4520c">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-455">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-5520c">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-600">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-6520c">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-6530c">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-655">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-720">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-755">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-850">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-855">
-        <vers num="-" />
-      </prod>
-      <prod vendor="toshibatec" name="e-studio-tf-182_with_network_printer_kit">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1240" published="2012-04-16" name="CVE-2012-1240" modified="2012-04-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the RECRUIT Dokodemo Rikunabi 2013 extension before 1.0.1 for Google Chrome allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://chrome.google.com/webstore/detail/cfmkbngdlheahmooldblflapbpngmmbg" source="MISC">https://chrome.google.com/webstore/detail/cfmkbngdlheahmooldblflapbpngmmbg</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000032" source="JVNDB">JVNDB-2012-000032</ref>
-      <ref url="http://jvn.jp/en/jp/JVN90055996/index.html" source="JVN">JVN#90055996</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="recruit" name="dokodemo_rikunabi_2013">
-        <vers prev="1" num="1.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1241" published="2012-04-16" name="CVE-2012-1241" modified="2012-04-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">GRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict interaction with an Internet Explorer ActiveX environment, which allows remote attackers to execute arbitrary Ruby code via a crafted HTML document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000031" source="JVNDB">JVNDB-2012-000031</ref>
-      <ref url="http://jvn.jp/en/jp/JVN33283707/index.html" source="JVN">JVN#33283707</ref>
-      <ref url="http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-list/47170" source="MLIST">[ruby-list] 20100619 ANN: ActiveScriptRuby 1.8.7</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="artonx.org" name="activescriptruby">
-        <vers prev="1" num="1.0.8.8" />
-        <vers num="1.6.0.1" />
-        <vers num="1.6.0.2" />
-        <vers num="1.6.0.3" />
-        <vers num="1.6.0.5" />
-        <vers num="1.6.2.0" />
-        <vers num="1.6.2.1" />
-        <vers num="1.6.2.10" />
-        <vers num="1.6.2.2" />
-        <vers num="1.6.2.3" />
-        <vers num="1.6.2.4" />
-        <vers num="1.6.2.5" />
-        <vers num="1.6.2.6" />
-        <vers num="1.6.2.7" />
-        <vers num="1.6.2.8" />
-        <vers num="1.6.2.9" />
-        <vers num="1.6.3.0" />
-        <vers num="1.6.3.1" />
-        <vers num="1.6.3.2" />
-        <vers num="1.6.3.3" />
-        <vers num="1.6.3.4" />
-        <vers num="1.6.3.5" />
-        <vers num="1.6.4.0" />
-        <vers num="1.6.4.1" />
-        <vers num="1.6.4.2" />
-        <vers num="1.6.4.3" />
-        <vers num="1.6.4.4" />
-        <vers num="1.6.4.6" />
-        <vers num="1.6.4.7" />
-        <vers num="1.6.4.8" />
-        <vers num="1.6.5.0" />
-        <vers num="1.6.5.1" />
-        <vers num="1.6.5.2" />
-        <vers num="1.6.5.3" />
-        <vers num="1.6.5.4" />
-        <vers num="1.6.5.5" />
-        <vers num="1.6.5.6" />
-        <vers num="1.6.5.7" />
-        <vers num="1.6.6.0" />
-        <vers num="1.6.6.1" />
-        <vers num="1.6.7.0" />
-        <vers num="1.6.7.1" />
-        <vers num="1.6.7.2" />
-        <vers num="1.6.7.3" />
-        <vers num="1.6.7.4" />
-        <vers num="1.6.7.5" />
-        <vers num="1.6.7.6" />
-        <vers num="1.6.8.0" />
-        <vers num="1.6.8.1" />
-        <vers num="1.6.8.3" />
-        <vers num="1.8.0.0" />
-        <vers num="1.8.0.5" />
-        <vers num="1.8.1.0" />
-        <vers num="1.8.1.1" />
-        <vers num="1.8.1.2" />
-        <vers num="1.8.2.0" />
-        <vers num="1.8.4.0" />
-        <vers num="1.8.5.0" />
-        <vers num="1.8.5.2" />
-        <vers num="1.8.7.34" />
-        <vers num="1.8.7.35" />
-        <vers num="1.8.7.36" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1242" published="2012-04-27" name="CVE-2012-1242" modified="2012-04-30" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School, JUST School 2009 and 2010, JUST Jump 4, JUST Frontier, and oreplug allows local users to gain privileges via a Trojan horse DLL in the current working directory.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.justsystems.com/jp/info/js12001.html" source="CONFIRM" adv="1">http://www.justsystems.com/jp/info/js12001.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000034" source="JVNDB">JVNDB-2012-000034</ref>
-      <ref url="http://jvn.jp/en/jp/JVN95378720/index.html" source="JVN">JVN#95378720</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="justsystems" name="ichitaro">
-        <vers num="2006" edition="-" />
-        <vers num="2006" edition="-:government" />
-        <vers num="2007" edition="-" />
-        <vers num="2007" edition="-:government" />
-        <vers num="2008" edition="-" />
-        <vers num="2008" edition="-:government" />
-        <vers num="2009" edition="-" />
-        <vers num="2009" edition="-:government" />
-        <vers num="2010" edition="-" />
-        <vers num="2010" edition="-:government" />
-        <vers num="2011" edition="-" />
-        <vers num="2011" edition="-:sou" />
-      </prod>
-      <prod vendor="justsystems" name="ichitaro_portable_with_oreplug">
-        <vers num="-" />
-      </prod>
-      <prod vendor="justsystems" name="ichitaro_viewer">
-        <vers num="-" />
-      </prod>
-      <prod vendor="justsystems" name="just_frontier">
-        <vers num="-" />
-      </prod>
-      <prod vendor="justsystems" name="just_jump">
-        <vers num="4" />
-      </prod>
-      <prod vendor="justsystems" name="just_school">
-        <vers num="-" />
-        <vers num="2009" />
-        <vers num="2010" />
-      </prod>
-      <prod vendor="justsystems" name="oreplug">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1243" published="2012-04-21" name="CVE-2012-1243" modified="2012-04-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The TwitRocker2 application before 1.0.23 for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://play.google.com/store/apps/details?id=com.studiohitori.twitrocker2" source="CONFIRM">https://play.google.com/store/apps/details?id=com.studiohitori.twitrocker2</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000033" source="JVNDB">JVNDB-2012-000033</ref>
-      <ref url="http://jvn.jp/en/jp/JVN00000601/index.html" source="JVN">JVN#00000601</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="studiohitori" name="twitrocker2_android">
-        <vers num="1.0.18" />
-        <vers num="1.0.19" />
-        <vers num="1.0.20" />
-        <vers num="1.0.21" />
-        <vers num="1.0.22" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1244" published="2012-04-27" name="CVE-2012-1244" modified="2012-04-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The NTT DOCOMO sp mode mail application 5400 and earlier for Android does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000037" source="JVNDB">JVNDB-2012-000037</ref>
-      <ref url="http://jvn.jp/en/jp/JVN82029095/index.html" source="JVN">JVN#82029095</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nttdocomo" name="spmode_mail_android">
-        <vers num="2546" />
-        <vers num="2631" />
-        <vers num="3000" />
-        <vers num="3100" />
-        <vers num="3200" />
-        <vers num="3300" />
-        <vers num="3400" />
-        <vers num="4000" />
-        <vers num="4200" />
-        <vers num="4300" />
-        <vers num="4400" />
-        <vers num="4500" />
-        <vers num="4600" />
-        <vers num="4700" />
-        <vers num="4800" />
-        <vers num="4900" />
-        <vers num="5000" />
-        <vers num="5100" />
-        <vers num="5200" />
-        <vers num="5300" />
-        <vers prev="1" num="5400" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1245" published="2012-04-27" name="CVE-2012-1245" modified="2012-04-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the cleanup_urls function in forum/utils/html.py in OSQA before 1234, and 0.9.0 Beta 3 and earlier, allows remote attackers to inject arbitrary web script or HTML via vectors related to a crafted URI.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://svn.osqa.net/changelog/OSQA/osqa/trunk?cs=1234" source="CONFIRM">http://svn.osqa.net/changelog/OSQA/osqa/trunk?cs=1234</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000036" source="JVNDB">JVNDB-2012-000036</ref>
-      <ref url="http://jvn.jp/en/jp/JVN15503729/index.html" source="JVN">JVN#15503729</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="osqa" name="osqa">
-        <vers prev="1" num="0.9.0" edition="alpha1" />
-        <vers prev="1" num="0.9.0" edition="beta1" />
-        <vers prev="1" num="0.9.0" edition="beta2" />
-        <vers prev="1" num="0.9.0" edition="beta3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1246" published="2012-05-15" name="CVE-2012-1246" modified="2012-05-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kent-web.com/cart/mart.html" source="CONFIRM">http://www.kent-web.com/cart/mart.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000041" source="JVNDB">JVNDB-2012-000041</ref>
-      <ref url="http://jvn.jp/en/jp/JVN47536971/index.html" source="JVN">JVN#47536971</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="webcreate" name="web_mart">
-        <vers prev="1" num="1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1247" published="2012-05-15" name="CVE-2012-1247" modified="2012-05-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML by leveraging support for Cascading Style Sheets (CSS) expressions.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kent-web.com/cart/mart.html" source="CONFIRM">http://www.kent-web.com/cart/mart.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000042" source="JVNDB">JVNDB-2012-000042</ref>
-      <ref url="http://jvn.jp/en/jp/JVN63941302/index.html" source="JVN">JVN#63941302</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="webcreate" name="web_mart">
-        <vers num="1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1248" published="2012-05-15" name="CVE-2012-1248" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="5.1" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="4.9" CVSS_base_score="5.1">
-    <desc>
-      <descript source="cve">app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to hijack sessions by leveraging administrative access to a different domain.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75660" source="XF">basercms-core-sec-bypass(75660)</ref>
-      <ref url="http://www.securityfocus.com/bid/53543" source="BID">53543</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000043" source="JVNDB">JVNDB-2012-000043</ref>
-      <ref url="http://jvn.jp/en/jp/JVN53465692/index.html" source="JVN">JVN#53465692</ref>
-      <ref url="http://basercms.net/security/1" source="CONFIRM" adv="1">http://basercms.net/security/1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="e-catchup" name="basercms">
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.5.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.10" />
-        <vers num="1.6.11" />
-        <vers num="1.6.11.1" />
-        <vers num="1.6.11.2" />
-        <vers num="1.6.11.3" />
-        <vers num="1.6.11.4" />
-        <vers num="1.6.12" />
-        <vers num="1.6.13" />
-        <vers num="1.6.13.1" />
-        <vers num="1.6.13.6" />
-        <vers num="1.6.14" />
-        <vers prev="1" num="1.6.15" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-        <vers num="1.6.7.1" />
-        <vers num="1.6.8" />
-        <vers num="1.6.9" />
-        <vers num="1.6.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1249" published="2012-05-21" name="CVE-2012-1249" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The iLunascape application 1.0.4.0 and earlier for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive stored information via a crafted application.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://play.google.com/store/apps/details?id=jp.co.lunascape.android.ilunascape" source="CONFIRM">https://play.google.com/store/apps/details?id=jp.co.lunascape.android.ilunascape</ref>
-      <ref url="http://www.securityfocus.com/bid/53619" source="BID">53619</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000044" source="JVNDB">JVNDB-2012-000044</ref>
-      <ref url="http://jvn.jp/en/jp/JVN86044443/index.html" source="JVN">JVN#86044443</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="lunascape" name="ilunascape_android">
-        <vers prev="1" num="1.0.4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1250" published="2012-06-04" name="CVE-2012-1250" modified="2012-06-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain administrative privileges and modify settings via vectors related to PPPoE authentication.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-      <sec_prot admin="1" />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.logitec.co.jp/info/2012/0516.html" source="CONFIRM" adv="1">http://www.logitec.co.jp/info/2012/0516.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000051" source="JVNDB">JVNDB-2012-000051</ref>
-      <ref url="http://jvn.jp/en/jp/JVN85934986/index.html" source="JVN">JVN#85934986</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="logitec" name="lan-w300n/r_firmware">
-        <vers num="1.17" />
-        <vers num="1.18" />
-        <vers num="2.10a" />
-        <vers prev="1" num="2.17" />
-      </prod>
-      <prod vendor="logitec" name="lan-w300n/rs_firmware">
-        <vers num="1.17" />
-        <vers num="1.18" />
-        <vers num="2.10a" />
-        <vers prev="1" num="2.17" />
-      </prod>
-      <prod vendor="logitec" name="lan-w300n/ru2_firmware">
-        <vers num="1.17" />
-        <vers num="1.18" />
-        <vers num="2.10a" />
-        <vers prev="1" num="2.17" />
-      </prod>
-      <prod vendor="logitec" name="lan-w300n/r">
-        <vers num="-" />
-      </prod>
-      <prod vendor="logitec" name="lan-w300n/rs">
-        <vers num="-" />
-      </prod>
-      <prod vendor="logitec" name="lan-w300n/ru2">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1251" published="2012-06-04" name="CVE-2012-1251" modified="2012-07-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Opera before 9.63 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/docs/changelogs/windows/963/" source="MISC">http://www.opera.com/docs/changelogs/windows/963/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/963/" source="MISC">http://www.opera.com/docs/changelogs/unix/963/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/963/" source="MISC">http://www.opera.com/docs/changelogs/mac/963/</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000049" source="JVNDB">JVNDB-2012-000049</ref>
-      <ref url="http://jvn.jp/en/jp/JVN39707339/index.html" source="JVN">JVN#39707339</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="1.00" />
-        <vers num="2.00" />
-        <vers num="2.10" edition="beta1" />
-        <vers num="2.10" edition="beta2" />
-        <vers num="2.10" edition="beta3" />
-        <vers num="2.12" />
-        <vers num="3.00" edition="beta" />
-        <vers num="3.10" />
-        <vers num="3.21" />
-        <vers num="3.50" />
-        <vers num="3.51" />
-        <vers num="3.60" />
-        <vers num="3.61" />
-        <vers num="3.62" edition="beta" />
-        <vers num="4.00" edition="beta2" />
-        <vers num="4.00" edition="beta3" />
-        <vers num="4.00" edition="beta4" />
-        <vers num="4.00" edition="beta5" />
-        <vers num="4.00" edition="beta6" />
-        <vers num="4.01" />
-        <vers num="4.02" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="7.60" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.12" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers prev="1" num="9.62" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1252" published="2012-06-04" name="CVE-2012-1252" modified="2012-06-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in RSSOwl before 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a feed, a different vulnerability than CVE-2006-4760.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000048" source="JVNDB">JVNDB-2012-000048</ref>
-      <ref url="http://jvn.jp/en/jp/JVN77947437/index.html" source="JVN">JVN#77947437</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rssowl" name="rssowl">
-        <vers num="2.0" edition="milestone5a" />
-        <vers num="2.0" edition="milestone6" />
-        <vers num="2.0" edition="milestone7" />
-        <vers num="2.0" edition="milestone8" />
-        <vers num="2.0" edition="milestone8a" />
-        <vers num="2.0" edition="milestone9" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0" edition="rc3" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers prev="1" num="2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1253" published="2012-06-04" name="CVE-2012-1253" modified="2012-06-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via vectors involving an embedded image attachment.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://sourceforge.net/projects/roundcubemail/files/roundcubemail/0.7/" source="CONFIRM">http://sourceforge.net/projects/roundcubemail/files/roundcubemail/0.7/</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000050" source="JVNDB">JVNDB-2012-000050</ref>
-      <ref url="http://jvn.jp/en/jp/JVN21422837/index.html" source="JVN">JVN#21422837</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="roundcube" name="webmail">
-        <vers num="0.1" edition="alpha" />
-        <vers num="0.1" edition="beta" />
-        <vers num="0.1" edition="beta2" />
-        <vers num="0.1" edition="rc1" />
-        <vers num="0.1" edition="rc2" />
-        <vers num="0.1.1" />
-        <vers num="0.2" edition="alpha" />
-        <vers num="0.2" edition="beta" />
-        <vers num="0.2.1" />
-        <vers num="0.2.2" />
-        <vers num="0.3" edition="beta" />
-        <vers num="0.3" edition="rc1" />
-        <vers num="0.3.1" />
-        <vers num="0.4" edition="beta" />
-        <vers num="0.4.1" />
-        <vers num="0.4.2" />
-        <vers num="0.5" edition="beta" />
-        <vers num="0.5" edition="rc" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers prev="1" num="0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1254" published="2012-06-04" name="CVE-2012-1254" modified="2012-06-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000052" source="JVNDB">JVNDB-2012-000052</ref>
-      <ref url="http://jvn.jp/en/jp/JVN29083866/index.html" source="JVN">JVN#29083866</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adam_franco" name="segue">
-        <vers num="1.0.0" edition="beta1" />
-        <vers num="1.0.0" edition="rc1" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.4" />
-        <vers num="1.0.6" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.3.0" edition="beta" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.3.4" />
-        <vers num="1.3.5" />
-        <vers num="1.3.6" />
-        <vers num="1.3.7" />
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.5.0" />
-        <vers num="1.5.1" />
-        <vers num="1.5.10" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.8" />
-        <vers num="1.5.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.7.0" />
-        <vers num="1.7.1" />
-        <vers num="1.7.2" />
-        <vers num="1.7.3" />
-        <vers num="1.7.4" />
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-        <vers num="1.8.10" />
-        <vers num="1.8.11" />
-        <vers num="1.8.12" />
-        <vers num="1.8.13" />
-        <vers num="1.8.14" />
-        <vers num="1.8.2" />
-        <vers num="1.8.4" />
-        <vers num="1.8.5" />
-        <vers num="1.8.6" />
-        <vers num="1.8.7" />
-        <vers num="1.8.9" />
-        <vers num="1.9.0" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.4" />
-        <vers num="1.9.5" />
-        <vers num="1.9.6" />
-        <vers num="1.9.9" />
-        <vers num="2..0" edition="beta30" />
-        <vers num="2.0" edition="beta11" />
-        <vers num="2.0" edition="beta12" />
-        <vers num="2.0" edition="beta13" />
-        <vers num="2.0" edition="beta14" />
-        <vers num="2.0" edition="beta15" />
-        <vers num="2.0" edition="beta15.1" />
-        <vers num="2.0" edition="beta17" />
-        <vers num="2.0" edition="beta18" />
-        <vers num="2.0" edition="beta19" />
-        <vers num="2.0" edition="beta19.1" />
-        <vers num="2.0" edition="beta2" />
-        <vers num="2.0" edition="beta20.1" />
-        <vers num="2.0" edition="beta21.1" />
-        <vers num="2.0" edition="beta21.2" />
-        <vers num="2.0" edition="beta21.3" />
-        <vers num="2.0" edition="beta22" />
-        <vers num="2.0" edition="beta23" />
-        <vers num="2.0" edition="beta24" />
-        <vers num="2.0" edition="beta25" />
-        <vers num="2.0" edition="beta26" />
-        <vers num="2.0" edition="beta26.1" />
-        <vers num="2.0" edition="beta27" />
-        <vers num="2.0" edition="beta27.1" />
-        <vers num="2.0" edition="beta27.2" />
-        <vers num="2.0" edition="beta28" />
-        <vers num="2.0" edition="beta29" />
-        <vers num="2.0" edition="beta3" />
-        <vers num="2.0" edition="beta4" />
-        <vers num="2.0" edition="beta6" />
-        <vers num="2.0" edition="beta7" />
-        <vers num="2.0" edition="beta8" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.1.0" />
-        <vers num="2.2.10.2" />
-        <vers num="2.2.2" />
-        <vers num="2.2.4.0" />
-        <vers num="2.2.4.1" />
-        <vers num="2.2.5.1" />
-        <vers num="2.2.5.3" />
-        <vers num="2.2.5.4" />
-        <vers num="2.2.5.6" />
-        <vers num="2.2.5.7" />
-        <vers num="2.2.8.1" />
-        <vers num="2.2.9.2" />
-        <vers num="2.2.9.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1255" published="2012-06-04" name="CVE-2012-1255" modified="2012-06-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000053" source="JVNDB">JVNDB-2012-000053</ref>
-      <ref url="http://jvn.jp/en/jp/JVN97995841/index.html" source="JVN">JVN#97995841</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adam_franco" name="segue">
-        <vers num="1.0.0" edition="beta1" />
-        <vers num="1.0.0" edition="rc1" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.4" />
-        <vers num="1.0.6" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.3.0" edition="beta" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.3.4" />
-        <vers num="1.3.5" />
-        <vers num="1.3.6" />
-        <vers num="1.3.7" />
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.5.0" />
-        <vers num="1.5.1" />
-        <vers num="1.5.10" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.8" />
-        <vers num="1.5.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.7.0" />
-        <vers num="1.7.1" />
-        <vers num="1.7.2" />
-        <vers num="1.7.3" />
-        <vers num="1.7.4" />
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-        <vers num="1.8.10" />
-        <vers num="1.8.11" />
-        <vers num="1.8.12" />
-        <vers num="1.8.13" />
-        <vers num="1.8.14" />
-        <vers num="1.8.2" />
-        <vers num="1.8.4" />
-        <vers num="1.8.5" />
-        <vers num="1.8.6" />
-        <vers num="1.8.7" />
-        <vers num="1.8.9" />
-        <vers num="1.9.0" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.4" />
-        <vers num="1.9.5" />
-        <vers num="1.9.6" />
-        <vers num="1.9.9" />
-        <vers num="2..0" edition="beta30" />
-        <vers num="2.0" edition="beta11" />
-        <vers num="2.0" edition="beta12" />
-        <vers num="2.0" edition="beta13" />
-        <vers num="2.0" edition="beta14" />
-        <vers num="2.0" edition="beta15" />
-        <vers num="2.0" edition="beta15.1" />
-        <vers num="2.0" edition="beta17" />
-        <vers num="2.0" edition="beta18" />
-        <vers num="2.0" edition="beta19" />
-        <vers num="2.0" edition="beta19.1" />
-        <vers num="2.0" edition="beta2" />
-        <vers num="2.0" edition="beta20.1" />
-        <vers num="2.0" edition="beta21.1" />
-        <vers num="2.0" edition="beta21.2" />
-        <vers num="2.0" edition="beta21.3" />
-        <vers num="2.0" edition="beta22" />
-        <vers num="2.0" edition="beta23" />
-        <vers num="2.0" edition="beta24" />
-        <vers num="2.0" edition="beta25" />
-        <vers num="2.0" edition="beta26" />
-        <vers num="2.0" edition="beta26.1" />
-        <vers num="2.0" edition="beta27" />
-        <vers num="2.0" edition="beta27.1" />
-        <vers num="2.0" edition="beta27.2" />
-        <vers num="2.0" edition="beta28" />
-        <vers num="2.0" edition="beta29" />
-        <vers num="2.0" edition="beta3" />
-        <vers num="2.0" edition="beta4" />
-        <vers num="2.0" edition="beta6" />
-        <vers num="2.0" edition="beta7" />
-        <vers num="2.0" edition="beta8" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.1.0" />
-        <vers num="2.2.10.2" />
-        <vers num="2.2.2" />
-        <vers num="2.2.4.0" />
-        <vers num="2.2.4.1" />
-        <vers num="2.2.5.1" />
-        <vers num="2.2.5.3" />
-        <vers num="2.2.5.4" />
-        <vers num="2.2.5.6" />
-        <vers num="2.2.5.7" />
-        <vers num="2.2.8.1" />
-        <vers num="2.2.9.2" />
-        <vers num="2.2.9.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1256" published="2012-02-22" name="CVE-2012-1256" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The single sign-on (SSO) implementation in EasyVista before 2010.1.1.89 allows remote attackers to bypass authentication via a modified url_account parameter, in conjunction with a valid login name in the SSPI_HEADER parameter, to index.php.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/273502" source="CERT-VN">VU#273502</ref>
-      <ref url="http://secunia.com/advisories/48124" source="SECUNIA">48124</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="easyvista" name="easyvista">
-        <vers prev="1" num="2010" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1262" published="2012-03-02" name="CVE-2012-1262" modified="2012-03-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in cgi-bin/mt/mt-wizard.cgi in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the dbuser parameter, a different vulnerability than CVE-2012-0318.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.movabletype.org/documentation/appendices/release-notes/513.html" source="CONFIRM" patch="1" adv="1">http://www.movabletype.org/documentation/appendices/release-notes/513.html</ref>
-      <ref url="http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html" source="CONFIRM" patch="1" adv="1">http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html</ref>
-      <ref url="https://www.trustwave.com/spiderlabs/advisories/TWSL2012-003.txt" source="MISC">https://www.trustwave.com/spiderlabs/advisories/TWSL2012-003.txt</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000016" source="JVNDB">JVNDB-2012-000016</ref>
-      <ref url="http://jvn.jp/en/jp/JVN49836527/index.html" source="JVN">JVN#49836527</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="movabletype" name="movable_type_advanced">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.01" edition="beta" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.2" edition="beta" />
-        <vers num="4.23" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.3" />
-        <vers num="4.31" />
-        <vers num="4.32" />
-        <vers num="4.33" />
-        <vers num="4.34" />
-        <vers num="4.35" />
-        <vers num="4.36" />
-        <vers num="4.361" />
-        <vers prev="1" num="4.37" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.051" />
-        <vers num="5.06" />
-        <vers num="5.1" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-      </prod>
-      <prod vendor="movabletype" name="movable_type_enterprise">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.01" edition="beta" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.2" edition="beta" />
-        <vers num="4.23" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.3" />
-        <vers num="4.31" />
-        <vers num="4.32" />
-        <vers num="4.33" />
-        <vers num="4.34" />
-        <vers num="4.35" />
-        <vers num="4.36" />
-        <vers num="4.361" />
-        <vers prev="1" num="4.37" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.051" />
-        <vers num="5.06" />
-        <vers num="5.1" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-      </prod>
-      <prod vendor="movabletype" name="movable_type_open_source">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.01" edition="beta" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.2" edition="beta" />
-        <vers num="4.23" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.3" />
-        <vers num="4.31" />
-        <vers num="4.32" />
-        <vers num="4.33" />
-        <vers num="4.34" />
-        <vers num="4.35" />
-        <vers num="4.36" />
-        <vers num="4.361" />
-        <vers prev="1" num="4.37" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.051" />
-        <vers num="5.06" />
-        <vers num="5.1" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-      </prod>
-      <prod vendor="movabletype" name="movable_type_pro">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.01" edition="beta" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.2" edition="beta" />
-        <vers num="4.23" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.3" />
-        <vers num="4.31" />
-        <vers num="4.32" />
-        <vers num="4.33" />
-        <vers num="4.34" />
-        <vers num="4.35" />
-        <vers num="4.36" />
-        <vers num="4.361" />
-        <vers prev="1" num="4.37" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.051" />
-        <vers num="5.06" />
-        <vers num="5.1" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1264" published="2012-03-17" name="CVE-2012-1264" modified="2012-04-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Gretech GOM Media Player before 2.1.37.5091 allows remote attackers to execute arbitrary code via a crafted AVI file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://gom.gomtv.com/gomIntro.html?type=4" source="CONFIRM" adv="1">http://gom.gomtv.com/gomIntro.html?type=4</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gomlab" name="gom_media_player">
-        <vers prev="1" num="2.1.36.5083" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1288" published="2012-02-23" name="CVE-2012-1288" modified="2012-02-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The UTC Fire &amp; Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administrative account, which makes it easier for remote attackers to obtain access via an HTTP session.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/707254" source="CERT-VN">VU#707254</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="utc" name="utc_fire_&amp;_security_ge-mc100-ntp/gps-zb_master_clock_device">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1289" published="2012-02-23" name="CVE-2012-1289" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Multiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the logfilename parameter to (1) b2b/admin/log.jsp or (2) b2b/admin/log_view.jsp in the Internet Sales (crm.b2b) component, or (3) ipc/admin/log.jsp or (4) ipc/admin/log_view.jsp in the Application Administration (com.sap.ipc.webapp.ipc) component.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://service.sap.com/sap/support/notes/1585527" source="MISC">https://service.sap.com/sap/support/notes/1585527</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73346" source="XF">netweaver-logview-directory-traversal(73346)</ref>
-      <ref url="http://www.securityfocus.com/bid/52101" source="BID">52101</ref>
-      <ref url="http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a" source="CONFIRM">http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a</ref>
-      <ref url="http://secunia.com/advisories/47861" source="SECUNIA" adv="1">47861</ref>
-      <ref url="http://dsecrg.com/pages/vul/show.php?id=413" source="MISC">http://dsecrg.com/pages/vul/show.php?id=413</ref>
-      <ref url="http://dsecrg.com/pages/vul/show.php?id=412" source="MISC">http://dsecrg.com/pages/vul/show.php?id=412</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sap" name="netweaver">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1290" published="2012-02-23" name="CVE-2012-1290" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in b2b/auction/container.jsp in the Internet Sales (crm.b2b) module in SAP NetWeaver 7.0 allows remote attackers to inject arbitrary web script or HTML via the _loadPage parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://service.sap.com/sap/support/notes/1583300" source="MISC">https://service.sap.com/sap/support/notes/1583300</ref>
-      <ref url="http://www.securityfocus.com/bid/52101" source="BID">52101</ref>
-      <ref url="http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a" source="CONFIRM">http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a</ref>
-      <ref url="http://secunia.com/advisories/47861" source="SECUNIA" adv="1">47861</ref>
-      <ref url="http://dsecrg.com/pages/vul/show.php?id=414" source="MISC">http://dsecrg.com/pages/vul/show.php?id=414</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sap" name="netweaver">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1291" published="2012-02-23" name="CVE-2012-1291" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the com.sap.aii.mdt.amt.web.AMTPageProcessor servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive information about the Adapter Monitor via unspecified vectors, possibly related to the EnableInvokerServletGlobally property in the servlet_jsp service.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://service.sap.com/sap/support/notes/1585527" source="MISC">https://service.sap.com/sap/support/notes/1585527</ref>
-      <ref url="http://www.securityfocus.com/bid/52101" source="BID">52101</ref>
-      <ref url="http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a" source="CONFIRM">http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a</ref>
-      <ref url="http://secunia.com/advisories/47861" source="SECUNIA" adv="1">47861</ref>
-      <ref url="http://dsecrg.com/pages/vul/show.php?id=415" source="MISC">http://dsecrg.com/pages/vul/show.php?id=415</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sap" name="netweaver">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1292" published="2012-02-23" name="CVE-2012-1292" modified="2012-02-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MessagingSystem servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive information about the MessagingSystem Performance Data via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://service.sap.com/sap/support/notes/1585527" source="MISC">https://service.sap.com/sap/support/notes/1585527</ref>
-      <ref url="http://www.securityfocus.com/bid/52101" source="BID">52101</ref>
-      <ref url="http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a" source="CONFIRM">http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a</ref>
-      <ref url="http://secunia.com/advisories/47861" source="SECUNIA" adv="1">47861</ref>
-      <ref url="http://dsecrg.com/pages/vul/show.php?id=416" source="MISC">http://dsecrg.com/pages/vul/show.php?id=416</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sap" name="netweaver">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1294" published="2012-02-23" name="CVE-2012-1294" modified="2012-02-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in CONTIMEX Impulsio CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73303" source="XF">impulsiocms-index-sql-injection(73303)</ref>
-      <ref url="http://www.securityfocus.com/bid/52063" source="BID">52063</ref>
-      <ref url="http://packetstormsecurity.org/files/109849/Impulsio-CMS-SQL-Injection.html" source="MISC">http://packetstormsecurity.org/files/109849/Impulsio-CMS-SQL-Injection.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="contimex" name="impulsio_cms">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1296" published="2012-08-26" name="CVE-2012-1296" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body parameter to admin/preview.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23076" source="MISC">https://www.htbridge.com/advisory/HTB23076</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73421" source="XF">elefantcms-preview-xss(73421)</ref>
-      <ref url="http://www.securityfocus.com/bid/52143" source="BID">52143</ref>
-      <ref url="http://www.elefantcms.com/wiki/Changelog" source="CONFIRM">http://www.elefantcms.com/wiki/Changelog</ref>
-      <ref url="http://www.elefantcms.com/forum/discussion/39/elefant-1.0.2-and-1.1.5-security-updates-released" source="CONFIRM" adv="1">http://www.elefantcms.com/forum/discussion/39/elefant-1.0.2-and-1.1.5-security-updates-released</ref>
-      <ref url="http://secunia.com/advisories/48118" source="SECUNIA" adv="1">48118</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="elefantcms" name="elefantcms">
-        <vers prev="1" num="1.0.1" />
-        <vers num="1.1.1_beta" />
-        <vers num="1.1.2_beta" />
-        <vers num="1.1.3_beta" />
-        <vers prev="1" num="1.1.4_beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1297" published="2012-03-19" name="CVE-2012-1297" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) delete users via a delete action in the user module, (2) delete news via a delete action in the news module, or (3) delete newsletters via a delete action in the newsletters module.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73479" source="XF">contao-newsletter-csrf(73479)</ref>
-      <ref url="http://www.exploit-db.com/exploits/18527" source="EXPLOIT-DB">18527</ref>
-      <ref url="http://secunia.com/advisories/48180" source="SECUNIA" adv="1">48180</ref>
-      <ref url="http://packetstormsecurity.org/files/110214/ContaoCMS-2.11.0-Cross-Site-Request-Forgery.html" source="MISC">http://packetstormsecurity.org/files/110214/ContaoCMS-2.11.0-Cross-Site-Request-Forgery.html</ref>
-      <ref url="http://ivanobinetti.blogspot.com/2012/02/contaocms-fka-typolight-211-csrf-delete.html" source="MISC">http://ivanobinetti.blogspot.com/2012/02/contaocms-fka-typolight-211-csrf-delete.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="contao" name="contao_cms">
-        <vers num="2.0" edition="beta-rc2" />
-        <vers num="2.0" edition="beta-rc3" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.11" />
-        <vers num="2.1.12" />
-        <vers num="2.1.13" />
-        <vers num="2.1.14" />
-        <vers num="2.1.15" />
-        <vers num="2.1.16" />
-        <vers num="2.1.17" />
-        <vers num="2.1.18" />
-        <vers num="2.1.19" />
-        <vers num="2.1.2" />
-        <vers num="2.1.20" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.1.9" />
-        <vers num="2.10." edition="beta" />
-        <vers num="2.10.0" edition="rc1" />
-        <vers num="2.10.1" />
-        <vers num="2.10.2" />
-        <vers num="2.10.3" />
-        <vers num="2.10.4" />
-        <vers prev="1" num="2.11.0" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.10" />
-        <vers num="2.2.11" />
-        <vers num="2.2.12" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.4" edition="beta" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers num="2.5" edition="beta" />
-        <vers num="2.5" edition="beta-rc2" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-        <vers num="2.5.4" />
-        <vers num="2.5.5" />
-        <vers num="2.5.6" />
-        <vers num="2.5.7" />
-        <vers num="2.5.8" />
-        <vers num="2.5.9" />
-        <vers num="2.6" edition="beta" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.6.7" />
-        <vers num="2.6.8" />
-        <vers num="2.7" edition="rc1" />
-        <vers num="2.7" edition="rc2" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.8" edition="rc1" />
-        <vers num="2.8" edition="rc2" />
-        <vers num="2.8.0" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="rc1" />
-        <vers num="2.9.0" />
-        <vers num="2.9.1" />
-        <vers num="2.9.2" />
-        <vers num="2.9.3" />
-        <vers num="2.9.4" />
-        <vers num="2.9.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1310" published="2012-03-29" name="CVE-2012-1310" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Memory leak in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted IP packets, aka Bug ID CSCto89536.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-zbfw" source="CISCO" adv="1">20120328 Cisco IOS Software Zone-Based Firewall Vulnerabilities</ref>
-      <ref url="http://osvdb.org/80696" source="OSVDB">80696</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.4" />
-        <vers num="15.0" />
-        <vers num="15.1" />
-        <vers num="15.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1311" published="2012-03-29" name="CVE-2012-1311" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The RSVP feature in Cisco IOS 15.0 and 15.1 and IOS XE 3.2.xS through 3.4.xS before 3.4.2S, when a VRF interface is configured, allows remote attackers to cause a denial of service (interface queue wedge and service outage) via crafted RSVP packets, aka Bug ID CSCts80643.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52754" source="BID">52754</ref>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-rsvp" source="CISCO" adv="1">20120328 Cisco IOS Software RSVP Denial of Service Vulnerability</ref>
-      <ref url="http://secunia.com/advisories/48621" source="SECUNIA">48621</ref>
-      <ref url="http://secunia.com/advisories/48611" source="SECUNIA">48611</ref>
-      <ref url="http://osvdb.org/80692" source="OSVDB">80692</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="15.0" />
-        <vers num="15.1" />
-      </prod>
-      <prod vendor="cisco" name="ios_xe">
-        <vers num="3.2.0s" />
-        <vers num="3.2.1s" />
-        <vers num="3.2.2s" />
-        <vers num="3.3.0s" />
-        <vers num="3.4.0s" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1312" published="2012-03-29" name="CVE-2012-1312" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:C)" CVSS_score="7.1" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="8.6" CVSS_base_score="7.1">
-    <desc>
-      <descript source="cve">The MACE feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (device reload) via crafted transit traffic, aka Bug IDs CSCtq64987 and CSCtu57226.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74429" source="XF">ciscoios-mace-dos(74429)</ref>
-      <ref url="http://www.securityfocus.com/bid/52751" source="BID">52751</ref>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-mace" source="CISCO" adv="1">20120328 Multiple Vulnerabilities in Cisco IOS Software Traffic Optimization Features</ref>
-      <ref url="http://secunia.com/advisories/48595" source="SECUNIA">48595</ref>
-      <ref url="http://osvdb.org/80703" source="OSVDB">80703</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="15.1" />
-        <vers num="15.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1314" published="2012-03-29" name="CVE-2012-1314" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The WAAS Express feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit traffic, aka Bug ID CSCtt45381.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74428" source="XF">ciscoios-waas-dos(74428)</ref>
-      <ref url="http://www.securityfocus.com/bid/52751" source="BID">52751</ref>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-mace" source="CISCO" adv="1">20120328 Multiple Vulnerabilities in Cisco IOS Software Traffic Optimization Features</ref>
-      <ref url="http://secunia.com/advisories/48595" source="SECUNIA">48595</ref>
-      <ref url="http://osvdb.org/80702" source="OSVDB">80702</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="15.1" />
-        <vers num="15.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1315" published="2012-03-29" name="CVE-2012-1315" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit SIP traffic, aka Bug ID CSCti46171.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74437" source="XF">ciscoios-sip-inspection-dos(74437)</ref>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-zbfw" source="CISCO" adv="1">20120328 Cisco IOS Software Zone-Based Firewall Vulnerabilities</ref>
-      <ref url="http://osvdb.org/80699" source="OSVDB">80699</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.4" />
-        <vers num="15.0" />
-        <vers num="15.1" />
-        <vers num="15.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1324" published="2012-05-03" name="CVE-2012-1324" modified="2012-05-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:C)" CVSS_score="7.1" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="8.6" CVSS_base_score="7.1">
-    <desc>
-      <descript source="cve">Race condition in the Zone-Based Firewall in Cisco IOS 15.1 and 15.2, when IPS policies are configured, allows remote attackers to cause a denial of service (device crash) by sending IPv6 packets, aka Bug ID CSCtk53534.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-3TCAVS.html" source="CONFIRM">http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-3TCAVS.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="15.1" />
-        <vers num="15.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1327" published="2012-05-03" name="CVE-2012-1327" modified="2012-05-10" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="6.1" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="6.5" CVSS_base_score="6.1">
-    <desc>
-      <descript source="cve">dot11t/t_if_dot11_hal_ath.c in Cisco IOS 12.3, 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (assertion failure and reboot) via 802.11 wireless traffic, as demonstrated by a video call from Apple iOS 5.0 on an iPhone 4S, aka Bug ID CSCtt94391.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html" source="CONFIRM">http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.3" />
-        <vers num="12.4" />
-        <vers num="15.0" />
-        <vers num="15.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1328" published="2012-05-03" name="CVE-2012-1328" modified="2012-05-04" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="4.6" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.9" CVSS_base_score="4.6">
-    <desc>
-      <descript source="cve">Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT phone, which allows local users to gain privileges via unspecified injected data, aka Bug ID CSCts32237.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/9971_9951_8961/firmware/9_2_3/release_notes/9900_8900_923.html" source="CONFIRM">http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/9971_9951_8961/firmware/9_2_3/release_notes/9900_8900_923.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="unified_ip_phone">
-        <vers num="9900" />
-      </prod>
-      <prod vendor="cisco" name="unified_ip_phone_firmware">
-        <vers num="9.1" />
-        <vers num="9.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1335" published="2012-04-05" name="CVE-2012-1335" modified="2012-04-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1336 and CVE-2012-1337.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120404-webex" source="CISCO" adv="1">20120404 Buffer Overflow Vulnerabilities in the Cisco WebEx Player</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="webex_recording_format_player">
-        <vers num="27" />
-        <vers num="27.10" />
-        <vers num="27.11.0.3328" />
-        <vers prev="1" num="27.11.26" />
-        <vers num="27.12" />
-        <vers num="27.13" />
-        <vers prev="1" num="27.21.10" />
-        <vers prev="1" num="27.25.9" />
-        <vers prev="1" num="27.32.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1336" published="2012-04-05" name="CVE-2012-1336" modified="2012-04-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1335 and CVE-2012-1337.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120404-webex" source="CISCO" adv="1">20120404 Buffer Overflow Vulnerabilities in the Cisco WebEx Player</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="webex_recording_format_player">
-        <vers num="27" />
-        <vers num="27.10" />
-        <vers num="27.11.0.3328" />
-        <vers prev="1" num="27.11.26" />
-        <vers num="27.12" />
-        <vers num="27.13" />
-        <vers prev="1" num="27.21.10" />
-        <vers prev="1" num="27.25.9" />
-        <vers prev="1" num="27.32.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1337" published="2012-04-05" name="CVE-2012-1337" modified="2012-04-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1335 and CVE-2012-1336.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120404-webex" source="CISCO" adv="1">20120404 Buffer Overflow Vulnerabilities in the Cisco WebEx Player</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="webex_recording_format_player">
-        <vers num="27" />
-        <vers num="27.10" />
-        <vers num="27.11.0.3328" />
-        <vers prev="1" num="27.11.26" />
-        <vers num="27.12" />
-        <vers num="27.13" />
-        <vers prev="1" num="27.21.10" />
-        <vers prev="1" num="27.25.9" />
-        <vers prev="1" num="27.32.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1338" published="2012-08-06" name="CVE-2012-1338" modified="2012-08-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:C)" CVSS_score="6.3" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="6.8" CVSS_base_score="6.3">
-    <desc>
-      <descript source="cve">Cisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated users to cause a denial of service (device reload) by completing local web authentication quickly, aka Bug ID CSCts88664.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/switches/lan/catalyst3750x_3560x/software/release/15.0_1_se/release/notes/OL25302.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/switches/lan/catalyst3750x_3560x/software/release/15.0_1_se/release/notes/OL25302.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="catalyst_3560">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_3560-e">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_3560-x">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_3750">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_3750-e">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_3750-x">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_3750_metro">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_3750g">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="ios">
-        <vers num="15.0" />
-        <vers num="15.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1339" published="2012-08-06" name="CVE-2012-1339" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Fabric Interconnect component in Cisco Unified Computing System (UCS) 2.0 allows remote attackers to cause a denial of service (process crash) via an attempted SSH session, aka Bug ID CSCtt94543.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/unified_computing/ucs/release/notes/OL_25363.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/unified_computing/ucs/release/notes/OL_25363.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="unified_computing_system_software">
-        <vers num="2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1340" published="2012-08-06" name="CVE-2012-1340" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Fibre Channel over IP (FCIP) implementation in Cisco MDS NX-OS 4.2 and 5.2 on MDS 9000 series switches allows remote attackers to cause a denial of service (module reload) via a crafted FCIP header, aka Bug ID CSCtn93151.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/switches/datacenter/mds9000/sw/5_2/release/notes/nx-os/mds_nxos_rel_notes_522.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/switches/datacenter/mds9000/sw/5_2/release/notes/nx-os/mds_nxos_rel_notes_522.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="mds_9000_nx-os">
-        <vers num="4.2" />
-        <vers num="5.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1342" published="2012-08-06" name="CVE-2012-1342" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Cisco Carrier Routing System (CRS) 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID CSCtj10975.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/cisco/software/release.html?mdfid=279506669&amp;catid=268437899&amp;flowid=1915&amp;reltype=all&amp;relind=AVAILABLE&amp;release=3.9.2&amp;softwareid=280867577" source="CONFIRM">http://www.cisco.com/cisco/software/release.html?mdfid=279506669&amp;catid=268437899&amp;flowid=1915&amp;reltype=all&amp;relind=AVAILABLE&amp;release=3.9.2&amp;softwareid=280867577</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="carrier_routing_system">
-        <vers num="3.9" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1344" published="2012-08-06" name="CVE-2012-1344" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:P)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated users to cause a denial of service (device reload) by using a web browser to refresh the SSL VPN portal page, as demonstrated by the Android browser, aka Bug ID CSCtr86328.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="15.1" />
-        <vers num="15.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1346" published="2012-08-06" name="CVE-2012-1346" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Cisco Emergency Responder 8.6 and 9.2 allows remote attackers to cause a denial of service (CPU consumption) by sending malformed UDP packets to the CERPT port, aka Bug ID CSCtx38369.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.cisco.com/en/US/docs/voice_ip_comm/cer/8_7/english/release/notes/CER0_BK_CEE780BD_00_cisco-emergency-responder-87-release_chapter_00.html" source="CONFIRM" adv="1">https://www.cisco.com/en/US/docs/voice_ip_comm/cer/8_7/english/release/notes/CER0_BK_CEE780BD_00_cisco-emergency-responder-87-release_chapter_00.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="emergency_responder">
-        <vers num="8.6" />
-        <vers num="9.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1348" published="2012-08-06" name="CVE-2012-1348" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Cisco Wide Area Application Services (WAAS) appliances with software 4.4, 5.0, and 5.1 include a one-way hash of a password within output text, which might allow remote attackers to obtain sensitive information via a brute-force attack on the hash string, aka Bug ID CSCty17279.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v501/release/notes/ws501xrn.pdf" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v501/release/notes/ws501xrn.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="wide_area_application_services">
-        <vers num="4.4" />
-        <vers num="5.0" />
-        <vers num="5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1350" published="2012-08-06" name="CVE-2012-1350" modified="2012-08-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service (radio-interface input-queue hang) via IAPP 0x3281 packets, aka Bug ID CSCtc12426.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/wireless/access_point/ios/release/notes/12_3_8_JED1rn.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/wireless/access_point/ios/release/notes/12_3_8_JED1rn.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="aironet_1040">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="aironet_1140">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="aironet_1260">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="aironet_3500">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="aironet_3600">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="aironet_600_office_extend">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="aironet_ap1100">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="aironet_ap1130ag">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="aironet_ap1131">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="aironet_ap1200">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="aironet_ap1230ag">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="aironet_ap1240">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="aironet_ap1240ag">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="aironet_ap1300">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="aironet_ap1400">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="aironet_ap340">
-        <vers num="11.21" />
-      </prod>
-      <prod vendor="cisco" name="aironet_ap350">
-        <vers num="11.21" />
-      </prod>
-      <prod vendor="cisco" name="aironet_bridge_350">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.3" />
-        <vers num="12.3(10)" />
-        <vers num="12.3(10c)" />
-        <vers num="12.3(10d)" />
-        <vers num="12.3(10e)" />
-        <vers num="12.3(11)" />
-        <vers num="12.3(11)t" />
-        <vers num="12.3(11)t4" />
-        <vers num="12.3(11)t5" />
-        <vers num="12.3(11)t6" />
-        <vers num="12.3(11)t8" />
-        <vers num="12.3(11)t9" />
-        <vers num="12.3(11)xl" />
-        <vers num="12.3(11)xl3" />
-        <vers num="12.3(11)yf" />
-        <vers num="12.3(11)yf2" />
-        <vers num="12.3(11)yf3" />
-        <vers num="12.3(11)yf4" />
-        <vers num="12.3(11)yj" />
-        <vers num="12.3(11)yk" />
-        <vers num="12.3(11)yk1" />
-        <vers num="12.3(11)yk2" />
-        <vers num="12.3(11)yl" />
-        <vers num="12.3(11)yn" />
-        <vers num="12.3(11)yr" />
-        <vers num="12.3(11)ys" />
-        <vers num="12.3(11)ys1" />
-        <vers num="12.3(11)yw" />
-        <vers num="12.3(12)" />
-        <vers num="12.3(12b)" />
-        <vers num="12.3(12e)" />
-        <vers num="12.3(13)" />
-        <vers num="12.3(13a)" />
-        <vers num="12.3(13a)bc" />
-        <vers num="12.3(13a)bc1" />
-        <vers num="12.3(13b)" />
-        <vers num="12.3(14)t" />
-        <vers num="12.3(14)t2" />
-        <vers num="12.3(14)t4" />
-        <vers num="12.3(14)t5" />
-        <vers num="12.3(14)ym4" />
-        <vers num="12.3(14)yq" />
-        <vers num="12.3(14)yq1" />
-        <vers num="12.3(14)yq3" />
-        <vers num="12.3(14)yq4" />
-        <vers num="12.3(14)yt" />
-        <vers num="12.3(14)yt1" />
-        <vers num="12.3(14)yu" />
-        <vers num="12.3(14)yu1" />
-        <vers num="12.3(15)" />
-        <vers num="12.3(15b)" />
-        <vers num="12.3(16)" />
-        <vers num="12.3(1a)" />
-        <vers num="12.3(2)ja" />
-        <vers num="12.3(2)ja5" />
-        <vers num="12.3(2)jk" />
-        <vers num="12.3(2)jk1" />
-        <vers num="12.3(2)t3" />
-        <vers num="12.3(2)t8" />
-        <vers num="12.3(2)xa4" />
-        <vers num="12.3(2)xa5" />
-        <vers num="12.3(2)xc1" />
-        <vers num="12.3(2)xc2" />
-        <vers num="12.3(2)xc3" />
-        <vers num="12.3(2)xc4" />
-        <vers num="12.3(2)xe3" />
-        <vers num="12.3(2)xe4" />
-        <vers num="12.3(3e)" />
-        <vers num="12.3(3h)" />
-        <vers num="12.3(3i)" />
-        <vers num="12.3(4)eo1" />
-        <vers num="12.3(4)ja" />
-        <vers num="12.3(4)ja1" />
-        <vers num="12.3(4)t" />
-        <vers num="12.3(4)t1" />
-        <vers num="12.3(4)t2" />
-        <vers num="12.3(4)t3" />
-        <vers num="12.3(4)t4" />
-        <vers num="12.3(4)t8" />
-        <vers num="12.3(4)tpc11a" />
-        <vers num="12.3(4)xd" />
-        <vers num="12.3(4)xd1" />
-        <vers num="12.3(4)xd2" />
-        <vers num="12.3(4)xe4" />
-        <vers num="12.3(4)xg1" />
-        <vers num="12.3(4)xg2" />
-        <vers num="12.3(4)xg4" />
-        <vers num="12.3(4)xg5" />
-        <vers num="12.3(4)xh" />
-        <vers num="12.3(4)xk" />
-        <vers num="12.3(4)xk1" />
-        <vers num="12.3(4)xk3" />
-        <vers num="12.3(4)xk4" />
-        <vers num="12.3(4)xq" />
-        <vers num="12.3(4)xq1" />
-        <vers num="12.3(5)" />
-        <vers num="12.3(5)b1" />
-        <vers num="12.3(5a)" />
-        <vers num="12.3(5a)b" />
-        <vers num="12.3(5a)b2" />
-        <vers num="12.3(5a)b5" />
-        <vers num="12.3(5b)" />
-        <vers num="12.3(5c)" />
-        <vers num="12.3(5e)" />
-        <vers num="12.3(5f)" />
-        <vers num="12.3(6)" />
-        <vers num="12.3(6a)" />
-        <vers num="12.3(6d)" />
-        <vers num="12.3(6e)" />
-        <vers num="12.3(6f)" />
-        <vers num="12.3(7)ja" />
-        <vers num="12.3(7)ja1" />
-        <vers num="12.3(7)jx" />
-        <vers num="12.3(7)t" />
-        <vers num="12.3(7)t10" />
-        <vers num="12.3(7)t12" />
-        <vers num="12.3(7)t4" />
-        <vers num="12.3(7)t8" />
-        <vers num="12.3(7)t9" />
-        <vers num="12.3(7)xi3" />
-        <vers num="12.3(7)xi4" />
-        <vers num="12.3(7)xi7" />
-        <vers num="12.3(7)xr3" />
-        <vers num="12.3(7)xr4" />
-        <vers num="12.3(7)xr6" />
-        <vers num="12.3(7.7)" />
-        <vers num="12.3(8)ja" />
-        <vers num="12.3(8)ja1" />
-        <vers num="12.3(8)t11" />
-        <vers num="12.3(8)t4" />
-        <vers num="12.3(8)t7" />
-        <vers num="12.3(8)t8" />
-        <vers num="12.3(8)t9" />
-        <vers num="12.3(8)xu2" />
-        <vers num="12.3(8)xy4" />
-        <vers num="12.3(8)xy5" />
-        <vers num="12.3(8)xy6" />
-        <vers num="12.3(8)ya1" />
-        <vers num="12.3(8)yd" />
-        <vers num="12.3(8)yf" />
-        <vers num="12.3(8)yg" />
-        <vers num="12.3(8)yg1" />
-        <vers num="12.3(8)yg2" />
-        <vers num="12.3(8)yg3" />
-        <vers num="12.3(8)yh" />
-        <vers num="12.3(8)yi" />
-        <vers num="12.3(8)yi1" />
-        <vers num="12.3(8)yi3" />
-        <vers num="12.3(9)" />
-        <vers num="12.3(9a)bc" />
-        <vers num="12.3(9a)bc2" />
-        <vers num="12.3(9a)bc6" />
-        <vers num="12.3(9a)bc7" />
-        <vers num="12.3(9d)" />
-        <vers num="12.3(9e)" />
-        <vers num="12.3b" />
-        <vers num="12.3bc" />
-        <vers num="12.3bw" />
-        <vers num="12.3j" />
-        <vers num="12.3ja" />
-        <vers num="12.3jea" />
-        <vers num="12.3jeb" />
-        <vers num="12.3jec" />
-        <vers num="12.3jed" />
-        <vers num="12.3jk" />
-        <vers num="12.3jl" />
-        <vers num="12.3jx" />
-        <vers num="12.3t" />
-        <vers num="12.3tpc" />
-        <vers num="12.3va" />
-        <vers num="12.3xa" />
-        <vers num="12.3xb" />
-        <vers num="12.3xc" />
-        <vers num="12.3xd" />
-        <vers num="12.3xe" />
-        <vers num="12.3xf" />
-        <vers num="12.3xg" />
-        <vers num="12.3xh" />
-        <vers num="12.3xi" />
-        <vers num="12.3xj" />
-        <vers num="12.3xk" />
-        <vers num="12.3xl" />
-        <vers num="12.3xm" />
-        <vers num="12.3xn" />
-        <vers num="12.3xq" />
-        <vers num="12.3xr" />
-        <vers num="12.3xs" />
-        <vers num="12.3xt" />
-        <vers num="12.3xu" />
-        <vers num="12.3xv" />
-        <vers num="12.3xw" />
-        <vers num="12.3xx" />
-        <vers num="12.3xy" />
-        <vers num="12.3xz" />
-        <vers num="12.3ya" />
-        <vers num="12.3yb" />
-        <vers num="12.3yc" />
-        <vers num="12.3yd" />
-        <vers num="12.3ye" />
-        <vers num="12.3yf" />
-        <vers num="12.3yg" />
-        <vers num="12.3yh" />
-        <vers num="12.3yi" />
-        <vers num="12.3yj" />
-        <vers num="12.3yk" />
-        <vers num="12.3yl" />
-        <vers num="12.3ym" />
-        <vers num="12.3yn" />
-        <vers num="12.3yq" />
-        <vers num="12.3yr" />
-        <vers num="12.3ys" />
-        <vers num="12.3yt" />
-        <vers num="12.3yu" />
-        <vers num="12.3yw" />
-        <vers num="12.3yx" />
-        <vers num="12.3yz" />
-        <vers num="12.3za" />
-        <vers num="12.4" />
-        <vers num="12.4(1)" />
-        <vers num="12.4(11)md" />
-        <vers num="12.4(15)md" />
-        <vers num="12.4(1b)" />
-        <vers num="12.4(1c)" />
-        <vers num="12.4(2)mr" />
-        <vers num="12.4(2)mr1" />
-        <vers num="12.4(2)t" />
-        <vers num="12.4(2)t1" />
-        <vers num="12.4(2)t2" />
-        <vers num="12.4(2)t3" />
-        <vers num="12.4(2)t4" />
-        <vers num="12.4(2)xa" />
-        <vers num="12.4(2)xb" />
-        <vers num="12.4(2)xb2" />
-        <vers num="12.4(22)md" />
-        <vers num="12.4(22)mda" />
-        <vers num="12.4(23)" />
-        <vers num="12.4(24)md" />
-        <vers num="12.4(24)md1" />
-        <vers num="12.4(24)md2" />
-        <vers num="12.4(24)md3" />
-        <vers num="12.4(24)md4" />
-        <vers num="12.4(24)mda" />
-        <vers num="12.4(24)t1" />
-        <vers num="12.4(3)" />
-        <vers num="12.4(3)t2" />
-        <vers num="12.4(3a)" />
-        <vers num="12.4(3b)" />
-        <vers num="12.4(3d)" />
-        <vers num="12.4(4)mr" />
-        <vers num="12.4(4)t" />
-        <vers num="12.4(4)t2" />
-        <vers num="12.4(5)" />
-        <vers num="12.4(5b)" />
-        <vers num="12.4(6)t" />
-        <vers num="12.4(6)t1" />
-        <vers num="12.4(7)" />
-        <vers num="12.4(7a)" />
-        <vers num="12.4(8)" />
-        <vers num="12.4(9)t" />
-        <vers num="12.4gc" />
-        <vers num="12.4ja" />
-        <vers num="12.4jda" />
-        <vers num="12.4jdc" />
-        <vers num="12.4jdd" />
-        <vers num="12.4jk" />
-        <vers num="12.4jl" />
-        <vers num="12.4jma" />
-        <vers num="12.4jmb" />
-        <vers num="12.4jx" />
-        <vers num="12.4md" />
-        <vers num="12.4mda" />
-        <vers num="12.4mdb" />
-        <vers num="12.4mr" />
-        <vers num="12.4mra" />
-        <vers num="12.4mrb" />
-        <vers num="12.4sw" />
-        <vers num="12.4t" />
-        <vers num="12.4xa" />
-        <vers num="12.4xb" />
-        <vers num="12.4xc" />
-        <vers num="12.4xd" />
-        <vers num="12.4xe" />
-        <vers num="12.4xf" />
-        <vers num="12.4xg" />
-        <vers num="12.4xj" />
-        <vers num="12.4xk" />
-        <vers num="12.4xl" />
-        <vers num="12.4xm" />
-        <vers num="12.4xn" />
-        <vers num="12.4xp" />
-        <vers num="12.4xq" />
-        <vers num="12.4xr" />
-        <vers num="12.4xt" />
-        <vers num="12.4xv" />
-        <vers num="12.4xw" />
-        <vers num="12.4xy" />
-        <vers num="12.4xz" />
-        <vers num="12.4ya" />
-        <vers num="12.4yb" />
-        <vers num="12.4yd" />
-        <vers num="12.4ye" />
-        <vers num="12.4yg" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1357" published="2012-08-06" name="CVE-2012-1357" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The igmp_snoop_orib_fill_source_update function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco Nexus 5000 series switches allows remote attackers to cause a denial of service (device reload) via IGMP packets, aka Bug ID CSCts46521.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/release/notes/Rel_5_1_3_N1_1/Nexus5000_Release_Notes_5_1_3_N1.pdf" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/release/notes/Rel_5_1_3_N1_1/Nexus5000_Release_Notes_5_1_3_N1.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="nexus_5000">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nx-os">
-        <vers num="5.0" />
-        <vers num="5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1361" published="2012-08-06" name="CVE-2012-1361" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (MMoH) feature of Cisco Unified Communications Manager (CUCM) is enabled, allows remote attackers to obtain sensitive crosstalk information by listening during a PSTN call, aka Bug ID CSCtx77750.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-3TCAVS.html" source="CONFIRM">http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-3TCAVS.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="15.1" />
-        <vers num="15.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1364" published="2012-08-06" name="CVE-2012-1364" modified="2012-08-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Cisco Unified Computing System (UCS) 1.4 and 2.0 allows remote authenticated users to cause a denial of service (device reload) via a malformed SNMP request to a Fabric Interconnect (FI) device, aka Bug ID CSCts32452.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/unified_computing/ucs/release/notes/OL_24086.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/unified_computing/ucs/release/notes/OL_24086.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="unified_computing_system_software">
-        <vers num="1.4" />
-        <vers num="2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1365" published="2012-08-06" name="CVE-2012-1365" modified="2012-08-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Cisco Unified Computing System (UCS) 1.4 and 2.0 allows remote authenticated users to cause a denial of service (device reload) via a malformed SNMP request to a Fabric Interconnect (FI) device, aka Bug ID CSCts32463.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/unified_computing/ucs/release/notes/OL_24086.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/unified_computing/ucs/release/notes/OL_24086.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="unified_computing_system_software">
-        <vers num="1.4" />
-        <vers num="2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1367" published="2012-08-06" name="CVE-2012-1367" modified="2012-08-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (Route Processor crash) via a BGP UPDATE message with a modified local-preference (aka LOCAL_PREF) attribute length, aka Bug ID CSCtq06538.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/ios/12_2sr/release/notes/122SRcavs1.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/ios/12_2sr/release/notes/122SRcavs1.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.0" />
-        <vers num="12.2" />
-        <vers num="15.0" />
-        <vers num="15.1" />
-        <vers num="15.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1370" published="2012-08-06" name="CVE-2012-1370" modified="2012-08-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:P)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 allows remote authenticated users to cause a denial of service (vpnagentd process crash) via a crafted packet, aka Bug ID CSCty01670.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/release/notes/anyconnect30rn.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/release/notes/anyconnect30rn.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="anyconnect_secure_mobility_client">
-        <vers num="3.0" />
-        <vers num="3.0.0629" />
-        <vers num="3.0.07059" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1380" published="2012-03-07" name="CVE-2012-1380" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the NetEaseWeibo (com.netease.wb) application 1.2.1 and 1.2.2 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1380-vulnerability-in-NetEaseWeibo.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1380-vulnerability-in-NetEaseWeibo.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netease" name="neteaseweibo">
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1381" published="2012-03-07" name="CVE-2012-1381" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the NetEase CloudAlbum (com.netease.cloudalbum) application 2.0.0 and 2.2.0 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1381-vulnerability-in-NetEaseCloudAlbum.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1381-vulnerability-in-NetEaseCloudAlbum.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netease" name="netease_cloudalbum">
-        <vers num="2.0.0" />
-        <vers num="2.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1382" published="2012-03-07" name="CVE-2012-1382" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Youdao Dictionary (com.youdao.dict) application 1.6.1, 2.0.1(2), and 3.0.0(1) for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1382-vulnerability-in-YoudaoDictionary.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1382-vulnerability-in-YoudaoDictionary.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netease" name="youdao_dictionary">
-        <vers num="1.6.1" />
-        <vers num="2.0.1(2)" />
-        <vers num="3.0.0(1)" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1383" published="2012-03-07" name="CVE-2012-1383" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the NetEase Reader (com.netease.pris) application 1.1.2 and 1.2.0 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1383-vulnerability-in-NetEaseReader.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1383-vulnerability-in-NetEaseReader.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netease" name="netease_reader">
-        <vers num="1.1.2" />
-        <vers num="1.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1384" published="2012-03-07" name="CVE-2012-1384" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the NetEase Pmail (com.netease.rpmms) application 0.5.0 and 0.5.2 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1384-vulnerability-in-NetEasePmail.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1384-vulnerability-in-NetEasePmail.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netease" name="netease_pmail">
-        <vers num="0.5.0" />
-        <vers num="0.5.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1385" published="2012-03-07" name="CVE-2012-1385" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the NetEase WeiboHD (com.netease.wbhd) application 1.0.0 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1385-vulnerability-in-NetEaseWeiboHD.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1385-vulnerability-in-NetEaseWeiboHD.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netease" name="netease_weibohd">
-        <vers num="1.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1386" published="2012-03-07" name="CVE-2012-1386" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the YouMail Visual Voicemail Plus (com.youmail.android.vvm) application 2.0.45 and 2.1.43 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1386-vulnerability-in-YouMailVisualVoicemailPlus.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1386-vulnerability-in-YouMailVisualVoicemailPlus.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="youmail" name="youmail_visual_voicemail_plus">
-        <vers num="2.0.45" />
-        <vers num="2.1.43" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1387" published="2012-03-07" name="CVE-2012-1387" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the RealTalk (com.tmsmanager.tms) application A.0.9.250 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1387-vulnerability-in-RealTalk.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1387-vulnerability-in-RealTalk.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="uangel" name="realtalk">
-        <vers num="a.0.9.250" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1388" published="2012-03-07" name="CVE-2012-1388" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the XiXunTianTian (com.xixun.tiantian) application 0.6.2 beta for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1388-vulnerability-in-XiXunTianTian.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1388-vulnerability-in-XiXunTianTian.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="xixun" name="xixuntiantian">
-        <vers num="0.6.2" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1389" published="2012-03-07" name="CVE-2012-1389" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Di Long Weibo (com.icekirin.weibos) application 1.9.9 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1389-vulnerability-in-DiLongWeibo.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1389-vulnerability-in-DiLongWeibo.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="icekirin" name="di_long_weibo">
-        <vers num="1.9.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1390" published="2012-03-07" name="CVE-2012-1390" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Miso (com.bazaarlabs.miso) application 2.2 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1390-vulnerability-in-Miso.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1390-vulnerability-in-Miso.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gomiso" name="miso">
-        <vers num="2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1391" published="2012-03-07" name="CVE-2012-1391" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the mOffice - Outlook sync (com.innov8tion.isharesync) application 3.1 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1391-vulnerability-in-mOffice.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1391-vulnerability-in-mOffice.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mobisynapse" name="moffice-outlook_sync">
-        <vers num="3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1392" published="2012-03-07" name="CVE-2012-1392" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Dolphin Browser HD (mobi.mgeek.TunnyBrowser) application 6.2.0, 7.2.1, 7.3.0, and 7.4.0 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1392-vulnerability-in-DolphinBrowserHD.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1392-vulnerability-in-DolphinBrowserHD.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dolphin-browser" name="dolphin_browser_hd">
-        <vers num="6.2.0" />
-        <vers num="7.2.1" />
-        <vers num="7.3.0" />
-        <vers num="7.4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1393" published="2012-03-07" name="CVE-2012-1393" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the GO SMS Pro (com.jb.gosms) application 3.72, 4.10, and 4.35 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1393-vulnerability-in-GOSMSPro.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1393-vulnerability-in-GOSMSPro.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="goforandroid" name="go_sms_pro">
-        <vers num="3.72" />
-        <vers num="4.10" />
-        <vers num="4.35" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1394" published="2012-03-07" name="CVE-2012-1394" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the GO Email Widget (com.gau.go.launcherex.gowidget.emailwidget) application 1.3.1, 1.8, and 1.81 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1394-vulnerability-in-GOEmailWidget.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1394-vulnerability-in-GOEmailWidget.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="goforandroid" name="go_email_widget">
-        <vers num="1.3.1" />
-        <vers num="1.8" />
-        <vers num="1.81" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1395" published="2012-03-07" name="CVE-2012-1395" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the GO TwiWidget (com.gau.go.launcherex.gowidget.twitterwidget) application 1.7 and 2.1 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1395-vulnerability-in-GOTwiWidget.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1395-vulnerability-in-GOTwiWidget.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="goforandroid" name="go_twiwidget">
-        <vers num="1.7" />
-        <vers num="2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1396" published="2012-03-07" name="CVE-2012-1396" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the GO FBWidget (com.gau.go.launcherex.gowidget.fbwidget) application 1.9 and 2.1 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1396-vulnerability-in-GOFBWidget.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1396-vulnerability-in-GOFBWidget.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="goforandroid" name="go_fbwidget">
-        <vers num="1.9" />
-        <vers num="2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1397" published="2012-03-07" name="CVE-2012-1397" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the GO QQWeiboWidget (com.gau.go.launcherex.gowidget.qqweibowidget) application 1.2 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1397-vulnerability-in-GOQQWeiboWidget.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1397-vulnerability-in-GOQQWeiboWidget.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="goforandroid" name="go_qqweibowidget">
-        <vers num="1.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1398" published="2012-03-07" name="CVE-2012-1398" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the GO WeiboWidget (com.gau.go.launcherex.gowidget.weibowidget) application 2.4 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1398-vulnerability-in-GOWeiboWidget.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1398-vulnerability-in-GOWeiboWidget.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="goforandroid" name="go_weibowidget">
-        <vers num="2.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1399" published="2012-03-07" name="CVE-2012-1399" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the U+Box 2.0 (lg.uplusbox) application 2.0.2 and 2.0.8.4 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1399-vulnerability-in-U%2BBox.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1399-vulnerability-in-U%2BBox.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="uplus" name="u+box_2.0">
-        <vers num="2.0.2" />
-        <vers num="2.0.8.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1400" published="2012-03-07" name="CVE-2012-1400" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the U+Box 2.0 Pad (lg.uplusbox.pad) application 2.0.8.4 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1400-vulnerability-in-U%2BBoxPad.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1400-vulnerability-in-U%2BBoxPad.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="uplus" name="u+box_2.0_pad">
-        <vers num="2.0.8.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1401" published="2012-03-07" name="CVE-2012-1401" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the CamScanner (com.intsig.camscanner) application 1.2.2.20110823 and 1.3.2.20120116 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1401-vulnerability-in-CamScanner.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1401-vulnerability-in-CamScanner.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="intsig" name="camscanner">
-        <vers num="1.2.2.20110823" />
-        <vers num="1.3.2.20120116" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1402" published="2012-03-07" name="CVE-2012-1402" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the QianXun YingShi (com.qianxun.yingshi) application 1.2.3 and 1.3.4 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1402-vulnerability-in-QianXunYingShi.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1402-vulnerability-in-QianXunYingShi.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="1kxun" name="qianxun_yingshi">
-        <vers num="1.2.3" />
-        <vers num="1.3.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1403" published="2012-03-07" name="CVE-2012-1403" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Dolphin Browser CN (com.dolphin.browser.cn) application 6.3.1 and 7.2.1 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1403-vulnerability-in-DolphinBrowserCN.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1403-vulnerability-in-DolphinBrowserCN.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dolphin-browser" name="dolphin_browser_cn">
-        <vers num="6.3.1" />
-        <vers num="7.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1404" published="2012-03-07" name="CVE-2012-1404" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Dolphin Browser Mini (com.dolphin.browser) application 2.2 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1404-vulnerability-in-DolphinBrowserMini.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1404-vulnerability-in-DolphinBrowserMini.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dolphin-browser" name="dolphin_browser_mini">
-        <vers num="2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1405" published="2012-03-07" name="CVE-2012-1405" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the GO Note Widget (com.gau.go.launcherex.gowidget.notewidget) application 1.5 and 1.9 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1405-vulnerability-in-GONoteWidget.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1405-vulnerability-in-GONoteWidget.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="goforandroid" name="go_note_widget">
-        <vers num="1.5" />
-        <vers num="1.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1406" published="2012-03-07" name="CVE-2012-1406" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the GO Bookmark Widget (com.gau.go.launcherex.gowidget.bookmark) application 1.1 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1406-vulnerability-in-GOBookmarkWidget.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1406-vulnerability-in-GOBookmarkWidget.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="goforandroid" name="go_bookmark_widget">
-        <vers num="1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1407" published="2012-03-07" name="CVE-2012-1407" modified="2012-03-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the GO Message Widget (com.gau.go.launcherex.gowidget.smswidget) application 1.9, 2.1, and 2.3 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1407-vulnerability-in-GOMessageWidget.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1407-vulnerability-in-GOMessageWidget.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="goforandroid" name="go_message_widget">
-        <vers num="1.9" />
-        <vers num="2.1" />
-        <vers num="2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1408" published="2012-03-13" name="CVE-2012-1408" modified="2012-03-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the App Lock (com.cc.applock) application 1.7.5 and 1.7.6 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1408-vulnerability-in-AppLock.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1408-vulnerability-in-AppLock.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="creative_core" name="app_lock">
-        <vers num="1.7.5" />
-        <vers num="1.7.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1409" published="2012-03-13" name="CVE-2012-1409" modified="2012-03-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Tiny Password (com.tinycouch.android.freepassword) application 1.64 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1409-vulnerability-in-TinyPassword.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1409-vulnerability-in-TinyPassword.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tinycouch" name="tiny_password">
-        <vers num="1.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1410" published="2012-02-29" name="CVE-2012-1410" modified="2012-02-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the History Window implementation in Kadu 0.9.0 through 0.11.0 allow remote attackers to inject arbitrary web script or HTML via a crafted (1) SMS message, (2) presence message, or (3) status description.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://gitorious.org/kadu/kadu/commit/ebe3674cf0f3aa9b36308c06e19cb293cc790b52" source="CONFIRM" patch="1">https://gitorious.org/kadu/kadu/commit/ebe3674cf0f3aa9b36308c06e19cb293cc790b52</ref>
-      <ref url="https://gitorious.org/kadu/kadu/commit/e9506be6d3dcdd408fdf83d8eb82416c9b798c84" source="CONFIRM" patch="1">https://gitorious.org/kadu/kadu/commit/e9506be6d3dcdd408fdf83d8eb82416c9b798c84</ref>
-      <ref url="https://gitorious.org/kadu/kadu/commit/94e7479617d78a1649a0763960edade7ad09a0d0" source="CONFIRM" patch="1">https://gitorious.org/kadu/kadu/commit/94e7479617d78a1649a0763960edade7ad09a0d0</ref>
-      <ref url="https://gitorious.org/kadu/kadu/commit/91772e46541e22cbc2c7bf41a1a9798c2a58f6d6" source="CONFIRM" patch="1">https://gitorious.org/kadu/kadu/commit/91772e46541e22cbc2c7bf41a1a9798c2a58f6d6</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=797777" source="CONFIRM" patch="1">https://bugzilla.redhat.com/show_bug.cgi?id=797777</ref>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=749036" source="CONFIRM" patch="1">https://bugzilla.novell.com/show_bug.cgi?id=749036</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/27/3" source="MLIST" patch="1">[oss-security] 20120227 CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/02/27/26" source="MLIST">[oss-security] 20120227 Re: Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kadu" name="kadu">
-        <vers num="0.10.0" />
-        <vers num="0.11.0" />
-        <vers num="0.9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1413" published="2012-05-27" name="CVE-2012-1413" modified="2012-05-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in zc_install/includes/modules/pages/database_setup/header_php.php in Zen Cart 1.5.0 and earlier, when the software is being installed, allows remote attackers to inject arbitrary web script or HTML via the db_username parameter to zc_install/index.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.trustwave.com/spiderlabs/advisories/TWSL2012-004.txt" source="MISC">https://www.trustwave.com/spiderlabs/advisories/TWSL2012-004.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="zen-cart" name="zen_cart">
-        <vers num="1.1.0" />
-        <vers num="1.1.3" />
-        <vers num="1.2.0d" />
-        <vers num="1.2.1" edition="patch1" />
-        <vers num="1.2.1_patch1" />
-        <vers num="1.2.1d" />
-        <vers num="1.2.2d" />
-        <vers num="1.2.3d" />
-        <vers num="1.2.4.1" />
-        <vers num="1.2.4d" />
-        <vers num="1.2.5d" />
-        <vers num="1.2.6d" />
-        <vers num="1.3" />
-        <vers num="1.3.0.2" />
-        <vers num="1.3.2" />
-        <vers num="1.3.5" />
-        <vers num="1.3.6" />
-        <vers num="1.3.7" />
-        <vers num="1.3.8" />
-        <vers num="1.3.8a" />
-        <vers num="1.3.9" />
-        <vers num="1.3.9h" />
-        <vers prev="1" num="1.5" />
-        <vers num="2008" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1418" published="2012-02-29" name="CVE-2012-1418" modified="2012-04-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.60 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://googlechromereleases.blogspot.com/2012/02/stable-channel-update-for-chromebooks_24.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/02/stable-channel-update-for-chromebooks_24.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="acer" name="ac700_chromebook">
-        <vers num="" />
-      </prod>
-      <prod vendor="google" name="cr-48_chromebook">
-        <vers num="" />
-      </prod>
-      <prod vendor="samsung" name="series_5_chromebook">
-        <vers num="" />
-      </prod>
-      <prod vendor="google" name="chrome_os">
-        <vers prev="1" num="17.0.963.59" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1419" published="2012-03-21" name="CVE-2012-1419" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial [aliases] character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52572" source="BID">52572</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80409" source="OSVDB">80409</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="clamav" name="clamav">
-        <vers num="0.96.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1420" published="2012-03-21" name="CVE-2012-1420" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial \7fELF character sequence.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80409" source="OSVDB">80409</ref>
-      <ref url="http://osvdb.org/80407" source="OSVDB">80407</ref>
-      <ref url="http://osvdb.org/80406" source="OSVDB">80406</ref>
-      <ref url="http://osvdb.org/80403" source="OSVDB">80403</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="authentium" name="command_antivirus">
-        <vers num="5.2.11.5" />
-      </prod>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="eset" name="nod32_antivirus">
-        <vers num="5795" />
-      </prod>
-      <prod vendor="f-prot" name="f-prot_antivirus">
-        <vers num="4.6.2.117" />
-      </prod>
-      <prod vendor="fortinet" name="fortinet_antivirus">
-        <vers num="4.2.254.0" />
-      </prod>
-      <prod vendor="k7computing" name="antivirus">
-        <vers num="9.77.3565" />
-      </prod>
-      <prod vendor="kaspersky" name="kaspersky_anti-virus">
-        <vers num="7.0.0.125" />
-      </prod>
-      <prod vendor="microsoft" name="security_essentials">
-        <vers num="2.0" />
-      </prod>
-      <prod vendor="norman" name="norman_antivirus_&amp;_antispyware">
-        <vers num="6.06.12" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1421" published="2012-03-21" name="CVE-2012-1421" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial MSCF character sequence.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80409" source="OSVDB">80409</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="norman" name="norman_antivirus_&amp;_antispyware">
-        <vers num="6.06.12" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-      <prod vendor="symantec" name="endpoint_protection">
-        <vers num="11.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1422" published="2012-03-21" name="CVE-2012-1422" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial ITSF character sequence.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52583" source="BID">52583</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80409" source="OSVDB">80409</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="eset" name="nod32_antivirus">
-        <vers num="5795" />
-      </prod>
-      <prod vendor="norman" name="norman_antivirus_&amp;_antispyware">
-        <vers num="6.06.12" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1423" published="2012-03-21" name="CVE-2012-1423" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The TAR file parser in Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, K7 AntiVirus 9.77.3565, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial MZ character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80407" source="OSVDB">80407</ref>
-      <ref url="http://osvdb.org/80406" source="OSVDB">80406</ref>
-      <ref url="http://osvdb.org/80396" source="OSVDB">80396</ref>
-      <ref url="http://osvdb.org/80395" source="OSVDB">80395</ref>
-      <ref url="http://osvdb.org/80393" source="OSVDB">80393</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="authentium" name="command_antivirus">
-        <vers num="5.2.11.5" />
-      </prod>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="eset" name="nod32_antivirus">
-        <vers num="5795" />
-      </prod>
-      <prod vendor="f-prot" name="f-prot_antivirus">
-        <vers num="4.6.2.117" />
-      </prod>
-      <prod vendor="fortinet" name="fortinet_antivirus">
-        <vers num="4.2.254.0" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-      <prod vendor="k7computing" name="antivirus">
-        <vers num="9.77.3565" />
-      </prod>
-      <prod vendor="norman" name="norman_antivirus_&amp;_antispyware">
-        <vers num="6.06.12" />
-      </prod>
-      <prod vendor="pc_tools" name="pc_tools_antivirus">
-        <vers num="7.0.3.5" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-      <prod vendor="virusbuster" name="virusbuster">
-        <vers num="13.6.151.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1424" published="2012-03-21" name="CVE-2012-1424" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The TAR file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Jiangmin Antivirus 13.0.900, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX TAR file with a \19\04\00\10 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80409" source="OSVDB">80409</ref>
-      <ref url="http://osvdb.org/80392" source="OSVDB">80392</ref>
-      <ref url="http://osvdb.org/80391" source="OSVDB">80391</ref>
-      <ref url="http://osvdb.org/80390" source="OSVDB">80390</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="antiy" name="avl_sdk">
-        <vers num="2.0.3.7" />
-      </prod>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="jiangmin" name="jiangmin_antivirus">
-        <vers num="13.0.900" />
-      </prod>
-      <prod vendor="norman" name="norman_antivirus_&amp;_antispyware">
-        <vers num="6.06.12" />
-      </prod>
-      <prod vendor="pc_tools" name="pc_tools_antivirus">
-        <vers num="7.0.3.5" />
-      </prod>
-      <prod vendor="sophos" name="sophos_anti-virus">
-        <vers num="4.61.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1425" published="2012-03-21" name="CVE-2012-1425" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, and Trend Micro HouseCall 9.120.0.1004 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial \50\4B\03\04 character sequence.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80409" source="OSVDB">80409</ref>
-      <ref url="http://osvdb.org/80403" source="OSVDB">80403</ref>
-      <ref url="http://osvdb.org/80396" source="OSVDB">80396</ref>
-      <ref url="http://osvdb.org/80395" source="OSVDB">80395</ref>
-      <ref url="http://osvdb.org/80392" source="OSVDB">80392</ref>
-      <ref url="http://osvdb.org/80391" source="OSVDB">80391</ref>
-      <ref url="http://osvdb.org/80389" source="OSVDB">80389</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="antiy" name="avl_sdk">
-        <vers num="2.0.3.7" />
-      </prod>
-      <prod vendor="avira" name="antivir">
-        <vers num="7.11.1.163" />
-      </prod>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="eset" name="nod32_antivirus">
-        <vers num="5795" />
-      </prod>
-      <prod vendor="fortinet" name="fortinet_antivirus">
-        <vers num="4.2.254.0" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-      <prod vendor="jiangmin" name="jiangmin_antivirus">
-        <vers num="13.0.900" />
-      </prod>
-      <prod vendor="kaspersky" name="kaspersky_anti-virus">
-        <vers num="7.0.0.125" />
-      </prod>
-      <prod vendor="mcafee" name="gateway">
-        <vers num="2010.1c" />
-      </prod>
-      <prod vendor="mcafee" name="scan_engine">
-        <vers num="5.400.0.1158" />
-      </prod>
-      <prod vendor="norman" name="norman_antivirus_&amp;_antispyware">
-        <vers num="6.06.12" />
-      </prod>
-      <prod vendor="pc_tools" name="pc_tools_antivirus">
-        <vers num="7.0.3.5" />
-      </prod>
-      <prod vendor="symantec" name="endpoint_protection">
-        <vers num="11.0" />
-      </prod>
-      <prod vendor="trendmicro" name="housecall">
-        <vers num="9.120.0.1004" />
-      </prod>
-      <prod vendor="trendmicro" name="trend_micro_antivirus">
-        <vers num="9.120.0.1004" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1426" published="2012-03-21" name="CVE-2012-1426" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, K7 AntiVirus 9.77.3565, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial \42\5A\68 character sequence.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74241" source="XF">multiple-av-tar-evasion-cve20121426(74241)</ref>
-      <ref url="http://www.securityfocus.com/bid/52585" source="BID">52585</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80409" source="OSVDB">80409</ref>
-      <ref url="http://osvdb.org/80407" source="OSVDB">80407</ref>
-      <ref url="http://osvdb.org/80406" source="OSVDB">80406</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="authentium" name="command_antivirus">
-        <vers num="5.2.11.5" />
-      </prod>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="f-prot" name="f-prot_antivirus">
-        <vers num="4.6.2.117" />
-      </prod>
-      <prod vendor="k7computing" name="antivirus">
-        <vers num="9.77.3565" />
-      </prod>
-      <prod vendor="norman" name="norman_antivirus_&amp;_antispyware">
-        <vers num="6.06.12" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1427" published="2012-03-21" name="CVE-2012-1427" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX TAR file with a \57\69\6E\5A\69\70 character sequence at a certain location.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74242" source="XF">multiple-av-tar-evasion-cve20121427(74242)</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80409" source="OSVDB">80409</ref>
-      <ref url="http://osvdb.org/80390" source="OSVDB">80390</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="norman" name="norman_antivirus_&amp;_antispyware">
-        <vers num="6.06.12" />
-      </prod>
-      <prod vendor="sophos" name="sophos_anti-virus">
-        <vers num="4.61.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1428" published="2012-03-21" name="CVE-2012-1428" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX TAR file with a \4a\46\49\46 character sequence at a certain location.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74243" source="XF">multiple-av-tar-evasion-cve20121428(74243)</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80409" source="OSVDB">80409</ref>
-      <ref url="http://osvdb.org/80390" source="OSVDB">80390</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="norman" name="norman_antivirus_&amp;_antispyware">
-        <vers num="6.06.12" />
-      </prod>
-      <prod vendor="sophos" name="sophos_anti-virus">
-        <vers num="4.61.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1429" published="2012-03-21" name="CVE-2012-1429" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, and nProtect Anti-Virus 2011-01-17.01 allows remote attackers to bypass malware detection via an ELF file with a ustar character sequence at a certain location.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74244" source="XF">multiple-av-elf-ustar-evasion(74244)</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="comodo" name="comodo_antivirus">
-        <vers num="7424" />
-      </prod>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="f-secure" name="f-secure_anti-virus">
-        <vers num="9.0.16160.0" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-      <prod vendor="mcafee" name="gateway">
-        <vers num="2010.1c" />
-      </prod>
-      <prod vendor="mcafee" name="scan_engine">
-        <vers num="5.400.0.1158" />
-      </prod>
-      <prod vendor="nprotect" name="nprotect_antivirus">
-        <vers num="2011-01-17.01" />
-      </prod>
-      <prod vendor="softwin" name="bitdefender">
-        <vers num="7.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1430" published="2012-03-21" name="CVE-2012-1430" modified="2012-04-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, nProtect Anti-Virus 2011-01-17.01, Sophos Anti-Virus 4.61.0, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via an ELF file with a \19\04\00\10 character sequence at a certain location.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="bitdefender" name="bitdefender">
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="comodo" name="comodo_antivirus">
-        <vers num="7424" />
-      </prod>
-      <prod vendor="f-secure" name="anti-virus">
-        <vers num="9.0.16160.0" />
-      </prod>
-      <prod vendor="mcafee" name="gateway">
-        <vers num="2010.1c" />
-      </prod>
-      <prod vendor="mcafee" name="scan_engine">
-        <vers num="5.400.0.1158" />
-      </prod>
-      <prod vendor="nprotect" name="nprotect_antivirus">
-        <vers num="2011-01-17.01" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-      <prod vendor="sophos" name="sophos_anti-virus">
-        <vers num="4.61.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1431" published="2012-03-21" name="CVE-2012-1431" modified="2012-03-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Gateway (formerly Webwasher) 2010.1C, nProtect Anti-Virus 2011-01-17.01, Sophos Anti-Virus 4.61.0, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via an ELF file with a \4a\46\49\46 character sequence at a certain location.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="authentium" name="command_antivirus">
-        <vers num="5.2.11.5" />
-      </prod>
-      <prod vendor="bitdefender" name="bitdefender">
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="comodo" name="comodo_antivirus">
-        <vers num="7424" />
-      </prod>
-      <prod vendor="f-prot" name="f-prot_antivirus">
-        <vers num="4.6.2.117" />
-      </prod>
-      <prod vendor="f-secure" name="f-secure_anti-virus">
-        <vers num="9.0.16160.0" />
-      </prod>
-      <prod vendor="mcafee" name="gateway">
-        <vers num="2010.1c" />
-      </prod>
-      <prod vendor="nprotect" name="nprotect_antivirus">
-        <vers num="2011-01-17.01" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-      <prod vendor="sophos" name="sophos_anti-virus">
-        <vers num="4.61.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1432" published="2012-03-21" name="CVE-2012-1432" modified="2012-04-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Microsoft EXE file parser in Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \57\69\6E\5A\69\70 character sequence at a certain location.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1433" published="2012-03-21" name="CVE-2012-1433" modified="2012-03-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \4a\46\49\46 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ahnlab" name="v3_internet_security">
-        <vers num="2011.01.18.00" />
-      </prod>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1434" published="2012-03-21" name="CVE-2012-1434" modified="2012-04-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \19\04\00\10 character sequence at a certain location.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ahnlab" name="v3_internet_security">
-        <vers num="2011.01.18.00" />
-      </prod>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1435" published="2012-03-21" name="CVE-2012-1435" modified="2012-03-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \50\4B\4C\49\54\45 character sequence at a certain location.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ahnlab" name="v3_internet_security">
-        <vers num="2011.01.18.00" />
-      </prod>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1436" published="2012-03-21" name="CVE-2012-1436" modified="2012-04-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \2D\6C\68 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ahnlab" name="v3_internet_security">
-        <vers num="2011.01.18.00" />
-      </prod>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1437" published="2012-03-21" name="CVE-2012-1437" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Microsoft Office file parser in Comodo Antivirus 7425 allows remote attackers to bypass malware detection via an Office file with a \50\4B\53\70\58 character sequence at a certain location.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52597" source="BID">52597</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="comodo" name="comodo_antivirus">
-        <vers num="7425" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1438" published="2012-03-21" name="CVE-2012-1438" modified="2012-03-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via an Office file with a ustar character sequence at a certain location.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different Office parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="comodo" name="comodo_antivirus">
-        <vers num="7425" />
-      </prod>
-      <prod vendor="sophos" name="sophos_anti-virus">
-        <vers num="4.61.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1439" published="2012-03-21" name="CVE-2012-1439" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified padding field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52602" source="BID">52602</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="fortinet" name="fortinet_antivirus">
-        <vers num="4.2.254.0" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1440" published="2012-03-21" name="CVE-2012-1440" modified="2012-03-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The ELF file parser in Norman Antivirus 6.06.12, eSafe 7.0.17.0, CA eTrust Vet Antivirus 36.1.8511, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified identsize field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="ca" name="etrust_vet_antivirus">
-        <vers num="36.1.8511" />
-      </prod>
-      <prod vendor="fortinet" name="fortinet_antivirus">
-        <vers num="4.2.254.0" />
-      </prod>
-      <prod vendor="norman" name="norman_antivirus_&amp;_antispyware">
-        <vers num="6.06.12" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1441" published="2012-03-21" name="CVE-2012-1441" modified="2012-04-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Microsoft EXE file parser in eSafe 7.0.17.0 and Prevx 3.0 allows remote attackers to bypass malware detection via an EXE file with a modified value in any of several e_ fields.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different EXE parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="prevx" name="prevx">
-        <vers num="3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1442" published="2012-03-21" name="CVE-2012-1442" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, F-Secure Anti-Virus 9.0.16160.0, Sophos Anti-Virus 4.61.0, Antiy Labs AVL SDK 2.0.3.7, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified class field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52598" source="BID">52598</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80428" source="OSVDB">80428</ref>
-      <ref url="http://osvdb.org/80427" source="OSVDB">80427</ref>
-      <ref url="http://osvdb.org/80426" source="OSVDB">80426</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="antiy" name="avl_sdk">
-        <vers num="2.0.3.7" />
-      </prod>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="f-secure" name="f-secure_anti-virus">
-        <vers num="9.0.16160.0" />
-      </prod>
-      <prod vendor="fortinet" name="fortinet_antivirus">
-        <vers num="4.2.254.0" />
-      </prod>
-      <prod vendor="kaspersky" name="kaspersky_anti-virus">
-        <vers num="7.0.0.125" />
-      </prod>
-      <prod vendor="mcafee" name="gateway">
-        <vers num="2010.1c" />
-      </prod>
-      <prod vendor="mcafee" name="scan_engine">
-        <vers num="5.400.0.1158" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-      <prod vendor="sophos" name="sophos_anti-virus">
-        <vers num="4.61.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1443" published="2012-03-21" name="CVE-2012-1443" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0.1, PC Tools AntiVirus 7.0.3.5, F-Prot Antivirus 4.6.2.117, VirusBuster 13.6.151.0, Fortinet Antivirus 4.2.254.0, Antiy Labs AVL SDK 2.0.3.7, K7 AntiVirus 9.77.3565, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Jiangmin Antivirus 13.0.900, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Sophos Anti-Virus 4.61.0, NOD32 Antivirus 5795, Avira AntiVir 7.11.1.163, Norman Antivirus 6.06.12, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Panda Antivirus 10.0.2.7, McAfee Gateway (formerly Webwasher) 2010.1C, Trend Micro AntiVirus 9.120.0.1004, Comodo Antivirus 7424, Bitdefender 7.2, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, nProtect Anti-Virus 2011-01-17.01, AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, avast! Antivirus 4.8.1351.0 and 5.0.677.0, and VBA32 3.12.14.2 allows user-assisted remote attackers to bypass malware detection via a RAR file with an initial MZ character sequence.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different RAR parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52612" source="BID">52612</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ahnlab" name="v3_internet_security">
-        <vers num="2011.01.18.00" />
-      </prod>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="alwil" name="avast_antivirus">
-        <vers num="4.8.1351.0" />
-        <vers num="5.0.677.0" />
-      </prod>
-      <prod vendor="anti-virus" name="vba32">
-        <vers num="3.12.14.2" />
-      </prod>
-      <prod vendor="antiy" name="avl_sdk">
-        <vers num="2.0.3.7" />
-      </prod>
-      <prod vendor="authentium" name="command_antivirus">
-        <vers num="5.2.11.5" />
-      </prod>
-      <prod vendor="avg" name="avg_anti-virus">
-        <vers num="10.0.0.1190" />
-      </prod>
-      <prod vendor="avira" name="antivir">
-        <vers num="7.11.1.163" />
-      </prod>
-      <prod vendor="bitdefender" name="bitdefender">
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="clamav" name="clamav">
-        <vers num="0.96.4" />
-      </prod>
-      <prod vendor="comodo" name="comodo_antivirus">
-        <vers num="7424" />
-      </prod>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="eset" name="nod32_antivirus">
-        <vers num="5795" />
-      </prod>
-      <prod vendor="f-prot" name="f-prot_antivirus">
-        <vers num="4.6.2.117" />
-      </prod>
-      <prod vendor="f-secure" name="f-secure_anti-virus">
-        <vers num="9.0.16160.0" />
-      </prod>
-      <prod vendor="fortinet" name="fortinet_antivirus">
-        <vers num="4.2.254.0" />
-      </prod>
-      <prod vendor="gdata-software" name="g_data_antivirus">
-        <vers num="21" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-      <prod vendor="jiangmin" name="jiangmin_antivirus">
-        <vers num="13.0.900" />
-      </prod>
-      <prod vendor="k7computing" name="antivirus">
-        <vers num="9.77.3565" />
-      </prod>
-      <prod vendor="kaspersky" name="kaspersky_anti-virus">
-        <vers num="7.0.0.125" />
-      </prod>
-      <prod vendor="mcafee" name="gateway">
-        <vers num="2010.1c" />
-      </prod>
-      <prod vendor="mcafee" name="scan_engine">
-        <vers num="5.400.0.1158" />
-      </prod>
-      <prod vendor="microsoft" name="security_essentials">
-        <vers num="2.0" />
-      </prod>
-      <prod vendor="norman" name="norman_antivirus_&amp;_antispyware">
-        <vers num="6.06.12" />
-      </prod>
-      <prod vendor="nprotect" name="nprotect_antivirus">
-        <vers num="2011-01-17.01" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-      <prod vendor="pc_tools" name="pc_tools_antivirus">
-        <vers num="7.0.3.5" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-      <prod vendor="sophos" name="sophos_anti-virus">
-        <vers num="4.61.0" />
-      </prod>
-      <prod vendor="symantec" name="endpoint_protection">
-        <vers num="11.0" />
-      </prod>
-      <prod vendor="trendmicro" name="housecall">
-        <vers num="9.120.0.1004" />
-      </prod>
-      <prod vendor="trendmicro" name="trend_micro_antivirus">
-        <vers num="9.120.0.1004" />
-      </prod>
-      <prod vendor="virusbuster" name="virusbuster">
-        <vers num="13.6.151.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1444" published="2012-03-21" name="CVE-2012-1444" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The ELF file parser in eSafe 7.0.17.0, Prevx 3.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified abiversion field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52604" source="BID">52604</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80429" source="OSVDB">80429</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="fortinet" name="fortinet_antivirus">
-        <vers num="4.2.254.0" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-      <prod vendor="prevx" name="prevx">
-        <vers num="3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1445" published="2012-03-21" name="CVE-2012-1445" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified abi field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52605" source="BID">52605</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="fortinet" name="fortinet_antivirus">
-        <vers num="4.2.254.0" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1446" published="2012-03-21" name="CVE-2012-1446" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Antivirus 6.06.12, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, McAfee Gateway (formerly Webwasher) 2010.1C, Sophos Anti-Virus 4.61.0, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified encoding field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52600" source="BID">52600</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80431" source="OSVDB">80431</ref>
-      <ref url="http://osvdb.org/80430" source="OSVDB">80430</ref>
-      <ref url="http://osvdb.org/80428" source="OSVDB">80428</ref>
-      <ref url="http://osvdb.org/80427" source="OSVDB">80427</ref>
-      <ref url="http://osvdb.org/80426" source="OSVDB">80426</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="antiy" name="avl_sdk">
-        <vers num="2.0.3.7" />
-      </prod>
-      <prod vendor="ca" name="etrust_vet_antivirus">
-        <vers num="36.1.8511" />
-      </prod>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="fortinet" name="fortinet_antivirus">
-        <vers num="4.2.254.0" />
-      </prod>
-      <prod vendor="kaspersky" name="kaspersky_anti-virus">
-        <vers num="7.0.0.125" />
-      </prod>
-      <prod vendor="mcafee" name="gateway">
-        <vers num="2010.1c" />
-      </prod>
-      <prod vendor="mcafee" name="scan_engine">
-        <vers num="5.400.0.1158" />
-      </prod>
-      <prod vendor="norman" name="norman_antivirus_&amp;_antispyware">
-        <vers num="6.06.12" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-      <prod vendor="pc_tools" name="pc_tools_antivirus">
-        <vers num="7.0.3.5" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-      <prod vendor="sophos" name="sophos_anti-virus">
-        <vers num="4.61.0" />
-      </prod>
-      <prod vendor="symantec" name="endpoint_protection">
-        <vers num="11.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1447" published="2012-03-21" name="CVE-2012-1447" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The ELF file parser in Fortinet Antivirus 4.2.254.0, eSafe 7.0.17.0, Dr.Web 5.0.2.03300, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified e_version field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80432" source="OSVDB">80432</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="drweb" name="dr.web_antivirus">
-        <vers num="5.0.2.03300" />
-      </prod>
-      <prod vendor="fortinet" name="fortinet_antivirus">
-        <vers num="4.2.254.0" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1448" published="2012-03-21" name="CVE-2012-1448" modified="2012-04-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The CAB file parser in Quick Heal (aka Cat QuickHeal) 11.00, Trend Micro AntiVirus 9.120.0.1004, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Trend Micro HouseCall 9.120.0.1004, and Emsisoft Anti-Malware 5.1.0.1 allows remote attackers to bypass malware detection via a CAB file with a modified cbCabinet field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-      <prod vendor="trendmicro" name="housecall">
-        <vers num="9.120.0.1004" />
-      </prod>
-      <prod vendor="trendmicro" name="trend_micro_antivirus">
-        <vers num="9.120.0.1004" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1449" published="2012-03-21" name="CVE-2012-1449" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB file with a modified vMajor field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52616" source="BID">52616</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="eset" name="nod32_antivirus">
-        <vers num="5795" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1450" published="2012-03-21" name="CVE-2012-1450" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified reserved3 field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52617" source="BID">52617</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-      <prod vendor="sophos" name="sophos_anti-virus">
-        <vers num="4.61.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1451" published="2012-03-21" name="CVE-2012-1451" modified="2012-04-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The CAB file parser in Emsisoft Anti-Malware 5.1.0.1 and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass malware detection via a CAB file with a modified reserved2 field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1452" published="2012-03-21" name="CVE-2012-1452" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detection via a CAB file with a modified reserved1 field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52619" source="BID">52619</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1453" published="2012-03-21" name="CVE-2012-1453" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly Webwasher) 2010.1C, Emsisoft Anti-Malware 5.1.0.1, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Rising Antivirus 22.83.00.03, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via a CAB file with a modified coffFiles field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52621" source="BID">52621</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80489" source="OSVDB">80489</ref>
-      <ref url="http://osvdb.org/80488" source="OSVDB">80488</ref>
-      <ref url="http://osvdb.org/80487" source="OSVDB">80487</ref>
-      <ref url="http://osvdb.org/80485" source="OSVDB">80485</ref>
-      <ref url="http://osvdb.org/80484" source="OSVDB">80484</ref>
-      <ref url="http://osvdb.org/80482" source="OSVDB">80482</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="antiy" name="avl_sdk">
-        <vers num="2.0.3.7" />
-      </prod>
-      <prod vendor="ca" name="etrust_vet_antivirus">
-        <vers num="36.1.8511" />
-      </prod>
-      <prod vendor="drweb" name="dr.web_antivirus">
-        <vers num="5.0.2.03300" />
-      </prod>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="fortinet" name="fortinet_antivirus">
-        <vers num="4.2.254.0" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-      <prod vendor="kaspersky" name="kaspersky_anti-virus">
-        <vers num="7.0.0.125" />
-      </prod>
-      <prod vendor="mcafee" name="gateway">
-        <vers num="2010.1c" />
-      </prod>
-      <prod vendor="microsoft" name="security_essentials">
-        <vers num="2.0" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-      <prod vendor="sophos" name="sophos_anti-virus">
-        <vers num="4.61.0" />
-      </prod>
-      <prod vendor="trendmicro" name="housecall">
-        <vers num="9.120.0.1004" />
-      </prod>
-      <prod vendor="trendmicro" name="trend_micro_antivirus">
-        <vers num="9.120.0.1004" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1454" published="2012-03-21" name="CVE-2012-1454" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The ELF file parser in Dr.Web 5.0.2.03300, eSafe 7.0.17.0, McAfee Gateway (formerly Webwasher) 2010.1C, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified ei_version field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80432" source="OSVDB">80432</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="drweb" name="dr.web_antivirus">
-        <vers num="5.0.2.03300" />
-      </prod>
-      <prod vendor="fortinet" name="fortinet_antivirus">
-        <vers num="4.2.254.0" />
-      </prod>
-      <prod vendor="mcafee" name="gateway">
-        <vers num="2010.1c" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1455" published="2012-03-21" name="CVE-2012-1455" modified="2012-04-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB file with a modified vMinor version field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="eset" name="nod32_antivirus">
-        <vers num="5795" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1456" published="2012-03-21" name="CVE-2012-1456" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, and Trend Micro HouseCall 9.120.0.1004 allows remote attackers to bypass malware detection via a TAR file with an appended ZIP file.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74289" source="XF">multiple-av-zip-archive-evasion(74289)</ref>
-      <ref url="http://www.securityfocus.com/bid/52608" source="BID">52608</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80409" source="OSVDB">80409</ref>
-      <ref url="http://osvdb.org/80406" source="OSVDB">80406</ref>
-      <ref url="http://osvdb.org/80403" source="OSVDB">80403</ref>
-      <ref url="http://osvdb.org/80396" source="OSVDB">80396</ref>
-      <ref url="http://osvdb.org/80395" source="OSVDB">80395</ref>
-      <ref url="http://osvdb.org/80391" source="OSVDB">80391</ref>
-      <ref url="http://osvdb.org/80390" source="OSVDB">80390</ref>
-      <ref url="http://osvdb.org/80389" source="OSVDB">80389</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="avg" name="avg_anti-virus">
-        <vers num="10.0.0.1190" />
-      </prod>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="comodo" name="comodo_antivirus">
-        <vers num="7424" />
-      </prod>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="eset" name="nod32_antivirus">
-        <vers num="5795" />
-      </prod>
-      <prod vendor="f-prot" name="f-prot_antivirus">
-        <vers num="4.6.2.117" />
-      </prod>
-      <prod vendor="fortinet" name="fortinet_antivirus">
-        <vers num="4.2.254.0" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-      <prod vendor="jiangmin" name="jiangmin_antivirus">
-        <vers num="13.0.900" />
-      </prod>
-      <prod vendor="kaspersky" name="kaspersky_anti-virus">
-        <vers num="7.0.0.125" />
-      </prod>
-      <prod vendor="mcafee" name="gateway">
-        <vers num="2010.1c" />
-      </prod>
-      <prod vendor="mcafee" name="scan_engine">
-        <vers num="5.400.0.1158" />
-      </prod>
-      <prod vendor="norman" name="norman_antivirus_&amp;_antispyware">
-        <vers num="6.06.12" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-      <prod vendor="sophos" name="sophos_anti-virus">
-        <vers num="4.61.0" />
-      </prod>
-      <prod vendor="symantec" name="endpoint_protection">
-        <vers num="11.0" />
-      </prod>
-      <prod vendor="trendmicro" name="housecall">
-        <vers num="9.120.0.1004" />
-      </prod>
-      <prod vendor="trendmicro" name="trend_micro_antivirus">
-        <vers num="9.120.0.1004" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1457" published="2012-03-21" name="CVE-2012-1457" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR file size.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74293" source="XF">multiple-av-tar-length-evasion(74293)</ref>
-      <ref url="http://www.securityfocus.com/bid/52610" source="BID">52610</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80409" source="OSVDB">80409</ref>
-      <ref url="http://osvdb.org/80407" source="OSVDB">80407</ref>
-      <ref url="http://osvdb.org/80406" source="OSVDB">80406</ref>
-      <ref url="http://osvdb.org/80403" source="OSVDB">80403</ref>
-      <ref url="http://osvdb.org/80396" source="OSVDB">80396</ref>
-      <ref url="http://osvdb.org/80395" source="OSVDB">80395</ref>
-      <ref url="http://osvdb.org/80393" source="OSVDB">80393</ref>
-      <ref url="http://osvdb.org/80392" source="OSVDB">80392</ref>
-      <ref url="http://osvdb.org/80391" source="OSVDB">80391</ref>
-      <ref url="http://osvdb.org/80389" source="OSVDB">80389</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html" source="SUSE">openSUSE-SU-2012:0833</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="alwil" name="avast_antivirus">
-        <vers num="4.8.1351.0" />
-        <vers num="5.0.677.0" />
-      </prod>
-      <prod vendor="anti-virus" name="vba32">
-        <vers num="3.12.14.2" />
-      </prod>
-      <prod vendor="antiy" name="avl_sdk">
-        <vers num="2.0.3.7" />
-      </prod>
-      <prod vendor="authentium" name="command_antivirus">
-        <vers num="5.2.11.5" />
-      </prod>
-      <prod vendor="avg" name="avg_anti-virus">
-        <vers num="10.0.0.1190" />
-      </prod>
-      <prod vendor="avira" name="antivir">
-        <vers num="7.11.1.163" />
-      </prod>
-      <prod vendor="bitdefender" name="bitdefender">
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="clamav" name="clamav">
-        <vers num="0.96.4" />
-      </prod>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="eset" name="nod32_antivirus">
-        <vers num="5795" />
-      </prod>
-      <prod vendor="f-prot" name="f-prot_antivirus">
-        <vers num="4.6.2.117" />
-      </prod>
-      <prod vendor="gdata-software" name="g_data_antivirus">
-        <vers num="21" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-      <prod vendor="jiangmin" name="jiangmin_antivirus">
-        <vers num="13.0.900" />
-      </prod>
-      <prod vendor="k7computing" name="antivirus">
-        <vers num="9.77.3565" />
-      </prod>
-      <prod vendor="kaspersky" name="kaspersky_anti-virus">
-        <vers num="7.0.0.125" />
-      </prod>
-      <prod vendor="mcafee" name="gateway">
-        <vers num="2010.1c" />
-      </prod>
-      <prod vendor="mcafee" name="scan_engine">
-        <vers num="5.400.0.1158" />
-      </prod>
-      <prod vendor="microsoft" name="security_essentials">
-        <vers num="2.0" />
-      </prod>
-      <prod vendor="norman" name="norman_antivirus_&amp;_antispyware">
-        <vers num="6.06.12" />
-      </prod>
-      <prod vendor="pc_tools" name="pc_tools_antivirus">
-        <vers num="7.0.3.5" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-      <prod vendor="symantec" name="endpoint_protection">
-        <vers num="11.0" />
-      </prod>
-      <prod vendor="trendmicro" name="housecall">
-        <vers num="9.120.0.1004" />
-      </prod>
-      <prod vendor="trendmicro" name="trend_micro_antivirus">
-        <vers num="9.120.0.1004" />
-      </prod>
-      <prod vendor="virusbuster" name="virusbuster">
-        <vers num="13.6.151.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1458" published="2012-03-21" name="CVE-2012-1458" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CHM parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html" source="SUSE">openSUSE-SU-2012:0833</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="clamav" name="clamav">
-        <vers num="0.96.4" />
-      </prod>
-      <prod vendor="sophos" name="sophos_anti-virus">
-        <vers num="4.61.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1459" published="2012-03-21" name="CVE-2012-1459" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, Panda Antivirus 10.0.2.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field corresponding to that entire entry, plus part of the header of the next entry.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80409" source="OSVDB">80409</ref>
-      <ref url="http://osvdb.org/80407" source="OSVDB">80407</ref>
-      <ref url="http://osvdb.org/80406" source="OSVDB">80406</ref>
-      <ref url="http://osvdb.org/80403" source="OSVDB">80403</ref>
-      <ref url="http://osvdb.org/80396" source="OSVDB">80396</ref>
-      <ref url="http://osvdb.org/80395" source="OSVDB">80395</ref>
-      <ref url="http://osvdb.org/80393" source="OSVDB">80393</ref>
-      <ref url="http://osvdb.org/80392" source="OSVDB">80392</ref>
-      <ref url="http://osvdb.org/80391" source="OSVDB">80391</ref>
-      <ref url="http://osvdb.org/80390" source="OSVDB">80390</ref>
-      <ref url="http://osvdb.org/80389" source="OSVDB">80389</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html" source="SUSE">openSUSE-SU-2012:0833</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ahnlab" name="v3_internet_security">
-        <vers num="2011.01.18.00" />
-      </prod>
-      <prod vendor="alwil" name="avast_antivirus">
-        <vers num="4.8.1351.0" />
-        <vers num="5.0.677.0" />
-      </prod>
-      <prod vendor="anti-virus" name="vba32">
-        <vers num="3.12.14.2" />
-      </prod>
-      <prod vendor="antiy" name="avl_sdk">
-        <vers num="2.0.3.7" />
-      </prod>
-      <prod vendor="authentium" name="command_antivirus">
-        <vers num="5.2.11.5" />
-      </prod>
-      <prod vendor="avg" name="avg_anti-virus">
-        <vers num="10.0.0.1190" />
-      </prod>
-      <prod vendor="avira" name="antivir">
-        <vers num="7.11.1.163" />
-      </prod>
-      <prod vendor="bitdefender" name="bitdefender">
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="clamav" name="clamav">
-        <vers num="0.96.4" />
-      </prod>
-      <prod vendor="comodo" name="comodo_antivirus">
-        <vers num="7424" />
-      </prod>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="eset" name="nod32_antivirus">
-        <vers num="5795" />
-      </prod>
-      <prod vendor="f-prot" name="f-prot_antivirus">
-        <vers num="4.6.2.117" />
-      </prod>
-      <prod vendor="f-secure" name="f-secure_anti-virus">
-        <vers num="9.0.16160.0" />
-      </prod>
-      <prod vendor="fortinet" name="fortinet_antivirus">
-        <vers num="4.2.254.0" />
-      </prod>
-      <prod vendor="gdata-software" name="g_data_antivirus">
-        <vers num="21" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-      <prod vendor="jiangmin" name="jiangmin_antivirus">
-        <vers num="13.0.900" />
-      </prod>
-      <prod vendor="k7computing" name="antivirus">
-        <vers num="9.77.3565" />
-      </prod>
-      <prod vendor="kaspersky" name="kaspersky_anti-virus">
-        <vers num="7.0.0.125" />
-      </prod>
-      <prod vendor="mcafee" name="gateway">
-        <vers num="2010.1c" />
-      </prod>
-      <prod vendor="mcafee" name="scan_engine">
-        <vers num="5.400.0.1158" />
-      </prod>
-      <prod vendor="microsoft" name="security_essentials">
-        <vers num="2.0" />
-      </prod>
-      <prod vendor="norman" name="norman_antivirus_&amp;_antispyware">
-        <vers num="6.06.12" />
-      </prod>
-      <prod vendor="nprotect" name="nprotect_antivirus">
-        <vers num="2011-01-17.01" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-      <prod vendor="pc_tools" name="pc_tools_antivirus">
-        <vers num="7.0.3.5" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-      <prod vendor="sophos" name="sophos_anti-virus">
-        <vers num="4.61.0" />
-      </prod>
-      <prod vendor="symantec" name="endpoint_protection">
-        <vers num="11.0" />
-      </prod>
-      <prod vendor="trendmicro" name="housecall">
-        <vers num="9.120.0.1004" />
-      </prod>
-      <prod vendor="trendmicro" name="trend_micro_antivirus">
-        <vers num="9.120.0.1004" />
-      </prod>
-      <prod vendor="virusbuster" name="virusbuster">
-        <vers num="13.6.151.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1460" published="2012-03-21" name="CVE-2012-1460" modified="2012-03-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, and VBA32 3.12.14.2 allows remote attackers to bypass malware detection via a .tar.gz file with stray bytes at the end. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different Gzip parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="anti-virus" name="vba32">
-        <vers num="3.12.14.2" />
-      </prod>
-      <prod vendor="antiy" name="avl_sdk">
-        <vers num="2.0.3.7" />
-      </prod>
-      <prod vendor="authentium" name="command_antivirus">
-        <vers num="5.2.11.5" />
-      </prod>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="f-prot" name="f-prot_antivirus">
-        <vers num="4.6.2.117" />
-      </prod>
-      <prod vendor="jiangmin" name="jiangmin_antivirus">
-        <vers num="13.0.900" />
-      </prod>
-      <prod vendor="k7computing" name="antivirus">
-        <vers num="9.77.3565" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1461" published="2012-03-21" name="CVE-2012-1461" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, and VBA32 3.12.14.2 allows remote attackers to bypass malware detection via a .tar.gz file with multiple compressed streams.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different Gzip parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52626" source="BID">52626</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="anti-virus" name="vba32">
-        <vers num="3.12.14.2" />
-      </prod>
-      <prod vendor="authentium" name="command_antivirus">
-        <vers num="5.2.11.5" />
-      </prod>
-      <prod vendor="avg" name="avg_anti-virus">
-        <vers num="10.0.0.1190" />
-      </prod>
-      <prod vendor="bitdefender" name="bitdefender">
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="eset" name="nod32_antivirus">
-        <vers num="5795" />
-      </prod>
-      <prod vendor="f-secure" name="f-secure_anti-virus">
-        <vers num="9.0.16160.0" />
-      </prod>
-      <prod vendor="fortinet" name="fortinet_antivirus">
-        <vers num="4.2.254.0" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-      <prod vendor="jiangmin" name="jiangmin_antivirus">
-        <vers num="13.0.900" />
-      </prod>
-      <prod vendor="k7computing" name="antivirus">
-        <vers num="9.77.3565" />
-      </prod>
-      <prod vendor="kaspersky" name="kaspersky_anti-virus">
-        <vers num="7.0.0.125" />
-      </prod>
-      <prod vendor="mcafee" name="gateway">
-        <vers num="2010.1c" />
-      </prod>
-      <prod vendor="mcafee" name="scan_engine">
-        <vers num="5.400.0.1158" />
-      </prod>
-      <prod vendor="norman" name="norman_antivirus_&amp;_antispyware">
-        <vers num="6.06.12" />
-      </prod>
-      <prod vendor="rising-global" name="rising_antivirus">
-        <vers num="22.83.00.03" />
-      </prod>
-      <prod vendor="sophos" name="sophos_anti-virus">
-        <vers num="4.61.0" />
-      </prod>
-      <prod vendor="symantec" name="endpoint_protection">
-        <vers num="11.0" />
-      </prod>
-      <prod vendor="trendmicro" name="housecall">
-        <vers num="9.120.0.1004" />
-      </prod>
-      <prod vendor="trendmicro" name="trend_micro_antivirus">
-        <vers num="9.120.0.1004" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1462" published="2012-03-21" name="CVE-2012-1462" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, Kaspersky Anti-Virus 7.0.0.125, Norman Antivirus 6.06.12, Sophos Anti-Virus 4.61.0, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11 allows remote attackers to bypass malware detection via a ZIP file containing an invalid block of data at the beginning.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ZIP parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52613" source="BID">52613</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ahnlab" name="v3_internet_security">
-        <vers num="2011.01.18.00" />
-      </prod>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="avg" name="avg_anti-virus">
-        <vers num="10.0.0.1190" />
-      </prod>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="emsisoft" name="anti-malware">
-        <vers num="5.1.0.1" />
-      </prod>
-      <prod vendor="fortinet" name="fortinet_antivirus">
-        <vers num="4.2.254.0" />
-      </prod>
-      <prod vendor="ikarus" name="ikarus_virus_utilities_t3_command_line_scanner">
-        <vers num="1.1.97.0" />
-      </prod>
-      <prod vendor="jiangmin" name="jiangmin_antivirus">
-        <vers num="13.0.900" />
-      </prod>
-      <prod vendor="kaspersky" name="kaspersky_anti-virus">
-        <vers num="7.0.0.125" />
-      </prod>
-      <prod vendor="symantec" name="endpoint_protection">
-        <vers num="11.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1463" published="2012-03-21" name="CVE-2012-1463" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified endianness field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74311" source="XF">multiple-av-elf-file-evasion(74311)</ref>
-      <ref url="http://www.securityfocus.com/bid/52614" source="BID">52614</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522005" source="BUGTRAQ">20120319 Evasion attacks expoliting file-parsing vulnerabilities in antivirus products</ref>
-      <ref url="http://www.ieee-security.org/TC/SP2012/program.html" source="MISC">http://www.ieee-security.org/TC/SP2012/program.html</ref>
-      <ref url="http://osvdb.org/80426" source="OSVDB">80426</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ahnlab" name="v3_internet_security">
-        <vers num="2011.01.18.00" />
-      </prod>
-      <prod vendor="aladdin" name="esafe">
-        <vers num="7.0.17.0" />
-      </prod>
-      <prod vendor="authentium" name="command_antivirus">
-        <vers num="5.2.11.5" />
-      </prod>
-      <prod vendor="bitdefender" name="bitdefender">
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="cat" name="quick_heal">
-        <vers num="11.00" />
-      </prod>
-      <prod vendor="comodo" name="comodo_antivirus">
-        <vers num="7424" />
-      </prod>
-      <prod vendor="f-prot" name="f-prot_antivirus">
-        <vers num="4.6.2.117" />
-      </prod>
-      <prod vendor="f-secure" name="f-secure_anti-virus">
-        <vers num="9.0.16160.0" />
-      </prod>
-      <prod vendor="mcafee" name="scan_engine">
-        <vers num="5.400.0.1158" />
-      </prod>
-      <prod vendor="norman" name="norman_antivirus_&amp;_antispyware">
-        <vers num="6.06.12" />
-      </prod>
-      <prod vendor="nprotect" name="nprotect_antivirus">
-        <vers num="2011-01-17.01" />
-      </prod>
-      <prod vendor="pandasecurity" name="panda_antivirus">
-        <vers num="10.0.2.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1464" published="2012-03-19" name="CVE-2012-1464" modified="2012-03-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Dashboard Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the installation path via a request with a trailing "?" character, which causes Dashboard to attempt to access a non-existent resource.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73549" source="XF">netdecision-info-disclosure(73549)</ref>
-      <ref url="http://www.netmechanica.com/news/?news_id=26" source="CONFIRM">http://www.netmechanica.com/news/?news_id=26</ref>
-      <ref url="http://www.exploit-db.com/exploits/18543" source="EXPLOIT-DB">18543</ref>
-      <ref url="http://secunia.com/advisories/48168" source="SECUNIA" adv="1">48168</ref>
-      <ref url="http://secpod.org/blog/?p=478" source="MISC">http://secpod.org/blog/?p=478</ref>
-      <ref url="http://secpod.org/advisories/SecPod_Netmechanica_NetDecision_Dashboard_Server_Info_Disc_Vuln.txt" source="MISC">http://secpod.org/advisories/SecPod_Netmechanica_NetDecision_Dashboard_Server_Info_Disc_Vuln.txt</ref>
-      <ref url="http://osvdb.org/79653" source="OSVDB">79653</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netmechanica" name="netdecision">
-        <vers prev="1" num="4.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1465" published="2012-03-19" name="CVE-2012-1465" modified="2012-03-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause a denial of service (application crash) via a long URL in an HTTP request.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73528" source="XF">netdecision-http-dos(73528)</ref>
-      <ref url="http://www.securityfocus.com/bid/52208" source="BID">52208</ref>
-      <ref url="http://www.securityfocus.com/bid/52194" source="BID">52194</ref>
-      <ref url="http://www.netmechanica.com/news/?news_id=26" source="CONFIRM">http://www.netmechanica.com/news/?news_id=26</ref>
-      <ref url="http://www.exploit-db.com/exploits/18541" source="EXPLOIT-DB">18541</ref>
-      <ref url="http://secunia.com/advisories/48168" source="SECUNIA" adv="1">48168</ref>
-      <ref url="http://secpod.org/blog/?p=484" source="MISC">http://secpod.org/blog/?p=484</ref>
-      <ref url="http://secpod.org/advisories/SecPod_Netmechanica_NetDecision_HTTP_Server_DoS_Vuln.txt" source="MISC">http://secpod.org/advisories/SecPod_Netmechanica_NetDecision_HTTP_Server_DoS_Vuln.txt</ref>
-      <ref url="http://osvdb.org/79651" source="OSVDB">79651</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netmechanica" name="netdecision">
-        <vers prev="1" num="4.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1466" published="2012-03-19" name="CVE-2012-1466" modified="2012-08-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Traffic Grapher Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the source code of NtDecision script files with a .nd extension via an invalid version number in an HTTP request, as demonstrated using default.nd.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73531" source="XF">netdecision-traffic-nd-source-disclosure(73531)</ref>
-      <ref url="http://www.securityfocus.com/bid/52196" source="BID">52196</ref>
-      <ref url="http://www.netmechanica.com/news/?news_id=26" source="CONFIRM">http://www.netmechanica.com/news/?news_id=26</ref>
-      <ref url="http://www.exploit-db.com/exploits/18542" source="EXPLOIT-DB">18542</ref>
-      <ref url="http://secunia.com/advisories/48168" source="SECUNIA" adv="1">48168</ref>
-      <ref url="http://secpod.org/blog/?p=481" source="MISC">http://secpod.org/blog/?p=481</ref>
-      <ref url="http://secpod.org/advisories/SecPod_Netmechanica_NetDecision_Traffic_Grapher_Server_SourceCode_Disc_Vuln.txt" source="MISC">http://secpod.org/advisories/SecPod_Netmechanica_NetDecision_Traffic_Grapher_Server_SourceCode_Disc_Vuln.txt</ref>
-      <ref url="http://osvdb.org/79652" source="OSVDB">79652</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netmechanica" name="netdecision">
-        <vers prev="1" num="4.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1467" published="2012-09-06" name="CVE-2012-1467" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems before 2.3.7, allow remote authenticated users to (1) delete or (2) rename arbitrary files via a .. (dot dot) in the param parameter to lib/pkp/lib/tinymce/jscripts/tiny_mce/plugins/ibrowser/scripts/rfiles.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23079" source="MISC">https://www.htbridge.com/advisory/HTB23079</ref>
-      <ref url="http://pkp.sfu.ca/support/forum/viewtopic.php?f=2&amp;t=8431" source="CONFIRM">http://pkp.sfu.ca/support/forum/viewtopic.php?f=2&amp;t=8431</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pkp" name="open_journal_systems">
-        <vers prev="1" num="2.3.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1468" published="2012-09-06" name="CVE-2012-1468" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote authenticated users with the Author Role permission to execute arbitrary code by uploading a file with an executable extension that is not ".php", then accessing it via a direct request to the file in submission/original/ in the associated article directory, as demonstrated using .pHp, .asp, and other extensions.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/184.html 'CWE-184: Incomplete Blacklist'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23079" source="MISC">https://www.htbridge.com/advisory/HTB23079</ref>
-      <ref url="http://pkp.sfu.ca/support/forum/viewtopic.php?f=2&amp;t=8431" source="CONFIRM">http://pkp.sfu.ca/support/forum/viewtopic.php?f=2&amp;t=8431</ref>
-      <ref url="http://pkp.sfu.ca/ojs/RELEASE-2.3.7" source="CONFIRM">http://pkp.sfu.ca/ojs/RELEASE-2.3.7</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pkp" name="open_journal_systems">
-        <vers prev="1" num="2.3.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1469" published="2012-09-06" name="CVE-2012-1469" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Open Journal Systems before 2.3.7 allow remote attackers and remote authenticated users to inject arbitrary web script or HTML via the (1) editor or (2) callback parameters to lib/pkp/lib/tinymce/jscripts/tiny_mce/plugins/ibrowser/ibrowser.php in the iBrowser plugin, (3) authors[][url] parameter to index.php, or (4) Bio Statement or (5) Abstract of Submission fields to the stripUnsafeHtml function in lib/pkp/classes/core/String.inc.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23079" source="MISC">https://www.htbridge.com/advisory/HTB23079</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74227" source="XF">open-journal-editor-xss(74227)</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74226" source="XF">open-journal-string-xss(74226)</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74225" source="XF">open-journal-index-xss(74225)</ref>
-      <ref url="http://www.osvdb.org/80257" source="OSVDB">80257</ref>
-      <ref url="http://www.osvdb.org/80256" source="OSVDB">80256</ref>
-      <ref url="http://www.osvdb.org/80255" source="OSVDB">80255</ref>
-      <ref url="http://secunia.com/advisories/48464" source="SECUNIA" adv="1">48464</ref>
-      <ref url="http://secunia.com/advisories/48449" source="SECUNIA" adv="1">48449</ref>
-      <ref url="http://pkp.sfu.ca/support/forum/viewtopic.php?f=2&amp;t=8431" source="CONFIRM">http://pkp.sfu.ca/support/forum/viewtopic.php?f=2&amp;t=8431</ref>
-      <ref url="http://pkp.sfu.ca/ojs/RELEASE-2.3.7" source="CONFIRM">http://pkp.sfu.ca/ojs/RELEASE-2.3.7</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0102.html" source="BUGTRAQ">20120321 Multiple vulnerabilities in Open Journal Systems (OJS)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pkp" name="open_journal_systems">
-        <vers prev="1" num="2.3.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1472" published="2012-03-12" name="CVE-2012-1472" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">VMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API requests, which allows remote attackers to read arbitrary files or cause a denial of service via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0002.html" source="CONFIRM">http://www.vmware.com/security/advisories/VMSA-2012-0002.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="vcenter_chargeback_manager">
-        <vers num="1.6.2" />
-        <vers prev="1" num="2.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1474" published="2012-03-13" name="CVE-2012-1474" modified="2012-03-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Youni SMS (com.snda.youni) application 2.1.0c and 2.1.0d for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1474-vulnerability-in-YouniSMS.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1474-vulnerability-in-YouniSMS.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sdo" name="youni_sms">
-        <vers num="2.1.0" edition="c" />
-        <vers num="2.1.0" edition="d" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1475" published="2012-03-13" name="CVE-2012-1475" modified="2012-03-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the YagattaTalk Messenger (com.iskoot.yagatta.yagattatalk) application 1.00.01.08 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1475-vulnerability-in-YagattaTalkMessenger.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1475-vulnerability-in-YagattaTalkMessenger.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="qualcomm" name="yagattatalk_messenger">
-        <vers num="1.00.01.08" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1476" published="2012-03-13" name="CVE-2012-1476" modified="2012-03-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the KKtalk (com.kkliaotian.android) application 4.0.0 and 4.1.5 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1476-vulnerability-in-KKtalk.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1476-vulnerability-in-KKtalk.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kktalk" name="kktalk">
-        <vers num="4.0.0" />
-        <vers num="4.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1477" published="2012-03-13" name="CVE-2012-1477" modified="2012-03-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Cnectd (mci.cnectd) application 3.1.0 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1477-vulnerability-in-Cnectd.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1477-vulnerability-in-Cnectd.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cnectd" name="cnectd">
-        <vers num="3.1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1478" published="2012-03-13" name="CVE-2012-1478" modified="2012-03-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the UCMobile BloveStorm (com.blovestorm) application 2.2.0 and 3.2.1 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1478-vulnerability-in-UCMobileBloveStorm.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1478-vulnerability-in-UCMobileBloveStorm.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ucweb" name="ucmobile_blovestorm">
-        <vers num="2.2.0" />
-        <vers num="3.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1479" published="2012-03-13" name="CVE-2012-1479" modified="2012-03-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the AContact (com.movester.quickcontact) application 1.8.2 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1479-vulnerability-in-AContact.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1479-vulnerability-in-AContact.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="movesti" name="acontact">
-        <vers num="1.8.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1480" published="2012-03-13" name="CVE-2012-1480" modified="2012-03-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Pansi SMS (com.pansi.msg) application 1.97, 2.01, and 2.07 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1480-vulnerability-in-PansiSMS.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1480-vulnerability-in-PansiSMS.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pansi" name="pansi_sms">
-        <vers num="1.97" />
-        <vers num="2.01" />
-        <vers num="2.07" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1481" published="2012-03-15" name="CVE-2012-1481" modified="2012-03-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Textdroid (com.app.android.textdroid) application 2.5.2 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1481-vulnerability-in-Textdroid.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1481-vulnerability-in-Textdroid.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kashif_masud" name="textdroid">
-        <vers num="2.5.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1482" published="2012-03-15" name="CVE-2012-1482" modified="2012-03-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the TouchPal Contacts (com.cootek.smartdialer) application 3.3.1 and 4.0.1 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1482-vulnerability-in-TouchPalContacts.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1482-vulnerability-in-TouchPalContacts.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="touchpal" name="touchpal_contacts">
-        <vers num="3.3.1" />
-        <vers num="4.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1483" published="2012-03-15" name="CVE-2012-1483" modified="2012-03-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Message Forwarder (com.gmail.zbnetium) application 1.12.20110409.1 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1483-vulnerability-in-MessageForwarder.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1483-vulnerability-in-MessageForwarder.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="zhou_bo" name="message_forwarder">
-        <vers num="1.12.20110409.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1484" published="2012-03-15" name="CVE-2012-1484" modified="2012-03-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the WaliSMS CN (cn.com.wali.walisms) application 2.9.2 and 3.7.0 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1484-vulnerability-in-WaliSMSCN.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1484-vulnerability-in-WaliSMSCN.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wali" name="walisms_cn">
-        <vers num="2.9.2" />
-        <vers num="3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1485" published="2012-03-15" name="CVE-2012-1485" modified="2012-03-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the NetFront Life Browser (com.access_company.android.nflifebrowser.lite) application 2.2.0 and 2.3.0 for Android has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1485-vulnerability-in-NetFrontLifeBrowser.html" source="MISC">http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1485-vulnerability-in-NetFrontLifeBrowser.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netfrontlife" name="netfront_life_browser">
-        <vers num="2.2.0" />
-        <vers num="2.3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1493" published="2012-07-09" name="CVE-2012-1493" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:N/A:N)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2.1.0-HF2, 2.2.x before 2.2.0-HF1, and 2.3.x before 2.3.0-HF3, use a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins via the PubkeyAuthentication option.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/f5_bigip_known_privkey.rb" source="MISC" patch="1">https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/f5_bigip_known_privkey.rb</ref>
-      <ref url="https://www.trustmatta.com/advisories/MATTA-2012-002.txt" source="MISC">https://www.trustmatta.com/advisories/MATTA-2012-002.txt</ref>
-      <ref url="http://www.theregister.co.uk/2012/06/13/f5_kit_metasploit_exploit/" source="MISC">http://www.theregister.co.uk/2012/06/13/f5_kit_metasploit_exploit/</ref>
-      <ref url="http://support.f5.com/kb/en-us/solutions/public/13000/600/sol13600.html" source="CONFIRM" adv="1">http://support.f5.com/kb/en-us/solutions/public/13000/600/sol13600.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="f5" name="big-ip_application_security_manager">
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.2.3" edition="hf1" />
-        <vers num="11.0.0" edition="hf1" />
-        <vers num="11.1.0" edition="hf2" />
-        <vers num="9.2.0" edition="hf4" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.4.8" />
-      </prod>
-      <prod vendor="f5" name="big-ip_global_traffic_manager">
-        <vers num="10.0.0" />
-        <vers num="10.2.3" edition="hf1" />
-        <vers num="11.0.0" edition="hf1" />
-        <vers num="11.1.0" edition="hf2" />
-        <vers num="9.2.2" />
-        <vers num="9.4.8" edition="hf4" />
-      </prod>
-      <prod vendor="f5" name="big-ip_local_traffic_manager">
-        <vers num="10.0.0" />
-        <vers num="10.2.3" edition="hf1" />
-        <vers num="11.0.0" edition="hf1" />
-        <vers num="11.1.0" edition="hf2" />
-        <vers num="9.0.0" />
-        <vers num="9.4.8" edition="hf4" />
-      </prod>
-      <prod vendor="f5" name="enterprise_manager">
-        <vers num="" edition=":virtual" />
-        <vers num="1.0" edition="" />
-        <vers num="1.0" edition=":virtual" />
-        <vers num="2.0" edition="" />
-        <vers num="2.0" edition=":virtual" />
-        <vers num="2.1.0" edition="" />
-        <vers num="2.1.0" edition=":virtual" />
-        <vers num="2.1.0" edition="hf1" />
-        <vers num="2.1.0" edition="hf1:virtual" />
-        <vers num="2.2.0" edition="" />
-        <vers num="2.2.0" edition=":virtual" />
-        <vers num="2.3.0" edition="" />
-        <vers num="2.3.0" edition=":virtual" />
-        <vers num="2.3.0" edition="hf2" />
-        <vers num="2.3.0" edition="hf2:virtual" />
-      </prod>
-      <prod vendor="f5" name="big-ip_1000">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_11000">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_11050">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_1500">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_1600">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_2400">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_3400">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_3410">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_3600">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_3900">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_4100">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_5100">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_5110">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_6400">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_6800">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_6900">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_8400">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_8800">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_8900">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="big-ip_8950">
-        <vers num="" />
-      </prod>
-      <prod vendor="f5" name="enterprise_manager">
-        <vers num="1.0" />
-        <vers num="2.0" />
-        <vers num="2.1.0" edition="hf1" />
-        <vers num="2.2.0" />
-        <vers num="2.3.0" edition="hf2" />
-      </prod>
-      <prod vendor="f5" name="tmos">
-        <vers num="10.0.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1.0" />
-        <vers num="10.2.0" />
-        <vers num="2.0" />
-        <vers num="4.0" />
-        <vers num="4.2" />
-        <vers num="4.3" />
-        <vers num="4.4" />
-        <vers num="4.5" />
-        <vers num="4.5.10" />
-        <vers num="4.5.11" />
-        <vers num="4.5.12" />
-        <vers num="4.5.6" />
-        <vers num="4.5.9" />
-        <vers num="4.6" />
-        <vers num="4.6.2" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.0.4" />
-        <vers num="9.0.5" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.2.2" />
-        <vers num="9.2.3" />
-        <vers num="9.2.4" />
-        <vers num="9.2.5" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.4.8" />
-        <vers num="9.6.0" />
-        <vers num="9.6.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1497" published="2012-03-02" name="CVE-2012-1497" modified="2012-03-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include file=" attribute, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files by leveraging the template-designer role.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.movabletype.org/documentation/appendices/release-notes/513.html" source="CONFIRM" patch="1" adv="1">http://www.movabletype.org/documentation/appendices/release-notes/513.html</ref>
-      <ref url="http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html" source="CONFIRM" patch="1" adv="1">http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="movabletype" name="movable_type_advanced">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.01" edition="beta" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.2" edition="beta" />
-        <vers num="4.23" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.3" />
-        <vers num="4.31" />
-        <vers num="4.32" />
-        <vers num="4.33" />
-        <vers num="4.34" />
-        <vers num="4.35" />
-        <vers num="4.36" />
-        <vers num="4.361" />
-        <vers prev="1" num="4.37" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.051" />
-        <vers num="5.06" />
-        <vers num="5.1" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-      </prod>
-      <prod vendor="movabletype" name="movable_type_enterprise">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.01" edition="beta" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.2" edition="beta" />
-        <vers num="4.23" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.3" />
-        <vers num="4.31" />
-        <vers num="4.32" />
-        <vers num="4.33" />
-        <vers num="4.34" />
-        <vers num="4.35" />
-        <vers num="4.36" />
-        <vers num="4.361" />
-        <vers prev="1" num="4.37" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.051" />
-        <vers num="5.06" />
-        <vers num="5.1" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-      </prod>
-      <prod vendor="movabletype" name="movable_type_open_source">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.01" edition="beta" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.2" edition="beta" />
-        <vers num="4.23" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.3" />
-        <vers num="4.31" />
-        <vers num="4.32" />
-        <vers num="4.33" />
-        <vers num="4.34" />
-        <vers num="4.35" />
-        <vers num="4.36" />
-        <vers num="4.361" />
-        <vers prev="1" num="4.37" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.051" />
-        <vers num="5.06" />
-        <vers num="5.1" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-      </prod>
-      <prod vendor="movabletype" name="movable_type_pro">
-        <vers num="4.0" edition="beta" />
-        <vers num="4.01" edition="beta" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.2" edition="beta" />
-        <vers num="4.23" />
-        <vers num="4.25" />
-        <vers num="4.26" />
-        <vers num="4.261" />
-        <vers num="4.3" />
-        <vers num="4.31" />
-        <vers num="4.32" />
-        <vers num="4.33" />
-        <vers num="4.34" />
-        <vers num="4.35" />
-        <vers num="4.36" />
-        <vers num="4.361" />
-        <vers prev="1" num="4.37" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.031" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.051" />
-        <vers num="5.06" />
-        <vers num="5.1" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1498" published="2012-03-19" name="CVE-2012-1498" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in Webfolio CMS 1.1.4 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add an administrator via an add action to admin/users/add or (2) modify a web page via a save action to admin/pages/edit/web_page_name.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73575" source="XF">webfoliocms-addadmin-modifywebpage-csrf(73575)</ref>
-      <ref url="http://www.securityfocus.com/bid/52218" source="BID">52218</ref>
-      <ref url="http://www.exploit-db.com/exploits/18536" source="EXPLOIT-DB">18536</ref>
-      <ref url="http://secunia.com/advisories/48190" source="SECUNIA" adv="1">48190</ref>
-      <ref url="http://packetstormsecurity.org/files/110294/WebfolioCMS-1.1.4-Cross-Site-Request-Forgery.html" source="MISC">http://packetstormsecurity.org/files/110294/WebfolioCMS-1.1.4-Cross-Site-Request-Forgery.html</ref>
-      <ref url="http://osvdb.org/79658" source="OSVDB">79658</ref>
-      <ref url="http://ivanobinetti.blogspot.com/2012/02/webfoliocms-114-csrf-add-adminmodify.html" source="MISC">http://ivanobinetti.blogspot.com/2012/02/webfoliocms-114-csrf-add-adminmodify.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nikola_posa" name="webfoliocms1.0.2">
-        <vers num="" />
-      </prod>
-      <prod vendor="nikola_posa" name="webfoliocms1.0.3">
-        <vers num="" />
-      </prod>
-      <prod vendor="nikola_posa" name="webfoliocms1.0.4">
-        <vers num="" />
-      </prod>
-      <prod vendor="nikola_posa" name="webfoliocms1.0.5">
-        <vers num="" />
-      </prod>
-      <prod vendor="nikola_posa" name="webfoliocms1.0.6">
-        <vers num="" />
-      </prod>
-      <prod vendor="nikola_posa" name="webfoliocms1.0.7">
-        <vers num="" />
-      </prod>
-      <prod vendor="nikola_posa" name="webfoliocms1.0.8">
-        <vers num="" />
-      </prod>
-      <prod vendor="nikola_posa" name="webfoliocms1.0.9">
-        <vers num="" />
-      </prod>
-      <prod vendor="nikola_posa" name="webfoliocms1.1.0">
-        <vers num="" />
-      </prod>
-      <prod vendor="nikola_posa" name="webfoliocms1.1.1">
-        <vers num="" />
-      </prod>
-      <prod vendor="nikola_posa" name="webfoliocms1.1.2">
-        <vers num="" />
-      </prod>
-      <prod vendor="nikola_posa" name="webfoliocms1.1.3">
-        <vers num="" />
-      </prod>
-      <prod vendor="nikola_posa" name="webfoliocms1.1.4">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1499" published="2012-04-11" name="CVE-2012-1499" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=805912" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=805912</ref>
-      <ref url="http://technet.microsoft.com/en-us/security/msvr/msvr12-004" source="MISC">http://technet.microsoft.com/en-us/security/msvr/msvr12-004</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201206-06.xml" source="GENTOO">GLSA-201206-06</ref>
-      <ref url="http://openjpeg.googlecode.com/svn/branches/openjpeg-1.5/NEWS" source="MISC">http://openjpeg.googlecode.com/svn/branches/openjpeg-1.5/NEWS</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/083105.html" source="FEDORA">FEDORA-2012-9602</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082923.html" source="FEDORA">FEDORA-2012-9628</ref>
-      <ref url="http://code.google.com/p/openjpeg/source/detail?r=1330" source="CONFIRM">http://code.google.com/p/openjpeg/source/detail?r=1330</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openjpeg" name="openjpeg">
-        <vers num="1.3" />
-        <vers prev="1" num="1.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1502" published="2012-06-15" name="CVE-2012-1502" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a NULL byte in a password string.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73857" source="XF">pypam-password-dos(73857)</ref>
-      <ref url="http://www.osvdb.org/79892" source="OSVDB">79892</ref>
-      <ref url="http://www.lsexperts.de/advisories/lse-2012-03-01.txt" source="MISC">http://www.lsexperts.de/advisories/lse-2012-03-01.txt</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2430" source="DEBIAN">DSA-2430</ref>
-      <ref url="http://ubuntu.com/usn/usn-1395-1" source="UBUNTU">USN-1395-1</ref>
-      <ref url="http://secunia.com/advisories/48746" source="SECUNIA" adv="1">48746</ref>
-      <ref url="http://secunia.com/advisories/48332" source="SECUNIA" adv="1">48332</ref>
-      <ref url="http://secunia.com/advisories/48312" source="SECUNIA" adv="1">48312</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-04/msg00027.html" source="SUSE">openSUSE-SU-2012:0487</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pypam" name="pypam">
-        <vers prev="1" num="0.5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1508" published="2012-03-16" name="CVE-2012-1508" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">The XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0005.html" source="CONFIRM" adv="1">http://www.vmware.com/security/advisories/VMSA-2012-0005.html</ref>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0004.html" source="CONFIRM" adv="1">http://www.vmware.com/security/advisories/VMSA-2012-0004.html</ref>
-      <ref url="http://www.securityfocus.com/bid/52524" source="BID">52524</ref>
-      <ref url="http://secunia.com/advisories/48378" source="SECUNIA">48378</ref>
-      <ref url="http://osvdb.org/80115" source="OSVDB">80115</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0071.html" source="BUGTRAQ">20120316 VMSA-2012-0004 VMware View privilege escalation and cross-site scripting</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="esx">
-        <vers num="4.0" />
-        <vers num="4.1" />
-      </prod>
-      <prod vendor="vmware" name="view">
-        <vers prev="1" num="4.6.0" />
-      </prod>
-      <prod vendor="vmware" name="esxi">
-        <vers num="4.0" />
-        <vers num="4.1" />
-        <vers num="5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1509" published="2012-03-16" name="CVE-2012-1509" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">Buffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0005.html" source="CONFIRM">http://www.vmware.com/security/advisories/VMSA-2012-0005.html</ref>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0004.html" source="CONFIRM">http://www.vmware.com/security/advisories/VMSA-2012-0004.html</ref>
-      <ref url="http://www.securityfocus.com/bid/52524" source="BID">52524</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0071.html" source="BUGTRAQ">20120316 VMSA-2012-0004 VMware View privilege escalation and cross-site scripting</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="view">
-        <vers prev="1" num="4.6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1510" published="2012-03-16" name="CVE-2012-1510" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0005.html" source="CONFIRM" adv="1">http://www.vmware.com/security/advisories/VMSA-2012-0005.html</ref>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0004.html" source="CONFIRM" adv="1">http://www.vmware.com/security/advisories/VMSA-2012-0004.html</ref>
-      <ref url="http://www.securityfocus.com/bid/52524" source="BID">52524</ref>
-      <ref url="http://secunia.com/advisories/48378" source="SECUNIA">48378</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0071.html" source="BUGTRAQ">20120316 VMSA-2012-0004 VMware View privilege escalation and cross-site scripting</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="esx">
-        <vers num="4.0" />
-        <vers num="4.1" />
-      </prod>
-      <prod vendor="vmware" name="view">
-        <vers prev="1" num="4.6.0" />
-      </prod>
-      <prod vendor="vmware" name="esxi">
-        <vers num="4.0" />
-        <vers num="4.1" />
-        <vers num="5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1511" published="2012-03-16" name="CVE-2012-1511" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in View Manager Portal in VMware View before 4.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0004.html" source="CONFIRM" adv="1">http://www.vmware.com/security/advisories/VMSA-2012-0004.html</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0071.html" source="BUGTRAQ">20120316 VMSA-2012-0004 VMware View privilege escalation and cross-site scripting</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="view">
-        <vers prev="1" num="4.6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1512" published="2012-03-16" name="CVE-2012-1512" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the internal browser in vSphere Client in VMware vSphere 4.1 before Update 2 and 5.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via a crafted log-file entry.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0005.html" source="CONFIRM" adv="1">http://www.vmware.com/security/advisories/VMSA-2012-0005.html</ref>
-      <ref url="http://www.securityfocus.com/bid/52525" source="BID">52525</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="vsphere">
-        <vers prev="1" num="4.1" edition="update1" />
-        <vers prev="1" num="5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1513" published="2012-03-16" name="CVE-2012-1513" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">The Web Configuration tool in VMware vCenter Orchestrator (vCO) 4.0 before Update 4, 4.1 before Update 2, and 4.2 before Update 1 places the vCenter Server password in an HTML document, which allows remote authenticated administrators to obtain sensitive information by reading this document.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0005.html" source="CONFIRM" adv="1">http://www.vmware.com/security/advisories/VMSA-2012-0005.html</ref>
-      <ref url="http://www.securityfocus.com/bid/52525" source="BID">52525</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="vcenter_orchestrator">
-        <vers num="4.0" />
-        <vers num="4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1514" published="2012-03-16" name="CVE-2012-1514" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in VMware vShield Manager (vSM) 1.0.1 before Update 2 and 4.1.0 before Update 2 allows remote attackers to hijack the authentication of arbitrary users.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0005.html" source="CONFIRM" adv="1">http://www.vmware.com/security/advisories/VMSA-2012-0005.html</ref>
-      <ref url="http://www.securityfocus.com/bid/52525" source="BID">52525</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="vshield_manager">
-        <vers prev="1" num="1.0" edition="update1" />
-        <vers prev="1" num="4.1" edition="update1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1515" published="2012-04-02" name="CVE-2012-1515" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="8.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="6.5" CVSS_base_score="8.3">
-    <desc>
-      <descript source="cve">VMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O operations, which allows guest OS users to gain guest OS privileges by overwriting memory locations in a read-only memory block associated with the Virtual DOS Machine.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74480" source="XF">vmware-esxserver-io-privilege-escalation(74480)</ref>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0006.html" source="CONFIRM" adv="1">http://www.vmware.com/security/advisories/VMSA-2012-0006.html</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-042" source="MS">MS12-042</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15209" source="OVAL">oval:org.mitre.oval:def:15209</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="esx">
-        <vers num="3.5" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-      </prod>
-      <prod vendor="vmware" name="esxi">
-        <vers num="3.5" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1516" published="2012-05-04" name="CVE-2012-1516" modified="2012-05-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving data pointers.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0009.html" source="CONFIRM" adv="1">http://www.vmware.com/security/advisories/VMSA-2012-0009.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="esx">
-        <vers num="3.5" edition="update1" />
-        <vers num="3.5" edition="update2" />
-        <vers num="3.5" edition="update3" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-      </prod>
-      <prod vendor="vmware" name="esxi">
-        <vers num="3.5" edition="1" />
-        <vers num="4.0" edition="1" />
-        <vers num="4.0" edition="2" />
-        <vers num="4.0" edition="3" />
-        <vers num="4.0" edition="4" />
-        <vers num="4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1517" published="2012-05-04" name="CVE-2012-1517" modified="2012-05-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving function pointers.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0009.html" source="CONFIRM" adv="1">http://www.vmware.com/security/advisories/VMSA-2012-0009.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="esx">
-        <vers num="4.1" />
-      </prod>
-      <prod vendor="vmware" name="esxi">
-        <vers num="4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1518" published="2012-04-17" name="CVE-2012-1518" modified="2012-04-20" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="8.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="6.5" CVSS_base_score="8.3">
-    <desc>
-      <descript source="cve">VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 though 5.0, and VMware ESX 3.5 through 4.1 use an incorrect ACL for the VMware Tools folder, which allows guest OS users to gain guest OS privileges via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0007.html" source="CONFIRM" adv="1">http://www.vmware.com/security/advisories/VMSA-2012-0007.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="fusion">
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-      </prod>
-      <prod vendor="vmware" name="player">
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-      </prod>
-      <prod vendor="vmware" name="workstation">
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-      </prod>
-      <prod vendor="vmware" name="esx">
-        <vers num="3.5" edition="update1" />
-        <vers num="3.5" edition="update2" />
-        <vers num="3.5" edition="update3" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-      </prod>
-      <prod vendor="vmware" name="esxi">
-        <vers num="3.5" edition="1" />
-        <vers num="4.0" edition="1" />
-        <vers num="4.0" edition="2" />
-        <vers num="4.0" edition="3" />
-        <vers num="4.0" edition="4" />
-        <vers num="4.1" edition="1" />
-        <vers num="4.1" edition="2" />
-        <vers num="5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1520" published="2012-07-25" name="CVE-2012-1520" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1521" published="2012-05-01" name="CVE-2012-1521" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the XML parser in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15397" source="OVAL">oval:org.mitre.oval:def:15397</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE">APPLE-SA-2012-07-25-1</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/04/stable-channel-update_30.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/04/stable-channel-update_30.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=117110" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=117110</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="0.1.38.1" />
-        <vers num="0.1.38.2" />
-        <vers num="0.1.38.4" />
-        <vers num="0.1.40.1" />
-        <vers num="0.1.42.2" />
-        <vers num="0.1.42.3" />
-        <vers num="0.2.149.27" />
-        <vers num="0.2.149.29" />
-        <vers num="0.2.149.30" />
-        <vers num="0.2.152.1" />
-        <vers num="0.2.153.1" />
-        <vers num="0.3.154.0" />
-        <vers num="0.3.154.3" />
-        <vers num="0.4.154.18" />
-        <vers num="0.4.154.22" />
-        <vers num="0.4.154.31" />
-        <vers num="0.4.154.33" />
-        <vers num="1.0.154.36" />
-        <vers num="1.0.154.39" />
-        <vers num="1.0.154.42" />
-        <vers num="1.0.154.43" />
-        <vers num="1.0.154.46" />
-        <vers num="1.0.154.48" />
-        <vers num="1.0.154.52" />
-        <vers num="1.0.154.53" />
-        <vers num="1.0.154.59" />
-        <vers num="1.0.154.64" />
-        <vers num="1.0.154.65" />
-        <vers num="10.0.601.0" />
-        <vers num="10.0.602.0" />
-        <vers num="10.0.603.0" />
-        <vers num="10.0.603.2" />
-        <vers num="10.0.603.3" />
-        <vers num="10.0.604.0" />
-        <vers num="10.0.605.0" />
-        <vers num="10.0.606.0" />
-        <vers num="10.0.607.0" />
-        <vers num="10.0.608.0" />
-        <vers num="10.0.609.0" />
-        <vers num="10.0.610.0" />
-        <vers num="10.0.611.0" />
-        <vers num="10.0.611.1" />
-        <vers num="10.0.612.0" />
-        <vers num="10.0.612.1" />
-        <vers num="10.0.612.2" />
-        <vers num="10.0.612.3" />
-        <vers num="10.0.613.0" />
-        <vers num="10.0.614.0" />
-        <vers num="10.0.615.0" />
-        <vers num="10.0.616.0" />
-        <vers num="10.0.617.0" />
-        <vers num="10.0.618.0" />
-        <vers num="10.0.619.0" />
-        <vers num="10.0.620.0" />
-        <vers num="10.0.621.0" />
-        <vers num="10.0.622.0" />
-        <vers num="10.0.622.1" />
-        <vers num="10.0.623.0" />
-        <vers num="10.0.624.0" />
-        <vers num="10.0.625.0" />
-        <vers num="10.0.626.0" />
-        <vers num="10.0.627.0" />
-        <vers num="10.0.628.0" />
-        <vers num="10.0.629.0" />
-        <vers num="10.0.630.0" />
-        <vers num="10.0.631.0" />
-        <vers num="10.0.632.0" />
-        <vers num="10.0.633.0" />
-        <vers num="10.0.634.0" />
-        <vers num="10.0.634.1" />
-        <vers num="10.0.635.0" />
-        <vers num="10.0.636.0" />
-        <vers num="10.0.638.0" />
-        <vers num="10.0.638.1" />
-        <vers num="10.0.639.0" />
-        <vers num="10.0.640.0" />
-        <vers num="10.0.642.0" />
-        <vers num="10.0.642.1" />
-        <vers num="10.0.642.2" />
-        <vers num="10.0.643.0" />
-        <vers num="10.0.644.0" />
-        <vers num="10.0.645.0" />
-        <vers num="10.0.646.0" />
-        <vers num="10.0.647.0" />
-        <vers num="10.0.648.0" />
-        <vers num="10.0.648.1" />
-        <vers num="10.0.648.10" />
-        <vers num="10.0.648.101" />
-        <vers num="10.0.648.103" />
-        <vers num="10.0.648.105" />
-        <vers num="10.0.648.107" />
-        <vers num="10.0.648.11" />
-        <vers num="10.0.648.114" />
-        <vers num="10.0.648.116" />
-        <vers num="10.0.648.118" />
-        <vers num="10.0.648.119" />
-        <vers num="10.0.648.12" />
-        <vers num="10.0.648.120" />
-        <vers num="10.0.648.121" />
-        <vers num="10.0.648.122" />
-        <vers num="10.0.648.123" />
-        <vers num="10.0.648.124" />
-        <vers num="10.0.648.125" />
-        <vers num="10.0.648.126" />
-        <vers num="10.0.648.127" />
-        <vers num="10.0.648.128" />
-        <vers num="10.0.648.129" />
-        <vers num="10.0.648.13" />
-        <vers num="10.0.648.130" />
-        <vers num="10.0.648.131" />
-        <vers num="10.0.648.132" />
-        <vers num="10.0.648.133" />
-        <vers num="10.0.648.134" />
-        <vers num="10.0.648.135" />
-        <vers num="10.0.648.151" />
-        <vers num="10.0.648.18" />
-        <vers num="10.0.648.2" />
-        <vers num="10.0.648.201" />
-        <vers num="10.0.648.203" />
-        <vers num="10.0.648.204" />
-        <vers num="10.0.648.205" />
-        <vers num="10.0.648.23" />
-        <vers num="10.0.648.26" />
-        <vers num="10.0.648.28" />
-        <vers num="10.0.648.3" />
-        <vers num="10.0.648.32" />
-        <vers num="10.0.648.35" />
-        <vers num="10.0.648.38" />
-        <vers num="10.0.648.4" />
-        <vers num="10.0.648.42" />
-        <vers num="10.0.648.45" />
-        <vers num="10.0.648.49" />
-        <vers num="10.0.648.5" />
-        <vers num="10.0.648.54" />
-        <vers num="10.0.648.56" />
-        <vers num="10.0.648.59" />
-        <vers num="10.0.648.6" />
-        <vers num="10.0.648.62" />
-        <vers num="10.0.648.66" />
-        <vers num="10.0.648.68" />
-        <vers num="10.0.648.7" />
-        <vers num="10.0.648.70" />
-        <vers num="10.0.648.72" />
-        <vers num="10.0.648.76" />
-        <vers num="10.0.648.79" />
-        <vers num="10.0.648.8" />
-        <vers num="10.0.648.82" />
-        <vers num="10.0.648.84" />
-        <vers num="10.0.648.87" />
-        <vers num="10.0.648.9" />
-        <vers num="10.0.648.90" />
-        <vers num="10.0.649.0" />
-        <vers num="10.0.650.0" />
-        <vers num="10.0.651.0" />
-        <vers num="11.0.652.0" />
-        <vers num="11.0.653.0" />
-        <vers num="11.0.654.0" />
-        <vers num="11.0.655.0" />
-        <vers num="11.0.656.0" />
-        <vers num="11.0.657.0" />
-        <vers num="11.0.658.0" />
-        <vers num="11.0.658.1" />
-        <vers num="11.0.659.0" />
-        <vers num="11.0.660.0" />
-        <vers num="11.0.661.0" />
-        <vers num="11.0.662.0" />
-        <vers num="11.0.663.0" />
-        <vers num="11.0.664.1" />
-        <vers num="11.0.665.0" />
-        <vers num="11.0.666.0" />
-        <vers num="11.0.667.0" />
-        <vers num="11.0.667.2" />
-        <vers num="11.0.667.3" />
-        <vers num="11.0.667.4" />
-        <vers num="11.0.668.0" />
-        <vers num="11.0.669.0" />
-        <vers num="11.0.670.0" />
-        <vers num="11.0.671.0" />
-        <vers num="11.0.672.0" />
-        <vers num="11.0.672.1" />
-        <vers num="11.0.672.2" />
-        <vers num="11.0.673.0" />
-        <vers num="11.0.674.0" />
-        <vers num="11.0.675.0" />
-        <vers num="11.0.676.0" />
-        <vers num="11.0.677.0" />
-        <vers num="11.0.678.0" />
-        <vers num="11.0.679.0" />
-        <vers num="11.0.680.0" />
-        <vers num="11.0.681.0" />
-        <vers num="11.0.682.0" />
-        <vers num="11.0.683.0" />
-        <vers num="11.0.684.0" />
-        <vers num="11.0.685.0" />
-        <vers num="11.0.686.0" />
-        <vers num="11.0.686.1" />
-        <vers num="11.0.686.2" />
-        <vers num="11.0.686.3" />
-        <vers num="11.0.687.0" />
-        <vers num="11.0.687.1" />
-        <vers num="11.0.688.0" />
-        <vers num="11.0.689.0" />
-        <vers num="11.0.690.0" />
-        <vers num="11.0.690.1" />
-        <vers num="11.0.691.0" />
-        <vers num="11.0.692.0" />
-        <vers num="11.0.693.0" />
-        <vers num="11.0.694.0" />
-        <vers num="11.0.695.0" />
-        <vers num="11.0.696.0" />
-        <vers num="11.0.696.1" />
-        <vers num="11.0.696.10" />
-        <vers num="11.0.696.11" />
-        <vers num="11.0.696.12" />
-        <vers num="11.0.696.13" />
-        <vers num="11.0.696.14" />
-        <vers num="11.0.696.15" />
-        <vers num="11.0.696.16" />
-        <vers num="11.0.696.17" />
-        <vers num="11.0.696.18" />
-        <vers num="11.0.696.19" />
-        <vers num="11.0.696.2" />
-        <vers num="11.0.696.20" />
-        <vers num="11.0.696.21" />
-        <vers num="11.0.696.22" />
-        <vers num="11.0.696.23" />
-        <vers num="11.0.696.24" />
-        <vers num="11.0.696.25" />
-        <vers num="11.0.696.26" />
-        <vers num="11.0.696.27" />
-        <vers num="11.0.696.28" />
-        <vers num="11.0.696.29" />
-        <vers num="11.0.696.3" />
-        <vers num="11.0.696.30" />
-        <vers num="11.0.696.31" />
-        <vers num="11.0.696.32" />
-        <vers num="11.0.696.33" />
-        <vers num="11.0.696.34" />
-        <vers num="11.0.696.35" />
-        <vers num="11.0.696.36" />
-        <vers num="11.0.696.37" />
-        <vers num="11.0.696.38" />
-        <vers num="11.0.696.39" />
-        <vers num="11.0.696.4" />
-        <vers num="11.0.696.40" />
-        <vers num="11.0.696.41" />
-        <vers num="11.0.696.42" />
-        <vers num="11.0.696.43" />
-        <vers num="11.0.696.44" />
-        <vers num="11.0.696.45" />
-        <vers num="11.0.696.46" />
-        <vers num="11.0.696.47" />
-        <vers num="11.0.696.48" />
-        <vers num="11.0.696.49" />
-        <vers num="11.0.696.5" />
-        <vers num="11.0.696.50" />
-        <vers num="11.0.696.51" />
-        <vers num="11.0.696.52" />
-        <vers num="11.0.696.53" />
-        <vers num="11.0.696.54" />
-        <vers num="11.0.696.55" />
-        <vers num="11.0.696.56" />
-        <vers num="11.0.696.57" />
-        <vers num="11.0.696.58" />
-        <vers num="11.0.696.59" />
-        <vers num="11.0.696.60" />
-        <vers num="11.0.696.61" />
-        <vers num="11.0.696.62" />
-        <vers num="11.0.696.63" />
-        <vers num="11.0.696.64" />
-        <vers num="11.0.696.65" />
-        <vers num="11.0.696.66" />
-        <vers num="11.0.696.67" />
-        <vers num="11.0.696.68" />
-        <vers num="11.0.696.69" />
-        <vers num="11.0.696.7" />
-        <vers num="11.0.696.70" />
-        <vers num="11.0.696.71" />
-        <vers num="11.0.696.72" />
-        <vers num="11.0.696.77" />
-        <vers num="11.0.696.8" />
-        <vers num="11.0.696.9" />
-        <vers num="11.0.697.0" />
-        <vers num="11.0.698.0" />
-        <vers num="11.0.699.0" />
-        <vers num="12.0.700.0" />
-        <vers num="12.0.701.0" />
-        <vers num="12.0.702.0" />
-        <vers num="12.0.702.1" />
-        <vers num="12.0.702.2" />
-        <vers num="12.0.703.0" />
-        <vers num="12.0.704.0" />
-        <vers num="12.0.705.0" />
-        <vers num="12.0.706.0" />
-        <vers num="12.0.707.0" />
-        <vers num="12.0.708.0" />
-        <vers num="12.0.709.0" />
-        <vers num="12.0.710.0" />
-        <vers num="12.0.711.0" />
-        <vers num="12.0.712.0" />
-        <vers num="12.0.713.0" />
-        <vers num="12.0.714.0" />
-        <vers num="12.0.715.0" />
-        <vers num="12.0.716.0" />
-        <vers num="12.0.717.0" />
-        <vers num="12.0.718.0" />
-        <vers num="12.0.719.0" />
-        <vers num="12.0.719.1" />
-        <vers num="12.0.720.0" />
-        <vers num="12.0.721.0" />
-        <vers num="12.0.721.1" />
-        <vers num="12.0.722.0" />
-        <vers num="12.0.723.0" />
-        <vers num="12.0.723.1" />
-        <vers num="12.0.724.0" />
-        <vers num="12.0.725.0" />
-        <vers num="12.0.726.0" />
-        <vers num="12.0.727.0" />
-        <vers num="12.0.728.0" />
-        <vers num="12.0.729.0" />
-        <vers num="12.0.730.0" />
-        <vers num="12.0.731.0" />
-        <vers num="12.0.732.0" />
-        <vers num="12.0.733.0" />
-        <vers num="12.0.734.0" />
-        <vers num="12.0.735.0" />
-        <vers num="12.0.736.0" />
-        <vers num="12.0.737.0" />
-        <vers num="12.0.738.0" />
-        <vers num="12.0.739.0" />
-        <vers num="12.0.740.0" />
-        <vers num="12.0.741.0" />
-        <vers num="12.0.742.0" />
-        <vers num="12.0.742.1" />
-        <vers num="12.0.742.10" />
-        <vers num="12.0.742.100" />
-        <vers num="12.0.742.105" />
-        <vers num="12.0.742.11" />
-        <vers num="12.0.742.111" />
-        <vers num="12.0.742.112" />
-        <vers num="12.0.742.113" />
-        <vers num="12.0.742.114" />
-        <vers num="12.0.742.115" />
-        <vers num="12.0.742.12" />
-        <vers num="12.0.742.120" />
-        <vers num="12.0.742.121" />
-        <vers num="12.0.742.122" />
-        <vers num="12.0.742.123" />
-        <vers num="12.0.742.124" />
-        <vers num="12.0.742.13" />
-        <vers num="12.0.742.14" />
-        <vers num="12.0.742.15" />
-        <vers num="12.0.742.16" />
-        <vers num="12.0.742.17" />
-        <vers num="12.0.742.18" />
-        <vers num="12.0.742.19" />
-        <vers num="12.0.742.2" />
-        <vers num="12.0.742.20" />
-        <vers num="12.0.742.21" />
-        <vers num="12.0.742.22" />
-        <vers num="12.0.742.3" />
-        <vers num="12.0.742.30" />
-        <vers num="12.0.742.4" />
-        <vers num="12.0.742.41" />
-        <vers num="12.0.742.42" />
-        <vers num="12.0.742.43" />
-        <vers num="12.0.742.44" />
-        <vers num="12.0.742.45" />
-        <vers num="12.0.742.46" />
-        <vers num="12.0.742.47" />
-        <vers num="12.0.742.48" />
-        <vers num="12.0.742.49" />
-        <vers num="12.0.742.5" />
-        <vers num="12.0.742.50" />
-        <vers num="12.0.742.51" />
-        <vers num="12.0.742.52" />
-        <vers num="12.0.742.53" />
-        <vers num="12.0.742.54" />
-        <vers num="12.0.742.55" />
-        <vers num="12.0.742.56" />
-        <vers num="12.0.742.57" />
-        <vers num="12.0.742.58" />
-        <vers num="12.0.742.59" />
-        <vers num="12.0.742.6" />
-        <vers num="12.0.742.60" />
-        <vers num="12.0.742.61" />
-        <vers num="12.0.742.63" />
-        <vers num="12.0.742.64" />
-        <vers num="12.0.742.65" />
-        <vers num="12.0.742.66" />
-        <vers num="12.0.742.67" />
-        <vers num="12.0.742.68" />
-        <vers num="12.0.742.69" />
-        <vers num="12.0.742.70" />
-        <vers num="12.0.742.71" />
-        <vers num="12.0.742.72" />
-        <vers num="12.0.742.73" />
-        <vers num="12.0.742.74" />
-        <vers num="12.0.742.75" />
-        <vers num="12.0.742.77" />
-        <vers num="12.0.742.8" />
-        <vers num="12.0.742.82" />
-        <vers num="12.0.742.9" />
-        <vers num="12.0.742.91" />
-        <vers num="12.0.742.92" />
-        <vers num="12.0.742.93" />
-        <vers num="12.0.742.94" />
-        <vers num="12.0.743.0" />
-        <vers num="12.0.744.0" />
-        <vers num="12.0.745.0" />
-        <vers num="12.0.746.0" />
-        <vers num="12.0.747.0" />
-        <vers num="13.0.748.0" />
-        <vers num="13.0.749.0" />
-        <vers num="13.0.750.0" />
-        <vers num="13.0.751.0" />
-        <vers num="13.0.752.0" />
-        <vers num="13.0.753.0" />
-        <vers num="13.0.754.0" />
-        <vers num="13.0.755.0" />
-        <vers num="13.0.756.0" />
-        <vers num="13.0.757.0" />
-        <vers num="13.0.758.0" />
-        <vers num="13.0.759.0" />
-        <vers num="13.0.760.0" />
-        <vers num="13.0.761.0" />
-        <vers num="13.0.761.1" />
-        <vers num="13.0.762.0" />
-        <vers num="13.0.762.1" />
-        <vers num="13.0.763.0" />
-        <vers num="13.0.764.0" />
-        <vers num="13.0.765.0" />
-        <vers num="13.0.766.0" />
-        <vers num="13.0.767.0" />
-        <vers num="13.0.767.1" />
-        <vers num="13.0.768.0" />
-        <vers num="13.0.769.0" />
-        <vers num="13.0.770.0" />
-        <vers num="13.0.771.0" />
-        <vers num="13.0.772.0" />
-        <vers num="13.0.773.0" />
-        <vers num="13.0.774.0" />
-        <vers num="13.0.775.0" />
-        <vers num="13.0.775.1" />
-        <vers num="13.0.775.2" />
-        <vers num="13.0.775.4" />
-        <vers num="13.0.776.0" />
-        <vers num="13.0.776.1" />
-        <vers num="13.0.777.0" />
-        <vers num="13.0.777.1" />
-        <vers num="13.0.777.2" />
-        <vers num="13.0.777.3" />
-        <vers num="13.0.777.4" />
-        <vers num="13.0.777.5" />
-        <vers num="13.0.777.6" />
-        <vers num="13.0.778.0" />
-        <vers num="13.0.779.0" />
-        <vers num="13.0.780.0" />
-        <vers num="13.0.781.0" />
-        <vers num="13.0.782.0" />
-        <vers num="13.0.782.1" />
-        <vers num="13.0.782.10" />
-        <vers num="13.0.782.100" />
-        <vers num="13.0.782.101" />
-        <vers num="13.0.782.102" />
-        <vers num="13.0.782.103" />
-        <vers num="13.0.782.104" />
-        <vers num="13.0.782.105" />
-        <vers num="13.0.782.106" />
-        <vers num="13.0.782.107" />
-        <vers num="13.0.782.108" />
-        <vers num="13.0.782.109" />
-        <vers num="13.0.782.11" />
-        <vers num="13.0.782.112" />
-        <vers num="13.0.782.12" />
-        <vers num="13.0.782.13" />
-        <vers num="13.0.782.14" />
-        <vers num="13.0.782.15" />
-        <vers num="13.0.782.16" />
-        <vers num="13.0.782.17" />
-        <vers num="13.0.782.18" />
-        <vers num="13.0.782.19" />
-        <vers num="13.0.782.20" />
-        <vers num="13.0.782.21" />
-        <vers num="13.0.782.210" />
-        <vers num="13.0.782.211" />
-        <vers num="13.0.782.212" />
-        <vers num="13.0.782.213" />
-        <vers num="13.0.782.214" />
-        <vers num="13.0.782.215" />
-        <vers num="13.0.782.216" />
-        <vers num="13.0.782.217" />
-        <vers num="13.0.782.218" />
-        <vers num="13.0.782.219" />
-        <vers num="13.0.782.220" />
-        <vers num="13.0.782.23" />
-        <vers num="13.0.782.237" />
-        <vers num="13.0.782.238" />
-        <vers num="13.0.782.24" />
-        <vers num="13.0.782.25" />
-        <vers num="13.0.782.26" />
-        <vers num="13.0.782.27" />
-        <vers num="13.0.782.28" />
-        <vers num="13.0.782.29" />
-        <vers num="13.0.782.3" />
-        <vers num="13.0.782.30" />
-        <vers num="13.0.782.31" />
-        <vers num="13.0.782.32" />
-        <vers num="13.0.782.33" />
-        <vers num="13.0.782.34" />
-        <vers num="13.0.782.35" />
-        <vers num="13.0.782.36" />
-        <vers num="13.0.782.37" />
-        <vers num="13.0.782.38" />
-        <vers num="13.0.782.39" />
-        <vers num="13.0.782.4" />
-        <vers num="13.0.782.40" />
-        <vers num="13.0.782.41" />
-        <vers num="13.0.782.42" />
-        <vers num="13.0.782.43" />
-        <vers num="13.0.782.44" />
-        <vers num="13.0.782.45" />
-        <vers num="13.0.782.46" />
-        <vers num="13.0.782.47" />
-        <vers num="13.0.782.48" />
-        <vers num="13.0.782.49" />
-        <vers num="13.0.782.50" />
-        <vers num="13.0.782.51" />
-        <vers num="13.0.782.52" />
-        <vers num="13.0.782.53" />
-        <vers num="13.0.782.55" />
-        <vers num="13.0.782.56" />
-        <vers num="13.0.782.6" />
-        <vers num="13.0.782.7" />
-        <vers num="13.0.782.81" />
-        <vers num="13.0.782.82" />
-        <vers num="13.0.782.83" />
-        <vers num="13.0.782.84" />
-        <vers num="13.0.782.85" />
-        <vers num="13.0.782.86" />
-        <vers num="13.0.782.87" />
-        <vers num="13.0.782.88" />
-        <vers num="13.0.782.89" />
-        <vers num="13.0.782.90" />
-        <vers num="13.0.782.91" />
-        <vers num="13.0.782.92" />
-        <vers num="13.0.782.93" />
-        <vers num="13.0.782.94" />
-        <vers num="13.0.782.95" />
-        <vers num="13.0.782.96" />
-        <vers num="13.0.782.97" />
-        <vers num="13.0.782.98" />
-        <vers num="13.0.782.99" />
-        <vers num="14.0.783.0" />
-        <vers num="14.0.784.0" />
-        <vers num="14.0.785.0" />
-        <vers num="14.0.786.0" />
-        <vers num="14.0.787.0" />
-        <vers num="14.0.788.0" />
-        <vers num="14.0.789.0" />
-        <vers num="14.0.790.0" />
-        <vers num="14.0.791.0" />
-        <vers num="14.0.792.0" />
-        <vers num="14.0.793.0" />
-        <vers num="14.0.794.0" />
-        <vers num="14.0.795.0" />
-        <vers num="14.0.796.0" />
-        <vers num="14.0.797.0" />
-        <vers num="14.0.798.0" />
-        <vers num="14.0.799.0" />
-        <vers num="14.0.800.0" />
-        <vers num="14.0.801.0" />
-        <vers num="14.0.802.0" />
-        <vers num="14.0.803.0" />
-        <vers num="14.0.804.0" />
-        <vers num="14.0.805.0" />
-        <vers num="14.0.806.0" />
-        <vers num="14.0.807.0" />
-        <vers num="14.0.808.0" />
-        <vers num="14.0.809.0" />
-        <vers num="14.0.810.0" />
-        <vers num="14.0.811.0" />
-        <vers num="14.0.812.0" />
-        <vers num="14.0.813.0" />
-        <vers num="14.0.814.0" />
-        <vers num="14.0.815.0" />
-        <vers num="14.0.816.0" />
-        <vers num="14.0.818.0" />
-        <vers num="14.0.819.0" />
-        <vers num="14.0.820.0" />
-        <vers num="14.0.821.0" />
-        <vers num="14.0.822.0" />
-        <vers num="14.0.823.0" />
-        <vers num="14.0.824.0" />
-        <vers num="14.0.825.0" />
-        <vers num="14.0.826.0" />
-        <vers num="14.0.827.0" />
-        <vers num="14.0.827.10" />
-        <vers num="14.0.827.12" />
-        <vers num="14.0.829.1" />
-        <vers num="14.0.830.0" />
-        <vers num="14.0.831.0" />
-        <vers num="14.0.832.0" />
-        <vers num="14.0.833.0" />
-        <vers num="14.0.834.0" />
-        <vers num="14.0.835.0" />
-        <vers num="14.0.835.1" />
-        <vers num="14.0.835.100" />
-        <vers num="14.0.835.101" />
-        <vers num="14.0.835.102" />
-        <vers num="14.0.835.103" />
-        <vers num="14.0.835.104" />
-        <vers num="14.0.835.105" />
-        <vers num="14.0.835.106" />
-        <vers num="14.0.835.107" />
-        <vers num="14.0.835.108" />
-        <vers num="14.0.835.109" />
-        <vers num="14.0.835.11" />
-        <vers num="14.0.835.110" />
-        <vers num="14.0.835.111" />
-        <vers num="14.0.835.112" />
-        <vers num="14.0.835.113" />
-        <vers num="14.0.835.114" />
-        <vers num="14.0.835.115" />
-        <vers num="14.0.835.116" />
-        <vers num="14.0.835.117" />
-        <vers num="14.0.835.118" />
-        <vers num="14.0.835.119" />
-        <vers num="14.0.835.120" />
-        <vers num="14.0.835.121" />
-        <vers num="14.0.835.122" />
-        <vers num="14.0.835.123" />
-        <vers num="14.0.835.124" />
-        <vers num="14.0.835.125" />
-        <vers num="14.0.835.126" />
-        <vers num="14.0.835.127" />
-        <vers num="14.0.835.128" />
-        <vers num="14.0.835.13" />
-        <vers num="14.0.835.14" />
-        <vers num="14.0.835.149" />
-        <vers num="14.0.835.15" />
-        <vers num="14.0.835.150" />
-        <vers num="14.0.835.151" />
-        <vers num="14.0.835.152" />
-        <vers num="14.0.835.153" />
-        <vers num="14.0.835.154" />
-        <vers num="14.0.835.155" />
-        <vers num="14.0.835.156" />
-        <vers num="14.0.835.157" />
-        <vers num="14.0.835.158" />
-        <vers num="14.0.835.159" />
-        <vers num="14.0.835.16" />
-        <vers num="14.0.835.160" />
-        <vers num="14.0.835.161" />
-        <vers num="14.0.835.162" />
-        <vers num="14.0.835.163" />
-        <vers num="14.0.835.18" />
-        <vers num="14.0.835.184" />
-        <vers num="14.0.835.186" />
-        <vers num="14.0.835.187" />
-        <vers num="14.0.835.2" />
-        <vers num="14.0.835.20" />
-        <vers num="14.0.835.202" />
-        <vers num="14.0.835.203" />
-        <vers num="14.0.835.204" />
-        <vers num="14.0.835.21" />
-        <vers num="14.0.835.22" />
-        <vers num="14.0.835.23" />
-        <vers num="14.0.835.24" />
-        <vers num="14.0.835.25" />
-        <vers num="14.0.835.26" />
-        <vers num="14.0.835.27" />
-        <vers num="14.0.835.28" />
-        <vers num="14.0.835.29" />
-        <vers num="14.0.835.30" />
-        <vers num="14.0.835.31" />
-        <vers num="14.0.835.32" />
-        <vers num="14.0.835.33" />
-        <vers num="14.0.835.34" />
-        <vers num="14.0.835.35" />
-        <vers num="14.0.835.4" />
-        <vers num="14.0.835.8" />
-        <vers num="14.0.835.86" />
-        <vers num="14.0.835.87" />
-        <vers num="14.0.835.88" />
-        <vers num="14.0.835.89" />
-        <vers num="14.0.835.9" />
-        <vers num="14.0.835.90" />
-        <vers num="14.0.835.91" />
-        <vers num="14.0.835.92" />
-        <vers num="14.0.835.93" />
-        <vers num="14.0.835.94" />
-        <vers num="14.0.835.95" />
-        <vers num="14.0.835.96" />
-        <vers num="14.0.835.97" />
-        <vers num="14.0.835.98" />
-        <vers num="14.0.835.99" />
-        <vers num="14.0.836.0" />
-        <vers num="14.0.837.0" />
-        <vers num="14.0.838.0" />
-        <vers num="14.0.839.0" />
-        <vers num="15.0.859.0" />
-        <vers num="15.0.860.0" />
-        <vers num="15.0.861.0" />
-        <vers num="15.0.862.0" />
-        <vers num="15.0.862.1" />
-        <vers num="15.0.863.0" />
-        <vers num="15.0.864.0" />
-        <vers num="15.0.865.0" />
-        <vers num="15.0.866.0" />
-        <vers num="15.0.867.0" />
-        <vers num="15.0.868.0" />
-        <vers num="15.0.868.1" />
-        <vers num="15.0.869.0" />
-        <vers num="15.0.870.0" />
-        <vers num="15.0.871.0" />
-        <vers num="15.0.871.1" />
-        <vers num="15.0.872.0" />
-        <vers num="15.0.873.0" />
-        <vers num="15.0.874.0" />
-        <vers num="15.0.874.1" />
-        <vers num="15.0.874.10" />
-        <vers num="15.0.874.101" />
-        <vers num="15.0.874.102" />
-        <vers num="15.0.874.103" />
-        <vers num="15.0.874.104" />
-        <vers num="15.0.874.106" />
-        <vers num="15.0.874.11" />
-        <vers num="15.0.874.116" />
-        <vers num="15.0.874.117" />
-        <vers num="15.0.874.119" />
-        <vers num="15.0.874.12" />
-        <vers num="15.0.874.120" />
-        <vers num="15.0.874.121" />
-        <vers num="15.0.874.13" />
-        <vers num="15.0.874.14" />
-        <vers num="15.0.874.15" />
-        <vers num="15.0.874.16" />
-        <vers num="15.0.874.17" />
-        <vers num="15.0.874.18" />
-        <vers num="15.0.874.19" />
-        <vers num="15.0.874.2" />
-        <vers num="15.0.874.20" />
-        <vers num="15.0.874.21" />
-        <vers num="15.0.874.22" />
-        <vers num="15.0.874.23" />
-        <vers num="15.0.874.24" />
-        <vers num="15.0.874.3" />
-        <vers num="15.0.874.4" />
-        <vers num="15.0.874.44" />
-        <vers num="15.0.874.45" />
-        <vers num="15.0.874.46" />
-        <vers num="15.0.874.47" />
-        <vers num="15.0.874.48" />
-        <vers num="15.0.874.49" />
-        <vers num="15.0.874.5" />
-        <vers num="15.0.874.6" />
-        <vers num="15.0.874.7" />
-        <vers num="15.0.874.8" />
-        <vers num="15.0.874.9" />
-        <vers num="16.0.877.0" />
-        <vers num="16.0.878.0" />
-        <vers num="16.0.879.0" />
-        <vers num="16.0.880.0" />
-        <vers num="16.0.881.0" />
-        <vers num="16.0.882.0" />
-        <vers num="16.0.883.0" />
-        <vers num="16.0.884.0" />
-        <vers num="16.0.885.0" />
-        <vers num="16.0.886.0" />
-        <vers num="16.0.886.1" />
-        <vers num="16.0.887.0" />
-        <vers num="16.0.888.0" />
-        <vers num="16.0.889.0" />
-        <vers num="16.0.889.2" />
-        <vers num="16.0.889.3" />
-        <vers num="16.0.890.0" />
-        <vers num="16.0.890.1" />
-        <vers num="16.0.891.0" />
-        <vers num="16.0.891.1" />
-        <vers num="16.0.892.0" />
-        <vers num="16.0.893.0" />
-        <vers num="16.0.893.1" />
-        <vers num="16.0.894.0" />
-        <vers num="16.0.895.0" />
-        <vers num="16.0.896.0" />
-        <vers num="16.0.897.0" />
-        <vers num="16.0.898.0" />
-        <vers num="16.0.899.0" />
-        <vers num="16.0.900.0" />
-        <vers num="16.0.901.0" />
-        <vers num="16.0.902.0" />
-        <vers num="16.0.903.0" />
-        <vers num="16.0.904.0" />
-        <vers num="16.0.905.0" />
-        <vers num="16.0.906.0" />
-        <vers num="16.0.906.1" />
-        <vers num="16.0.907.0" />
-        <vers num="16.0.908.0" />
-        <vers num="16.0.909.0" />
-        <vers num="16.0.910.0" />
-        <vers num="16.0.911.0" />
-        <vers num="16.0.911.1" />
-        <vers num="16.0.911.2" />
-        <vers num="16.0.912.0" />
-        <vers num="16.0.912.1" />
-        <vers num="16.0.912.10" />
-        <vers num="16.0.912.11" />
-        <vers num="16.0.912.12" />
-        <vers num="16.0.912.13" />
-        <vers num="16.0.912.14" />
-        <vers num="16.0.912.15" />
-        <vers num="16.0.912.19" />
-        <vers num="16.0.912.2" />
-        <vers num="16.0.912.20" />
-        <vers num="16.0.912.21" />
-        <vers num="16.0.912.22" />
-        <vers num="16.0.912.23" />
-        <vers num="16.0.912.24" />
-        <vers num="16.0.912.25" />
-        <vers num="16.0.912.26" />
-        <vers num="16.0.912.27" />
-        <vers num="16.0.912.28" />
-        <vers num="16.0.912.29" />
-        <vers num="16.0.912.3" />
-        <vers num="16.0.912.30" />
-        <vers num="16.0.912.31" />
-        <vers num="16.0.912.32" />
-        <vers num="16.0.912.33" />
-        <vers num="16.0.912.34" />
-        <vers num="16.0.912.35" />
-        <vers num="16.0.912.36" />
-        <vers num="16.0.912.37" />
-        <vers num="16.0.912.38" />
-        <vers num="16.0.912.39" />
-        <vers num="16.0.912.4" />
-        <vers num="16.0.912.40" />
-        <vers num="16.0.912.41" />
-        <vers num="16.0.912.42" />
-        <vers num="16.0.912.43" />
-        <vers num="16.0.912.5" />
-        <vers num="16.0.912.6" />
-        <vers num="16.0.912.62" />
-        <vers num="16.0.912.63" />
-        <vers num="16.0.912.66" />
-        <vers num="16.0.912.7" />
-        <vers num="16.0.912.74" />
-        <vers num="16.0.912.75" />
-        <vers num="16.0.912.76" />
-        <vers num="16.0.912.77" />
-        <vers num="16.0.912.8" />
-        <vers num="16.0.912.9" />
-        <vers num="17.0.921.3" />
-        <vers num="17.0.922.0" />
-        <vers num="17.0.923.0" />
-        <vers num="17.0.923.1" />
-        <vers num="17.0.924.0" />
-        <vers num="17.0.925.0" />
-        <vers num="17.0.926.0" />
-        <vers num="17.0.927.0" />
-        <vers num="17.0.928.0" />
-        <vers num="17.0.928.1" />
-        <vers num="17.0.928.2" />
-        <vers num="17.0.928.3" />
-        <vers num="17.0.929.0" />
-        <vers num="17.0.930.0" />
-        <vers num="17.0.931.0" />
-        <vers num="17.0.932.0" />
-        <vers num="17.0.933.0" />
-        <vers num="17.0.933.1" />
-        <vers num="17.0.934.0" />
-        <vers num="17.0.935.0" />
-        <vers num="17.0.935.1" />
-        <vers num="17.0.936.0" />
-        <vers num="17.0.936.1" />
-        <vers num="17.0.937.0" />
-        <vers num="17.0.938.0" />
-        <vers num="17.0.939.0" />
-        <vers num="17.0.939.1" />
-        <vers num="17.0.940.0" />
-        <vers num="17.0.941.0" />
-        <vers num="17.0.942.0" />
-        <vers num="17.0.943.0" />
-        <vers num="17.0.944.0" />
-        <vers num="17.0.945.0" />
-        <vers num="17.0.946.0" />
-        <vers num="17.0.947.0" />
-        <vers num="17.0.948.0" />
-        <vers num="17.0.949.0" />
-        <vers num="17.0.950.0" />
-        <vers num="17.0.951.0" />
-        <vers num="17.0.952.0" />
-        <vers num="17.0.953.0" />
-        <vers num="17.0.954.0" />
-        <vers num="17.0.954.1" />
-        <vers num="17.0.954.2" />
-        <vers num="17.0.954.3" />
-        <vers num="17.0.955.0" />
-        <vers num="17.0.956.0" />
-        <vers num="17.0.957.0" />
-        <vers num="17.0.958.0" />
-        <vers num="17.0.958.1" />
-        <vers num="17.0.959.0" />
-        <vers num="17.0.960.0" />
-        <vers num="17.0.961.0" />
-        <vers num="17.0.962.0" />
-        <vers num="17.0.963.0" />
-        <vers num="17.0.963.1" />
-        <vers num="17.0.963.10" />
-        <vers num="17.0.963.11" />
-        <vers num="17.0.963.12" />
-        <vers num="17.0.963.13" />
-        <vers num="17.0.963.14" />
-        <vers num="17.0.963.15" />
-        <vers num="17.0.963.16" />
-        <vers num="17.0.963.17" />
-        <vers num="17.0.963.18" />
-        <vers num="17.0.963.19" />
-        <vers num="17.0.963.2" />
-        <vers num="17.0.963.20" />
-        <vers num="17.0.963.21" />
-        <vers num="17.0.963.22" />
-        <vers num="17.0.963.23" />
-        <vers num="17.0.963.24" />
-        <vers num="17.0.963.25" />
-        <vers num="17.0.963.26" />
-        <vers num="17.0.963.27" />
-        <vers num="17.0.963.28" />
-        <vers num="17.0.963.29" />
-        <vers num="17.0.963.3" />
-        <vers num="17.0.963.30" />
-        <vers num="17.0.963.31" />
-        <vers num="17.0.963.32" />
-        <vers num="17.0.963.33" />
-        <vers num="17.0.963.34" />
-        <vers num="17.0.963.35" />
-        <vers num="17.0.963.36" />
-        <vers num="17.0.963.37" />
-        <vers num="17.0.963.38" />
-        <vers num="17.0.963.39" />
-        <vers num="17.0.963.4" />
-        <vers num="17.0.963.40" />
-        <vers num="17.0.963.41" />
-        <vers num="17.0.963.42" />
-        <vers num="17.0.963.43" />
-        <vers num="17.0.963.44" />
-        <vers num="17.0.963.45" />
-        <vers num="17.0.963.46" />
-        <vers num="17.0.963.47" />
-        <vers num="17.0.963.48" />
-        <vers num="17.0.963.49" />
-        <vers num="17.0.963.5" />
-        <vers num="17.0.963.50" />
-        <vers num="17.0.963.51" />
-        <vers num="17.0.963.52" />
-        <vers num="17.0.963.53" />
-        <vers num="17.0.963.54" />
-        <vers num="17.0.963.55" />
-        <vers num="17.0.963.56" />
-        <vers num="17.0.963.57" />
-        <vers num="17.0.963.59" />
-        <vers num="17.0.963.6" />
-        <vers num="17.0.963.60" />
-        <vers num="17.0.963.61" />
-        <vers num="17.0.963.62" />
-        <vers num="17.0.963.63" />
-        <vers num="17.0.963.64" />
-        <vers num="17.0.963.65" />
-        <vers num="17.0.963.66" />
-        <vers num="17.0.963.67" />
-        <vers num="17.0.963.69" />
-        <vers num="17.0.963.7" />
-        <vers num="17.0.963.70" />
-        <vers num="17.0.963.74" />
-        <vers num="17.0.963.75" />
-        <vers num="17.0.963.76" />
-        <vers num="17.0.963.77" />
-        <vers num="17.0.963.78" />
-        <vers num="17.0.963.79" />
-        <vers num="17.0.963.8" />
-        <vers num="17.0.963.80" />
-        <vers num="17.0.963.81" />
-        <vers num="17.0.963.82" />
-        <vers num="17.0.963.83" />
-        <vers num="17.0.963.84" />
-        <vers num="17.0.963.9" />
-        <vers num="18.0.1000.0" />
-        <vers num="18.0.1001.0" />
-        <vers num="18.0.1001.1" />
-        <vers num="18.0.1002.0" />
-        <vers num="18.0.1003.0" />
-        <vers num="18.0.1003.1" />
-        <vers num="18.0.1004.0" />
-        <vers num="18.0.1005.0" />
-        <vers num="18.0.1006.0" />
-        <vers num="18.0.1007.0" />
-        <vers num="18.0.1008.0" />
-        <vers num="18.0.1009.0" />
-        <vers num="18.0.1010.0" />
-        <vers num="18.0.1010.1" />
-        <vers num="18.0.1010.2" />
-        <vers num="18.0.1011.1" />
-        <vers num="18.0.1012.0" />
-        <vers num="18.0.1012.1" />
-        <vers num="18.0.1012.2" />
-        <vers num="18.0.1013.0" />
-        <vers num="18.0.1014.0" />
-        <vers num="18.0.1015.0" />
-        <vers num="18.0.1016.0" />
-        <vers num="18.0.1017.0" />
-        <vers num="18.0.1017.1" />
-        <vers num="18.0.1017.2" />
-        <vers num="18.0.1017.3" />
-        <vers num="18.0.1018.0" />
-        <vers num="18.0.1019.0" />
-        <vers num="18.0.1019.1" />
-        <vers num="18.0.1020.0" />
-        <vers num="18.0.1021.0" />
-        <vers num="18.0.1022.0" />
-        <vers num="18.0.1023.0" />
-        <vers num="18.0.1024.0" />
-        <vers num="18.0.1025.0" />
-        <vers num="18.0.1025.1" />
-        <vers num="18.0.1025.10" />
-        <vers num="18.0.1025.100" />
-        <vers num="18.0.1025.102" />
-        <vers num="18.0.1025.107" />
-        <vers num="18.0.1025.108" />
-        <vers num="18.0.1025.109" />
-        <vers num="18.0.1025.110" />
-        <vers num="18.0.1025.111" />
-        <vers num="18.0.1025.112" />
-        <vers num="18.0.1025.113" />
-        <vers num="18.0.1025.114" />
-        <vers num="18.0.1025.116" />
-        <vers num="18.0.1025.117" />
-        <vers num="18.0.1025.118" />
-        <vers num="18.0.1025.120" />
-        <vers num="18.0.1025.129" />
-        <vers num="18.0.1025.130" />
-        <vers num="18.0.1025.131" />
-        <vers num="18.0.1025.132" />
-        <vers num="18.0.1025.133" />
-        <vers num="18.0.1025.134" />
-        <vers num="18.0.1025.135" />
-        <vers num="18.0.1025.136" />
-        <vers num="18.0.1025.137" />
-        <vers num="18.0.1025.139" />
-        <vers num="18.0.1025.140" />
-        <vers num="18.0.1025.142" />
-        <vers num="18.0.1025.145" />
-        <vers num="18.0.1025.146" />
-        <vers num="18.0.1025.147" />
-        <vers num="18.0.1025.148" />
-        <vers num="18.0.1025.149" />
-        <vers num="18.0.1025.150" />
-        <vers num="18.0.1025.151" />
-        <vers num="18.0.1025.152" />
-        <vers num="18.0.1025.155" />
-        <vers num="18.0.1025.162" />
-        <vers num="18.0.1025.163" />
-        <vers num="18.0.1025.164" />
-        <vers num="18.0.1025.165" />
-        <vers prev="1" num="18.0.1025.166" />
-        <vers num="18.0.1025.2" />
-        <vers num="18.0.1025.29" />
-        <vers num="18.0.1025.3" />
-        <vers num="18.0.1025.30" />
-        <vers num="18.0.1025.31" />
-        <vers num="18.0.1025.32" />
-        <vers num="18.0.1025.33" />
-        <vers num="18.0.1025.35" />
-        <vers num="18.0.1025.36" />
-        <vers num="18.0.1025.37" />
-        <vers num="18.0.1025.38" />
-        <vers num="18.0.1025.39" />
-        <vers num="18.0.1025.4" />
-        <vers num="18.0.1025.40" />
-        <vers num="18.0.1025.41" />
-        <vers num="18.0.1025.42" />
-        <vers num="18.0.1025.43" />
-        <vers num="18.0.1025.44" />
-        <vers num="18.0.1025.45" />
-        <vers num="18.0.1025.46" />
-        <vers num="18.0.1025.47" />
-        <vers num="18.0.1025.48" />
-        <vers num="18.0.1025.49" />
-        <vers num="18.0.1025.5" />
-        <vers num="18.0.1025.50" />
-        <vers num="18.0.1025.51" />
-        <vers num="18.0.1025.52" />
-        <vers num="18.0.1025.54" />
-        <vers num="18.0.1025.55" />
-        <vers num="18.0.1025.56" />
-        <vers num="18.0.1025.57" />
-        <vers num="18.0.1025.58" />
-        <vers num="18.0.1025.6" />
-        <vers num="18.0.1025.60" />
-        <vers num="18.0.1025.7" />
-        <vers num="18.0.1025.73" />
-        <vers num="18.0.1025.74" />
-        <vers num="18.0.1025.8" />
-        <vers num="18.0.1025.9" />
-        <vers num="18.0.1025.95" />
-        <vers num="18.0.1025.96" />
-        <vers num="18.0.1025.97" />
-        <vers num="18.0.1025.98" />
-        <vers num="18.0.1025.99" />
-        <vers num="2.0.156.1" />
-        <vers num="2.0.157.0" />
-        <vers num="2.0.157.2" />
-        <vers num="2.0.158.0" />
-        <vers num="2.0.159.0" />
-        <vers num="2.0.169.0" />
-        <vers num="2.0.169.1" />
-        <vers num="2.0.170.0" />
-        <vers num="2.0.172" />
-        <vers num="2.0.172.2" />
-        <vers num="2.0.172.27" />
-        <vers num="2.0.172.28" />
-        <vers num="2.0.172.30" />
-        <vers num="2.0.172.31" />
-        <vers num="2.0.172.33" />
-        <vers num="2.0.172.37" />
-        <vers num="2.0.172.38" />
-        <vers num="2.0.172.8" />
-        <vers num="3.0.182.2" />
-        <vers num="3.0.190.2" />
-        <vers num="3.0.193.2" edition="beta" />
-        <vers num="3.0.195.2" />
-        <vers num="3.0.195.21" />
-        <vers num="3.0.195.24" />
-        <vers num="3.0.195.25" />
-        <vers num="3.0.195.27" />
-        <vers num="3.0.195.32" />
-        <vers num="3.0.195.33" />
-        <vers num="3.0.195.36" />
-        <vers num="3.0.195.37" />
-        <vers num="3.0.195.38" />
-        <vers num="4.0.212.0" />
-        <vers num="4.0.212.1" />
-        <vers num="4.0.221.8" />
-        <vers num="4.0.222.0" />
-        <vers num="4.0.222.1" />
-        <vers num="4.0.222.12" />
-        <vers num="4.0.222.5" />
-        <vers num="4.0.223.0" />
-        <vers num="4.0.223.1" />
-        <vers num="4.0.223.2" />
-        <vers num="4.0.223.4" />
-        <vers num="4.0.223.5" />
-        <vers num="4.0.223.7" />
-        <vers num="4.0.223.8" />
-        <vers num="4.0.223.9" />
-        <vers num="4.0.224.0" />
-        <vers num="4.0.229.1" />
-        <vers num="4.0.235.0" />
-        <vers num="4.0.236.0" />
-        <vers num="4.0.237.0" />
-        <vers num="4.0.237.1" />
-        <vers num="4.0.239.0" />
-        <vers num="4.0.240.0" />
-        <vers num="4.0.241.0" />
-        <vers num="4.0.242.0" />
-        <vers num="4.0.243.0" />
-        <vers num="4.0.244.0" />
-        <vers num="4.0.245.0" />
-        <vers num="4.0.245.1" />
-        <vers num="4.0.246.0" />
-        <vers num="4.0.247.0" />
-        <vers num="4.0.248.0" />
-        <vers num="4.0.249.0" />
-        <vers num="4.0.249.1" />
-        <vers num="4.0.249.10" />
-        <vers num="4.0.249.11" />
-        <vers num="4.0.249.12" />
-        <vers num="4.0.249.14" />
-        <vers num="4.0.249.16" />
-        <vers num="4.0.249.17" />
-        <vers num="4.0.249.18" />
-        <vers num="4.0.249.19" />
-        <vers num="4.0.249.2" />
-        <vers num="4.0.249.20" />
-        <vers num="4.0.249.21" />
-        <vers num="4.0.249.22" />
-        <vers num="4.0.249.23" />
-        <vers num="4.0.249.24" />
-        <vers num="4.0.249.25" />
-        <vers num="4.0.249.26" />
-        <vers num="4.0.249.27" />
-        <vers num="4.0.249.28" />
-        <vers num="4.0.249.29" />
-        <vers num="4.0.249.3" />
-        <vers num="4.0.249.30" />
-        <vers num="4.0.249.31" />
-        <vers num="4.0.249.32" />
-        <vers num="4.0.249.33" />
-        <vers num="4.0.249.34" />
-        <vers num="4.0.249.35" />
-        <vers num="4.0.249.36" />
-        <vers num="4.0.249.37" />
-        <vers num="4.0.249.38" />
-        <vers num="4.0.249.39" />
-        <vers num="4.0.249.4" />
-        <vers num="4.0.249.40" />
-        <vers num="4.0.249.41" />
-        <vers num="4.0.249.42" />
-        <vers num="4.0.249.43" />
-        <vers num="4.0.249.44" />
-        <vers num="4.0.249.45" />
-        <vers num="4.0.249.46" />
-        <vers num="4.0.249.47" />
-        <vers num="4.0.249.48" />
-        <vers num="4.0.249.49" />
-        <vers num="4.0.249.5" />
-        <vers num="4.0.249.50" />
-        <vers num="4.0.249.51" />
-        <vers num="4.0.249.52" />
-        <vers num="4.0.249.53" />
-        <vers num="4.0.249.54" />
-        <vers num="4.0.249.55" />
-        <vers num="4.0.249.56" />
-        <vers num="4.0.249.57" />
-        <vers num="4.0.249.58" />
-        <vers num="4.0.249.59" />
-        <vers num="4.0.249.6" />
-        <vers num="4.0.249.60" />
-        <vers num="4.0.249.61" />
-        <vers num="4.0.249.62" />
-        <vers num="4.0.249.63" />
-        <vers num="4.0.249.64" />
-        <vers num="4.0.249.65" />
-        <vers num="4.0.249.66" />
-        <vers num="4.0.249.67" />
-        <vers num="4.0.249.68" />
-        <vers num="4.0.249.69" />
-        <vers num="4.0.249.7" />
-        <vers num="4.0.249.70" />
-        <vers num="4.0.249.71" />
-        <vers num="4.0.249.72" />
-        <vers num="4.0.249.73" />
-        <vers num="4.0.249.74" />
-        <vers num="4.0.249.75" />
-        <vers num="4.0.249.76" />
-        <vers num="4.0.249.77" />
-        <vers num="4.0.249.78" edition="beta" />
-        <vers num="4.0.249.79" />
-        <vers num="4.0.249.8" />
-        <vers num="4.0.249.80" />
-        <vers num="4.0.249.81" />
-        <vers num="4.0.249.82" />
-        <vers num="4.0.249.89" />
-        <vers num="4.0.249.9" />
-        <vers num="4.0.250.0" />
-        <vers num="4.0.250.2" />
-        <vers num="4.0.251.0" />
-        <vers num="4.0.252.0" />
-        <vers num="4.0.254.0" />
-        <vers num="4.0.255.0" />
-        <vers num="4.0.256.0" />
-        <vers num="4.0.257.0" />
-        <vers num="4.0.258.0" />
-        <vers num="4.0.259.0" />
-        <vers num="4.0.260.0" />
-        <vers num="4.0.261.0" />
-        <vers num="4.0.262.0" />
-        <vers num="4.0.263.0" />
-        <vers num="4.0.264.0" />
-        <vers num="4.0.265.0" />
-        <vers num="4.0.266.0" />
-        <vers num="4.0.267.0" />
-        <vers num="4.0.268.0" />
-        <vers num="4.0.269.0" />
-        <vers num="4.0.271.0" />
-        <vers num="4.0.272.0" />
-        <vers num="4.0.275.0" />
-        <vers num="4.0.275.1" />
-        <vers num="4.0.276.0" />
-        <vers num="4.0.277.0" />
-        <vers num="4.0.278.0" />
-        <vers num="4.0.286.0" />
-        <vers num="4.0.287.0" />
-        <vers num="4.0.288.0" />
-        <vers num="4.0.288.1" />
-        <vers num="4.0.289.0" />
-        <vers num="4.0.290.0" />
-        <vers num="4.0.292.0" />
-        <vers num="4.0.294.0" />
-        <vers num="4.0.295.0" />
-        <vers num="4.0.296.0" />
-        <vers num="4.0.299.0" />
-        <vers num="4.0.300.0" />
-        <vers num="4.0.301.0" />
-        <vers num="4.0.302.0" />
-        <vers num="4.0.302.1" />
-        <vers num="4.0.302.2" />
-        <vers num="4.0.302.3" />
-        <vers num="4.0.303.0" />
-        <vers num="4.0.304.0" />
-        <vers num="4.0.305.0" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.1.249.0" />
-        <vers num="4.1.249.1001" />
-        <vers num="4.1.249.1004" />
-        <vers num="4.1.249.1006" />
-        <vers num="4.1.249.1007" />
-        <vers num="4.1.249.1008" />
-        <vers num="4.1.249.1009" />
-        <vers num="4.1.249.1010" />
-        <vers num="4.1.249.1011" />
-        <vers num="4.1.249.1012" />
-        <vers num="4.1.249.1013" />
-        <vers num="4.1.249.1014" />
-        <vers num="4.1.249.1015" />
-        <vers num="4.1.249.1016" />
-        <vers num="4.1.249.1017" />
-        <vers num="4.1.249.1018" />
-        <vers num="4.1.249.1019" />
-        <vers num="4.1.249.1020" />
-        <vers num="4.1.249.1021" />
-        <vers num="4.1.249.1022" />
-        <vers num="4.1.249.1023" />
-        <vers num="4.1.249.1024" />
-        <vers num="4.1.249.1025" />
-        <vers num="4.1.249.1026" />
-        <vers num="4.1.249.1027" />
-        <vers num="4.1.249.1028" />
-        <vers num="4.1.249.1029" />
-        <vers num="4.1.249.1030" />
-        <vers num="4.1.249.1031" />
-        <vers num="4.1.249.1032" />
-        <vers num="4.1.249.1033" />
-        <vers num="4.1.249.1034" />
-        <vers num="4.1.249.1035" />
-        <vers num="4.1.249.1036" />
-        <vers num="4.1.249.1037" />
-        <vers num="4.1.249.1038" />
-        <vers num="4.1.249.1039" />
-        <vers num="4.1.249.1040" />
-        <vers num="4.1.249.1041" />
-        <vers num="4.1.249.1042" />
-        <vers num="4.1.249.1043" />
-        <vers num="4.1.249.1044" />
-        <vers num="4.1.249.1045" />
-        <vers num="4.1.249.1046" />
-        <vers num="4.1.249.1047" />
-        <vers num="4.1.249.1048" />
-        <vers num="4.1.249.1049" />
-        <vers num="4.1.249.1050" />
-        <vers num="4.1.249.1051" />
-        <vers num="4.1.249.1052" />
-        <vers num="4.1.249.1053" />
-        <vers num="4.1.249.1054" />
-        <vers num="4.1.249.1055" />
-        <vers num="4.1.249.1056" />
-        <vers num="4.1.249.1057" />
-        <vers num="4.1.249.1058" />
-        <vers num="4.1.249.1059" />
-        <vers num="4.1.249.1060" />
-        <vers num="4.1.249.1061" />
-        <vers num="4.1.249.1062" />
-        <vers num="4.1.249.1063" />
-        <vers num="4.1.249.1064" />
-        <vers num="5.0.306.0" />
-        <vers num="5.0.306.1" />
-        <vers num="5.0.307.1" />
-        <vers num="5.0.307.10" />
-        <vers num="5.0.307.11" />
-        <vers num="5.0.307.3" />
-        <vers num="5.0.307.4" />
-        <vers num="5.0.307.5" />
-        <vers num="5.0.307.6" />
-        <vers num="5.0.307.7" />
-        <vers num="5.0.307.8" />
-        <vers num="5.0.307.9" />
-        <vers num="5.0.308.0" />
-        <vers num="5.0.309.0" />
-        <vers num="5.0.313.0" />
-        <vers num="5.0.314.0" />
-        <vers num="5.0.314.1" />
-        <vers num="5.0.315.0" />
-        <vers num="5.0.316.0" />
-        <vers num="5.0.317.0" />
-        <vers num="5.0.317.1" />
-        <vers num="5.0.317.2" />
-        <vers num="5.0.318.0" />
-        <vers num="5.0.319.0" />
-        <vers num="5.0.320.0" />
-        <vers num="5.0.321.0" />
-        <vers num="5.0.322.0" />
-        <vers num="5.0.322.1" />
-        <vers num="5.0.322.2" />
-        <vers num="5.0.323.0" />
-        <vers num="5.0.324.0" />
-        <vers num="5.0.325.0" />
-        <vers num="5.0.326.0" />
-        <vers num="5.0.327.0" />
-        <vers num="5.0.328.0" />
-        <vers num="5.0.329.0" />
-        <vers num="5.0.330.0" />
-        <vers num="5.0.332.0" />
-        <vers num="5.0.333.0" />
-        <vers num="5.0.334.0" />
-        <vers num="5.0.335.0" />
-        <vers num="5.0.335.1" />
-        <vers num="5.0.335.2" />
-        <vers num="5.0.335.3" />
-        <vers num="5.0.335.4" />
-        <vers num="5.0.336.0" />
-        <vers num="5.0.337.0" />
-        <vers num="5.0.338.0" />
-        <vers num="5.0.339.0" />
-        <vers num="5.0.340.0" />
-        <vers num="5.0.341.0" />
-        <vers num="5.0.342.0" />
-        <vers num="5.0.342.1" />
-        <vers num="5.0.342.2" />
-        <vers num="5.0.342.3" />
-        <vers num="5.0.342.4" />
-        <vers num="5.0.342.5" />
-        <vers num="5.0.342.6" />
-        <vers num="5.0.342.7" />
-        <vers num="5.0.342.8" />
-        <vers num="5.0.342.9" />
-        <vers num="5.0.343.0" />
-        <vers num="5.0.344.0" />
-        <vers num="5.0.345.0" />
-        <vers num="5.0.346.0" />
-        <vers num="5.0.347.0" />
-        <vers num="5.0.348.0" />
-        <vers num="5.0.349.0" />
-        <vers num="5.0.350.0" />
-        <vers num="5.0.350.1" />
-        <vers num="5.0.351.0" />
-        <vers num="5.0.353.0" />
-        <vers num="5.0.354.0" />
-        <vers num="5.0.354.1" />
-        <vers num="5.0.355.0" />
-        <vers num="5.0.356.0" />
-        <vers num="5.0.356.1" />
-        <vers num="5.0.356.2" />
-        <vers num="5.0.357.0" />
-        <vers num="5.0.358.0" />
-        <vers num="5.0.359.0" />
-        <vers num="5.0.360.0" />
-        <vers num="5.0.360.3" />
-        <vers num="5.0.360.4" />
-        <vers num="5.0.360.5" />
-        <vers num="5.0.361.0" />
-        <vers num="5.0.362.0" />
-        <vers num="5.0.363.0" />
-        <vers num="5.0.364.0" />
-        <vers num="5.0.365.0" />
-        <vers num="5.0.366.0" />
-        <vers num="5.0.366.1" />
-        <vers num="5.0.366.2" />
-        <vers num="5.0.366.3" />
-        <vers num="5.0.366.4" />
-        <vers num="5.0.367.0" />
-        <vers num="5.0.368.0" />
-        <vers num="5.0.369.0" />
-        <vers num="5.0.369.1" />
-        <vers num="5.0.369.2" />
-        <vers num="5.0.370.0" />
-        <vers num="5.0.371.0" />
-        <vers num="5.0.372.0" />
-        <vers num="5.0.373.0" />
-        <vers num="5.0.374.0" />
-        <vers num="5.0.375.0" />
-        <vers num="5.0.375.1" />
-        <vers num="5.0.375.10" />
-        <vers num="5.0.375.11" />
-        <vers num="5.0.375.12" />
-        <vers num="5.0.375.125" />
-        <vers num="5.0.375.126" />
-        <vers num="5.0.375.127" />
-        <vers num="5.0.375.13" />
-        <vers num="5.0.375.14" />
-        <vers num="5.0.375.15" />
-        <vers num="5.0.375.16" />
-        <vers num="5.0.375.17" />
-        <vers num="5.0.375.18" />
-        <vers num="5.0.375.19" />
-        <vers num="5.0.375.2" />
-        <vers num="5.0.375.20" />
-        <vers num="5.0.375.21" />
-        <vers num="5.0.375.22" />
-        <vers num="5.0.375.23" />
-        <vers num="5.0.375.25" />
-        <vers num="5.0.375.26" />
-        <vers num="5.0.375.27" />
-        <vers num="5.0.375.28" />
-        <vers num="5.0.375.29" />
-        <vers num="5.0.375.3" />
-        <vers num="5.0.375.30" />
-        <vers num="5.0.375.31" />
-        <vers num="5.0.375.32" />
-        <vers num="5.0.375.33" />
-        <vers num="5.0.375.34" />
-        <vers num="5.0.375.35" />
-        <vers num="5.0.375.36" />
-        <vers num="5.0.375.37" />
-        <vers num="5.0.375.38" />
-        <vers num="5.0.375.39" />
-        <vers num="5.0.375.4" />
-        <vers num="5.0.375.40" />
-        <vers num="5.0.375.41" />
-        <vers num="5.0.375.42" />
-        <vers num="5.0.375.43" />
-        <vers num="5.0.375.44" />
-        <vers num="5.0.375.45" />
-        <vers num="5.0.375.46" />
-        <vers num="5.0.375.47" />
-        <vers num="5.0.375.48" />
-        <vers num="5.0.375.49" />
-        <vers num="5.0.375.5" />
-        <vers num="5.0.375.50" />
-        <vers num="5.0.375.51" />
-        <vers num="5.0.375.52" />
-        <vers num="5.0.375.53" />
-        <vers num="5.0.375.54" />
-        <vers num="5.0.375.55" />
-        <vers num="5.0.375.56" />
-        <vers num="5.0.375.57" />
-        <vers num="5.0.375.58" />
-        <vers num="5.0.375.59" />
-        <vers num="5.0.375.6" />
-        <vers num="5.0.375.60" />
-        <vers num="5.0.375.61" />
-        <vers num="5.0.375.62" />
-        <vers num="5.0.375.63" />
-        <vers num="5.0.375.64" />
-        <vers num="5.0.375.65" />
-        <vers num="5.0.375.66" />
-        <vers num="5.0.375.67" />
-        <vers num="5.0.375.68" />
-        <vers num="5.0.375.69" />
-        <vers num="5.0.375.7" />
-        <vers num="5.0.375.70" />
-        <vers num="5.0.375.71" />
-        <vers num="5.0.375.72" />
-        <vers num="5.0.375.73" />
-        <vers num="5.0.375.74" />
-        <vers num="5.0.375.75" />
-        <vers num="5.0.375.76" />
-        <vers num="5.0.375.77" />
-        <vers num="5.0.375.78" />
-        <vers num="5.0.375.79" />
-        <vers num="5.0.375.8" />
-        <vers num="5.0.375.80" />
-        <vers num="5.0.375.81" />
-        <vers num="5.0.375.82" />
-        <vers num="5.0.375.83" />
-        <vers num="5.0.375.84" />
-        <vers num="5.0.375.85" />
-        <vers num="5.0.375.86" />
-        <vers num="5.0.375.87" />
-        <vers num="5.0.375.88" />
-        <vers num="5.0.375.89" />
-        <vers num="5.0.375.9" />
-        <vers num="5.0.375.90" />
-        <vers num="5.0.375.91" />
-        <vers num="5.0.375.92" />
-        <vers num="5.0.375.93" />
-        <vers num="5.0.375.94" />
-        <vers num="5.0.375.95" />
-        <vers num="5.0.375.96" />
-        <vers num="5.0.375.97" />
-        <vers num="5.0.375.98" />
-        <vers num="5.0.375.99" />
-        <vers num="5.0.376.0" />
-        <vers num="5.0.378.0" />
-        <vers num="5.0.379.0" />
-        <vers num="5.0.380.0" />
-        <vers num="5.0.381.0" />
-        <vers num="5.0.382.0" />
-        <vers num="5.0.382.3" />
-        <vers num="5.0.383.0" />
-        <vers num="5.0.384.0" />
-        <vers num="5.0.385.0" />
-        <vers num="5.0.386.0" />
-        <vers num="5.0.387.0" />
-        <vers num="5.0.390.0" />
-        <vers num="5.0.391.0" />
-        <vers num="5.0.392.0" />
-        <vers num="5.0.393.0" />
-        <vers num="5.0.394.0" />
-        <vers num="5.0.395.0" />
-        <vers num="5.0.396.0" />
-        <vers num="6.0.397.0" />
-        <vers num="6.0.398.0" />
-        <vers num="6.0.399.0" />
-        <vers num="6.0.400.0" />
-        <vers num="6.0.401.0" />
-        <vers num="6.0.401.1" />
-        <vers num="6.0.403.0" />
-        <vers num="6.0.404.0" />
-        <vers num="6.0.404.1" />
-        <vers num="6.0.404.2" />
-        <vers num="6.0.405.0" />
-        <vers num="6.0.406.0" />
-        <vers num="6.0.407.0" />
-        <vers num="6.0.408.0" />
-        <vers num="6.0.408.1" />
-        <vers num="6.0.408.10" />
-        <vers num="6.0.408.2" />
-        <vers num="6.0.408.3" />
-        <vers num="6.0.408.4" />
-        <vers num="6.0.408.5" />
-        <vers num="6.0.408.6" />
-        <vers num="6.0.408.7" />
-        <vers num="6.0.408.8" />
-        <vers num="6.0.408.9" />
-        <vers num="6.0.409.0" />
-        <vers num="6.0.410.0" />
-        <vers num="6.0.411.0" />
-        <vers num="6.0.412.0" />
-        <vers num="6.0.413.0" />
-        <vers num="6.0.414.0" />
-        <vers num="6.0.415.0" />
-        <vers num="6.0.415.1" />
-        <vers num="6.0.416.0" />
-        <vers num="6.0.416.1" />
-        <vers num="6.0.417.0" />
-        <vers num="6.0.418.0" />
-        <vers num="6.0.418.1" />
-        <vers num="6.0.418.2" />
-        <vers num="6.0.418.3" />
-        <vers num="6.0.418.4" />
-        <vers num="6.0.418.5" />
-        <vers num="6.0.418.6" />
-        <vers num="6.0.418.7" />
-        <vers num="6.0.418.8" />
-        <vers num="6.0.418.9" />
-        <vers num="6.0.419.0" />
-        <vers num="6.0.421.0" />
-        <vers num="6.0.422.0" />
-        <vers num="6.0.423.0" />
-        <vers num="6.0.424.0" />
-        <vers num="6.0.425.0" />
-        <vers num="6.0.426.0" />
-        <vers num="6.0.427.0" />
-        <vers num="6.0.428.0" />
-        <vers num="6.0.430.0" />
-        <vers num="6.0.431.0" />
-        <vers num="6.0.432.0" />
-        <vers num="6.0.433.0" />
-        <vers num="6.0.434.0" />
-        <vers num="6.0.435.0" />
-        <vers num="6.0.436.0" />
-        <vers num="6.0.437.0" />
-        <vers num="6.0.437.1" />
-        <vers num="6.0.437.2" />
-        <vers num="6.0.437.3" />
-        <vers num="6.0.438.0" />
-        <vers num="6.0.440.0" />
-        <vers num="6.0.441.0" />
-        <vers num="6.0.443.0" />
-        <vers num="6.0.444.0" />
-        <vers num="6.0.445.0" />
-        <vers num="6.0.445.1" />
-        <vers num="6.0.446.0" />
-        <vers num="6.0.447.0" />
-        <vers num="6.0.447.1" />
-        <vers num="6.0.447.2" />
-        <vers num="6.0.449.0" />
-        <vers num="6.0.450.0" />
-        <vers num="6.0.450.1" />
-        <vers num="6.0.450.2" />
-        <vers num="6.0.450.3" />
-        <vers num="6.0.450.4" />
-        <vers num="6.0.451.0" />
-        <vers num="6.0.452.0" />
-        <vers num="6.0.452.1" />
-        <vers num="6.0.453.0" />
-        <vers num="6.0.453.1" />
-        <vers num="6.0.454.0" />
-        <vers num="6.0.455.0" />
-        <vers num="6.0.456.0" />
-        <vers num="6.0.457.0" />
-        <vers num="6.0.458.0" />
-        <vers num="6.0.458.1" />
-        <vers num="6.0.458.2" />
-        <vers num="6.0.459.0" />
-        <vers num="6.0.460.0" />
-        <vers num="6.0.461.0" />
-        <vers num="6.0.462.0" />
-        <vers num="6.0.464.1" />
-        <vers num="6.0.465.1" />
-        <vers num="6.0.465.2" />
-        <vers num="6.0.466.0" />
-        <vers num="6.0.466.1" />
-        <vers num="6.0.466.2" />
-        <vers num="6.0.466.3" />
-        <vers num="6.0.466.4" />
-        <vers num="6.0.466.5" />
-        <vers num="6.0.466.6" />
-        <vers num="6.0.467.0" />
-        <vers num="6.0.469.0" />
-        <vers num="6.0.470.0" />
-        <vers num="6.0.471.0" />
-        <vers num="6.0.472.0" />
-        <vers num="6.0.472.1" />
-        <vers num="6.0.472.10" />
-        <vers num="6.0.472.11" />
-        <vers num="6.0.472.12" />
-        <vers num="6.0.472.13" />
-        <vers num="6.0.472.14" />
-        <vers num="6.0.472.15" />
-        <vers num="6.0.472.16" />
-        <vers num="6.0.472.17" />
-        <vers num="6.0.472.18" />
-        <vers num="6.0.472.19" />
-        <vers num="6.0.472.2" />
-        <vers num="6.0.472.20" />
-        <vers num="6.0.472.21" />
-        <vers num="6.0.472.22" />
-        <vers num="6.0.472.23" />
-        <vers num="6.0.472.24" />
-        <vers num="6.0.472.25" />
-        <vers num="6.0.472.26" />
-        <vers num="6.0.472.27" />
-        <vers num="6.0.472.28" />
-        <vers num="6.0.472.29" />
-        <vers num="6.0.472.3" />
-        <vers num="6.0.472.30" />
-        <vers num="6.0.472.31" />
-        <vers num="6.0.472.32" />
-        <vers num="6.0.472.33" />
-        <vers num="6.0.472.34" />
-        <vers num="6.0.472.35" />
-        <vers num="6.0.472.36" />
-        <vers num="6.0.472.37" />
-        <vers num="6.0.472.38" />
-        <vers num="6.0.472.39" />
-        <vers num="6.0.472.4" />
-        <vers num="6.0.472.40" />
-        <vers num="6.0.472.41" />
-        <vers num="6.0.472.42" />
-        <vers num="6.0.472.43" />
-        <vers num="6.0.472.44" />
-        <vers num="6.0.472.45" />
-        <vers num="6.0.472.46" />
-        <vers num="6.0.472.47" />
-        <vers num="6.0.472.48" />
-        <vers num="6.0.472.49" />
-        <vers num="6.0.472.5" />
-        <vers num="6.0.472.50" />
-        <vers num="6.0.472.51" />
-        <vers num="6.0.472.52" />
-        <vers num="6.0.472.53" />
-        <vers num="6.0.472.54" />
-        <vers num="6.0.472.55" />
-        <vers num="6.0.472.56" />
-        <vers num="6.0.472.57" />
-        <vers num="6.0.472.58" />
-        <vers num="6.0.472.59" />
-        <vers num="6.0.472.6" />
-        <vers num="6.0.472.60" />
-        <vers num="6.0.472.61" />
-        <vers num="6.0.472.62" />
-        <vers num="6.0.472.63" />
-        <vers num="6.0.472.7" />
-        <vers num="6.0.472.8" />
-        <vers num="6.0.472.9" />
-        <vers num="6.0.473.0" />
-        <vers num="6.0.474.0" />
-        <vers num="6.0.475.0" />
-        <vers num="6.0.476.0" />
-        <vers num="6.0.477.0" />
-        <vers num="6.0.478.0" />
-        <vers num="6.0.479.0" />
-        <vers num="6.0.480.0" />
-        <vers num="6.0.481.0" />
-        <vers num="6.0.482.0" />
-        <vers num="6.0.483.0" />
-        <vers num="6.0.484.0" />
-        <vers num="6.0.485.0" />
-        <vers num="6.0.486.0" />
-        <vers num="6.0.487.0" />
-        <vers num="6.0.488.0" />
-        <vers num="6.0.489.0" />
-        <vers num="6.0.490.0" />
-        <vers num="6.0.490.1" />
-        <vers num="6.0.491.0" />
-        <vers num="6.0.492.0" />
-        <vers num="6.0.493.0" />
-        <vers num="6.0.494.0" />
-        <vers num="6.0.495.0" />
-        <vers num="6.0.495.1" />
-        <vers num="6.0.496.0" />
-        <vers num="7.0.497.0" />
-        <vers num="7.0.498.0" />
-        <vers num="7.0.499.0" />
-        <vers num="7.0.499.1" />
-        <vers num="7.0.500.0" />
-        <vers num="7.0.500.1" />
-        <vers num="7.0.503.0" />
-        <vers num="7.0.503.1" />
-        <vers num="7.0.504.0" />
-        <vers num="7.0.505.0" />
-        <vers num="7.0.506.0" />
-        <vers num="7.0.507.0" />
-        <vers num="7.0.507.1" />
-        <vers num="7.0.507.2" />
-        <vers num="7.0.507.3" />
-        <vers num="7.0.509.0" />
-        <vers num="7.0.510.0" />
-        <vers num="7.0.511.1" />
-        <vers num="7.0.511.2" />
-        <vers num="7.0.511.4" />
-        <vers num="7.0.512.0" />
-        <vers num="7.0.513.0" />
-        <vers num="7.0.514.0" />
-        <vers num="7.0.514.1" />
-        <vers num="7.0.515.0" />
-        <vers num="7.0.516.0" />
-        <vers num="7.0.517.0" />
-        <vers num="7.0.517.10" />
-        <vers num="7.0.517.11" />
-        <vers num="7.0.517.12" />
-        <vers num="7.0.517.13" />
-        <vers num="7.0.517.14" />
-        <vers num="7.0.517.16" />
-        <vers num="7.0.517.17" />
-        <vers num="7.0.517.18" />
-        <vers num="7.0.517.19" />
-        <vers num="7.0.517.2" />
-        <vers num="7.0.517.20" />
-        <vers num="7.0.517.21" />
-        <vers num="7.0.517.22" />
-        <vers num="7.0.517.23" />
-        <vers num="7.0.517.24" />
-        <vers num="7.0.517.25" />
-        <vers num="7.0.517.26" />
-        <vers num="7.0.517.27" />
-        <vers num="7.0.517.28" />
-        <vers num="7.0.517.29" />
-        <vers num="7.0.517.30" />
-        <vers num="7.0.517.31" />
-        <vers num="7.0.517.32" />
-        <vers num="7.0.517.33" />
-        <vers num="7.0.517.34" />
-        <vers num="7.0.517.35" />
-        <vers num="7.0.517.36" />
-        <vers num="7.0.517.37" />
-        <vers num="7.0.517.38" />
-        <vers num="7.0.517.39" />
-        <vers num="7.0.517.4" />
-        <vers num="7.0.517.40" />
-        <vers num="7.0.517.41" />
-        <vers num="7.0.517.42" />
-        <vers num="7.0.517.43" />
-        <vers num="7.0.517.44" />
-        <vers num="7.0.517.5" />
-        <vers num="7.0.517.6" />
-        <vers num="7.0.517.7" />
-        <vers num="7.0.517.8" />
-        <vers num="7.0.517.9" />
-        <vers num="7.0.518.0" />
-        <vers num="7.0.519.0" />
-        <vers num="7.0.520.0" />
-        <vers num="7.0.521.0" />
-        <vers num="7.0.522.0" />
-        <vers num="7.0.524.0" />
-        <vers num="7.0.525.0" />
-        <vers num="7.0.526.0" />
-        <vers num="7.0.528.0" />
-        <vers num="7.0.529.0" />
-        <vers num="7.0.529.1" />
-        <vers num="7.0.529.2" />
-        <vers num="7.0.530.0" />
-        <vers num="7.0.531.0" />
-        <vers num="7.0.531.1" />
-        <vers num="7.0.531.2" />
-        <vers num="7.0.535.1" />
-        <vers num="7.0.535.2" />
-        <vers num="7.0.536.0" />
-        <vers num="7.0.536.1" />
-        <vers num="7.0.536.2" />
-        <vers num="7.0.536.3" />
-        <vers num="7.0.536.4" />
-        <vers num="7.0.537.0" />
-        <vers num="7.0.538.0" />
-        <vers num="7.0.539.0" />
-        <vers num="7.0.540.0" />
-        <vers num="7.0.541.0" />
-        <vers num="7.0.542.0" />
-        <vers num="7.0.544.0" />
-        <vers num="7.0.547.0" />
-        <vers num="7.0.547.1" />
-        <vers num="7.0.548.0" />
-        <vers num="8.0.549.0" />
-        <vers num="8.0.550.0" />
-        <vers num="8.0.551.0" />
-        <vers num="8.0.551.1" />
-        <vers num="8.0.552.0" />
-        <vers num="8.0.552.1" />
-        <vers num="8.0.552.10" />
-        <vers num="8.0.552.100" />
-        <vers num="8.0.552.101" />
-        <vers num="8.0.552.102" />
-        <vers num="8.0.552.103" />
-        <vers num="8.0.552.104" />
-        <vers num="8.0.552.105" />
-        <vers num="8.0.552.11" />
-        <vers num="8.0.552.12" />
-        <vers num="8.0.552.13" />
-        <vers num="8.0.552.14" />
-        <vers num="8.0.552.15" />
-        <vers num="8.0.552.16" />
-        <vers num="8.0.552.17" />
-        <vers num="8.0.552.18" />
-        <vers num="8.0.552.19" />
-        <vers num="8.0.552.2" />
-        <vers num="8.0.552.20" />
-        <vers num="8.0.552.200" />
-        <vers num="8.0.552.201" />
-        <vers num="8.0.552.202" />
-        <vers num="8.0.552.203" />
-        <vers num="8.0.552.204" />
-        <vers num="8.0.552.205" />
-        <vers num="8.0.552.206" />
-        <vers num="8.0.552.207" />
-        <vers num="8.0.552.208" />
-        <vers num="8.0.552.209" />
-        <vers num="8.0.552.21" />
-        <vers num="8.0.552.210" />
-        <vers num="8.0.552.211" />
-        <vers num="8.0.552.212" />
-        <vers num="8.0.552.213" />
-        <vers num="8.0.552.214" />
-        <vers num="8.0.552.215" />
-        <vers num="8.0.552.216" />
-        <vers num="8.0.552.217" />
-        <vers num="8.0.552.218" />
-        <vers num="8.0.552.219" />
-        <vers num="8.0.552.220" />
-        <vers num="8.0.552.221" />
-        <vers num="8.0.552.222" />
-        <vers num="8.0.552.223" />
-        <vers num="8.0.552.224" />
-        <vers num="8.0.552.225" />
-        <vers num="8.0.552.226" />
-        <vers num="8.0.552.227" />
-        <vers num="8.0.552.228" />
-        <vers num="8.0.552.229" />
-        <vers num="8.0.552.23" />
-        <vers num="8.0.552.230" />
-        <vers num="8.0.552.231" />
-        <vers num="8.0.552.232" />
-        <vers num="8.0.552.233" />
-        <vers num="8.0.552.234" />
-        <vers num="8.0.552.235" />
-        <vers num="8.0.552.237" />
-        <vers num="8.0.552.24" />
-        <vers num="8.0.552.25" />
-        <vers num="8.0.552.26" />
-        <vers num="8.0.552.27" />
-        <vers num="8.0.552.28" />
-        <vers num="8.0.552.29" />
-        <vers num="8.0.552.300" />
-        <vers num="8.0.552.301" />
-        <vers num="8.0.552.302" />
-        <vers num="8.0.552.303" />
-        <vers num="8.0.552.304" />
-        <vers num="8.0.552.305" />
-        <vers num="8.0.552.306" />
-        <vers num="8.0.552.307" />
-        <vers num="8.0.552.308" />
-        <vers num="8.0.552.309" />
-        <vers num="8.0.552.310" />
-        <vers num="8.0.552.311" />
-        <vers num="8.0.552.312" />
-        <vers num="8.0.552.313" />
-        <vers num="8.0.552.315" />
-        <vers num="8.0.552.316" />
-        <vers num="8.0.552.317" />
-        <vers num="8.0.552.318" />
-        <vers num="8.0.552.319" />
-        <vers num="8.0.552.320" />
-        <vers num="8.0.552.321" />
-        <vers num="8.0.552.322" />
-        <vers num="8.0.552.323" />
-        <vers num="8.0.552.324" />
-        <vers num="8.0.552.325" />
-        <vers num="8.0.552.326" />
-        <vers num="8.0.552.327" />
-        <vers num="8.0.552.328" />
-        <vers num="8.0.552.329" />
-        <vers num="8.0.552.330" />
-        <vers num="8.0.552.331" />
-        <vers num="8.0.552.332" />
-        <vers num="8.0.552.333" />
-        <vers num="8.0.552.334" />
-        <vers num="8.0.552.335" />
-        <vers num="8.0.552.336" />
-        <vers num="8.0.552.337" />
-        <vers num="8.0.552.338" />
-        <vers num="8.0.552.339" />
-        <vers num="8.0.552.340" />
-        <vers num="8.0.552.341" />
-        <vers num="8.0.552.342" />
-        <vers num="8.0.552.343" />
-        <vers num="8.0.552.344" />
-        <vers num="8.0.552.35" />
-        <vers num="8.0.552.4" />
-        <vers num="8.0.552.40" />
-        <vers num="8.0.552.41" />
-        <vers num="8.0.552.42" />
-        <vers num="8.0.552.43" />
-        <vers num="8.0.552.44" />
-        <vers num="8.0.552.45" />
-        <vers num="8.0.552.47" />
-        <vers num="8.0.552.48" />
-        <vers num="8.0.552.49" />
-        <vers num="8.0.552.5" />
-        <vers num="8.0.552.50" />
-        <vers num="8.0.552.51" />
-        <vers num="8.0.552.52" />
-        <vers num="8.0.552.6" />
-        <vers num="8.0.552.7" />
-        <vers num="8.0.552.8" />
-        <vers num="8.0.552.9" />
-        <vers num="8.0.553.0" />
-        <vers num="8.0.554.0" />
-        <vers num="8.0.555.0" />
-        <vers num="8.0.556.0" />
-        <vers num="8.0.557.0" />
-        <vers num="8.0.558.0" />
-        <vers num="8.0.559.0" />
-        <vers num="8.0.560.0" />
-        <vers num="8.0.561.0" />
-        <vers num="9.0.562.0" />
-        <vers num="9.0.563.0" />
-        <vers num="9.0.564.0" />
-        <vers num="9.0.565.0" />
-        <vers num="9.0.566.0" />
-        <vers num="9.0.567.0" />
-        <vers num="9.0.568.0" />
-        <vers num="9.0.569.0" />
-        <vers num="9.0.570.0" />
-        <vers num="9.0.570.1" />
-        <vers num="9.0.571.0" />
-        <vers num="9.0.572.0" />
-        <vers num="9.0.572.1" />
-        <vers num="9.0.573.0" />
-        <vers num="9.0.574.0" />
-        <vers num="9.0.575.0" />
-        <vers num="9.0.576.0" />
-        <vers num="9.0.577.0" />
-        <vers num="9.0.578.0" />
-        <vers num="9.0.579.0" />
-        <vers num="9.0.580.0" />
-        <vers num="9.0.581.0" />
-        <vers num="9.0.582.0" />
-        <vers num="9.0.583.0" />
-        <vers num="9.0.584.0" />
-        <vers num="9.0.585.0" />
-        <vers num="9.0.586.0" />
-        <vers num="9.0.587.0" />
-        <vers num="9.0.587.1" />
-        <vers num="9.0.588.0" />
-        <vers num="9.0.589.0" />
-        <vers num="9.0.590.0" />
-        <vers num="9.0.591.0" />
-        <vers num="9.0.592.0" />
-        <vers num="9.0.593.0" />
-        <vers num="9.0.594.0" />
-        <vers num="9.0.595.0" />
-        <vers num="9.0.596.0" />
-        <vers num="9.0.597.0" />
-        <vers num="9.0.597.1" />
-        <vers num="9.0.597.10" />
-        <vers num="9.0.597.100" />
-        <vers num="9.0.597.101" />
-        <vers num="9.0.597.102" />
-        <vers num="9.0.597.106" />
-        <vers num="9.0.597.107" />
-        <vers num="9.0.597.11" />
-        <vers num="9.0.597.12" />
-        <vers num="9.0.597.14" />
-        <vers num="9.0.597.15" />
-        <vers num="9.0.597.16" />
-        <vers num="9.0.597.17" />
-        <vers num="9.0.597.18" />
-        <vers num="9.0.597.19" />
-        <vers num="9.0.597.2" />
-        <vers num="9.0.597.20" />
-        <vers num="9.0.597.21" />
-        <vers num="9.0.597.22" />
-        <vers num="9.0.597.23" />
-        <vers num="9.0.597.24" />
-        <vers num="9.0.597.25" />
-        <vers num="9.0.597.26" />
-        <vers num="9.0.597.27" />
-        <vers num="9.0.597.28" />
-        <vers num="9.0.597.29" />
-        <vers num="9.0.597.30" />
-        <vers num="9.0.597.31" />
-        <vers num="9.0.597.32" />
-        <vers num="9.0.597.33" />
-        <vers num="9.0.597.34" />
-        <vers num="9.0.597.35" />
-        <vers num="9.0.597.36" />
-        <vers num="9.0.597.37" />
-        <vers num="9.0.597.38" />
-        <vers num="9.0.597.39" />
-        <vers num="9.0.597.4" />
-        <vers num="9.0.597.40" />
-        <vers num="9.0.597.41" />
-        <vers num="9.0.597.42" />
-        <vers num="9.0.597.44" />
-        <vers num="9.0.597.45" />
-        <vers num="9.0.597.46" />
-        <vers num="9.0.597.47" />
-        <vers num="9.0.597.5" />
-        <vers num="9.0.597.54" />
-        <vers num="9.0.597.55" />
-        <vers num="9.0.597.56" />
-        <vers num="9.0.597.57" />
-        <vers num="9.0.597.58" />
-        <vers num="9.0.597.59" />
-        <vers num="9.0.597.60" />
-        <vers num="9.0.597.62" />
-        <vers num="9.0.597.63" />
-        <vers num="9.0.597.64" />
-        <vers num="9.0.597.65" />
-        <vers num="9.0.597.66" />
-        <vers num="9.0.597.67" />
-        <vers num="9.0.597.68" />
-        <vers num="9.0.597.69" />
-        <vers num="9.0.597.7" />
-        <vers num="9.0.597.70" />
-        <vers num="9.0.597.71" />
-        <vers num="9.0.597.72" />
-        <vers num="9.0.597.73" />
-        <vers num="9.0.597.74" />
-        <vers num="9.0.597.75" />
-        <vers num="9.0.597.76" />
-        <vers num="9.0.597.77" />
-        <vers num="9.0.597.78" />
-        <vers num="9.0.597.79" />
-        <vers num="9.0.597.8" />
-        <vers num="9.0.597.80" />
-        <vers num="9.0.597.81" />
-        <vers num="9.0.597.82" />
-        <vers num="9.0.597.83" />
-        <vers num="9.0.597.84" />
-        <vers num="9.0.597.85" />
-        <vers num="9.0.597.86" />
-        <vers num="9.0.597.88" />
-        <vers num="9.0.597.9" />
-        <vers num="9.0.597.90" />
-        <vers num="9.0.597.92" />
-        <vers num="9.0.597.94" />
-        <vers num="9.0.597.96" />
-        <vers num="9.0.597.97" />
-        <vers num="9.0.597.98" />
-        <vers num="9.0.597.99" />
-        <vers num="9.0.598.0" />
-        <vers num="9.0.599.0" />
-        <vers num="9.0.600.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1522" published="2012-07-10" name="CVE-2012-1522" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Cached Object Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-044" source="MS" adv="1">MS12-044</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15464" source="OVAL">oval:org.mitre.oval:def:15464</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="internet_explorer">
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1523" published="2012-06-12" name="CVE-2012-1523" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Center Element Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-037" source="MS" patch="1" adv="1">MS12-037</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15579" source="OVAL">oval:org.mitre.oval:def:15579</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1524" published="2012-07-10" name="CVE-2012-1524" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Attribute Remove Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-044" source="MS" adv="1">MS12-044</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15595" source="OVAL">oval:org.mitre.oval:def:15595</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="internet_explorer">
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1525" published="2012-08-15" name="CVE-2012-1525" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1526" published="2012-08-14" name="CVE-2012-1526" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-052" source="MS" patch="1" adv="1">MS12-052</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="internet_explorer">
-        <vers num="6" />
-        <vers num="7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-1534" reject="1" published="2012-08-21" name="CVE-2012-1534" modified="2012-08-21">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-4167.  Reason: This candidate is a reservation duplicate of CVE-2012-4167.  Notes: All CVE users should reference CVE-2012-4167 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1535" published="2012-08-15" name="CVE-2012-1535" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-18.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-18.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.2.54" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.106.17" />
-        <vers num="10.1.52.14" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.23" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers num="10.3.183.16" />
-        <vers num="10.3.183.18" />
-        <vers num="10.3.183.19" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="10.3.185.22" />
-        <vers num="10.3.185.24" />
-        <vers num="10.3.186.3" />
-        <vers num="10.3.186.6" />
-        <vers num="10.3.186.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.59" />
-        <vers num="11.1.102.62" />
-        <vers num="11.1.102.63" />
-        <vers num="11.1.111.8" />
-        <vers num="11.1.115.7" />
-        <vers num="11.2.202.228" />
-        <vers num="11.2.202.233" />
-        <vers prev="1" num="11.2.202.235" />
-        <vers prev="1" num="11.3.300.270" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.8.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-1544" reject="1" published="2012-03-09" name="CVE-2012-1544" modified="2012-06-15">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-1876.  Reason: This candidate is a duplicate of CVE-2012-1876.  Notes: All CVE users should reference CVE-2012-1876 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1545" published="2012-03-09" name="CVE-2012-1545" modified="2012-03-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:P)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service (memory corruption) by leveraging access to a Low integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.zdnet.com/blog/security/pwn2own-2012-ie-9-hacked-with-two-0day-vulnerabilities/10621" source="MISC">http://www.zdnet.com/blog/security/pwn2own-2012-ie-9-hacked-with-two-0day-vulnerabilities/10621</ref>
-      <ref url="http://twitter.com/vupen/statuses/177895844828291073" source="MISC">http://twitter.com/vupen/statuses/177895844828291073</ref>
-      <ref url="http://pwn2own.zerodayinitiative.com/status.html" source="MISC">http://pwn2own.zerodayinitiative.com/status.html</ref>
-      <ref url="http://arstechnica.com/business/news/2012/03/ie-9-on-latest-windows-gets-stomped-at-hacker-contest.ars" source="MISC">http://arstechnica.com/business/news/2012/03/ie-9-on-latest-windows-gets-stomped-at-hacker-contest.ars</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="10" edition="consumer_preview" />
-        <vers num="6.0" />
-        <vers num="6.0.2600" />
-        <vers num="6.0.2800" />
-        <vers num="6.0.2800.1106" />
-        <vers num="6.0.2900" />
-        <vers num="6.0.2900.2180" />
-        <vers num="6.00.2462.0000" />
-        <vers num="6.00.2479.0006" />
-        <vers num="6.00.2600.0000" />
-        <vers num="6.00.2800.1106" />
-        <vers num="6.00.2900.2180" />
-        <vers num="6.00.3663.0000" />
-        <vers num="6.00.3718.0000" />
-        <vers num="6.00.3790.0000" />
-        <vers num="6.00.3790.1830" />
-        <vers num="6.00.3790.3959" />
-        <vers num="7.0" edition="beta" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.0" edition="beta3" />
-        <vers num="7.0.5730" edition="unknown" />
-        <vers num="7.0.5730" edition="unknown:gold" />
-        <vers num="7.0.5730.11" />
-        <vers num="7.00.5730.1100" />
-        <vers num="7.00.6000.16386" />
-        <vers num="7.00.6000.16441" />
-        <vers num="8.0.6001" edition="beta" />
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1557" published="2012-03-12" name="CVE-2012-1557" modified="2012-03-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU#2, 9.x before 9.5 MU#11, 10.0.x before MU#13, 10.1.x before MU#22, 10.2.x before MU#16, and 10.3.x before MU#5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in March 2012.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52267" source="BID">52267</ref>
-      <ref url="http://www.osvdb.org/79769" source="OSVDB">79769</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/08/3" source="MLIST">[oss-security] 20120308 CVE-request: Parallels Plesk Panel admin/plib/api-rpc/Agent.php Unspecified SQL Injection</ref>
-      <ref url="http://www.h-online.com/security/news/item/Bug-in-Plesk-administration-software-is-being-actively-exploited-1446587.html" source="MISC">http://www.h-online.com/security/news/item/Bug-in-Plesk-administration-software-is-being-actively-exploited-1446587.html</ref>
-      <ref url="http://www.cert.fi/haavoittuvuudet/2012/haavoittuvuus-2012-035.html" source="MISC">http://www.cert.fi/haavoittuvuudet/2012/haavoittuvuus-2012-035.html</ref>
-      <ref url="http://secunia.com/advisories/48262" source="SECUNIA" adv="1">48262</ref>
-      <ref url="http://kb.parallels.com/en/113321" source="CONFIRM" adv="1">http://kb.parallels.com/en/113321</ref>
-      <ref url="http://download1.parallels.com/Plesk/PP10/parallels-plesk-panel-10-windows-updates-release-notes.html#10216" source="CONFIRM">http://download1.parallels.com/Plesk/PP10/parallels-plesk-panel-10-windows-updates-release-notes.html#10216</ref>
-      <ref url="http://download1.parallels.com/Plesk/PP10/parallels-plesk-panel-10-linux-updates-release-notes.html#10216" source="CONFIRM">http://download1.parallels.com/Plesk/PP10/parallels-plesk-panel-10-linux-updates-release-notes.html#10216</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="parallels" name="parallels_plesk_panel">
-        <vers num="10.0.1" edition="mu_#10" />
-        <vers num="10.0.1" edition="mu_#11" />
-        <vers num="10.0.1" edition="mu_#2" />
-        <vers num="10.0.1" edition="mu_#3" />
-        <vers num="10.0.1" edition="mu_#5" />
-        <vers num="10.0.1" edition="mu_#7" />
-        <vers num="10.1.1" edition="mu_#10" />
-        <vers num="10.1.1" edition="mu_#11" />
-        <vers num="10.1.1" edition="mu_#12" />
-        <vers num="10.1.1" edition="mu_#13" />
-        <vers num="10.1.1" edition="mu_#15" />
-        <vers num="10.1.1" edition="mu_#16" />
-        <vers num="10.1.1" edition="mu_#17" />
-        <vers num="10.1.1" edition="mu_#18" />
-        <vers num="10.1.1" edition="mu_#19" />
-        <vers num="10.1.1" edition="mu_#20" />
-        <vers num="10.2.0" edition="mu_#1" />
-        <vers num="10.2.0" edition="mu_#10" />
-        <vers num="10.2.0" edition="mu_#11" />
-        <vers num="10.2.0" edition="mu_#12" />
-        <vers num="10.2.0" edition="mu_#2" />
-        <vers num="10.2.0" edition="mu_#3" />
-        <vers num="10.2.0" edition="mu_#4" />
-        <vers num="10.2.0" edition="mu_#5" />
-        <vers num="10.2.0" edition="mu_#7" />
-        <vers num="10.2.0" edition="mu_#8" />
-        <vers num="10.2.0" edition="mu_#9" />
-        <vers num="10.3.1" edition="mu_#2" />
-        <vers num="10.3.1" edition="mu_#3" />
-        <vers num="10.3.1" edition="mu_#4" />
-        <vers num="7.0" />
-        <vers num="7.6.1" />
-        <vers num="8.0" />
-        <vers num="8.1" />
-        <vers num="8.2" />
-        <vers num="8.3" />
-        <vers num="8.4" />
-        <vers num="8.6" />
-        <vers num="9.0" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.5" />
-        <vers num="9.5.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1558" published="2012-03-12" name="CVE-2012-1558" modified="2012-03-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted X.509 certificate.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.yassl.com/yaSSL/Docs-cyassl-changelog.html" source="CONFIRM">http://www.yassl.com/yaSSL/Docs-cyassl-changelog.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="yassl" name="cyassl">
-        <vers num="0.2.0" />
-        <vers num="0.3.0" />
-        <vers num="0.4.0" />
-        <vers num="0.5.0" />
-        <vers num="0.5.5" />
-        <vers num="0.6.0" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.8.0" />
-        <vers num="0.9.0" />
-        <vers num="0.9.6" />
-        <vers num="0.9.8" />
-        <vers num="0.9.9" />
-        <vers num="1.0.0" edition="rc1" />
-        <vers num="1.0.0" edition="rc2" />
-        <vers num="1.0.0" edition="rc3" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.6" />
-        <vers num="1.1.0" />
-        <vers num="1.2.0" />
-        <vers num="1.3.0" />
-        <vers num="1.4.0" />
-        <vers num="1.5.0" />
-        <vers num="1.5.4" />
-        <vers num="1.5.6" />
-        <vers num="1.6.0" />
-        <vers num="1.6.5" />
-        <vers num="1.8.0" />
-        <vers num="1.9.0" />
-        <vers num="2.0.0" edition="rc1" />
-        <vers num="2.0.0" edition="rc2" />
-        <vers num="2.0.0" edition="rc3" />
-        <vers num="2.0.2" />
-        <vers prev="1" num="2.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1569" published="2012-03-26" name="CVE-2012-1569" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5932" source="MLIST" patch="1">[gnutls-devel] 20120316 gnutls 3.0.16</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=804920" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=804920</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/21/5" source="MLIST">[oss-security] 20120321 Re: CVE request: GnuTLS TLS record handling issue / MU-201202-01</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/20/8" source="MLIST">[oss-security] 20120320 Re: CVE request: libtasn1 </ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/20/3" source="MLIST">[oss-security] 20120320 CVE request: libtasn1 </ref>
-      <ref url="http://www.gnu.org/software/gnutls/security.html" source="CONFIRM" adv="1">http://www.gnu.org/software/gnutls/security.html</ref>
-      <ref url="http://secunia.com/advisories/48596" source="SECUNIA">48596</ref>
-      <ref url="http://blog.mudynamics.com/2012/03/20/gnutls-and-libtasn1-vulns/" source="MISC">http://blog.mudynamics.com/2012/03/20/gnutls-and-libtasn1-vulns/</ref>
-      <ref url="http://article.gmane.org/gmane.comp.gnu.libtasn1.general/54" source="MLIST">[help-libtasn1] 20120319 minimal fix to security issue</ref>
-      <ref url="http://article.gmane.org/gmane.comp.gnu.libtasn1.general/53" source="MLIST">[help-libtasn1] 20120319 GNU Libtasn1 2.12 released</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnu" name="gnutls">
-        <vers num="1.0.16" />
-        <vers num="1.0.17" />
-        <vers num="1.0.18" />
-        <vers num="1.0.19" />
-        <vers num="1.0.20" />
-        <vers num="1.0.21" />
-        <vers num="1.0.22" />
-        <vers num="1.0.23" />
-        <vers num="1.0.24" />
-        <vers num="1.0.25" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.20" />
-        <vers num="1.1.21" />
-        <vers num="1.1.22" />
-        <vers num="1.1.23" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.10" />
-        <vers num="1.2.11" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers num="1.2.8" />
-        <vers num="1.2.8.1a1" />
-        <vers num="1.2.9" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.3.4" />
-        <vers num="1.3.5" />
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.5.0" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.7.0" />
-        <vers num="1.7.1" />
-        <vers num="1.7.10" />
-        <vers num="1.7.11" />
-        <vers num="1.7.12" />
-        <vers num="1.7.13" />
-        <vers num="1.7.14" />
-        <vers num="1.7.15" />
-        <vers num="1.7.16" />
-        <vers num="1.7.17" />
-        <vers num="1.7.18" />
-        <vers num="1.7.19" />
-        <vers num="1.7.2" />
-        <vers num="1.7.3" />
-        <vers num="1.7.4" />
-        <vers num="1.7.5" />
-        <vers num="1.7.6" />
-        <vers num="1.7.7" />
-        <vers num="1.7.8" />
-        <vers num="1.7.9" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.10.0" />
-        <vers num="2.10.1" />
-        <vers num="2.10.2" />
-        <vers num="2.10.3" />
-        <vers num="2.10.4" />
-        <vers num="2.10.5" />
-        <vers num="2.12.0" />
-        <vers num="2.12.1" />
-        <vers num="2.12.10" />
-        <vers num="2.12.11" />
-        <vers num="2.12.12" />
-        <vers num="2.12.13" />
-        <vers num="2.12.14" />
-        <vers num="2.12.2" />
-        <vers num="2.12.3" />
-        <vers num="2.12.4" />
-        <vers num="2.12.5" />
-        <vers num="2.12.6" />
-        <vers num="2.12.6.1" />
-        <vers num="2.12.7" />
-        <vers num="2.12.8" />
-        <vers num="2.12.9" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" />
-        <vers num="2.2.5" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.5.0" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.7.4" />
-        <vers num="2.8.0" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" />
-        <vers num="2.8.5" />
-        <vers num="2.8.6" />
-        <vers num="3.0" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers prev="1" num="3.0.15" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-      </prod>
-      <prod vendor="gnu" name="libtasn1">
-        <vers num="0.1.0" />
-        <vers num="0.1.1" />
-        <vers num="0.1.2" />
-        <vers num="0.2.0" />
-        <vers num="0.2.1" />
-        <vers num="0.2.10" />
-        <vers num="0.2.11" />
-        <vers num="0.2.12" />
-        <vers num="0.2.13" />
-        <vers num="0.2.14" />
-        <vers num="0.2.15" />
-        <vers num="0.2.16" />
-        <vers num="0.2.17" />
-        <vers num="0.2.18" />
-        <vers num="0.2.2" />
-        <vers num="0.2.3" />
-        <vers num="0.2.4" />
-        <vers num="0.2.5" />
-        <vers num="0.2.6" />
-        <vers num="0.2.7" />
-        <vers num="0.2.8" />
-        <vers num="0.2.9" />
-        <vers num="0.3.0" />
-        <vers num="0.3.1" />
-        <vers num="0.3.10" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.3.5" />
-        <vers num="0.3.6" />
-        <vers num="0.3.7" />
-        <vers num="0.3.8" />
-        <vers num="0.3.9" />
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="1.4" />
-        <vers num="1.5" />
-        <vers num="1.6" />
-        <vers num="1.7" />
-        <vers num="1.8" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.4" />
-        <vers num="2.5" />
-        <vers num="2.6" />
-        <vers num="2.7" />
-        <vers num="2.8" />
-        <vers num="2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1570" published="2012-03-28" name="CVE-2012-1570" modified="2012-04-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=804770" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=804770</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/20/10" source="MLIST">[oss-security] 20120320 Re: CVE request: maradns deleted domain record cache persistance flaw</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/20/1" source="MLIST">[oss-security] 20120319 CVE request: maradns deleted domain record cache persistance flaw</ref>
-      <ref url="http://www.maradns.org/changelog.html" source="CONFIRM">http://www.maradns.org/changelog.html</ref>
-      <ref url="http://secunia.com/advisories/48492" source="SECUNIA" adv="1">48492</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="maradns" name="maradns">
-        <vers num="0.0.01" />
-        <vers num="0.0.02" />
-        <vers num="0.0.03" />
-        <vers num="0.0.04" />
-        <vers num="0.0.05" />
-        <vers num="0.0.06" />
-        <vers num="0.0.07" />
-        <vers num="0.0.08" />
-        <vers num="0.1.00" />
-        <vers num="0.1.01" />
-        <vers num="0.1.02" />
-        <vers num="0.1.03" />
-        <vers num="0.1.04" />
-        <vers num="0.1.05" />
-        <vers num="0.1.06" />
-        <vers num="0.1.07" />
-        <vers num="0.1.08" />
-        <vers num="0.1.09" />
-        <vers num="0.1.10" />
-        <vers num="0.1.11" />
-        <vers num="0.1.12" />
-        <vers num="0.1.13" />
-        <vers num="0.1.14" />
-        <vers num="0.1.15" />
-        <vers num="0.1.16" />
-        <vers num="0.1.17" />
-        <vers num="0.1.18" />
-        <vers num="0.1.19" />
-        <vers num="0.1.20" />
-        <vers num="0.1.21" />
-        <vers num="0.1.22" />
-        <vers num="0.1.23" />
-        <vers num="0.1.24" />
-        <vers num="0.1.25" />
-        <vers num="0.1.26" />
-        <vers num="0.1.27" />
-        <vers num="0.1.28" />
-        <vers num="0.1.29" />
-        <vers num="0.1.30" />
-        <vers num="0.1.31" />
-        <vers num="0.1.32" />
-        <vers num="0.1.33" />
-        <vers num="0.1.34" />
-        <vers num="0.1.35" />
-        <vers num="0.1.36" />
-        <vers num="0.1.37" />
-        <vers num="0.1.38" />
-        <vers num="0.1.39" />
-        <vers num="0.1.40" />
-        <vers num="0.2.00" />
-        <vers num="0.2.01" />
-        <vers num="0.2.02" />
-        <vers num="0.2.03" />
-        <vers num="0.2.04" />
-        <vers num="0.2.05" />
-        <vers num="0.2.06" />
-        <vers num="0.2.07" />
-        <vers num="0.2.08" />
-        <vers num="0.2.09" />
-        <vers num="0.2.10" />
-        <vers num="0.3.00" />
-        <vers num="0.3.01" />
-        <vers num="0.3.02" />
-        <vers num="0.3.03" />
-        <vers num="0.3.04" />
-        <vers num="0.3.05" />
-        <vers num="0.3.06" />
-        <vers num="0.4.00" />
-        <vers num="0.4.01" />
-        <vers num="0.4.02" />
-        <vers num="0.4.03" />
-        <vers num="0.4.04" />
-        <vers num="0.5.00" />
-        <vers num="0.5.01" />
-        <vers num="0.5.02" />
-        <vers num="0.5.03" />
-        <vers num="0.5.04" />
-        <vers num="0.5.05" />
-        <vers num="0.5.06" />
-        <vers num="0.5.07" />
-        <vers num="0.5.08" />
-        <vers num="0.5.09" />
-        <vers num="0.5.10" />
-        <vers num="0.5.11" />
-        <vers num="0.5.12" />
-        <vers num="0.5.13" />
-        <vers num="0.5.14" />
-        <vers num="0.5.15" />
-        <vers num="0.5.16" />
-        <vers num="0.5.17" />
-        <vers num="0.5.18" />
-        <vers num="0.5.19" />
-        <vers num="0.5.20" />
-        <vers num="0.5.21" />
-        <vers num="0.5.22" />
-        <vers num="0.5.23" />
-        <vers num="0.5.24" />
-        <vers num="0.5.25" />
-        <vers num="0.5.26" />
-        <vers num="0.5.27" />
-        <vers num="0.5.28" />
-        <vers num="0.5.29" />
-        <vers num="0.5.30" />
-        <vers num="0.5.31" />
-        <vers num="0.5.32" />
-        <vers num="0.5.33" />
-        <vers num="0.6.00" />
-        <vers num="0.6.01" />
-        <vers num="0.6.02" />
-        <vers num="0.6.03" />
-        <vers num="0.6.04" />
-        <vers num="0.6.05" />
-        <vers num="0.6.06" />
-        <vers num="0.6.07" />
-        <vers num="0.6.08" />
-        <vers num="0.6.09" />
-        <vers num="0.6.10" />
-        <vers num="0.6.11" />
-        <vers num="0.6.12" />
-        <vers num="0.6.13" />
-        <vers num="0.6.14" />
-        <vers num="0.6.15" />
-        <vers num="0.6.16" />
-        <vers num="0.6.17" />
-        <vers num="0.6.18" />
-        <vers num="0.6.19" />
-        <vers num="0.6.20" />
-        <vers num="0.6.21" />
-        <vers num="0.7.00" />
-        <vers num="0.7.01" />
-        <vers num="0.7.02" />
-        <vers num="0.7.03" />
-        <vers num="0.7.04" />
-        <vers num="0.7.05" />
-        <vers num="0.7.06" />
-        <vers num="0.7.07" />
-        <vers num="0.7.08" />
-        <vers num="0.7.09" />
-        <vers num="0.7.10" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.13" />
-        <vers num="0.7.14" />
-        <vers num="0.7.15" />
-        <vers num="0.7.16" />
-        <vers num="0.7.17" />
-        <vers num="0.7.18" />
-        <vers num="0.7.19" />
-        <vers num="0.7.20" />
-        <vers num="0.7.21" />
-        <vers num="0.7.22" />
-        <vers num="0.8.00" />
-        <vers num="0.8.01" />
-        <vers num="0.8.02" />
-        <vers num="0.8.03" />
-        <vers num="0.8.04" />
-        <vers num="0.8.05" />
-        <vers num="0.8.06" />
-        <vers num="0.8.07" />
-        <vers num="0.8.08" />
-        <vers num="0.8.09" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.12" />
-        <vers num="0.8.13" />
-        <vers num="0.8.14" />
-        <vers num="0.8.15" />
-        <vers num="0.8.16" />
-        <vers num="0.8.17" />
-        <vers num="0.8.18" />
-        <vers num="0.8.19" />
-        <vers num="0.8.20" />
-        <vers num="0.8.21" />
-        <vers num="0.8.22" />
-        <vers num="0.8.23" />
-        <vers num="0.8.24" />
-        <vers num="0.8.25" />
-        <vers num="0.8.26" />
-        <vers num="0.8.27" />
-        <vers num="0.8.28" />
-        <vers num="0.8.29" />
-        <vers num="0.8.30" />
-        <vers num="0.8.31" />
-        <vers num="0.8.32" />
-        <vers num="0.8.33" />
-        <vers num="0.8.34" />
-        <vers num="0.8.35" />
-        <vers num="0.8.99" />
-        <vers num="0.8.99a" />
-        <vers num="0.9.00" />
-        <vers num="0.9.01" />
-        <vers num="0.9.02" />
-        <vers num="0.9.03" />
-        <vers num="0.9.04" />
-        <vers num="0.9.05" />
-        <vers num="0.9.06" />
-        <vers num="0.9.07" />
-        <vers num="0.9.08" />
-        <vers num="0.9.09" />
-        <vers num="0.9.10" />
-        <vers num="0.9.11" />
-        <vers num="0.9.12" />
-        <vers num="0.9.13" />
-        <vers num="0.9.14" />
-        <vers num="0.9.15" />
-        <vers num="0.9.16" />
-        <vers num="0.9.17" />
-        <vers num="0.9.18" />
-        <vers num="0.9.19" />
-        <vers num="0.9.20" />
-        <vers num="0.9.21" />
-        <vers num="0.9.22" />
-        <vers num="0.9.23" />
-        <vers num="0.9.24" />
-        <vers num="0.9.25" />
-        <vers num="0.9.26" />
-        <vers num="0.9.27" />
-        <vers num="0.9.28" />
-        <vers num="0.9.29" />
-        <vers num="0.9.30" />
-        <vers num="0.9.31" />
-        <vers num="0.9.32" />
-        <vers num="0.9.33" />
-        <vers num="0.9.34" />
-        <vers num="0.9.35" />
-        <vers num="0.9.36" />
-        <vers num="0.9.37" />
-        <vers num="0.9.38" />
-        <vers num="0.9.39" />
-        <vers num="0.9.91" />
-        <vers num="0.9.92" />
-        <vers num="1.0.00" />
-        <vers num="1.0.01" />
-        <vers num="1.0.02" />
-        <vers num="1.0.03" />
-        <vers num="1.0.04" />
-        <vers num="1.0.05" />
-        <vers num="1.0.06" />
-        <vers num="1.0.07" />
-        <vers num="1.0.08" />
-        <vers num="1.0.09" />
-        <vers num="1.0.10" />
-        <vers num="1.0.11" />
-        <vers num="1.0.12" />
-        <vers num="1.0.13" />
-        <vers num="1.0.14" />
-        <vers num="1.0.15" />
-        <vers num="1.0.16" />
-        <vers num="1.0.17" />
-        <vers num="1.0.18" />
-        <vers num="1.0.19" />
-        <vers num="1.0.20" />
-        <vers num="1.0.21" />
-        <vers num="1.0.22" />
-        <vers num="1.0.23" />
-        <vers num="1.0.24" />
-        <vers num="1.0.25" />
-        <vers num="1.0.26" />
-        <vers num="1.0.27" />
-        <vers num="1.0.28" />
-        <vers num="1.0.29" />
-        <vers num="1.0.30" />
-        <vers num="1.0.31" />
-        <vers num="1.0.32" />
-        <vers num="1.0.33" />
-        <vers num="1.0.34" />
-        <vers num="1.0.35" />
-        <vers num="1.0.36" />
-        <vers num="1.0.37" />
-        <vers num="1.0.38" />
-        <vers num="1.0.39" />
-        <vers num="1.0.40" />
-        <vers num="1.0.41" />
-        <vers num="1.1.01" />
-        <vers num="1.1.02" />
-        <vers num="1.1.04" />
-        <vers num="1.1.05" />
-        <vers num="1.1.06" />
-        <vers num="1.1.07" />
-        <vers num="1.1.08" />
-        <vers num="1.1.09" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.20" />
-        <vers num="1.1.21" />
-        <vers num="1.1.22" />
-        <vers num="1.1.23" />
-        <vers num="1.1.24" />
-        <vers num="1.1.25" />
-        <vers num="1.1.26" />
-        <vers num="1.1.27" />
-        <vers num="1.1.28" />
-        <vers num="1.1.29" />
-        <vers num="1.1.30" />
-        <vers num="1.1.31" />
-        <vers num="1.1.32" />
-        <vers num="1.1.33" />
-        <vers num="1.1.34" />
-        <vers num="1.1.35" />
-        <vers num="1.1.36" />
-        <vers num="1.1.37" />
-        <vers num="1.1.38" />
-        <vers num="1.1.39" />
-        <vers num="1.1.40" />
-        <vers num="1.1.41" />
-        <vers num="1.1.42" />
-        <vers num="1.1.43" />
-        <vers num="1.1.44" />
-        <vers num="1.1.45" />
-        <vers num="1.1.46" />
-        <vers num="1.1.47" />
-        <vers num="1.1.48" />
-        <vers num="1.1.49" />
-        <vers num="1.1.50" />
-        <vers num="1.1.51" />
-        <vers num="1.1.52" />
-        <vers num="1.1.53" />
-        <vers num="1.1.54" />
-        <vers num="1.1.55" />
-        <vers num="1.1.56" />
-        <vers num="1.1.57" />
-        <vers num="1.1.58" />
-        <vers num="1.1.59" />
-        <vers num="1.1.60" />
-        <vers num="1.1.61" />
-        <vers num="1.1.90" />
-        <vers num="1.1.91" />
-        <vers num="1.2.12.01" />
-        <vers num="1.2.12.02" />
-        <vers num="1.2.12.03" />
-        <vers num="1.2.12.04" />
-        <vers num="1.2.12.05" />
-        <vers num="1.2.12.06" />
-        <vers num="1.2.12.07" />
-        <vers num="1.2.12.08" />
-        <vers num="1.2.12.09" />
-        <vers num="1.2.12.10" />
-        <vers num="1.3.01" />
-        <vers num="1.3.02" />
-        <vers num="1.3.03" />
-        <vers num="1.3.04" />
-        <vers num="1.3.05" />
-        <vers num="1.3.06" />
-        <vers num="1.3.07" />
-        <vers num="1.3.07.01" />
-        <vers num="1.3.07.02" />
-        <vers num="1.3.07.03" />
-        <vers num="1.3.07.04" />
-        <vers num="1.3.07.05" />
-        <vers num="1.3.07.06" />
-        <vers num="1.3.07.07" />
-        <vers num="1.3.07.08" />
-        <vers num="1.3.07.09" />
-        <vers num="1.3.07.10" />
-        <vers num="1.3.07.12" />
-        <vers num="1.3.07.13" />
-        <vers prev="1" num="1.3.07.14" />
-        <vers num="1.3.08" />
-        <vers num="1.3.09" />
-        <vers num="1.3.10" />
-        <vers num="1.3.11" />
-        <vers num="1.3.12" />
-        <vers num="1.3.13" />
-        <vers num="1.3.14" />
-        <vers num="1.4.01" />
-        <vers num="1.4.02" />
-        <vers num="1.4.03" />
-        <vers num="1.4.04" />
-        <vers num="1.4.05" />
-        <vers num="1.4.06" />
-        <vers num="1.4.07" />
-        <vers num="1.4.08" />
-        <vers num="1.4.09" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1571" published="2012-07-17" name="CVE-2012-1571" modified="2012-08-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/glensc/file/commit/1aec04dbf8a24b8a6ba64c4f74efa0628e36db0b" source="CONFIRM" patch="1">https://github.com/glensc/file/commit/1aec04dbf8a24b8a6ba64c4f74efa0628e36db0b</ref>
-      <ref url="https://github.com/glensc/file/commit/1859fdb4e67c49c463c4e0078054335cd46ba295" source="CONFIRM" patch="1">https://github.com/glensc/file/commit/1859fdb4e67c49c463c4e0078054335cd46ba295</ref>
-      <ref url="http://mx.gw.com/pipermail/file/2012/000914.html" source="MLIST" patch="1">[file] 20120221 file-5.11 is now available</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:035" source="MANDRIVA">MDVSA-2012:035</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2422" source="DEBIAN">DSA-2422</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="christos_zoulas" name="file">
-        <vers prev="1" num="5.10" />
-      </prod>
-      <prod vendor="tim_robbins" name="libmagic">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1573" published="2012-03-26" name="CVE-2012-1573" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commit;h=b495740f2ff66550ca9395b3fda3ea32c3acb185" source="CONFIRM" patch="1">http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commit;h=b495740f2ff66550ca9395b3fda3ea32c3acb185</ref>
-      <ref url="http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commit;h=422214868061370aeeb0ac9cd0f021a5c350a57d" source="CONFIRM" patch="1">http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commit;h=422214868061370aeeb0ac9cd0f021a5c350a57d</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=805432" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=805432</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1418-1" source="UBUNTU">USN-1418-1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/21/5" source="MLIST">[oss-security] 20120321 Re: CVE request: GnuTLS TLS record handling issue / MU-201202-01</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/21/4" source="MLIST">[oss-security] 20120321 CVE request: GnuTLS TLS record handling issue / MU-201202-01</ref>
-      <ref url="http://www.gnu.org/software/gnutls/security.html" source="CONFIRM" adv="1">http://www.gnu.org/software/gnutls/security.html</ref>
-      <ref url="http://secunia.com/advisories/48596" source="SECUNIA">48596</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0429.html" source="REDHAT">RHSA-2012:0429</ref>
-      <ref url="http://osvdb.org/80259" source="OSVDB">80259</ref>
-      <ref url="http://blog.mudynamics.com/2012/03/20/gnutls-and-libtasn1-vulns/" source="MISC">http://blog.mudynamics.com/2012/03/20/gnutls-and-libtasn1-vulns/</ref>
-      <ref url="http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5912" source="MLIST">[gnutls-devel] 20120302 gnutls 3.0.15</ref>
-      <ref url="http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5910" source="MLIST">[gnutls-devel] 20120302 gnutls 2.12.16</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnu" name="gnutls">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.10.0" />
-        <vers num="2.10.1" />
-        <vers num="2.10.2" />
-        <vers num="2.10.3" />
-        <vers num="2.10.4" />
-        <vers num="2.10.5" />
-        <vers num="2.12.0" />
-        <vers num="2.12.1" />
-        <vers num="2.12.10" />
-        <vers num="2.12.11" />
-        <vers num="2.12.12" />
-        <vers num="2.12.13" />
-        <vers num="2.12.14" />
-        <vers num="2.12.15" />
-        <vers prev="1" num="2.12.16" />
-        <vers num="2.12.2" />
-        <vers num="2.12.3" />
-        <vers num="2.12.4" />
-        <vers num="2.12.5" />
-        <vers num="2.12.6" />
-        <vers num="2.12.6.1" />
-        <vers num="2.12.7" />
-        <vers num="2.12.8" />
-        <vers num="2.12.9" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" />
-        <vers num="2.2.5" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.5.0" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.7.4" />
-        <vers num="2.8.0" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" />
-        <vers num="2.8.5" />
-        <vers num="2.8.6" />
-        <vers num="3.0" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1574" published="2012-04-12" name="CVE-2012-1574" modified="2012-04-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to impersonate arbitrary cluster user accounts via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://ccp.cloudera.com/display/DOC/Cloudera+Security+Bulletin" source="CONFIRM" adv="1">https://ccp.cloudera.com/display/DOC/Cloudera+Security+Bulletin</ref>
-      <ref url="http://seclists.org/fulldisclosure/2012/Apr/70" source="FULLDISC">20120405 [CVE-2012-1574] Apache Hadoop user impersonation vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="hadoop">
-        <vers num="0.20.203.0" />
-        <vers num="0.20.204.0" />
-        <vers num="0.20.205.0" />
-        <vers num="0.23.0" />
-        <vers num="0.23.1" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-      </prod>
-      <prod vendor="cloudera" name="cloudera_cdh">
-        <vers num="cdh3" edition="0" />
-        <vers num="cdh3" edition="1" />
-        <vers num="cdh3" edition="2" />
-      </prod>
-      <prod vendor="cloudera" name="hadoop">
-        <vers num="0.20-sbin" />
-        <vers num="0.20.1+169" />
-        <vers num="0.20.2+923" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1575" published="2012-04-22" name="CVE-2012-1575" modified="2012-04-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://fedorahosted.org/pipermail/cumin-developers/2012-March/000796.html" source="MLIST">[cumin-developers] 20120306 r5238 - in trunk: cumin/python/cumin cumin/python/cumin/grid cumin/python/cumin/inventory cumin/python/cumin/messaging rosemary/python/rosemary wooly/python/wooly</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=805712" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=805712</ref>
-      <ref url="https://bugzilla.redhat.com/attachment.cgi?id=571986" source="CONFIRM">https://bugzilla.redhat.com/attachment.cgi?id=571986</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="trevor_mckay" name="cumin">
-        <vers prev="1" num="r5237" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1578" published="2012-09-09" name="CVE-2012-1578" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allow remote attackers to hijack the authentication of users with the block permission for requests that (1) block a user via a request to the Block module or (2) unblock a user via a request to the Unblock module.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.wikimedia.org/show_bug.cgi?id=34212" source="CONFIRM">https://bugzilla.wikimedia.org/show_bug.cgi?id=34212</ref>
-      <ref url="http://www.securityfocus.com/bid/52689" source="BID">52689</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/24/1" source="MLIST">[oss-security] 20120323 CVEs for MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/22/9" source="MLIST">[oss-security] 20120322 MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://secunia.com/advisories/48504" source="SECUNIA" adv="1">48504</ref>
-      <ref url="http://osvdb.org/80361" source="OSVDB">80361</ref>
-      <ref url="http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html" source="MLIST" adv="1">[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html" source="MLIST">[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.17.3</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mediawiki" name="mediawiki">
-        <vers num="1.17" edition="beta_1" />
-        <vers num="1.17.0" edition="rc1" />
-        <vers num="1.17.1" />
-        <vers num="1.17.2" />
-        <vers num="1.18" edition="beta_1" />
-        <vers num="1.18.0" edition="rc1" />
-        <vers num="1.18.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1579" published="2012-09-09" name="CVE-2012-1579" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The resource loader in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 includes private data such as CSRF tokens in a JavaScript file, which allows remote attackers to obtain sensitive information.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.wikimedia.org/show_bug.cgi?id=34907" source="CONFIRM">https://bugzilla.wikimedia.org/show_bug.cgi?id=34907</ref>
-      <ref url="http://www.securityfocus.com/bid/52689" source="BID">52689</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/24/1" source="MLIST">[oss-security] 20120323 CVEs for MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/22/9" source="MLIST">[oss-security] 20120322 MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://secunia.com/advisories/48504" source="SECUNIA" adv="1">48504</ref>
-      <ref url="http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html" source="MLIST" adv="1">[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html" source="MLIST" adv="1">[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.17.3</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mediawiki" name="mediawiki">
-        <vers num="1.17" edition="beta_1" />
-        <vers num="1.17.0" edition="rc1" />
-        <vers num="1.17.1" />
-        <vers num="1.17.2" />
-        <vers num="1.18" edition="beta_1" />
-        <vers num="1.18.0" edition="rc1" />
-        <vers num="1.18.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1580" published="2012-09-09" name="CVE-2012-1580" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload files.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.wikimedia.org/show_bug.cgi?id=35317" source="CONFIRM">https://bugzilla.wikimedia.org/show_bug.cgi?id=35317</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74286" source="XF">mediawiki-specialupload-csrf(74286)</ref>
-      <ref url="http://www.securityfocus.com/bid/52689" source="BID">52689</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/24/1" source="MLIST">[oss-security] 20120323 CVEs for MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/22/9" source="MLIST">[oss-security] 20120322 MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://secunia.com/advisories/48504" source="SECUNIA" adv="1">48504</ref>
-      <ref url="http://osvdb.org/80364" source="OSVDB">80364</ref>
-      <ref url="http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html" source="MLIST" adv="1">[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html" source="MLIST" adv="1">[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.17.3</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mediawiki" name="mediawiki">
-        <vers num="1.17" edition="beta_1" />
-        <vers num="1.17.0" edition="rc1" />
-        <vers num="1.17.1" />
-        <vers num="1.17.2" />
-        <vers num="1.18" edition="beta_1" />
-        <vers num="1.18.0" edition="rc1" />
-        <vers num="1.18.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1581" published="2012-09-09" name="CVE-2012-1581" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remote attackers to change the passwords of arbitrary users.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.wikimedia.org/show_bug.cgi?id=35078" source="CONFIRM">https://bugzilla.wikimedia.org/show_bug.cgi?id=35078</ref>
-      <ref url="http://www.securityfocus.com/bid/52689" source="BID">52689</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/24/1" source="MLIST">[oss-security] 20120323 CVEs for MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/22/9" source="MLIST">[oss-security] 20120322 MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://secunia.com/advisories/48504" source="SECUNIA" adv="1">48504</ref>
-      <ref url="http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html" source="MLIST" adv="1">[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html" source="MLIST" adv="1">[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.17.3</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mediawiki" name="mediawiki">
-        <vers num="1.17" edition="beta_1" />
-        <vers num="1.17.0" edition="rc1" />
-        <vers num="1.17.1" />
-        <vers num="1.17.2" />
-        <vers num="1.18" edition="beta_1" />
-        <vers num="1.18.0" edition="rc1" />
-        <vers num="1.18.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1582" published="2012-09-09" name="CVE-2012-1582" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to inject arbitrary web script or HTML via a crafted page with "forged strip item markers," as demonstrated using the CharInsert extension.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.wikimedia.org/show_bug.cgi?id=35315" source="CONFIRM">https://bugzilla.wikimedia.org/show_bug.cgi?id=35315</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74288" source="XF">mediawiki-wikitext-xss(74288)</ref>
-      <ref url="http://www.securityfocus.com/bid/52689" source="BID">52689</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/24/1" source="MLIST">[oss-security] 20120323 CVEs for MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/22/9" source="MLIST">[oss-security] 20120322 MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://secunia.com/advisories/48504" source="SECUNIA" adv="1">48504</ref>
-      <ref url="http://osvdb.org/80363" source="OSVDB">80363</ref>
-      <ref url="http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html" source="MLIST" adv="1">[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html" source="MLIST" adv="1">[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.17.3</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mediawiki" name="mediawiki">
-        <vers num="1.17" edition="beta_1" />
-        <vers num="1.17.0" edition="rc1" />
-        <vers num="1.17.1" />
-        <vers num="1.17.2" />
-        <vers num="1.18" edition="beta_1" />
-        <vers num="1.18.0" edition="rc1" />
-        <vers num="1.18.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1583" published="2012-06-16" name="CVE-2012-1583" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunnel module is enabled, allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/d0772b70faaf8e9f2013b6c4273d94d5eac8047a" source="CONFIRM" patch="1">https://github.com/torvalds/linux/commit/d0772b70faaf8e9f2013b6c4273d94d5eac8047a</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=752304" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=752304</ref>
-      <ref url="http://www.securitytracker.com/id?1026930" source="SECTRACK">1026930</ref>
-      <ref url="http://www.securityfocus.com/bid/53139" source="BID">53139</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d0772b70faaf8e9f2013b6c4273d94d5eac8047a" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d0772b70faaf8e9f2013b6c4273d94d5eac8047a</ref>
-      <ref url="http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22" source="CONFIRM">http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="2.6.0" edition="test1" />
-        <vers num="2.6.0" edition="test10" />
-        <vers num="2.6.0" edition="test11" />
-        <vers num="2.6.0" edition="test2" />
-        <vers num="2.6.0" edition="test3" />
-        <vers num="2.6.0" edition="test4" />
-        <vers num="2.6.0" edition="test5" />
-        <vers num="2.6.0" edition="test6" />
-        <vers num="2.6.0" edition="test7" />
-        <vers num="2.6.0" edition="test8" />
-        <vers num="2.6.0" edition="test9" />
-        <vers num="2.6.1" edition="rc1" />
-        <vers num="2.6.1" edition="rc2" />
-        <vers num="2.6.1" edition="rc3" />
-        <vers num="2.6.10" edition="rc1" />
-        <vers num="2.6.10" edition="rc2" />
-        <vers num="2.6.10" edition="rc3" />
-        <vers num="2.6.11" edition="rc1" />
-        <vers num="2.6.11" edition="rc2" />
-        <vers num="2.6.11" edition="rc3" />
-        <vers num="2.6.11" edition="rc4" />
-        <vers num="2.6.11" edition="rc5" />
-        <vers num="2.6.11.1" />
-        <vers num="2.6.11.10" />
-        <vers num="2.6.11.11" />
-        <vers num="2.6.11.12" />
-        <vers num="2.6.11.2" />
-        <vers num="2.6.11.3" />
-        <vers num="2.6.11.4" />
-        <vers num="2.6.11.5" />
-        <vers num="2.6.11.6" />
-        <vers num="2.6.11.7" />
-        <vers num="2.6.11.8" />
-        <vers num="2.6.11.9" />
-        <vers num="2.6.12" edition="rc1" />
-        <vers num="2.6.12" edition="rc2" />
-        <vers num="2.6.12" edition="rc3" />
-        <vers num="2.6.12" edition="rc4" />
-        <vers num="2.6.12" edition="rc5" />
-        <vers num="2.6.12" edition="rc6" />
-        <vers num="2.6.12.1" />
-        <vers num="2.6.12.2" />
-        <vers num="2.6.12.3" />
-        <vers num="2.6.12.4" />
-        <vers num="2.6.12.5" />
-        <vers num="2.6.12.6" />
-        <vers num="2.6.13" edition="rc1" />
-        <vers num="2.6.13" edition="rc2" />
-        <vers num="2.6.13" edition="rc3" />
-        <vers num="2.6.13" edition="rc4" />
-        <vers num="2.6.13" edition="rc5" />
-        <vers num="2.6.13" edition="rc6" />
-        <vers num="2.6.13" edition="rc7" />
-        <vers num="2.6.13.1" />
-        <vers num="2.6.13.2" />
-        <vers num="2.6.13.3" />
-        <vers num="2.6.13.4" />
-        <vers num="2.6.13.5" />
-        <vers num="2.6.14" edition="rc1" />
-        <vers num="2.6.14" edition="rc2" />
-        <vers num="2.6.14" edition="rc3" />
-        <vers num="2.6.14" edition="rc4" />
-        <vers num="2.6.14" edition="rc5" />
-        <vers num="2.6.14.1" />
-        <vers num="2.6.14.2" />
-        <vers num="2.6.14.3" />
-        <vers num="2.6.14.4" />
-        <vers num="2.6.14.5" />
-        <vers num="2.6.14.6" />
-        <vers num="2.6.14.7" />
-        <vers num="2.6.15" edition="rc1" />
-        <vers num="2.6.15" edition="rc2" />
-        <vers num="2.6.15" edition="rc3" />
-        <vers num="2.6.15" edition="rc4" />
-        <vers num="2.6.15" edition="rc5" />
-        <vers num="2.6.15" edition="rc6" />
-        <vers num="2.6.15" edition="rc7" />
-        <vers num="2.6.15.1" />
-        <vers num="2.6.15.10" />
-        <vers num="2.6.15.11" />
-        <vers num="2.6.15.2" />
-        <vers num="2.6.15.3" />
-        <vers num="2.6.15.4" />
-        <vers num="2.6.15.5" />
-        <vers num="2.6.15.6" />
-        <vers num="2.6.15.7" />
-        <vers num="2.6.15.8" />
-        <vers num="2.6.15.9" />
-        <vers num="2.6.16" edition="rc1" />
-        <vers num="2.6.16" edition="rc2" />
-        <vers num="2.6.16" edition="rc3" />
-        <vers num="2.6.16" edition="rc4" />
-        <vers num="2.6.16" edition="rc5" />
-        <vers num="2.6.16" edition="rc6" />
-        <vers num="2.6.16" edition="rc7" />
-        <vers num="2.6.16.1" />
-        <vers num="2.6.16.10" />
-        <vers num="2.6.16.11" />
-        <vers num="2.6.16.12" />
-        <vers num="2.6.16.13" />
-        <vers num="2.6.16.14" />
-        <vers num="2.6.16.15" />
-        <vers num="2.6.16.16" />
-        <vers num="2.6.16.17" />
-        <vers num="2.6.16.18" />
-        <vers num="2.6.16.19" />
-        <vers num="2.6.16.2" />
-        <vers num="2.6.16.20" />
-        <vers num="2.6.16.21" />
-        <vers num="2.6.16.22" />
-        <vers num="2.6.16.23" />
-        <vers num="2.6.16.24" />
-        <vers num="2.6.16.25" />
-        <vers num="2.6.16.26" />
-        <vers num="2.6.16.27" />
-        <vers num="2.6.16.28" />
-        <vers num="2.6.16.29" />
-        <vers num="2.6.16.3" />
-        <vers num="2.6.16.30" />
-        <vers num="2.6.16.31" />
-        <vers num="2.6.16.32" />
-        <vers num="2.6.16.33" />
-        <vers num="2.6.16.34" />
-        <vers num="2.6.16.35" />
-        <vers num="2.6.16.36" />
-        <vers num="2.6.16.37" />
-        <vers num="2.6.16.38" />
-        <vers num="2.6.16.39" />
-        <vers num="2.6.16.4" />
-        <vers num="2.6.16.40" />
-        <vers num="2.6.16.41" />
-        <vers num="2.6.16.42" />
-        <vers num="2.6.16.43" />
-        <vers num="2.6.16.44" />
-        <vers num="2.6.16.45" />
-        <vers num="2.6.16.46" />
-        <vers num="2.6.16.47" />
-        <vers num="2.6.16.48" />
-        <vers num="2.6.16.49" />
-        <vers num="2.6.16.5" />
-        <vers num="2.6.16.50" />
-        <vers num="2.6.16.51" />
-        <vers num="2.6.16.52" />
-        <vers num="2.6.16.53" />
-        <vers num="2.6.16.54" />
-        <vers num="2.6.16.55" />
-        <vers num="2.6.16.56" />
-        <vers num="2.6.16.57" />
-        <vers num="2.6.16.58" />
-        <vers num="2.6.16.59" />
-        <vers num="2.6.16.6" />
-        <vers num="2.6.16.60" />
-        <vers num="2.6.16.61" />
-        <vers num="2.6.16.62" />
-        <vers num="2.6.16.7" />
-        <vers num="2.6.16.8" />
-        <vers num="2.6.16.9" />
-        <vers num="2.6.17" edition="rc1" />
-        <vers num="2.6.17" edition="rc2" />
-        <vers num="2.6.17" edition="rc3" />
-        <vers num="2.6.17" edition="rc4" />
-        <vers num="2.6.17" edition="rc5" />
-        <vers num="2.6.17" edition="rc6" />
-        <vers num="2.6.17.1" />
-        <vers num="2.6.17.10" />
-        <vers num="2.6.17.11" />
-        <vers num="2.6.17.12" />
-        <vers num="2.6.17.13" />
-        <vers num="2.6.17.14" />
-        <vers num="2.6.17.2" />
-        <vers num="2.6.17.3" />
-        <vers num="2.6.17.4" />
-        <vers num="2.6.17.5" />
-        <vers num="2.6.17.6" />
-        <vers num="2.6.17.7" />
-        <vers num="2.6.17.8" />
-        <vers num="2.6.17.9" />
-        <vers num="2.6.18" edition="rc1" />
-        <vers num="2.6.18" edition="rc2" />
-        <vers num="2.6.18" edition="rc3" />
-        <vers num="2.6.18" edition="rc4" />
-        <vers num="2.6.18" edition="rc5" />
-        <vers num="2.6.18" edition="rc6" />
-        <vers num="2.6.18" edition="rc7" />
-        <vers num="2.6.18.1" />
-        <vers num="2.6.18.2" />
-        <vers num="2.6.18.3" />
-        <vers num="2.6.18.4" />
-        <vers num="2.6.18.5" />
-        <vers num="2.6.18.6" />
-        <vers num="2.6.18.7" />
-        <vers num="2.6.18.8" />
-        <vers num="2.6.19" edition="rc1" />
-        <vers num="2.6.19" edition="rc2" />
-        <vers num="2.6.19" edition="rc3" />
-        <vers num="2.6.19" edition="rc4" />
-        <vers num="2.6.19.1" />
-        <vers num="2.6.19.2" />
-        <vers num="2.6.19.3" />
-        <vers num="2.6.19.4" />
-        <vers num="2.6.19.5" />
-        <vers num="2.6.19.6" />
-        <vers num="2.6.19.7" />
-        <vers num="2.6.2" edition="rc1" />
-        <vers num="2.6.2" edition="rc2" />
-        <vers num="2.6.2" edition="rc3" />
-        <vers num="2.6.20" edition="rc2" />
-        <vers num="2.6.20.1" />
-        <vers num="2.6.20.10" />
-        <vers num="2.6.20.11" />
-        <vers num="2.6.20.12" />
-        <vers num="2.6.20.13" />
-        <vers num="2.6.20.14" />
-        <vers num="2.6.20.15" />
-        <vers num="2.6.20.16" />
-        <vers num="2.6.20.17" />
-        <vers num="2.6.20.18" />
-        <vers num="2.6.20.19" />
-        <vers num="2.6.20.2" />
-        <vers num="2.6.20.20" />
-        <vers num="2.6.20.21" />
-        <vers num="2.6.20.3" />
-        <vers num="2.6.20.4" />
-        <vers num="2.6.20.5" />
-        <vers num="2.6.20.6" />
-        <vers num="2.6.20.7" />
-        <vers num="2.6.20.8" />
-        <vers num="2.6.20.9" />
-        <vers num="2.6.21" edition="git1" />
-        <vers num="2.6.21" edition="git2" />
-        <vers num="2.6.21" edition="git3" />
-        <vers num="2.6.21" edition="git4" />
-        <vers num="2.6.21" edition="git5" />
-        <vers num="2.6.21" edition="git6" />
-        <vers num="2.6.21" edition="git7" />
-        <vers num="2.6.21" edition="rc3" />
-        <vers num="2.6.21" edition="rc4" />
-        <vers num="2.6.21" edition="rc5" />
-        <vers num="2.6.21" edition="rc6" />
-        <vers num="2.6.21" edition="rc7" />
-        <vers num="2.6.21.1" />
-        <vers num="2.6.21.2" />
-        <vers num="2.6.21.3" />
-        <vers num="2.6.21.4" />
-        <vers num="2.6.21.5" />
-        <vers num="2.6.21.6" />
-        <vers prev="1" num="2.6.21.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1584" published="2012-09-06" name="CVE-2012-1584" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted file header field in a media file, which triggers a large memory allocation.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/taglib/taglib/commit/dcdf4fd954e3213c355746fa15b7480461972308" source="CONFIRM" patch="1">https://github.com/taglib/taglib/commit/dcdf4fd954e3213c355746fa15b7480461972308</ref>
-      <ref url="http://www.securityfocus.com/bid/52290" source="BID">52290</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/26/4" source="MLIST">[oss-security] 20120326 Re: CVE-Request taglib vulnerabilities</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/21/11" source="MLIST">[oss-security] 20120321 Re: CVE-Request taglib vulnerabilities</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/05/19" source="MLIST">[oss-security] 20120305 Re: CVE-Request taglib vulnerabilities</ref>
-      <ref url="http://www.gentoo.org/security/en/glsa/glsa-201206-16.xml" source="GENTOO">GLSA-201206-16</ref>
-      <ref url="http://secunia.com/advisories/49688" source="SECUNIA" adv="1">49688</ref>
-      <ref url="http://secunia.com/advisories/48211" source="SECUNIA" adv="1">48211</ref>
-      <ref url="http://mail.kde.org/pipermail/taglib-devel/2012-March/002191.html" source="MLIST">[pipermail] 20120305 multiple security vulnerabilities in taglib</ref>
-      <ref url="http://mail.kde.org/pipermail/taglib-devel/2012-March/002186.html" source="MLIST">[pipermail] 20120304 multiple security vulnerabilities in taglib</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="scott_wheeler" name="taglib">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="1.3.1" />
-        <vers num="1.4" />
-        <vers num="1.5" />
-        <vers num="1.6" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers prev="1" num="1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1585" published="2012-08-16" name="CVE-2012-1585" modified="2012-08-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk consumption) via a long server name.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://osdir.com/ml/openstack-cloud-computing/2012-03/msg01133.html" source="MLIST" patch="1">[Openstack] 20120329 [OSSA 2012-003] Long server names grow nova-api log files significantly (CVE-2012-1585)</ref>
-      <ref url="https://bugs.launchpad.net/nova/+bug/962515" source="MISC">https://bugs.launchpad.net/nova/+bug/962515</ref>
-      <ref url="http://lwn.net/Alerts/491298/" source="FEDORA">FEDORA-2012-5026</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openstack" name="nova">
-        <vers prev="1" num="2011.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1586" published="2012-08-27" name="CVE-2012-1586" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.samba.org/show_bug.cgi?id=8821" source="CONFIRM">https://bugzilla.samba.org/show_bug.cgi?id=8821</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/27/6" source="MLIST">[oss-security] 20120327 Re: CVE id request: cifs-utils</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/27/1" source="MLIST">[oss-security] 20120327 CVE id request: cifs-utils</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html" source="SUSE">SUSE-SU-2012:0575</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="debian" name="cifs-utils">
-        <vers num="2.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-1587" reject="1" published="2012-08-27" name="CVE-2012-1587" modified="2012-08-27">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2011-4944.  Reason: This candidate is a duplicate of CVE-2011-4944.  Notes: All CVE users should reference CVE-2011-4944 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1589" published="2012-05-18" name="CVE-2012-1589" modified="2012-05-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000045" source="JVNDB">JVNDB-2012-000045</ref>
-      <ref url="http://jvn.jp/en/jp/JVN45898075/index.html" source="JVN">JVN#45898075</ref>
-      <ref url="http://drupal.org/node/1557938" source="CONFIRM" adv="1">http://drupal.org/node/1557938</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="drupal" name="drupal">
-        <vers num="7.0" edition="alpha1" />
-        <vers num="7.0" edition="alpha2" />
-        <vers num="7.0" edition="alpha3" />
-        <vers num="7.0" edition="alpha4" />
-        <vers num="7.0" edition="alpha5" />
-        <vers num="7.0" edition="alpha6" />
-        <vers num="7.0" edition="alpha7" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.0" edition="beta3" />
-        <vers num="7.0" edition="dev" />
-        <vers num="7.0" edition="rc1" />
-        <vers num="7.0" edition="rc2" />
-        <vers num="7.0" edition="rc3" />
-        <vers num="7.0" edition="rc4" />
-        <vers num="7.1" />
-        <vers num="7.10" />
-        <vers num="7.11" />
-        <vers num="7.12" />
-        <vers num="7.2" />
-        <vers num="7.3" />
-        <vers num="7.4" />
-        <vers num="7.5" />
-        <vers num="7.6" />
-        <vers num="7.7" />
-        <vers num="7.8" />
-        <vers num="7.9" />
-        <vers num="7.x-dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1593" published="2012-04-11" name="CVE-2012-1593" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed packet.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/476.html
-
-'CWE-476: NULL Pointer Dereference'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6823" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6823</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-04.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-04.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/28/13" source="MLIST">[oss-security] 20120328 Re: CVE Request: Multiple wireshark security flaws resolved in 1.4.12 and 1.6.6</ref>
-      <ref url="http://secunia.com/advisories/48986" source="SECUNIA">48986</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14991" source="OVAL">oval:org.mitre.oval:def:14991</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-04/msg00060.html" source="SUSE">openSUSE-SU-2012:0558</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40962" source="CONFIRM">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40962</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1594" published="2012-04-11" name="CVE-2012-1594" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6809" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6809</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-05.html" source="CONFIRM">http://www.wireshark.org/security/wnpa-sec-2012-05.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/28/13" source="MLIST">[oss-security] 20120328 Re: CVE Request: Multiple wireshark security flaws resolved in 1.4.12 and 1.6.6</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15244" source="OVAL">oval:org.mitre.oval:def:15244</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40967" source="CONFIRM">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=40967</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1595" published="2012-04-11" name="CVE-2012-1595" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The pcap_process_pseudo_header function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (application crash) via a WTAP_ENCAP_ERF file containing an Extension or Multi-Channel header with an invalid pseudoheader size, related to the pcap and pcap-ng file parsers.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6804" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6804</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-06.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-06.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/28/13" source="MLIST">[oss-security] 20120328 Re: CVE Request: Multiple wireshark security flaws resolved in 1.4.12 and 1.6.6</ref>
-      <ref url="http://secunia.com/advisories/48986" source="SECUNIA">48986</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15548" source="OVAL">oval:org.mitre.oval:def:15548</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-04/msg00060.html" source="SUSE">openSUSE-SU-2012:0558</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=41008" source="CONFIRM">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=41008</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1596" published="2012-04-11" name="CVE-2012-1596" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The mp2t_process_fragmented_payload function in epan/dissectors/packet-mp2t.c in the MP2T dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (application crash) via a packet containing an invalid pointer value that triggers an incorrect memory-allocation attempt.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6833" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6833</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-07.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-07.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/28/13" source="MLIST">[oss-security] 20120328 Re: CVE Request: Multiple wireshark security flaws resolved in 1.4.12 and 1.6.6</ref>
-      <ref url="http://secunia.com/advisories/48986" source="SECUNIA">48986</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15194" source="OVAL">oval:org.mitre.oval:def:15194</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-04/msg00060.html" source="SUSE">openSUSE-SU-2012:0558</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=41001" source="CONFIRM">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=41001</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1597" published="2012-08-16" name="CVE-2012-1597" modified="2012-08-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/ezsystems/ezjscore/commit/58854564c7b8672090c25c4b1677d08620d870f2" source="CONFIRM" patch="1">https://github.com/ezsystems/ezjscore/commit/58854564c7b8672090c25c4b1677d08620d870f2</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/11/6" source="MLIST">[oss-security] 20120511 CVE-2012-1597: XSS in eZ Publish</ref>
-      <ref url="http://share.ez.no/community-project/security-advisories/ezsa-2012-006-xss-exploit-on-ezjscore-run-command-when-using-firefox" source="CONFIRM">http://share.ez.no/community-project/security-advisories/ezsa-2012-006-xss-exploit-on-ezjscore-run-command-when-using-firefox</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ez" name="ezjscore">
-        <vers num="1.0" />
-        <vers prev="1" num="1.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1601" published="2012-05-17" name="CVE-2012-1601" modified="2012-05-17" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">The KVM implementation in the Linux kernel before 3.3.6 allows host OS users to cause a denial of service (NULL pointer dereference and host OS crash) by making a KVM_CREATE_IRQCHIP ioctl call after a virtual CPU already exists.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/9c895160d25a76c21b65bad141b08e8d4f99afef" source="CONFIRM">https://github.com/torvalds/linux/commit/9c895160d25a76c21b65bad141b08e8d4f99afef</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=808199" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=808199</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/30/1" source="MLIST">[oss-security] 20120329 Re: CVE request -- kernel: kvm: irqchip_in_kernel() and vcpu->arch.apic inconsistency</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.6" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.6</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers prev="1" num="3.3.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1605" published="2012-09-04" name="CVE-2012-1605" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to "a missing signature (HMAC) for a request argument."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52771" source="BID">52771</ref>
-      <ref url="http://www.osvdb.org/80759" source="OSVDB">80759</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/30/4" source="MLIST">[oss-security] 20120329 Re: CVE request: TYPO3-CORE-SA-2012-001</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/" source="CONFIRM" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="typo3">
-        <vers num="4.6" />
-        <vers num="4.6.0" />
-        <vers num="4.6.1" />
-        <vers num="4.6.2" />
-        <vers num="4.6.3" />
-        <vers num="4.6.4" />
-        <vers num="4.6.5" />
-        <vers num="4.6.6" />
-        <vers num="4.7" />
-        <vers num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1606" published="2012-09-04" name="CVE-2012-1606" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the Backend component in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52771" source="BID">52771</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/30/4" source="MLIST">[oss-security] 20120329 Re: CVE request: TYPO3-CORE-SA-2012-001</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2445" source="DEBIAN">DSA-2445</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/" source="CONFIRM" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/</ref>
-      <ref url="http://secunia.com/advisories/48647" source="SECUNIA" adv="1">48647</ref>
-      <ref url="http://secunia.com/advisories/48622" source="SECUNIA" adv="1">48622</ref>
-      <ref url="http://osvdb.org/80760" source="OSVDB">80760</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="typo3">
-        <vers num="4.4.0" />
-        <vers num="4.4.1" />
-        <vers num="4.4.10" />
-        <vers num="4.4.11" />
-        <vers num="4.4.12" />
-        <vers num="4.4.13" />
-        <vers num="4.4.2" />
-        <vers num="4.4.3" />
-        <vers num="4.4.4" />
-        <vers num="4.4.5" />
-        <vers num="4.4.6" />
-        <vers num="4.4.7" />
-        <vers num="4.4.8" />
-        <vers num="4.4.9" />
-        <vers num="4.5.0" />
-        <vers num="4.5.1" />
-        <vers num="4.5.10" />
-        <vers num="4.5.11" />
-        <vers num="4.5.12" />
-        <vers num="4.5.13" />
-        <vers num="4.5.2" />
-        <vers num="4.5.3" />
-        <vers num="4.5.4" />
-        <vers num="4.5.5" />
-        <vers num="4.5.6" />
-        <vers num="4.5.7" />
-        <vers num="4.5.8" />
-        <vers num="4.5.9" />
-        <vers num="4.6.0" />
-        <vers num="4.6.1" />
-        <vers num="4.6.2" />
-        <vers num="4.6.3" />
-        <vers num="4.6.4" />
-        <vers num="4.6.5" />
-        <vers num="4.6.6" />
-        <vers num="4.7" />
-        <vers num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1607" published="2012-09-04" name="CVE-2012-1607" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the database name via a direct request.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52771" source="BID">52771</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/30/4" source="MLIST">[oss-security] 20120329 Re: CVE request: TYPO3-CORE-SA-2012-001</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2445" source="DEBIAN">DSA-2445</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/" source="CONFIRM" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/</ref>
-      <ref url="http://secunia.com/advisories/48647" source="SECUNIA" adv="1">48647</ref>
-      <ref url="http://secunia.com/advisories/48622" source="SECUNIA" adv="1">48622</ref>
-      <ref url="http://osvdb.org/80761" source="OSVDB">80761</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="typo3">
-        <vers num="4.4" />
-        <vers num="4.4.0" />
-        <vers num="4.4.1" />
-        <vers num="4.4.10" />
-        <vers num="4.4.11" />
-        <vers num="4.4.12" />
-        <vers num="4.4.13" />
-        <vers num="4.4.2" />
-        <vers num="4.4.3" />
-        <vers num="4.4.4" />
-        <vers num="4.4.5" />
-        <vers num="4.4.6" />
-        <vers num="4.4.7" />
-        <vers num="4.4.8" />
-        <vers num="4.4.9" />
-        <vers num="4.5" />
-        <vers num="4.5.0" />
-        <vers num="4.5.1" />
-        <vers num="4.5.10" />
-        <vers num="4.5.11" />
-        <vers num="4.5.12" />
-        <vers num="4.5.13" />
-        <vers num="4.5.2" />
-        <vers num="4.5.3" />
-        <vers num="4.5.4" />
-        <vers num="4.5.5" />
-        <vers num="4.5.6" />
-        <vers num="4.5.7" />
-        <vers num="4.5.8" />
-        <vers num="4.5.9" />
-        <vers num="4.6" />
-        <vers num="4.6.0" />
-        <vers num="4.6.1" />
-        <vers num="4.6.2" />
-        <vers num="4.6.3" />
-        <vers num="4.6.4" />
-        <vers num="4.6.5" />
-        <vers num="4.6.6" />
-        <vers num="4.7" />
-        <vers num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1608" published="2012-09-04" name="CVE-2012-1608" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The t3lib_div::RemoveXSS API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and inject arbitrary web script or HTML via non printable characters.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52771" source="BID">52771</ref>
-      <ref url="http://www.osvdb.org/80762" source="OSVDB">80762</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/30/4" source="MLIST">[oss-security] 20120329 Re: CVE request: TYPO3-CORE-SA-2012-001</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2445" source="DEBIAN">DSA-2445</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/" source="CONFIRM" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/</ref>
-      <ref url="http://secunia.com/advisories/48647" source="SECUNIA" adv="1">48647</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="typo3">
-        <vers num="4.4.0" />
-        <vers num="4.4.1" />
-        <vers num="4.4.10" />
-        <vers num="4.4.11" />
-        <vers num="4.4.12" />
-        <vers num="4.4.13" />
-        <vers num="4.4.2" />
-        <vers num="4.4.3" />
-        <vers num="4.4.4" />
-        <vers num="4.4.5" />
-        <vers num="4.4.6" />
-        <vers num="4.4.7" />
-        <vers num="4.4.8" />
-        <vers num="4.4.9" />
-        <vers num="4.5.0" />
-        <vers num="4.5.1" />
-        <vers num="4.5.10" />
-        <vers num="4.5.11" />
-        <vers num="4.5.12" />
-        <vers num="4.5.13" />
-        <vers num="4.5.2" />
-        <vers num="4.5.3" />
-        <vers num="4.5.4" />
-        <vers num="4.5.5" />
-        <vers num="4.5.6" />
-        <vers num="4.5.7" />
-        <vers num="4.5.8" />
-        <vers num="4.5.9" />
-        <vers num="4.6.0" />
-        <vers num="4.6.1" />
-        <vers num="4.6.2" />
-        <vers num="4.6.3" />
-        <vers num="4.6.4" />
-        <vers num="4.6.5" />
-        <vers num="4.6.6" />
-        <vers num="4.7" />
-        <vers num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1610" published="2012-06-05" name="CVE-2012-1610" modified="2012-06-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of service (out-of-bounds read) via a large component count for certain EXIF tags in a JPEG image.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0259.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0259" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0259</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74660" source="XF">imagemagick-getexifproperty-dos(74660)</ref>
-      <ref url="http://www.securityfocus.com/bid/52898" source="BID">52898</ref>
-      <ref url="http://www.osvdb.org/81024" source="OSVDB">81024</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/04/6" source="MLIST">[oss-security] 20120404 CVE-2012-1610 assignment notification: ImageMagick insufficient patch  for CVE-2012-0259</ref>
-      <ref url="http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&amp;t=20629" source="CONFIRM">http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&amp;t=20629</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2462" source="DEBIAN">DSA-2462</ref>
-      <ref url="http://ubuntu.com/usn/usn-1435-1" source="UBUNTU">USN-1435-1</ref>
-      <ref url="http://secunia.com/advisories/49317" source="SECUNIA" adv="1">49317</ref>
-      <ref url="http://secunia.com/advisories/49043" source="SECUNIA" adv="1">49043</ref>
-      <ref url="http://secunia.com/advisories/48974" source="SECUNIA" adv="1">48974</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html" source="SUSE">openSUSE-SU-2012:0692</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="imagemagick" name="imagemagick">
-        <vers num="4.2.7" />
-        <vers num="4.2.9" />
-        <vers num="5.2" />
-        <vers num="5.2.0" />
-        <vers num="5.2.4.3" />
-        <vers num="5.2.6" />
-        <vers num="5.3" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers num="5.3.8" />
-        <vers num="5.3.8.2" />
-        <vers num="5.3.9" />
-        <vers num="5.4" />
-        <vers num="5.4.0.5" />
-        <vers num="5.4.1.2" />
-        <vers num="5.4.2.3" />
-        <vers num="5.4.3" />
-        <vers num="5.4.3.11" />
-        <vers num="5.4.4.5" />
-        <vers num="5.4.5.1" />
-        <vers num="5.4.6.3" />
-        <vers num="5.4.7" />
-        <vers num="5.4.7.4" />
-        <vers num="5.4.8" />
-        <vers num="5.4.8.3" />
-        <vers num="5.4.9.1" />
-        <vers num="5.5" />
-        <vers num="5.5.1.4" />
-        <vers num="5.5.2.5" />
-        <vers num="5.5.3.2" />
-        <vers num="5.5.3.2.1.2.0" />
-        <vers num="5.5.4" />
-        <vers num="5.5.4.4" />
-        <vers num="5.5.5.3" />
-        <vers num="5.5.6" />
-        <vers num="5.5.6.0_2003-04-09" />
-        <vers num="5.5.6.0_20030409" />
-        <vers num="5.5.7" />
-        <vers num="5.5.7.15" />
-        <vers num="5.5.7.31" />
-        <vers num="5.5.7.35" />
-        <vers num="5.5.7q16" />
-        <vers num="5.5.7q8" />
-        <vers num="6.0" />
-        <vers num="6.0.0.7" />
-        <vers num="6.0.1" />
-        <vers num="6.0.1.4" />
-        <vers num="6.0.2" />
-        <vers num="6.0.2.5" />
-        <vers num="6.0.2.7" />
-        <vers num="6.0.3" />
-        <vers num="6.0.3.5" />
-        <vers num="6.0.4" />
-        <vers num="6.0.4.4" />
-        <vers num="6.0.5" />
-        <vers num="6.0.5.3" />
-        <vers num="6.0.6" />
-        <vers num="6.0.6.1" />
-        <vers num="6.0.6.2" />
-        <vers num="6.0.7" />
-        <vers num="6.0.7.3" />
-        <vers num="6.0.8" />
-        <vers num="6.0.8.3" />
-        <vers num="6.1" />
-        <vers num="6.1.0.9" />
-        <vers num="6.1.1" />
-        <vers num="6.1.1.6" />
-        <vers num="6.1.2" />
-        <vers num="6.1.2.7" />
-        <vers num="6.1.3" />
-        <vers num="6.1.3.7" />
-        <vers num="6.1.4" />
-        <vers num="6.1.4.5" />
-        <vers num="6.1.5" />
-        <vers num="6.1.5.8" />
-        <vers num="6.1.6" />
-        <vers num="6.1.6.9" />
-        <vers num="6.1.7" />
-        <vers num="6.1.7.5" />
-        <vers num="6.1.8" />
-        <vers num="6.1.8.7" />
-        <vers num="6.1.9.4" />
-        <vers num="6.2" />
-        <vers num="6.2.0.3" />
-        <vers num="6.2.0.4" />
-        <vers num="6.2.0.7" />
-        <vers num="6.2.0.8" />
-        <vers num="6.2.1" />
-        <vers num="6.2.1.7" />
-        <vers num="6.2.2" />
-        <vers num="6.2.2.5" />
-        <vers num="6.2.3" />
-        <vers num="6.2.3.4" />
-        <vers num="6.2.3.6" />
-        <vers num="6.2.4" />
-        <vers num="6.2.4.3" />
-        <vers num="6.2.4.5" />
-        <vers num="6.2.5" />
-        <vers num="6.2.6" />
-        <vers num="6.2.7" />
-        <vers num="6.2.8" />
-        <vers num="6.2.8.0" />
-        <vers num="6.2.8.1" />
-        <vers num="6.2.8.2" />
-        <vers num="6.2.8.3" />
-        <vers num="6.2.9" />
-        <vers num="6.2.9.2" />
-        <vers num="6.3.0.0" />
-        <vers num="6.3.0.1" />
-        <vers num="6.3.0.2" />
-        <vers num="6.3.0.3" />
-        <vers num="6.3.0.4" />
-        <vers num="6.3.0.5" />
-        <vers num="6.3.0.7" />
-        <vers num="6.3.0.8" />
-        <vers num="6.3.1" />
-        <vers num="6.3.1-6" />
-        <vers num="6.3.1-7" />
-        <vers num="6.3.1.0" />
-        <vers num="6.3.1.1" />
-        <vers num="6.3.1.2." />
-        <vers num="6.3.1.3" />
-        <vers num="6.3.1.4" />
-        <vers num="6.3.1.5" />
-        <vers num="6.3.1.6" />
-        <vers num="6.3.1.7" />
-        <vers num="6.3.2" />
-        <vers num="6.3.2-1" />
-        <vers num="6.3.2-2" />
-        <vers num="6.3.2-3" />
-        <vers num="6.3.2-4" />
-        <vers num="6.3.2-5" />
-        <vers num="6.3.2-6" />
-        <vers num="6.3.2-7" />
-        <vers num="6.3.2-8" />
-        <vers num="6.3.2.0" />
-        <vers num="6.3.2.1" />
-        <vers num="6.3.2.2" />
-        <vers num="6.3.2.3" />
-        <vers num="6.3.2.4" />
-        <vers num="6.3.2.5" />
-        <vers num="6.3.2.6" />
-        <vers num="6.3.2.7" />
-        <vers num="6.3.2.8" />
-        <vers num="6.3.3" />
-        <vers num="6.3.3-1" />
-        <vers num="6.3.3-2" />
-        <vers num="6.3.3-3" />
-        <vers num="6.3.3-4" />
-        <vers num="6.3.3-5" />
-        <vers num="6.3.3-6" />
-        <vers num="6.3.3-7" />
-        <vers num="6.3.3-8" />
-        <vers num="6.3.3-9" />
-        <vers num="6.3.3.0" />
-        <vers num="6.3.3.1" />
-        <vers num="6.3.3.2" />
-        <vers num="6.3.3.3" />
-        <vers num="6.3.3.4" />
-        <vers num="6.3.3_3" />
-        <vers num="6.3.3_5" />
-        <vers num="6.3.3_6" />
-        <vers num="6.3.4" />
-        <vers num="6.3.4-1" />
-        <vers num="6.3.4-10" />
-        <vers num="6.3.4-2" />
-        <vers num="6.3.4-3" />
-        <vers num="6.3.4-4" />
-        <vers num="6.3.4-5" />
-        <vers num="6.3.4-6" />
-        <vers num="6.3.4-8" />
-        <vers num="6.3.4-9" />
-        <vers num="6.3.5" />
-        <vers num="6.3.5-10" />
-        <vers num="6.3.5-4" />
-        <vers num="6.3.5-5" />
-        <vers num="6.3.5-6" />
-        <vers num="6.3.5-7" />
-        <vers num="6.3.5-9" />
-        <vers num="6.3.6" />
-        <vers num="6.3.6-1" />
-        <vers num="6.3.6-10" />
-        <vers num="6.3.6-2" />
-        <vers num="6.3.6-3" />
-        <vers num="6.3.6-4" />
-        <vers num="6.3.6-5" />
-        <vers num="6.3.6-6" />
-        <vers num="6.3.6-7" />
-        <vers num="6.3.6-8" />
-        <vers num="6.3.6-9" />
-        <vers num="6.3.7" />
-        <vers num="6.3.7-1" />
-        <vers num="6.3.7-10" />
-        <vers num="6.3.7-2" />
-        <vers num="6.3.7-3" />
-        <vers num="6.3.7-4" />
-        <vers num="6.3.7-5" />
-        <vers num="6.3.7-7" />
-        <vers num="6.3.7-9" />
-        <vers num="6.3.8" />
-        <vers num="6.3.8-1" />
-        <vers num="6.3.8-10" />
-        <vers num="6.3.8-2" />
-        <vers num="6.3.8-3" />
-        <vers num="6.3.8-5" />
-        <vers num="6.3.8-6" />
-        <vers num="6.3.8-7" />
-        <vers num="6.3.8-9" />
-        <vers num="6.3.9" />
-        <vers num="6.3.9-1" />
-        <vers num="6.3.9-10" />
-        <vers num="6.3.9-2" />
-        <vers num="6.3.9-4" />
-        <vers num="6.3.9-5" />
-        <vers num="6.3.9-6" />
-        <vers num="6.3.9-7" />
-        <vers num="6.3.9-8" />
-        <vers num="6.3.9-9" />
-        <vers num="6.4.0" />
-        <vers num="6.4.0-1" />
-        <vers num="6.4.0-10" />
-        <vers num="6.4.0-11" />
-        <vers num="6.4.0-4" />
-        <vers num="6.4.0-5" />
-        <vers num="6.4.0-6" />
-        <vers num="6.4.0-7" />
-        <vers num="6.4.0-8" />
-        <vers num="6.4.1" />
-        <vers num="6.4.1-1" />
-        <vers num="6.4.1-2" />
-        <vers num="6.4.1-3" />
-        <vers num="6.4.1-4" />
-        <vers num="6.4.1-5" />
-        <vers num="6.4.1-6" />
-        <vers num="6.4.1-7" />
-        <vers num="6.4.1-8" />
-        <vers num="6.4.1-9" />
-        <vers num="6.4.2" />
-        <vers num="6.4.2-1" />
-        <vers num="6.4.2-10" />
-        <vers num="6.4.2-2" />
-        <vers num="6.4.2-4" />
-        <vers num="6.4.2-5" />
-        <vers num="6.4.2-6" />
-        <vers num="6.4.2-7" />
-        <vers num="6.4.2-8" />
-        <vers num="6.4.2-9" />
-        <vers num="6.4.3" />
-        <vers num="6.4.3-1" />
-        <vers num="6.4.3-10" />
-        <vers num="6.4.3-2" />
-        <vers num="6.4.3-3" />
-        <vers num="6.4.3-5" />
-        <vers num="6.4.3-6" />
-        <vers num="6.4.3-7" />
-        <vers num="6.4.3-8" />
-        <vers num="6.4.4" />
-        <vers num="6.4.4-1" />
-        <vers num="6.4.4-3" />
-        <vers num="6.4.4-5" />
-        <vers num="6.4.4-7" />
-        <vers num="6.4.4-8" />
-        <vers num="6.4.5" />
-        <vers num="6.4.5-1" />
-        <vers num="6.4.5-2" />
-        <vers num="6.4.5-3" />
-        <vers num="6.4.5-4" />
-        <vers num="6.4.5-6" />
-        <vers num="6.4.5-7" />
-        <vers num="6.4.5-9" />
-        <vers num="6.4.6" />
-        <vers num="6.4.6-1" />
-        <vers num="6.4.6-2" />
-        <vers num="6.4.6-3" />
-        <vers num="6.4.6-4" />
-        <vers num="6.4.6-5" />
-        <vers num="6.4.6-6" />
-        <vers num="6.4.6-8" />
-        <vers num="6.4.6-9" />
-        <vers num="6.4.7-1" />
-        <vers num="6.4.7-10" />
-        <vers num="6.4.7-2" />
-        <vers num="6.4.7-3" />
-        <vers num="6.4.7-4" />
-        <vers num="6.4.7-5" />
-        <vers num="6.4.7-6" />
-        <vers num="6.4.7-7" />
-        <vers num="6.4.7-8" />
-        <vers num="6.4.7-9" />
-        <vers num="6.4.8" />
-        <vers num="6.4.8-1" />
-        <vers num="6.4.8-10" />
-        <vers num="6.4.8-2" />
-        <vers num="6.4.8-3" />
-        <vers num="6.4.8-4" />
-        <vers num="6.4.8-5" />
-        <vers num="6.4.8-6" />
-        <vers num="6.4.8-7" />
-        <vers num="6.4.8-8" />
-        <vers num="6.4.8-9" />
-        <vers num="6.4.9" />
-        <vers num="6.4.9-10" />
-        <vers num="6.4.9-2" />
-        <vers num="6.4.9-3" />
-        <vers num="6.4.9-5" />
-        <vers num="6.4.9-7" />
-        <vers num="6.4.9-8" />
-        <vers num="6.4.9-9" />
-        <vers num="6.5.0" />
-        <vers num="6.5.0-1" />
-        <vers num="6.5.0-10" />
-        <vers num="6.5.0-2" />
-        <vers num="6.5.0-3" />
-        <vers num="6.5.0-4" />
-        <vers num="6.5.0-5" />
-        <vers num="6.5.0-6" />
-        <vers num="6.5.0-7" />
-        <vers num="6.5.0-8" />
-        <vers num="6.5.0-9" />
-        <vers num="6.5.1" />
-        <vers num="6.5.1-1" />
-        <vers num="6.5.1-10" />
-        <vers num="6.5.1-2" />
-        <vers num="6.5.1-3" />
-        <vers num="6.5.1-4" />
-        <vers num="6.5.1-5" />
-        <vers num="6.5.1-6" />
-        <vers num="6.5.1-7" />
-        <vers num="6.5.1-9" />
-        <vers num="6.5.2" />
-        <vers num="6.5.2-1" />
-        <vers num="6.5.2-10" />
-        <vers num="6.5.2-2" />
-        <vers num="6.5.2-3" />
-        <vers num="6.5.2-4" />
-        <vers num="6.5.2-5" />
-        <vers num="6.5.2-6" />
-        <vers num="6.5.2-7" />
-        <vers num="6.5.2-8" />
-        <vers num="6.5.2-9" />
-        <vers num="6.5.3" />
-        <vers num="6.5.3-1" />
-        <vers num="6.5.3-10" />
-        <vers num="6.5.3-3" />
-        <vers num="6.5.3-4" />
-        <vers num="6.5.3-5" />
-        <vers num="6.5.3-6" />
-        <vers num="6.5.3-7" />
-        <vers num="6.5.3-8" />
-        <vers num="6.5.4" />
-        <vers num="6.5.4-1" />
-        <vers num="6.5.4-10" />
-        <vers num="6.5.4-2" />
-        <vers num="6.5.4-3" />
-        <vers num="6.5.4-4" />
-        <vers num="6.5.4-5" />
-        <vers num="6.5.4-6" />
-        <vers num="6.5.4-7" />
-        <vers num="6.5.4-8" />
-        <vers num="6.5.4-9" />
-        <vers num="6.5.5" />
-        <vers num="6.5.5-1" />
-        <vers num="6.5.5-10" />
-        <vers num="6.5.5-2" />
-        <vers num="6.5.5-3" />
-        <vers num="6.5.5-4" />
-        <vers num="6.5.5-5" />
-        <vers num="6.5.5-6" />
-        <vers num="6.5.5-7" />
-        <vers num="6.5.5-8" />
-        <vers num="6.5.5-9" />
-        <vers num="6.5.6" />
-        <vers num="6.5.6-10" />
-        <vers num="6.5.6-2" />
-        <vers num="6.5.6-3" />
-        <vers num="6.5.6-4" />
-        <vers num="6.5.6-5" />
-        <vers num="6.5.6-6" />
-        <vers num="6.5.6-7" />
-        <vers num="6.5.6-8" />
-        <vers num="6.5.6-9" />
-        <vers num="6.5.7" />
-        <vers num="6.5.7-1" />
-        <vers num="6.5.7-2" />
-        <vers num="6.5.7-3" />
-        <vers num="6.5.7-4" />
-        <vers num="6.5.7-5" />
-        <vers num="6.5.7-6" />
-        <vers num="6.5.7-7" />
-        <vers num="6.5.7-8" />
-        <vers num="6.5.7-9" />
-        <vers num="6.5.8" />
-        <vers num="6.5.8-1" />
-        <vers num="6.5.8-2" />
-        <vers num="6.5.8-3" />
-        <vers num="6.5.8-4" />
-        <vers num="6.5.8-5" />
-        <vers num="6.5.8-6" />
-        <vers num="6.5.8-7" />
-        <vers num="6.5.8-8" />
-        <vers num="6.5.8-9" />
-        <vers num="6.5.9" />
-        <vers num="6.5.9-1" />
-        <vers num="6.5.9-10" />
-        <vers num="6.5.9-2" />
-        <vers num="6.5.9-3" />
-        <vers num="6.5.9-4" />
-        <vers num="6.5.9-5" />
-        <vers num="6.5.9-6" />
-        <vers num="6.5.9-7" />
-        <vers num="6.5.9-8" />
-        <vers num="6.6.0" />
-        <vers num="6.6.0-1" />
-        <vers num="6.6.0-10" />
-        <vers num="6.6.0-2" />
-        <vers num="6.6.0-4" />
-        <vers num="6.6.0-5" />
-        <vers num="6.6.0-6" />
-        <vers num="6.6.0-7" />
-        <vers num="6.6.0-8" />
-        <vers num="6.6.0-9" />
-        <vers num="6.6.1" />
-        <vers num="6.6.1-1" />
-        <vers num="6.6.1-10" />
-        <vers num="6.6.1-2" />
-        <vers num="6.6.1-3" />
-        <vers num="6.6.1-4" />
-        <vers num="6.6.1-5" />
-        <vers num="6.6.1-6" />
-        <vers num="6.6.1-7" />
-        <vers num="6.6.1-8" />
-        <vers num="6.6.1-9" />
-        <vers num="6.6.2" />
-        <vers num="6.6.2-1" />
-        <vers num="6.6.2-10" />
-        <vers num="6.6.2-2" />
-        <vers num="6.6.2-3" />
-        <vers num="6.6.2-4" />
-        <vers num="6.6.2-5" />
-        <vers num="6.6.2-6" />
-        <vers num="6.6.2-7" />
-        <vers num="6.6.2-8" />
-        <vers num="6.6.2-9" />
-        <vers num="6.6.3" />
-        <vers num="6.6.3-1" />
-        <vers num="6.6.3-10" />
-        <vers num="6.6.3-2" />
-        <vers num="6.6.3-3" />
-        <vers num="6.6.3-4" />
-        <vers num="6.6.3-5" />
-        <vers num="6.6.3-6" />
-        <vers num="6.6.3-7" />
-        <vers num="6.6.4" />
-        <vers num="6.6.4-1" />
-        <vers num="6.6.4-10" />
-        <vers num="6.6.4-2" />
-        <vers num="6.6.4-4" />
-        <vers num="6.6.4-5" />
-        <vers num="6.6.4-6" />
-        <vers num="6.6.4-7" />
-        <vers num="6.6.4-8" />
-        <vers num="6.6.4-9" />
-        <vers num="6.6.5" />
-        <vers num="6.6.5-1" />
-        <vers num="6.6.5-10" />
-        <vers num="6.6.5-2" />
-        <vers num="6.6.5-3" />
-        <vers num="6.6.5-4" />
-        <vers num="6.6.5-5" />
-        <vers num="6.6.5-6" />
-        <vers num="6.6.5-7" />
-        <vers num="6.6.5-8" />
-        <vers num="6.6.5-9" />
-        <vers num="6.6.6-0" />
-        <vers num="6.6.6-1" />
-        <vers num="6.6.6-10" />
-        <vers num="6.6.6-2" />
-        <vers num="6.6.6-3" />
-        <vers num="6.6.6-4" />
-        <vers num="6.6.6-5" />
-        <vers num="6.6.6-6" />
-        <vers num="6.6.6-7" />
-        <vers num="6.6.6-8" />
-        <vers num="6.6.6-9" />
-        <vers num="6.6.7-0" />
-        <vers num="6.6.7-1" />
-        <vers num="6.6.7-10" />
-        <vers num="6.6.7-2" />
-        <vers num="6.6.7-3" />
-        <vers num="6.6.7-4" />
-        <vers num="6.6.7-5" />
-        <vers num="6.6.7-6" />
-        <vers num="6.6.7-7" />
-        <vers num="6.6.7-8" />
-        <vers num="6.6.7-9" />
-        <vers num="6.6.8-0" />
-        <vers num="6.6.9-0" />
-        <vers num="6.6.9-1" />
-        <vers num="6.6.9-10" />
-        <vers num="6.6.9-2" />
-        <vers num="6.6.9-3" />
-        <vers num="6.6.9-4" />
-        <vers num="6.6.9-5" />
-        <vers num="6.6.9-6" />
-        <vers num="6.6.9-7" />
-        <vers num="6.6.9-8" />
-        <vers num="6.6.9-9" />
-        <vers num="6.7.0-0" />
-        <vers num="6.7.0-1" />
-        <vers num="6.7.0-10" />
-        <vers num="6.7.0-2" />
-        <vers num="6.7.0-3" />
-        <vers num="6.7.0-4" />
-        <vers num="6.7.0-5" />
-        <vers num="6.7.0-6" />
-        <vers num="6.7.0-7" />
-        <vers num="6.7.0-8" />
-        <vers num="6.7.0-9" />
-        <vers num="6.7.1-0" />
-        <vers num="6.7.1-1" />
-        <vers num="6.7.1-10" />
-        <vers num="6.7.1-2" />
-        <vers num="6.7.1-3" />
-        <vers num="6.7.1-4" />
-        <vers num="6.7.1-5" />
-        <vers num="6.7.1-6" />
-        <vers num="6.7.1-7" />
-        <vers num="6.7.1-8" />
-        <vers num="6.7.1-9" />
-        <vers num="6.7.2-0" />
-        <vers num="6.7.2-1" />
-        <vers num="6.7.2-10" />
-        <vers num="6.7.2-2" />
-        <vers num="6.7.2-3" />
-        <vers num="6.7.2-4" />
-        <vers num="6.7.2-5" />
-        <vers num="6.7.2-6" />
-        <vers num="6.7.2-7" />
-        <vers num="6.7.2-8" />
-        <vers num="6.7.2-9" />
-        <vers num="6.7.3-0" />
-        <vers num="6.7.3-1" />
-        <vers num="6.7.3-10" />
-        <vers num="6.7.3-2" />
-        <vers num="6.7.3-3" />
-        <vers num="6.7.3-4" />
-        <vers num="6.7.3-5" />
-        <vers num="6.7.3-6" />
-        <vers num="6.7.3-7" />
-        <vers num="6.7.3-8" />
-        <vers num="6.7.3-9" />
-        <vers num="6.7.4-0" />
-        <vers num="6.7.4-1" />
-        <vers num="6.7.4-10" />
-        <vers num="6.7.4-2" />
-        <vers num="6.7.4-3" />
-        <vers num="6.7.4-4" />
-        <vers num="6.7.4-5" />
-        <vers num="6.7.4-6" />
-        <vers num="6.7.4-7" />
-        <vers num="6.7.4-8" />
-        <vers num="6.7.4-9" />
-        <vers num="6.7.5-0" />
-        <vers num="6.7.5-1" />
-        <vers num="6.7.5-10" />
-        <vers num="6.7.5-2" />
-        <vers num="6.7.5-3" />
-        <vers num="6.7.5-4" />
-        <vers num="6.7.5-5" />
-        <vers num="6.7.5-6" />
-        <vers num="6.7.5-7" />
-        <vers num="6.7.5-8" />
-        <vers num="6.7.5-9" />
-        <vers num="6.7.6-0" />
-        <vers num="6.7.6-1" />
-        <vers num="6.7.6-2" />
-        <vers prev="1" num="6.7.6-3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1611" published="2012-09-06" name="CVE-2012-1611" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Joomla! 2.5.x before 2.5.4 does not properly check permissions, which allows attackers to obtain sensitive "administrative back end" information via unknown attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/03/5" source="MLIST">[oss-security] 20120403 Re: CVE-request: Joomla 2012-04 398-20120307 399-20120308</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/03/3" source="MLIST">[oss-security] 20120403 CVE-request: Joomla 2012-04 398-20120307 399-20120308</ref>
-      <ref url="http://secunia.com/advisories/48683" source="SECUNIA" adv="1">48683</ref>
-      <ref url="http://developer.joomla.org/security/news/398-20120307-core-information-disclosure.html" source="CONFIRM" adv="1">http://developer.joomla.org/security/news/398-20120307-core-information-disclosure.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="joomla" name="joomla!">
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1612" published="2012-09-06" name="CVE-2012-1612" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the update manager in Joomla! 2.5.x before 2.5.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52859" source="BID">52859</ref>
-      <ref url="http://www.osvdb.org/80880" source="OSVDB">80880</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/03/5" source="MLIST">[oss-security] 20120403 Re: CVE-request: Joomla 2012-04 398-20120307 399-20120308</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/03/3" source="MLIST">[oss-security] 20120403 CVE-request: Joomla 2012-04 398-20120307 399-20120308</ref>
-      <ref url="http://secunia.com/advisories/48683" source="SECUNIA" adv="1">48683</ref>
-      <ref url="http://developer.joomla.org/security/news/399-20120308-core-xss-vulnerability.html" source="CONFIRM" adv="1">http://developer.joomla.org/security/news/399-20120308-core-xss-vulnerability.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="joomla" name="joomla!">
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1613" published="2012-09-04" name="CVE-2012-1613" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://forum.coppermine-gallery.net/index.php/topic,74682.0.html" source="CONFIRM" patch="1">http://forum.coppermine-gallery.net/index.php/topic,74682.0.html</ref>
-      <ref url="http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&amp;r2=8354" source="CONFIRM" patch="1">http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&amp;r2=8354</ref>
-      <ref url="http://www.waraxe.us/advisory-81.html" source="MISC">http://www.waraxe.us/advisory-81.html</ref>
-      <ref url="http://www.securityfocus.com/bid/52818" source="BID">52818</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/03/6" source="MLIST">[oss-security] 20120403 Re: CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/30/6" source="MLIST">[oss-security] 20120330 Re: CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/30/5" source="MLIST">[oss-security] 20120330 CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081</ref>
-      <ref url="http://www.exploit-db.com/exploits/18680" source="EXPLOIT-DB">18680</ref>
-      <ref url="http://secunia.com/advisories/48643" source="SECUNIA" adv="1">48643</ref>
-      <ref url="http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html" source="MISC">http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html</ref>
-      <ref url="http://osvdb.org/80731" source="OSVDB">80731</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html" source="BUGTRAQ">20120329 [waraxe-2012-SA#081] - Multiple Vulnerabilities in Coppermine 1.5.18</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="coppermine-gallery" name="coppermine_photo_gallery">
-        <vers num="1.0" edition="rc3" />
-        <vers num="1.1" edition="beta_2" />
-        <vers num="1.1.0" />
-        <vers num="1.2" />
-        <vers num="1.2.0" edition="rc2" />
-        <vers num="1.2.1" edition="b" />
-        <vers num="1.2.1" edition="b-nuke" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.3.4" />
-        <vers num="1.3.5" />
-        <vers num="1.4.0" edition="alpha" />
-        <vers num="1.4.0" edition="beta" />
-        <vers num="1.4.1" edition="beta" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.15" />
-        <vers num="1.4.16" />
-        <vers num="1.4.17" />
-        <vers num="1.4.18" />
-        <vers num="1.4.19" />
-        <vers num="1.4.2" />
-        <vers num="1.4.20" />
-        <vers num="1.4.21" />
-        <vers num="1.4.22" />
-        <vers num="1.4.23" />
-        <vers num="1.4.24" />
-        <vers num="1.4.25" />
-        <vers num="1.4.26" />
-        <vers num="1.4.27" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.5.1" edition="alpha" />
-        <vers num="1.5.10" />
-        <vers num="1.5.12" />
-        <vers num="1.5.14" />
-        <vers num="1.5.16" />
-        <vers prev="1" num="1.5.18" />
-        <vers num="1.5.2" edition="beta" />
-        <vers num="1.5.3" edition="rc" />
-        <vers num="1.5.4" />
-        <vers num="1.5.6" />
-        <vers num="1.5.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1614" published="2012-09-04" name="CVE-2012-1614" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visiblehookpoints/index.php, an invalid (2) page or (3) cat parameter to thumbnails.php, an invalid (4) page parameter to usermgr.php, or an invalid (5) newer_than or (6) older_than parameter to search.inc.php, which reveals the installation path in an error message.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&amp;r2=8354" source="CONFIRM" patch="1">http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&amp;r2=8354</ref>
-      <ref url="http://www.waraxe.us/advisory-81.html" source="MISC">http://www.waraxe.us/advisory-81.html</ref>
-      <ref url="http://www.securityfocus.com/bid/52818" source="BID">52818</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/03/6" source="MLIST">[oss-security] 20120403 Re: CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/30/6" source="MLIST">[oss-security] 20120330 Re: CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/30/5" source="MLIST">[oss-security] 20120330 CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081</ref>
-      <ref url="http://www.exploit-db.com/exploits/18680" source="EXPLOIT-DB">18680</ref>
-      <ref url="http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html" source="MISC">http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html</ref>
-      <ref url="http://osvdb.org/80735" source="OSVDB">80735</ref>
-      <ref url="http://osvdb.org/80734" source="OSVDB">80734</ref>
-      <ref url="http://osvdb.org/80733" source="OSVDB">80733</ref>
-      <ref url="http://osvdb.org/80732" source="OSVDB">80732</ref>
-      <ref url="http://forum.coppermine-gallery.net/index.php/topic,74682.0.html" source="CONFIRM">http://forum.coppermine-gallery.net/index.php/topic,74682.0.html</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html" source="BUGTRAQ">20120329 [waraxe-2012-SA#081] - Multiple Vulnerabilities in Coppermine 1.5.18</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="coppermine-gallery" name="coppermine_photo_gallery">
-        <vers num="1.0" edition="rc3" />
-        <vers num="1.1" edition="beta_2" />
-        <vers num="1.1.0" />
-        <vers num="1.2" />
-        <vers num="1.2.0" edition="rc2" />
-        <vers num="1.2.1" edition="b" />
-        <vers num="1.2.1" edition="b-nuke" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.3.4" />
-        <vers num="1.3.5" />
-        <vers num="1.4" edition="beta" />
-        <vers num="1.4.0" edition="alpha" />
-        <vers num="1.4.0" edition="beta" />
-        <vers num="1.4.1" edition="beta" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.15" />
-        <vers num="1.4.16" />
-        <vers num="1.4.17" />
-        <vers num="1.4.18" />
-        <vers num="1.4.19" />
-        <vers num="1.4.2" />
-        <vers num="1.4.20" />
-        <vers num="1.4.21" />
-        <vers num="1.4.22" />
-        <vers num="1.4.23" />
-        <vers num="1.4.24" />
-        <vers num="1.4.25" />
-        <vers num="1.4.26" />
-        <vers num="1.4.27" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.5.1" edition="alpha" />
-        <vers num="1.5.10" />
-        <vers num="1.5.12" />
-        <vers num="1.5.14" />
-        <vers num="1.5.16" />
-        <vers prev="1" num="1.5.18" />
-        <vers num="1.5.2" edition="beta" />
-        <vers num="1.5.3" edition="rc" />
-        <vers num="1.5.4" />
-        <vers num="1.5.6" />
-        <vers num="1.5.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1616" published="2012-06-21" name="CVE-2012-1616" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=809697" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=809697</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75162" source="XF">argyll-icc-code-execution(75162)</ref>
-      <ref url="http://www.securityfocus.com/bid/53240" source="BID">53240</ref>
-      <ref url="http://www.osvdb.org/81617" source="OSVDB">81617</ref>
-      <ref url="http://www.argyllcms.com/icc_readme.html" source="MISC">http://www.argyllcms.com/icc_readme.html</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201206-04.xml" source="GENTOO">GLSA-201206-04</ref>
-      <ref url="http://secunia.com/advisories/49602" source="SECUNIA" adv="1">49602</ref>
-      <ref url="http://secunia.com/advisories/48921" source="SECUNIA" adv="1">48921</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079762.html" source="FEDORA">FEDORA-2012-6529</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="argyllcms" name="argyllcms">
-        <vers num="0.1.0" />
-        <vers num="0.2.0" />
-        <vers num="0.2.1" />
-        <vers num="0.2.2" />
-        <vers num="0.3.0" />
-        <vers num="0.6.0" />
-        <vers num="0.7.0" edition="beta_8" />
-        <vers num="1.0.0" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2.0" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.3.4" />
-        <vers num="1.3.5" />
-        <vers num="1.3.6" />
-        <vers prev="1" num="1.3.7" />
-      </prod>
-      <prod vendor="color" name="icclib">
-        <vers num="1.23" />
-        <vers num="2.00" />
-        <vers num="2.02" />
-        <vers num="2.03" />
-        <vers prev="1" num="2.11" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1620" published="2012-07-12" name="CVE-2012-1620" modified="2012-07-16" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="3.6" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.9" CVSS_base_score="3.6">
-    <desc>
-      <descript source="cve">slock 0.9 does not properly handle the XRaiseWindow event when the screen is locked, which might allow physically proximate attackers to obtain sensitive information by pressing a button, which reveals the desktop and active windows.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://hg.suckless.org/slock/rev/891a4984aba6" source="CONFIRM" patch="1">http://hg.suckless.org/slock/rev/891a4984aba6</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=786310" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=786310</ref>
-      <ref url="https://bugs.gentoo.org/show_bug.cgi?id=401645" source="MISC">https://bugs.gentoo.org/show_bug.cgi?id=401645</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74666" source="XF">slock-xraisewindow-sec-bypass(74666)</ref>
-      <ref url="http://www.osvdb.org/81035" source="OSVDB">81035</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/06/2" source="MLIST">[oss-security] 20120405 Re: CVE Request: slock-0.9 displays modal box after locking</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/06/1" source="MLIST">[oss-security] 20120405 CVE Request: slock-0.9 displays modal box after locking</ref>
-      <ref url="http://secunia.com/advisories/48700" source="SECUNIA" adv="1">48700</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="suckless" name="slock">
-        <vers num="0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1635" published="2012-08-28" name="CVE-2012-1635" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The hook_node_access function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even when it is called to check permissions of other users, which allows remote attackers to bypass intended access restrictions, as demonstrated when using the XML sitemap module to obtain sensitive information about unpublished content.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://drupal.org/node/1409268" source="MISC" patch="1" adv="1">https://drupal.org/node/1409268</ref>
-      <ref url="http://drupal.org/node/1407456" source="CONFIRM" patch="1">http://drupal.org/node/1407456</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rik_de_boer" name="revisioning">
-        <vers num="7.x-1.0" edition="alpha1" />
-        <vers num="7.x-1.0" edition="alpha2" />
-        <vers num="7.x-1.0" edition="alpha3" />
-        <vers num="7.x-1.0" edition="alpha4" />
-        <vers num="7.x-1.0" edition="alpha5" />
-        <vers num="7.x-1.0" edition="beta1" />
-        <vers num="7.x-1.0" edition="beta10" />
-        <vers num="7.x-1.0" edition="beta11" />
-        <vers num="7.x-1.0" edition="beta2" />
-        <vers num="7.x-1.0" edition="beta3" />
-        <vers num="7.x-1.0" edition="beta4" />
-        <vers num="7.x-1.0" edition="beta5" />
-        <vers num="7.x-1.0" edition="beta6" />
-        <vers num="7.x-1.0" edition="beta7" />
-        <vers num="7.x-1.0" edition="beta8" />
-        <vers num="7.x-1.0" edition="beta9" />
-        <vers num="7.x-1.1" />
-        <vers num="7.x-1.2" />
-        <vers num="7.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1641" published="2012-08-28" name="CVE-2012-1641" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote authenticated users with the administer finder permission to execute arbitrary PHP code via admin/build/finder/import.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1432320" source="CONFIRM" patch="1">http://drupal.org/node/1432320</ref>
-      <ref url="http://drupal.org/node/1432318" source="CONFIRM" patch="1">http://drupal.org/node/1432318</ref>
-      <ref url="https://drupal.org/node/1432970" source="MISC" adv="1">https://drupal.org/node/1432970</ref>
-      <ref url="http://www.osvdb.org/79014" source="OSVDB">79014</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/19/9" source="MLIST">[oss-security] 20120319 Re: CVE-request: Drupal Finder SA-CONTRIB-2012-017</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/16/9" source="MLIST">[oss-security] 20120316 CVE-request: Drupal Finder SA-CONTRIB-2012-017</ref>
-      <ref url="http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities" source="MISC">http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities</ref>
-      <ref url="http://secunia.com/advisories/47943" source="SECUNIA" adv="1">47943</ref>
-      <ref url="http://secunia.com/advisories/47915" source="SECUNIA" adv="1">47915</ref>
-      <ref url="http://drupalcode.org/project/finder.git/commit/bc0cc82" source="CONFIRM">http://drupalcode.org/project/finder.git/commit/bc0cc82</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="danielb" name="finder">
-        <vers num="6.x-1.0" edition="alpha1" />
-        <vers num="6.x-1.0" edition="alpha10" />
-        <vers num="6.x-1.0" edition="alpha11" />
-        <vers num="6.x-1.0" edition="alpha12" />
-        <vers num="6.x-1.0" edition="alpha13" />
-        <vers num="6.x-1.0" edition="alpha14" />
-        <vers num="6.x-1.0" edition="alpha15" />
-        <vers num="6.x-1.0" edition="alpha16" />
-        <vers num="6.x-1.0" edition="alpha17" />
-        <vers num="6.x-1.0" edition="alpha18" />
-        <vers num="6.x-1.0" edition="alpha19" />
-        <vers num="6.x-1.0" edition="alpha2" />
-        <vers num="6.x-1.0" edition="alpha20" />
-        <vers num="6.x-1.0" edition="alpha21" />
-        <vers num="6.x-1.0" edition="alpha22" />
-        <vers num="6.x-1.0" edition="alpha23" />
-        <vers num="6.x-1.0" edition="alpha24" />
-        <vers num="6.x-1.0" edition="alpha25" />
-        <vers num="6.x-1.0" edition="alpha26" />
-        <vers num="6.x-1.0" edition="alpha27" />
-        <vers num="6.x-1.0" edition="alpha28" />
-        <vers num="6.x-1.0" edition="alpha3" />
-        <vers num="6.x-1.0" edition="alpha4" />
-        <vers num="6.x-1.0" edition="alpha5" />
-        <vers num="6.x-1.0" edition="alpha6" />
-        <vers num="6.x-1.0" edition="alpha7" />
-        <vers num="6.x-1.0" edition="alpha8" />
-        <vers num="6.x-1.0" edition="alpha9" />
-        <vers num="6.x-1.0" edition="beta1" />
-        <vers num="6.x-1.0" edition="beta2" />
-        <vers num="6.x-1.0" edition="beta3" />
-        <vers num="6.x-1.0" edition="rc1" />
-        <vers num="6.x-1.0" edition="rc2" />
-        <vers num="6.x-1.0" edition="rc3" />
-        <vers num="6.x-1.0" edition="rc4" />
-        <vers num="6.x-1.0" edition="unstable0" />
-        <vers num="6.x-1.0" edition="unstable1" />
-        <vers num="6.x-1.0" edition="unstable2" />
-        <vers num="6.x-1.0" edition="unstable3" />
-        <vers num="6.x-1.0" edition="unstable4" />
-        <vers num="6.x-1.0" edition="unstable5" />
-        <vers num="6.x-1.0" edition="unstable6" />
-        <vers num="6.x-1.0" edition="unstable7" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.10" />
-        <vers num="6.x-1.11" />
-        <vers num="6.x-1.12" />
-        <vers num="6.x-1.13" />
-        <vers num="6.x-1.14" />
-        <vers num="6.x-1.15" />
-        <vers num="6.x-1.16" />
-        <vers num="6.x-1.17" />
-        <vers num="6.x-1.18" />
-        <vers num="6.x-1.19" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.20" />
-        <vers num="6.x-1.21" />
-        <vers num="6.x-1.23" />
-        <vers num="6.x-1.24" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="6.x-1.5" />
-        <vers num="6.x-1.6" />
-        <vers num="6.x-1.7" />
-        <vers num="6.x-1.8" />
-        <vers num="6.x-1.9" />
-        <vers num="6.x-1.x-dev" />
-        <vers num="7.x-1.0" />
-        <vers num="7.x-1.1" />
-        <vers num="7.x-1.2" />
-        <vers num="7.x-1.3" />
-        <vers num="7.x-1.4" />
-        <vers num="7.x-1.5" />
-        <vers num="7.x-1.6" />
-        <vers num="7.x-1.x" edition="dev" />
-        <vers num="7.x-2.0" edition="alpha1" />
-        <vers num="7.x-2.0" edition="alpha2" />
-        <vers num="7.x-2.0" edition="alpha3" />
-        <vers num="7.x-2.0" edition="alpha4" />
-        <vers num="7.x-2.0" edition="alpha5" />
-        <vers num="7.x-2.0" edition="alpha6" />
-        <vers num="7.x-2.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1642" published="2012-08-28" name="CVE-2012-1642" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">includes/linkchecker.pages.inc in the Link checker module 6.x-2.x before 6.x-2.5 for Drupal does not properly enforce access permissions on broken links, which allows remote attackers to obtain sensitive information via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://drupal.org/node/1441252" source="MISC" patch="1" adv="1">https://drupal.org/node/1441252</ref>
-      <ref url="http://drupalcode.org/project/linkchecker.git/commit/fef0ddf" source="CONFIRM" patch="1">http://drupalcode.org/project/linkchecker.git/commit/fef0ddf</ref>
-      <ref url="http://drupal.org/node/1440508" source="CONFIRM" patch="1">http://drupal.org/node/1440508</ref>
-      <ref url="http://www.osvdb.org/79315" source="OSVDB">79315</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48022" source="SECUNIA" adv="1">48022</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="yaml-fuer-drupal" name="linkchecker">
-        <vers num="6.x-2.0" />
-        <vers num="6.x-2.1" />
-        <vers num="6.x-2.2" />
-        <vers num="6.x-2.3" />
-        <vers num="6.x-2.4" />
-        <vers num="6.x-2.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1643" published="2012-08-28" name="CVE-2012-1643" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Faster Permissions module 7.x-2.x before 7.x-1.2 for Drupal does not check the "administer permissions" permission, which allows remote attackers to modify access permissions via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://drupal.org/node/1441448" source="MISC" patch="1" adv="1">https://drupal.org/node/1441448</ref>
-      <ref url="http://drupalcode.org/project/fp.git/commitdiff/39e7587" source="CONFIRM" patch="1">http://drupalcode.org/project/fp.git/commitdiff/39e7587</ref>
-      <ref url="http://drupal.org/node/1441556" source="CONFIRM" patch="1">http://drupal.org/node/1441556</ref>
-      <ref url="http://www.osvdb.org/79316" source="OSVDB">79316</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48019" source="SECUNIA" adv="1">48019</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="jason_savino" name="fp">
-        <vers num="7.x-1.0" />
-        <vers num="7.x-1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1644" published="2012-08-28" name="CVE-2012-1644" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">The Organic Groups (OG) Vocabulary module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with certain administrator permissions to modify the vocabularies of other groups via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://drupal.org/node/1441450" source="MISC" patch="1" adv="1">https://drupal.org/node/1441450</ref>
-      <ref url="http://drupalcode.org/project/og_vocab.git/commitdiff/cd8de08" source="CONFIRM" patch="1">http://drupalcode.org/project/og_vocab.git/commitdiff/cd8de08</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/53902" source="XF">ogvocabulary-title-xss(53902)</ref>
-      <ref url="http://www.osvdb.org/79336" source="OSVDB">79336</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48020" source="SECUNIA" adv="1">48020</ref>
-      <ref url="http://drupal.org/node/1441086" source="CONFIRM">http://drupal.org/node/1441086</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gizra" name="og_vocab">
-        <vers num="6.x-1.0" edition="rc1" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1645" published="2012-08-28" name="CVE-2012-1645" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:N/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option enabled, allows remote attackers to read arbitrary PHP files via unspecified vectors, as demonstrated by reading settings.php.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://drupal.org/node/1441502" source="MISC" patch="1" adv="1">https://drupal.org/node/1441502</ref>
-      <ref url="http://drupalcode.org/project/cdn.git/commitdiff/eca85e6" source="CONFIRM" patch="1">http://drupalcode.org/project/cdn.git/commitdiff/eca85e6</ref>
-      <ref url="http://drupalcode.org/project/cdn.git/commitdiff/cd2a5ff" source="CONFIRM" patch="1">http://drupalcode.org/project/cdn.git/commitdiff/cd2a5ff</ref>
-      <ref url="http://drupal.org/node/1441482" source="CONFIRM" patch="1">http://drupal.org/node/1441482</ref>
-      <ref url="http://www.osvdb.org/79317" source="OSVDB">79317</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48032" source="SECUNIA" adv="1">48032</ref>
-      <ref url="http://drupal.org/node/1441480" source="CONFIRM">http://drupal.org/node/1441480</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wimleers" name="cdn">
-        <vers num="6.x-2.2" />
-        <vers num="7.x-2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1647" published="2012-08-28" name="CVE-2012-1647" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the "stand alone PHP application for the OSM Player," as used in the MediaFront module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Drupal, allow remote attackers to inject arbitrary web script or HTML via (1) $_SERVER['HTTP_HOST'] or (2) $_SERVER['SCRIPT_NAME'] to players/osmplayer/player/OSMPlayer.php, (3) playlist parameter to players/osmplayer/player/getplaylist.php, and possibly other vectors related to $_SESSION.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://drupal.org/node/1461424" source="MISC" patch="1" adv="1">https://drupal.org/node/1461424</ref>
-      <ref url="https://drupal.org/node/1460894" source="CONFIRM" patch="1">https://drupal.org/node/1460894</ref>
-      <ref url="https://drupal.org/node/1460892" source="CONFIRM" patch="1">https://drupal.org/node/1460892</ref>
-      <ref url="http://drupalcode.org/project/mediafront.git/commitdiff/b3857aa" source="CONFIRM" patch="1">http://drupalcode.org/project/mediafront.git/commitdiff/b3857aa</ref>
-      <ref url="http://drupalcode.org/project/mediafront.git/commitdiff/6300750" source="CONFIRM" patch="1">http://drupalcode.org/project/mediafront.git/commitdiff/6300750</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73606" source="XF">mediafront-phplibrary-xss(73606)</ref>
-      <ref url="http://www.securityfocus.com/bid/52229" source="BID">52229</ref>
-      <ref url="http://www.osvdb.org/79684" source="OSVDB">79684</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mediafront" name="mediafront">
-        <vers num="6.x-1.0" edition="beta1" />
-        <vers num="6.x-1.0" edition="beta2" />
-        <vers num="6.x-1.0" edition="beta4" />
-        <vers num="6.x-1.0" edition="beta5" />
-        <vers num="6.x-1.0" edition="rc1" />
-        <vers num="6.x-1.0" edition="rc2" />
-        <vers num="6.x-1.0" edition="rc3" />
-        <vers num="6.x-1.0" edition="rc4" />
-        <vers num="6.x-1.0" edition="rc5" />
-        <vers num="6.x-1.0" edition="rc6" />
-        <vers num="6.x-1.0" edition="rc7" />
-        <vers num="6.x-1.0" edition="rc8" />
-        <vers num="6.x-1.0" edition="rc9" />
-        <vers num="6.x-1.0-beta3" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1648" published="2012-09-09" name="CVE-2012-1648" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73607" source="XF">coolaid-helpmessages-xss(73607)</ref>
-      <ref url="http://www.securityfocus.com/bid/52232" source="BID">52232</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48196" source="SECUNIA" adv="1">48196</ref>
-      <ref url="http://osvdb.org/79712" source="OSVDB">79712</ref>
-      <ref url="http://drupal.org/node/1461438" source="MISC" adv="1">http://drupal.org/node/1461438</ref>
-      <ref url="http://drupal.org/node/1417186" source="CONFIRM">http://drupal.org/node/1417186</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="danielb" name="cool_aid">
-        <vers num="6.x-1.0" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="6.x-1.6" />
-        <vers num="6.x-1.7" />
-        <vers prev="1" num="6.x-1.8" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1649" published="2012-09-09" name="CVE-2012-1649" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:P)" CVSS_score="4.9" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="6.8" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1417186" source="CONFIRM" patch="1">http://drupal.org/node/1417186</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73608" source="XF">coolaid-helpmessages-security-bypass(73608)</ref>
-      <ref url="http://www.securityfocus.com/bid/52232" source="BID">52232</ref>
-      <ref url="http://www.osvdb.org/79772" source="OSVDB">79772</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48196" source="SECUNIA" adv="1">48196</ref>
-      <ref url="http://drupal.org/node/1461438" source="MISC" adv="1">http://drupal.org/node/1461438</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="danielb" name="cool_aid">
-        <vers num="6.x-1.0" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="6.x-1.6" />
-        <vers num="6.x-1.7" />
-        <vers prev="1" num="6.x-1.8" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1650" published="2012-08-28" name="CVE-2012-1650" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">The ZipCart module 6.x before 6.x-1.4 for Drupal checks the "access content" permission instead of the "access ZipCart downloads" permission when building archives, which allows remote authenticated users with access content permission to bypass intended access restrictions.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://drupal.org/node/1461446" source="MISC" patch="1" adv="1">https://drupal.org/node/1461446</ref>
-      <ref url="https://drupal.org/node/1460892" source="CONFIRM" patch="1">https://drupal.org/node/1460892</ref>
-      <ref url="http://drupalcode.org/project/zipcart.git/commitdiff/fe143c2" source="CONFIRM" patch="1">http://drupalcode.org/project/zipcart.git/commitdiff/fe143c2</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73609" source="XF">zipcart-archives-security-bypass(73609)</ref>
-      <ref url="http://www.securityfocus.com/bid/52231" source="BID">52231</ref>
-      <ref url="http://www.osvdb.org/79766" source="OSVDB">79766</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="giantrobot" name="zipcart">
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1661" published="2012-07-12" name="CVE-2012-1661" modified="2012-07-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map (.mxd) file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027170" source="SECTRACK">1027170</ref>
-      <ref url="http://www.osvdb.org/82986" source="OSVDB">82986</ref>
-      <ref url="http://www.exploit-db.com/exploits/19138" source="EXPLOIT-DB">19138</ref>
-      <ref url="http://www.cs.umb.edu/~joecohen/exploits/CVE-2012-1661/" source="MISC">http://www.cs.umb.edu/~joecohen/exploits/CVE-2012-1661/</ref>
-      <ref url="http://packetstormsecurity.org/files/113644/ESRI-ArcMap-Arbitrary-Code-Execution.html" source="MISC">http://packetstormsecurity.org/files/113644/ESRI-ArcMap-Arbitrary-Code-Execution.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="esri" name="arcgis">
-        <vers prev="1" num="10.0.2.3200" />
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="esri" name="arcmap">
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1662" published="2012-03-21" name="CVE-2012-1662" modified="2012-04-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">CA ARCserve Backup r12.0 through SP2, r12.5 before SP2, r15 through SP1, and r16 before SP1 on Windows allows remote attackers to cause a denial of service (service shutdown) via a crafted network request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7b983E3A52-8374-410A-82BD-B8788733C70F%7d" source="CONFIRM" adv="1">https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7b983E3A52-8374-410A-82BD-B8788733C70F%7d</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ca" name="arcserve_backup">
-        <vers num="r12.0" edition="sp1" />
-        <vers num="r12.0" edition="sp2" />
-        <vers num="r12.5" edition="sp1" />
-        <vers num="r15.0" edition="sp1" />
-        <vers num="r16.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1663" published="2012-03-13" name="CVE-2012-1663" modified="2012-03-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted certificate list.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5866" source="MLIST" patch="1">[gnutls-devel] 20120224 gnutls 3.0.14</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnu" name="gnutls">
-        <vers num="1.0.16" />
-        <vers num="1.0.17" />
-        <vers num="1.0.18" />
-        <vers num="1.0.19" />
-        <vers num="1.0.20" />
-        <vers num="1.0.21" />
-        <vers num="1.0.22" />
-        <vers num="1.0.23" />
-        <vers num="1.0.24" />
-        <vers num="1.0.25" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.20" />
-        <vers num="1.1.21" />
-        <vers num="1.1.22" />
-        <vers num="1.1.23" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.10" />
-        <vers num="1.2.11" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers num="1.2.8" />
-        <vers num="1.2.8.1a1" />
-        <vers num="1.2.9" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.3.4" />
-        <vers num="1.3.5" />
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.5.0" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.7.0" />
-        <vers num="1.7.1" />
-        <vers num="1.7.10" />
-        <vers num="1.7.11" />
-        <vers num="1.7.12" />
-        <vers num="1.7.13" />
-        <vers num="1.7.14" />
-        <vers num="1.7.15" />
-        <vers num="1.7.16" />
-        <vers num="1.7.17" />
-        <vers num="1.7.18" />
-        <vers num="1.7.19" />
-        <vers num="1.7.2" />
-        <vers num="1.7.3" />
-        <vers num="1.7.4" />
-        <vers num="1.7.5" />
-        <vers num="1.7.6" />
-        <vers num="1.7.7" />
-        <vers num="1.7.8" />
-        <vers num="1.7.9" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.10.0" />
-        <vers num="2.10.1" />
-        <vers num="2.10.2" />
-        <vers num="2.10.3" />
-        <vers num="2.10.4" />
-        <vers num="2.10.5" />
-        <vers num="2.12.0" />
-        <vers num="2.12.1" />
-        <vers num="2.12.10" />
-        <vers num="2.12.11" />
-        <vers num="2.12.12" />
-        <vers num="2.12.13" />
-        <vers num="2.12.14" />
-        <vers num="2.12.2" />
-        <vers num="2.12.3" />
-        <vers num="2.12.4" />
-        <vers num="2.12.5" />
-        <vers num="2.12.6" />
-        <vers num="2.12.6.1" />
-        <vers num="2.12.7" />
-        <vers num="2.12.8" />
-        <vers num="2.12.9" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" />
-        <vers num="2.2.5" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.5.0" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.7.4" />
-        <vers num="2.8.0" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" />
-        <vers num="2.8.5" />
-        <vers num="2.8.6" />
-        <vers num="3.0" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers prev="1" num="3.0.13" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1666" published="2012-09-08" name="CVE-2012-1666" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware ESX 4.1 before U3 and 5.0 before P03 allows local users to gain privileges via a Trojan horse tpfc.dll file in the current working directory.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426 Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://www.vmware.com/support/vsphere4/doc/vsp_esxi41_u3_rel_notes.html#resolvedissuessecurity" source="CONFIRM">https://www.vmware.com/support/vsphere4/doc/vsp_esxi41_u3_rel_notes.html#resolvedissuessecurity</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-09/0013.html" source="BUGTRAQ">20120904 VMWare Tools susceptible to binary planting by hijack</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="fusion">
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers prev="1" num="4.1.1" />
-      </prod>
-      <prod vendor="vmware" name="player">
-        <vers num="4.0" />
-        <vers num="4.0.0.18997" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers prev="1" num="4.0.3" />
-      </prod>
-      <prod vendor="vmware" name="view">
-        <vers num="4.6.0" />
-        <vers prev="1" num="5.0" />
-      </prod>
-      <prod vendor="vmware" name="workstation">
-        <vers num="8.0" />
-        <vers num="8.0.0.18997" />
-        <vers num="8.0.1" />
-        <vers num="8.0.1.27038" />
-        <vers num="8.0.2" />
-        <vers prev="1" num="8.0.3" />
-      </prod>
-      <prod vendor="vmware" name="esx">
-        <vers num="4.1" />
-        <vers num="5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1667" published="2012-06-05" name="CVE-2012-1667" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:C)" CVSS_score="8.5" CVSS_impact_subscore="7.8" CVSS_exploit_subscore="10.0" CVSS_base_score="8.5">
-    <desc>
-      <descript source="cve">ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kb.isc.org/article/AA-00698" source="CONFIRM" adv="1">https://kb.isc.org/article/AA-00698</ref>
-      <ref url="http://www.isc.org/software/bind/advisories/cve-2012-1667" source="CONFIRM" adv="1">http://www.isc.org/software/bind/advisories/cve-2012-1667</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134132772016230&amp;w=2" source="HP">HPSBUX02795</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134132772016230&amp;w=2" source="HP">SSRT100878</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="isc" name="bind">
-        <vers num="9.4-esv" />
-        <vers num="9.6-esv" />
-        <vers num="9.6-esv-r5" edition="p1" />
-        <vers num="9.6-esv-r6" edition="b1" />
-        <vers num="9.6-esv-r6" edition="rc1" />
-        <vers num="9.6-esv-r6" edition="rc2" />
-        <vers num="9.6-esv-r7" />
-        <vers num="9.7.4" edition="p1" />
-        <vers num="9.7.5" edition="b1" />
-        <vers num="9.7.5" edition="rc1" />
-        <vers num="9.7.5" edition="rc2" />
-        <vers num="9.7.6" />
-        <vers num="9.8.1" edition="p1" />
-        <vers num="9.8.1" edition="rc1" />
-        <vers num="9.8.2" edition="b2" />
-        <vers num="9.8.2" edition="rc1" />
-        <vers num="9.8.2" edition="rc2" />
-        <vers num="9.8.3" />
-        <vers num="9.9.0" edition="a1" />
-        <vers num="9.9.0" edition="a2" />
-        <vers num="9.9.0" edition="a3" />
-        <vers num="9.9.0" edition="b1" />
-        <vers num="9.9.0" edition="b2" />
-        <vers num="9.9.0" edition="rc1" />
-        <vers num="9.9.0" edition="rc2" />
-        <vers num="9.9.0" edition="rc3" />
-        <vers num="9.9.0" edition="rc4" />
-        <vers num="9.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1670" published="2012-03-31" name="CVE-2012-1670" modified="2012-04-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">admin/index.php in PHP Grade Book before 1.9.5 BETA allows remote attackers to read the database via a SaveSQL action.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://downloads.sourceforge.net/project/php-gradebook/phpGradeBook%20-%20BETA/1.9.5/phpGradeBook1.9.5.zip" source="CONFIRM" patch="1">http://downloads.sourceforge.net/project/php-gradebook/phpGradeBook%20-%20BETA/1.9.5/phpGradeBook1.9.5.zip</ref>
-      <ref url="http://www.exploit-db.com/exploits/18647/" source="EXPLOIT-DB">18647</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="phpgradebook" name="php_grade_book">
-        <vers num="1.9.3" />
-        <vers prev="1" num="1.9.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1672" published="2012-04-11" name="CVE-2012-1672" modified="2012-04-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in getcity.php in Hotel Booking Portal 0.1 allows remote attackers to execute arbitrary SQL commands via the country parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/18702/" source="EXPLOIT-DB">18702</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="useasdf_4444" name="hotel_booking_portal">
-        <vers num="0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1673" published="2012-04-11" name="CVE-2012-1673" modified="2012-04-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in loginscript.php in e-ticketing allows remote attackers to execute arbitrary SQL commands via the password parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/18700/" source="EXPLOIT-DB">18700</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ola_lasisi" name="e-ticketing">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1674" published="2012-05-03" name="CVE-2012-1674" modified="2012-05-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="industry_applications">
-        <vers num="7.7" />
-        <vers num="7.8" />
-        <vers num="8.0.0.0" />
-        <vers num="8.1.1.0" />
-        <vers num="8.2.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1675" published="2012-05-08" name="CVE-2012-1675" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.0.5, as used in Oracle Fusion Middleware, Enterprise Manager, E-Business Suite, and possibly other products, allows remote attackers to execute arbitrary database commands by performing a remote registration of a database (1) instance or (2) service name that already exists, then conducting a man-in-the-middle (MITM) attack to hijack database connections, aka "TNS Poison."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/359816" source="CERT-VN">VU#359816</ref>
-      <ref url="https://blogs.oracle.com/security/entry/security_alert_for_cve_2012" source="CONFIRM" adv="1">https://blogs.oracle.com/security/entry/security_alert_for_cve_2012</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75303" source="XF">oracledatabase-tnslistener-spoofing(75303)</ref>
-      <ref url="http://www.securitytracker.com/id?1027000" source="SECTRACK">1027000</ref>
-      <ref url="http://www.securityfocus.com/bid/53308" source="BID">53308</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/alert-cve-2012-1675-1608180.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/alert-cve-2012-1675-1608180.html</ref>
-      <ref url="http://seclists.org/fulldisclosure/2012/Apr/343" source="FULLDISC">20120428 Oracle TNS Poison vulnerability is actually a 0day with no patch available</ref>
-      <ref url="http://seclists.org/fulldisclosure/2012/Apr/204" source="FULLDISC">20120418 The history of a -probably- 13 years old Oracle bug: TNS Poison</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00018.html" source="SUSE">SUSE-SU-2012:0765</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_10g">
-        <vers num="10.2.0.3" />
-        <vers num="10.2.0.4" />
-        <vers num="10.2.0.5" />
-      </prod>
-      <prod vendor="oracle" name="database_11g">
-        <vers num="11.1.0.7" />
-        <vers num="11.2.0.2" />
-        <vers num="11.2.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1676" published="2012-05-03" name="CVE-2012-1676" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:N/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Virtual Banking.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026953" source="SECTRACK">1026953</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="financial_services_software">
-        <vers num="5.0.2" />
-        <vers num="5.3.0" />
-        <vers num="5.3.4" />
-        <vers num="6.0.1" />
-        <vers num="6.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1679" published="2012-05-03" name="CVE-2012-1679" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect integrity via unknown vectors related to Core-Base.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026953" source="SECTRACK">1026953</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="financial_services_software">
-        <vers num="5.0.2" />
-        <vers num="5.3.0" />
-        <vers num="5.3.4" />
-        <vers num="6.0.1" />
-        <vers num="6.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1681" published="2012-05-03" name="CVE-2012-1681" modified="2012-08-31" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect availability via unknown vectors related to Kernel/sockfs.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.8" />
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1682" published="2012-08-30" name="CVE-2012-1682" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jdk">
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-        <vers prev="1" num="1.7.0" edition="update5" />
-        <vers prev="1" num="1.7.0" edition="update6" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-        <vers prev="1" num="1.7.0" edition="update5" />
-        <vers prev="1" num="1.7.0" edition="update6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1683" published="2012-05-03" name="CVE-2012-1683" modified="2012-05-04" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:M/C:C/I:C/A:C)" CVSS_score="5.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="1.2" CVSS_base_score="5.9">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to gssd.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.8" />
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1684" published="2012-05-03" name="CVE-2012-1684" modified="2012-05-04" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="4.3" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.1" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Password Policy.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.8" />
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1687" published="2012-07-17" name="CVE-2012-1687" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:P/A:C)" CVSS_score="5.6" CVSS_impact_subscore="7.8" CVSS_exploit_subscore="3.9" CVSS_base_score="5.6">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Solaris 10 and 11 allows local users to affect integrity and availability, related to Logical Domains (LDOM).</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027274" source="SECTRACK">1027274</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-        <vers num="5.11" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1688" published="2012-05-03" name="CVE-2012-1688" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability, related to Server DML.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53067" source="BID">53067</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.1" />
-        <vers num="5.5.2" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers prev="1" num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.20" />
-        <vers prev="1" num="5.5.21" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1689" published="2012-07-17" name="CVE-2012-1689" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-        <vers num="5.5.1" />
-        <vers num="5.5.2" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers prev="1" num="5.1.62" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.22" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1690" published="2012-05-03" name="CVE-2012-1690" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53074" source="BID">53074</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.1" />
-        <vers num="5.5.2" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers prev="1" num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.20" />
-        <vers prev="1" num="5.5.21" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1691" published="2012-05-03" name="CVE-2012-1691" modified="2012-05-04" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:S/C:C/I:C/A:C)" CVSS_score="6.6" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="2.7" CVSS_base_score="6.6">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel/Privileges.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.11" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1692" published="2012-05-03" name="CVE-2012-1692" modified="2012-05-04" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability, related to SCTP.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1693" published="2012-05-03" name="CVE-2012-1693" modified="2012-05-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:N/A:P)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle SPARC Enterprise M Series Servers XCP 1110 allows remote attackers to affect availability, related to XSCF Control Package (XCP).</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="xcp">
-        <vers num="1100" />
-      </prod>
-      <prod vendor="oracle" name="sparc_enterprise_m3000_server">
-        <vers num="-" />
-      </prod>
-      <prod vendor="oracle" name="sparc_enterprise_m4000_server">
-        <vers num="-" />
-      </prod>
-      <prod vendor="oracle" name="sparc_enterprise_m5000_server">
-        <vers num="-" />
-      </prod>
-      <prod vendor="oracle" name="sparc_enterprise_m8000_server">
-        <vers num="-" />
-      </prod>
-      <prod vendor="oracle" name="sparc_enterprise_m9000_server">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1694" published="2012-05-03" name="CVE-2012-1694" modified="2012-05-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality and integrity, related to libsasl.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1695" published="2012-05-03" name="CVE-2012-1695" modified="2012-05-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.2 and earlier, and JDK/JRE 5 and 6 27.7.1 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="10.0.2" />
-        <vers num="10.1" />
-        <vers num="10.1.2.3" />
-        <vers num="10.1.3.3.2" />
-        <vers num="10.1.3.4.1" />
-        <vers num="10.1.3.5" />
-        <vers num="10.1.3.5.1" />
-        <vers num="10.1.4.3" />
-        <vers num="10.3.3" />
-        <vers num="10.3.4" />
-        <vers num="10.3.5" />
-        <vers num="11.1" />
-        <vers num="11.1.1" />
-        <vers num="11.1.1.1.0" />
-        <vers num="11.1.1.2.0" />
-        <vers num="11.1.1.3.0" />
-        <vers num="11.1.1.4.0" />
-        <vers num="11.1.1.5.0" />
-        <vers prev="1" num="28.2.2" />
-        <vers num="7.5.2" />
-        <vers num="8.3.2.0" />
-        <vers num="8.3.5.0" />
-        <vers num="9.2.4" />
-      </prod>
-      <prod vendor="sun" name="jdk">
-        <vers num="5.0" />
-        <vers num="6" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers num="5.0" />
-        <vers num="6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1696" published="2012-05-03" name="CVE-2012-1696" modified="2012-05-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="3.20" />
-        <vers num="3.20.32a" />
-        <vers num="3.21" />
-        <vers num="3.22" />
-        <vers num="3.22.26" />
-        <vers num="3.22.27" />
-        <vers num="3.22.28" />
-        <vers num="3.22.29" />
-        <vers num="3.22.30" />
-        <vers num="3.22.32" />
-        <vers num="3.23" />
-        <vers num="3.23.0" edition="alpha" />
-        <vers num="3.23.1" />
-        <vers num="3.23.10" />
-        <vers num="3.23.11" />
-        <vers num="3.23.12" />
-        <vers num="3.23.13" />
-        <vers num="3.23.14" />
-        <vers num="3.23.15" />
-        <vers num="3.23.16" />
-        <vers num="3.23.17" />
-        <vers num="3.23.18" />
-        <vers num="3.23.19" />
-        <vers num="3.23.2" />
-        <vers num="3.23.20" edition="beta" />
-        <vers num="3.23.21" />
-        <vers num="3.23.22" />
-        <vers num="3.23.23" />
-        <vers num="3.23.24" />
-        <vers num="3.23.25" />
-        <vers num="3.23.26" />
-        <vers num="3.23.27" />
-        <vers num="3.23.28" edition="gamma" />
-        <vers num="3.23.29" />
-        <vers num="3.23.3" />
-        <vers num="3.23.30" />
-        <vers num="3.23.31" />
-        <vers num="3.23.32" />
-        <vers num="3.23.33" />
-        <vers num="3.23.34" />
-        <vers num="3.23.35" />
-        <vers num="3.23.36" />
-        <vers num="3.23.37" />
-        <vers num="3.23.38" />
-        <vers num="3.23.39" />
-        <vers num="3.23.4" />
-        <vers num="3.23.40" />
-        <vers num="3.23.41" />
-        <vers num="3.23.42" />
-        <vers num="3.23.43" />
-        <vers num="3.23.44" />
-        <vers num="3.23.45" />
-        <vers num="3.23.46" />
-        <vers num="3.23.47" />
-        <vers num="3.23.48" />
-        <vers num="3.23.49" />
-        <vers num="3.23.5" />
-        <vers num="3.23.50" />
-        <vers num="3.23.51" />
-        <vers num="3.23.52" />
-        <vers num="3.23.53" />
-        <vers num="3.23.53a" />
-        <vers num="3.23.54" />
-        <vers num="3.23.54a" />
-        <vers num="3.23.55" />
-        <vers num="3.23.56" />
-        <vers num="3.23.57" />
-        <vers num="3.23.58" />
-        <vers num="3.23.59" />
-        <vers num="3.23.6" />
-        <vers num="3.23.7" />
-        <vers num="3.23.8" />
-        <vers num="3.23.9" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.10" />
-        <vers num="4.0.11" edition="gamma" />
-        <vers num="4.0.12" />
-        <vers num="4.0.13" />
-        <vers num="4.0.14" />
-        <vers num="4.0.15" />
-        <vers num="4.0.16" />
-        <vers num="4.0.17" />
-        <vers num="4.0.18" />
-        <vers num="4.0.19" />
-        <vers num="4.0.2" />
-        <vers num="4.0.20" />
-        <vers num="4.0.21" />
-        <vers num="4.0.23" />
-        <vers num="4.0.24" />
-        <vers num="4.0.25" />
-        <vers num="4.0.26" />
-        <vers num="4.0.27" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.5a" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" edition="gamma" />
-        <vers num="4.0.8" edition="gamma" />
-        <vers num="4.0.9" edition="gamma" />
-        <vers num="4.1" />
-        <vers num="4.1.0" edition="alpha" />
-        <vers num="4.1.0.0" />
-        <vers num="4.1.1" />
-        <vers num="4.1.10" />
-        <vers num="4.1.10a" />
-        <vers num="4.1.11" />
-        <vers num="4.1.12" />
-        <vers num="4.1.12a" />
-        <vers num="4.1.13" />
-        <vers num="4.1.13a" />
-        <vers num="4.1.14" />
-        <vers num="4.1.14a" />
-        <vers num="4.1.15" />
-        <vers num="4.1.15a" />
-        <vers num="4.1.16" />
-        <vers num="4.1.17" />
-        <vers num="4.1.18" />
-        <vers num="4.1.19" />
-        <vers num="4.1.2" edition="alpha" />
-        <vers num="4.1.20" />
-        <vers num="4.1.21" />
-        <vers num="4.1.22" />
-        <vers num="4.1.3" edition="beta" />
-        <vers num="4.1.4" />
-        <vers num="4.1.5" />
-        <vers num="4.1.6" />
-        <vers num="4.1.7" />
-        <vers num="4.1.8" />
-        <vers num="4.1.8a" />
-        <vers num="4.1.9" />
-        <vers num="5.0" />
-        <vers num="5.0.0" edition="alpha" />
-        <vers num="5.0.0.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.10" />
-        <vers num="5.0.10a" />
-        <vers num="5.0.11" />
-        <vers num="5.0.12" />
-        <vers num="5.0.13" />
-        <vers num="5.0.14" />
-        <vers num="5.0.15" />
-        <vers num="5.0.15a" />
-        <vers num="5.0.16" />
-        <vers num="5.0.16a" />
-        <vers num="5.0.17" />
-        <vers num="5.0.17a" />
-        <vers num="5.0.18" />
-        <vers num="5.0.19" />
-        <vers num="5.0.1a" />
-        <vers num="5.0.2" />
-        <vers num="5.0.20" />
-        <vers num="5.0.20a" />
-        <vers num="5.0.21" />
-        <vers num="5.0.22" />
-        <vers num="5.0.24" />
-        <vers num="5.0.27" />
-        <vers num="5.0.3" edition="beta" />
-        <vers num="5.0.33" />
-        <vers num="5.0.37" />
-        <vers num="5.0.3a" />
-        <vers num="5.0.4" />
-        <vers num="5.0.41" />
-        <vers num="5.0.4a" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.0.7" />
-        <vers num="5.0.8" />
-        <vers num="5.0.9" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-        <vers num="5.5.1" />
-        <vers num="5.5.2" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-      <prod vendor="mysql" name="mysql_community_server">
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-      </prod>
-      <prod vendor="mysql" name="mysql_server">
-        <vers num="5.1.22" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers prev="1" num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-      <prod vendor="sun" name="mysql_connector/j">
-        <vers num="5.1.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1697" published="2012-05-03" name="CVE-2012-1697" modified="2012-05-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.21 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="3.20" />
-        <vers num="3.20.32a" />
-        <vers num="3.21" />
-        <vers num="3.22" />
-        <vers num="3.22.26" />
-        <vers num="3.22.27" />
-        <vers num="3.22.28" />
-        <vers num="3.22.29" />
-        <vers num="3.22.30" />
-        <vers num="3.22.32" />
-        <vers num="3.23" />
-        <vers num="3.23.0" edition="alpha" />
-        <vers num="3.23.1" />
-        <vers num="3.23.10" />
-        <vers num="3.23.11" />
-        <vers num="3.23.12" />
-        <vers num="3.23.13" />
-        <vers num="3.23.14" />
-        <vers num="3.23.15" />
-        <vers num="3.23.16" />
-        <vers num="3.23.17" />
-        <vers num="3.23.18" />
-        <vers num="3.23.19" />
-        <vers num="3.23.2" />
-        <vers num="3.23.20" edition="beta" />
-        <vers num="3.23.21" />
-        <vers num="3.23.22" />
-        <vers num="3.23.23" />
-        <vers num="3.23.24" />
-        <vers num="3.23.25" />
-        <vers num="3.23.26" />
-        <vers num="3.23.27" />
-        <vers num="3.23.28" edition="gamma" />
-        <vers num="3.23.29" />
-        <vers num="3.23.3" />
-        <vers num="3.23.30" />
-        <vers num="3.23.31" />
-        <vers num="3.23.32" />
-        <vers num="3.23.33" />
-        <vers num="3.23.34" />
-        <vers num="3.23.35" />
-        <vers num="3.23.36" />
-        <vers num="3.23.37" />
-        <vers num="3.23.38" />
-        <vers num="3.23.39" />
-        <vers num="3.23.4" />
-        <vers num="3.23.40" />
-        <vers num="3.23.41" />
-        <vers num="3.23.42" />
-        <vers num="3.23.43" />
-        <vers num="3.23.44" />
-        <vers num="3.23.45" />
-        <vers num="3.23.46" />
-        <vers num="3.23.47" />
-        <vers num="3.23.48" />
-        <vers num="3.23.49" />
-        <vers num="3.23.5" />
-        <vers num="3.23.50" />
-        <vers num="3.23.51" />
-        <vers num="3.23.52" />
-        <vers num="3.23.53" />
-        <vers num="3.23.53a" />
-        <vers num="3.23.54" />
-        <vers num="3.23.54a" />
-        <vers num="3.23.55" />
-        <vers num="3.23.56" />
-        <vers num="3.23.57" />
-        <vers num="3.23.58" />
-        <vers num="3.23.59" />
-        <vers num="3.23.6" />
-        <vers num="3.23.7" />
-        <vers num="3.23.8" />
-        <vers num="3.23.9" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.10" />
-        <vers num="4.0.11" edition="gamma" />
-        <vers num="4.0.12" />
-        <vers num="4.0.13" />
-        <vers num="4.0.14" />
-        <vers num="4.0.15" />
-        <vers num="4.0.16" />
-        <vers num="4.0.17" />
-        <vers num="4.0.18" />
-        <vers num="4.0.19" />
-        <vers num="4.0.2" />
-        <vers num="4.0.20" />
-        <vers num="4.0.21" />
-        <vers num="4.0.23" />
-        <vers num="4.0.24" />
-        <vers num="4.0.25" />
-        <vers num="4.0.26" />
-        <vers num="4.0.27" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.5a" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" edition="gamma" />
-        <vers num="4.0.8" edition="gamma" />
-        <vers num="4.0.9" edition="gamma" />
-        <vers num="4.1" />
-        <vers num="4.1.0" edition="alpha" />
-        <vers num="4.1.0.0" />
-        <vers num="4.1.1" />
-        <vers num="4.1.10" />
-        <vers num="4.1.10a" />
-        <vers num="4.1.11" />
-        <vers num="4.1.12" />
-        <vers num="4.1.12a" />
-        <vers num="4.1.13" />
-        <vers num="4.1.13a" />
-        <vers num="4.1.14" />
-        <vers num="4.1.14a" />
-        <vers num="4.1.15" />
-        <vers num="4.1.15a" />
-        <vers num="4.1.16" />
-        <vers num="4.1.17" />
-        <vers num="4.1.18" />
-        <vers num="4.1.19" />
-        <vers num="4.1.2" edition="alpha" />
-        <vers num="4.1.20" />
-        <vers num="4.1.21" />
-        <vers num="4.1.22" />
-        <vers num="4.1.3" edition="beta" />
-        <vers num="4.1.4" />
-        <vers num="4.1.5" />
-        <vers num="4.1.6" />
-        <vers num="4.1.7" />
-        <vers num="4.1.8" />
-        <vers num="4.1.8a" />
-        <vers num="4.1.9" />
-        <vers num="5.0" />
-        <vers num="5.0.0" edition="alpha" />
-        <vers num="5.0.0.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.10" />
-        <vers num="5.0.10a" />
-        <vers num="5.0.11" />
-        <vers num="5.0.12" />
-        <vers num="5.0.13" />
-        <vers num="5.0.14" />
-        <vers num="5.0.15" />
-        <vers num="5.0.15a" />
-        <vers num="5.0.16" />
-        <vers num="5.0.16a" />
-        <vers num="5.0.17" />
-        <vers num="5.0.17a" />
-        <vers num="5.0.18" />
-        <vers num="5.0.19" />
-        <vers num="5.0.1a" />
-        <vers num="5.0.2" />
-        <vers num="5.0.20" />
-        <vers num="5.0.20a" />
-        <vers num="5.0.21" />
-        <vers num="5.0.22" />
-        <vers num="5.0.24" />
-        <vers num="5.0.27" />
-        <vers num="5.0.3" edition="beta" />
-        <vers num="5.0.33" />
-        <vers num="5.0.37" />
-        <vers num="5.0.3a" />
-        <vers num="5.0.4" />
-        <vers num="5.0.41" />
-        <vers num="5.0.4a" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.0.7" />
-        <vers num="5.0.8" />
-        <vers num="5.0.9" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-        <vers num="5.5.1" />
-        <vers num="5.5.2" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers prev="1" num="5.5.21" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1698" published="2012-05-03" name="CVE-2012-1698" modified="2012-05-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 11 allows remote authenticated users to affect confidentiality, related to Kernel/GLD.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.11" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1703" published="2012-05-03" name="CVE-2012-1703" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:C)" CVSS_score="6.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="8.0" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53058" source="BID">53058</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.1" />
-        <vers num="5.5.2" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers prev="1" num="5.1.61" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.20" />
-        <vers prev="1" num="5.5.21" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1704" published="2012-05-03" name="CVE-2012-1704" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:N/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Core-Base.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026953" source="SECTRACK">1026953</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="financial_services_software">
-        <vers num="5.0.2" />
-        <vers num="5.3.0" />
-        <vers num="5.3.4" />
-        <vers num="6.0.1" />
-        <vers num="6.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1706" published="2012-05-03" name="CVE-2012-1706" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:M/C:P/I:P/A:N)" CVSS_score="4.7" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="6.4" CVSS_base_score="4.7">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Logging.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026953" source="SECTRACK">1026953</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="financial_services_software">
-        <vers num="5.0.2" />
-        <vers num="5.3.0" />
-        <vers num="5.3.4" />
-        <vers num="6.0.1" />
-        <vers num="6.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1707" published="2012-05-03" name="CVE-2012-1707" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Core-Base.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026953" source="SECTRACK">1026953</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="financial_services_software">
-        <vers num="5.0.2" />
-        <vers num="5.3.0" />
-        <vers num="5.3.4" />
-        <vers num="6.0.1" />
-        <vers num="6.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1708" published="2012-05-03" name="CVE-2012-1708" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Application Express component in Oracle Database Server 4.0 and 4.1 allows remote attackers to affect integrity via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026929" source="SECTRACK">1026929</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="4.0" />
-        <vers num="4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1709" published="2012-05-03" name="CVE-2012-1709" modified="2012-05-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="10.1.3.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1710" published="2012-05-03" name="CVE-2012-1710" modified="2012-05-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="10.1.3.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1711" published="2012-06-16" name="CVE-2012-1711" modified="2012-06-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to CORBA.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jdk">
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="sun" name="jdk">
-        <vers prev="1" num="1.4.2_37" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers prev="1" num="1.4.2_37" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1713" published="2012-06-16" name="CVE-2012-1713" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and earlier, and JavaFX 2.1 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="javafx">
-        <vers prev="1" num="2.1" />
-      </prod>
-      <prod vendor="oracle" name="jdk">
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="sun" name="jdk">
-        <vers prev="1" num="1.4.2_37" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers prev="1" num="1.4.2_37" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1715" published="2012-07-17" name="CVE-2012-1715" modified="2012-07-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity, related to HTML Pages.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="e-business_suite">
-        <vers num="11.5.10.2" />
-        <vers num="12.0.6" />
-        <vers num="12.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1716" published="2012-06-16" name="CVE-2012-1716" modified="2012-06-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jdk">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.6.0" edition="update_31" />
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.6.0" edition="update_31" />
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="sun" name="jdk">
-        <vers prev="1" num="1.5.0" edition="update1" />
-        <vers prev="1" num="1.5.0" edition="update10" />
-        <vers prev="1" num="1.5.0" edition="update11" />
-        <vers prev="1" num="1.5.0" edition="update11_b03" />
-        <vers prev="1" num="1.5.0" edition="update12" />
-        <vers prev="1" num="1.5.0" edition="update13" />
-        <vers prev="1" num="1.5.0" edition="update14" />
-        <vers prev="1" num="1.5.0" edition="update15" />
-        <vers prev="1" num="1.5.0" edition="update16" />
-        <vers prev="1" num="1.5.0" edition="update17" />
-        <vers prev="1" num="1.5.0" edition="update18" />
-        <vers prev="1" num="1.5.0" edition="update19" />
-        <vers prev="1" num="1.5.0" edition="update2" />
-        <vers prev="1" num="1.5.0" edition="update20" />
-        <vers prev="1" num="1.5.0" edition="update21" />
-        <vers prev="1" num="1.5.0" edition="update22" />
-        <vers prev="1" num="1.5.0" edition="update23" />
-        <vers prev="1" num="1.5.0" edition="update24" />
-        <vers prev="1" num="1.5.0" edition="update25" />
-        <vers prev="1" num="1.5.0" edition="update26" />
-        <vers prev="1" num="1.5.0" edition="update27" />
-        <vers prev="1" num="1.5.0" edition="update28" />
-        <vers prev="1" num="1.5.0" edition="update29" />
-        <vers prev="1" num="1.5.0" edition="update3" />
-        <vers prev="1" num="1.5.0" edition="update31" />
-        <vers prev="1" num="1.5.0" edition="update33" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-        <vers prev="1" num="1.5.0" edition="update4" />
-        <vers prev="1" num="1.5.0" edition="update5" />
-        <vers prev="1" num="1.5.0" edition="update6" />
-        <vers prev="1" num="1.5.0" edition="update7" />
-        <vers prev="1" num="1.5.0" edition="update7_b03" />
-        <vers prev="1" num="1.5.0" edition="update8" />
-        <vers prev="1" num="1.5.0" edition="update9" />
-        <vers num="1.6.0" edition="update1" />
-        <vers num="1.6.0" edition="update1_b06" />
-        <vers num="1.6.0" edition="update2" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers prev="1" num="1.5.0" edition="update1" />
-        <vers prev="1" num="1.5.0" edition="update10" />
-        <vers prev="1" num="1.5.0" edition="update11" />
-        <vers prev="1" num="1.5.0" edition="update12" />
-        <vers prev="1" num="1.5.0" edition="update13" />
-        <vers prev="1" num="1.5.0" edition="update14" />
-        <vers prev="1" num="1.5.0" edition="update15" />
-        <vers prev="1" num="1.5.0" edition="update16" />
-        <vers prev="1" num="1.5.0" edition="update17" />
-        <vers prev="1" num="1.5.0" edition="update18" />
-        <vers prev="1" num="1.5.0" edition="update19" />
-        <vers prev="1" num="1.5.0" edition="update2" />
-        <vers prev="1" num="1.5.0" edition="update20" />
-        <vers prev="1" num="1.5.0" edition="update21" />
-        <vers prev="1" num="1.5.0" edition="update22" />
-        <vers prev="1" num="1.5.0" edition="update23" />
-        <vers prev="1" num="1.5.0" edition="update24" />
-        <vers prev="1" num="1.5.0" edition="update25" />
-        <vers prev="1" num="1.5.0" edition="update26" />
-        <vers prev="1" num="1.5.0" edition="update27" />
-        <vers prev="1" num="1.5.0" edition="update28" />
-        <vers prev="1" num="1.5.0" edition="update29" />
-        <vers prev="1" num="1.5.0" edition="update3" />
-        <vers prev="1" num="1.5.0" edition="update31" />
-        <vers prev="1" num="1.5.0" edition="update33" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-        <vers prev="1" num="1.5.0" edition="update4" />
-        <vers prev="1" num="1.5.0" edition="update5" />
-        <vers prev="1" num="1.5.0" edition="update6" />
-        <vers prev="1" num="1.5.0" edition="update7" />
-        <vers prev="1" num="1.5.0" edition="update8" />
-        <vers prev="1" num="1.5.0" edition="update9" />
-        <vers num="1.6.0" edition="update_1" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_2" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1717" published="2012-06-16" name="CVE-2012-1717" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html
-
-'Applies to printing on the Solaris and Linux platforms. This vulnerability cannot be exploited through untrusted Java Web Start applications or untrusted Java applets. It also cannot be exploited by supplying data to APIs in the specified Component without using untrusted Java Web Start applications or untrusted Java applets, such as through a web service.'</impact>
-    </impacts>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jdk">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.6.0" edition="update_31" />
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.6.0" edition="update_31" />
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="sun" name="jdk">
-        <vers num="1.4.2" />
-        <vers num="1.4.2_1" />
-        <vers num="1.4.2_10" />
-        <vers num="1.4.2_11" />
-        <vers num="1.4.2_12" />
-        <vers num="1.4.2_13" />
-        <vers num="1.4.2_14" />
-        <vers num="1.4.2_15" />
-        <vers num="1.4.2_16" />
-        <vers num="1.4.2_17" />
-        <vers num="1.4.2_18" />
-        <vers num="1.4.2_19" />
-        <vers num="1.4.2_2" />
-        <vers num="1.4.2_22" />
-        <vers num="1.4.2_23" />
-        <vers num="1.4.2_24" edition="" />
-        <vers num="1.4.2_24" edition=":solaris" />
-        <vers num="1.4.2_25" />
-        <vers num="1.4.2_26" />
-        <vers num="1.4.2_27" />
-        <vers num="1.4.2_28" />
-        <vers num="1.4.2_29" />
-        <vers num="1.4.2_3" />
-        <vers num="1.4.2_30" />
-        <vers num="1.4.2_31" />
-        <vers num="1.4.2_32" />
-        <vers num="1.4.2_33" />
-        <vers num="1.4.2_34" />
-        <vers num="1.4.2_35" />
-        <vers num="1.4.2_36" />
-        <vers prev="1" num="1.4.2_37" />
-        <vers num="1.4.2_4" />
-        <vers num="1.4.2_5" />
-        <vers num="1.4.2_6" />
-        <vers num="1.4.2_7" />
-        <vers num="1.4.2_8" />
-        <vers num="1.4.2_9" />
-        <vers prev="1" num="1.5.0" edition="update1" />
-        <vers prev="1" num="1.5.0" edition="update10" />
-        <vers prev="1" num="1.5.0" edition="update11" />
-        <vers prev="1" num="1.5.0" edition="update11_b03" />
-        <vers prev="1" num="1.5.0" edition="update12" />
-        <vers prev="1" num="1.5.0" edition="update13" />
-        <vers prev="1" num="1.5.0" edition="update14" />
-        <vers prev="1" num="1.5.0" edition="update15" />
-        <vers prev="1" num="1.5.0" edition="update16" />
-        <vers prev="1" num="1.5.0" edition="update17" />
-        <vers prev="1" num="1.5.0" edition="update18" />
-        <vers prev="1" num="1.5.0" edition="update19" />
-        <vers prev="1" num="1.5.0" edition="update2" />
-        <vers prev="1" num="1.5.0" edition="update20" />
-        <vers prev="1" num="1.5.0" edition="update21" />
-        <vers prev="1" num="1.5.0" edition="update22" />
-        <vers prev="1" num="1.5.0" edition="update23" />
-        <vers prev="1" num="1.5.0" edition="update24" />
-        <vers prev="1" num="1.5.0" edition="update25" />
-        <vers prev="1" num="1.5.0" edition="update26" />
-        <vers prev="1" num="1.5.0" edition="update27" />
-        <vers prev="1" num="1.5.0" edition="update28" />
-        <vers prev="1" num="1.5.0" edition="update29" />
-        <vers prev="1" num="1.5.0" edition="update3" />
-        <vers prev="1" num="1.5.0" edition="update31" />
-        <vers prev="1" num="1.5.0" edition="update33" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-        <vers prev="1" num="1.5.0" edition="update4" />
-        <vers prev="1" num="1.5.0" edition="update5" />
-        <vers prev="1" num="1.5.0" edition="update6" />
-        <vers prev="1" num="1.5.0" edition="update7" />
-        <vers prev="1" num="1.5.0" edition="update7_b03" />
-        <vers prev="1" num="1.5.0" edition="update8" />
-        <vers prev="1" num="1.5.0" edition="update9" />
-        <vers num="1.6.0" edition="update1" />
-        <vers num="1.6.0" edition="update1_b06" />
-        <vers num="1.6.0" edition="update2" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers num="1.4.2" />
-        <vers num="1.4.2_1" />
-        <vers num="1.4.2_10" />
-        <vers num="1.4.2_11" />
-        <vers num="1.4.2_12" />
-        <vers num="1.4.2_13" />
-        <vers num="1.4.2_14" />
-        <vers num="1.4.2_15" />
-        <vers num="1.4.2_16" />
-        <vers num="1.4.2_17" />
-        <vers num="1.4.2_18" />
-        <vers num="1.4.2_19" />
-        <vers num="1.4.2_2" />
-        <vers num="1.4.2_20" />
-        <vers num="1.4.2_21" />
-        <vers num="1.4.2_22" />
-        <vers num="1.4.2_23" />
-        <vers num="1.4.2_24" />
-        <vers num="1.4.2_25" />
-        <vers num="1.4.2_26" />
-        <vers num="1.4.2_27" />
-        <vers num="1.4.2_28" />
-        <vers num="1.4.2_29" />
-        <vers num="1.4.2_3" />
-        <vers num="1.4.2_30" />
-        <vers num="1.4.2_31" />
-        <vers num="1.4.2_32" />
-        <vers num="1.4.2_33" />
-        <vers num="1.4.2_34" />
-        <vers num="1.4.2_35" />
-        <vers num="1.4.2_36" />
-        <vers prev="1" num="1.4.2_37" />
-        <vers num="1.4.2_4" />
-        <vers num="1.4.2_5" />
-        <vers num="1.4.2_6" />
-        <vers num="1.4.2_7" />
-        <vers num="1.4.2_8" />
-        <vers num="1.4.2_9" />
-        <vers prev="1" num="1.5.0" edition="update1" />
-        <vers prev="1" num="1.5.0" edition="update10" />
-        <vers prev="1" num="1.5.0" edition="update11" />
-        <vers prev="1" num="1.5.0" edition="update12" />
-        <vers prev="1" num="1.5.0" edition="update13" />
-        <vers prev="1" num="1.5.0" edition="update14" />
-        <vers prev="1" num="1.5.0" edition="update15" />
-        <vers prev="1" num="1.5.0" edition="update16" />
-        <vers prev="1" num="1.5.0" edition="update17" />
-        <vers prev="1" num="1.5.0" edition="update18" />
-        <vers prev="1" num="1.5.0" edition="update19" />
-        <vers prev="1" num="1.5.0" edition="update2" />
-        <vers prev="1" num="1.5.0" edition="update20" />
-        <vers prev="1" num="1.5.0" edition="update21" />
-        <vers prev="1" num="1.5.0" edition="update22" />
-        <vers prev="1" num="1.5.0" edition="update23" />
-        <vers prev="1" num="1.5.0" edition="update24" />
-        <vers prev="1" num="1.5.0" edition="update25" />
-        <vers prev="1" num="1.5.0" edition="update26" />
-        <vers prev="1" num="1.5.0" edition="update27" />
-        <vers prev="1" num="1.5.0" edition="update28" />
-        <vers prev="1" num="1.5.0" edition="update29" />
-        <vers prev="1" num="1.5.0" edition="update3" />
-        <vers prev="1" num="1.5.0" edition="update31" />
-        <vers prev="1" num="1.5.0" edition="update33" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-        <vers prev="1" num="1.5.0" edition="update4" />
-        <vers prev="1" num="1.5.0" edition="update5" />
-        <vers prev="1" num="1.5.0" edition="update6" />
-        <vers prev="1" num="1.5.0" edition="update7" />
-        <vers prev="1" num="1.5.0" edition="update8" />
-        <vers prev="1" num="1.5.0" edition="update9" />
-        <vers num="1.6.0" edition="update_1" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_2" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1718" published="2012-06-16" name="CVE-2012-1718" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect availability via unknown vectors related to Security.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jdk">
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="sun" name="jdk">
-        <vers prev="1" num="1.4.2_37" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers prev="1" num="1.4.2_37" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1719" published="2012-06-16" name="CVE-2012-1719" modified="2012-06-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect integrity, related to CORBA.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jdk">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.6.0" edition="update_31" />
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.6.0" edition="update_31" />
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="sun" name="jdk">
-        <vers num="1.4.2" />
-        <vers num="1.4.2_1" />
-        <vers num="1.4.2_10" />
-        <vers num="1.4.2_11" />
-        <vers num="1.4.2_12" />
-        <vers num="1.4.2_13" />
-        <vers num="1.4.2_14" />
-        <vers num="1.4.2_15" />
-        <vers num="1.4.2_16" />
-        <vers num="1.4.2_17" />
-        <vers num="1.4.2_18" />
-        <vers num="1.4.2_19" />
-        <vers num="1.4.2_2" />
-        <vers num="1.4.2_22" />
-        <vers num="1.4.2_23" />
-        <vers num="1.4.2_24" edition="" />
-        <vers num="1.4.2_24" edition=":solaris" />
-        <vers num="1.4.2_25" />
-        <vers num="1.4.2_26" />
-        <vers num="1.4.2_27" />
-        <vers num="1.4.2_28" />
-        <vers num="1.4.2_29" />
-        <vers num="1.4.2_3" />
-        <vers num="1.4.2_30" />
-        <vers num="1.4.2_31" />
-        <vers num="1.4.2_32" />
-        <vers num="1.4.2_33" />
-        <vers num="1.4.2_34" />
-        <vers num="1.4.2_35" />
-        <vers num="1.4.2_36" />
-        <vers prev="1" num="1.4.2_37" />
-        <vers num="1.4.2_4" />
-        <vers num="1.4.2_5" />
-        <vers num="1.4.2_6" />
-        <vers num="1.4.2_7" />
-        <vers num="1.4.2_8" />
-        <vers num="1.4.2_9" />
-        <vers prev="1" num="1.5.0" edition="update1" />
-        <vers prev="1" num="1.5.0" edition="update10" />
-        <vers prev="1" num="1.5.0" edition="update11" />
-        <vers prev="1" num="1.5.0" edition="update11_b03" />
-        <vers prev="1" num="1.5.0" edition="update12" />
-        <vers prev="1" num="1.5.0" edition="update13" />
-        <vers prev="1" num="1.5.0" edition="update14" />
-        <vers prev="1" num="1.5.0" edition="update15" />
-        <vers prev="1" num="1.5.0" edition="update16" />
-        <vers prev="1" num="1.5.0" edition="update17" />
-        <vers prev="1" num="1.5.0" edition="update18" />
-        <vers prev="1" num="1.5.0" edition="update19" />
-        <vers prev="1" num="1.5.0" edition="update2" />
-        <vers prev="1" num="1.5.0" edition="update20" />
-        <vers prev="1" num="1.5.0" edition="update21" />
-        <vers prev="1" num="1.5.0" edition="update22" />
-        <vers prev="1" num="1.5.0" edition="update23" />
-        <vers prev="1" num="1.5.0" edition="update24" />
-        <vers prev="1" num="1.5.0" edition="update25" />
-        <vers prev="1" num="1.5.0" edition="update26" />
-        <vers prev="1" num="1.5.0" edition="update27" />
-        <vers prev="1" num="1.5.0" edition="update28" />
-        <vers prev="1" num="1.5.0" edition="update29" />
-        <vers prev="1" num="1.5.0" edition="update3" />
-        <vers prev="1" num="1.5.0" edition="update31" />
-        <vers prev="1" num="1.5.0" edition="update33" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-        <vers prev="1" num="1.5.0" edition="update4" />
-        <vers prev="1" num="1.5.0" edition="update5" />
-        <vers prev="1" num="1.5.0" edition="update6" />
-        <vers prev="1" num="1.5.0" edition="update7" />
-        <vers prev="1" num="1.5.0" edition="update7_b03" />
-        <vers prev="1" num="1.5.0" edition="update8" />
-        <vers prev="1" num="1.5.0" edition="update9" />
-        <vers num="1.6.0" edition="update1" />
-        <vers num="1.6.0" edition="update1_b06" />
-        <vers num="1.6.0" edition="update2" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_20:x64" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers num="1.4.2" />
-        <vers num="1.4.2_1" />
-        <vers num="1.4.2_10" />
-        <vers num="1.4.2_11" />
-        <vers num="1.4.2_12" />
-        <vers num="1.4.2_13" />
-        <vers num="1.4.2_14" />
-        <vers num="1.4.2_15" />
-        <vers num="1.4.2_16" />
-        <vers num="1.4.2_17" />
-        <vers num="1.4.2_18" />
-        <vers num="1.4.2_19" />
-        <vers num="1.4.2_2" />
-        <vers num="1.4.2_20" />
-        <vers num="1.4.2_21" />
-        <vers num="1.4.2_22" />
-        <vers num="1.4.2_23" />
-        <vers num="1.4.2_24" />
-        <vers num="1.4.2_25" />
-        <vers num="1.4.2_26" />
-        <vers num="1.4.2_27" />
-        <vers num="1.4.2_28" />
-        <vers num="1.4.2_29" />
-        <vers num="1.4.2_3" />
-        <vers num="1.4.2_30" />
-        <vers num="1.4.2_31" />
-        <vers num="1.4.2_32" />
-        <vers num="1.4.2_33" />
-        <vers num="1.4.2_34" />
-        <vers num="1.4.2_35" />
-        <vers num="1.4.2_36" />
-        <vers prev="1" num="1.4.2_37" />
-        <vers num="1.4.2_4" />
-        <vers num="1.4.2_5" />
-        <vers num="1.4.2_6" />
-        <vers num="1.4.2_7" />
-        <vers num="1.4.2_8" />
-        <vers num="1.4.2_9" />
-        <vers prev="1" num="1.5.0" edition="update1" />
-        <vers prev="1" num="1.5.0" edition="update10" />
-        <vers prev="1" num="1.5.0" edition="update11" />
-        <vers prev="1" num="1.5.0" edition="update12" />
-        <vers prev="1" num="1.5.0" edition="update13" />
-        <vers prev="1" num="1.5.0" edition="update14" />
-        <vers prev="1" num="1.5.0" edition="update15" />
-        <vers prev="1" num="1.5.0" edition="update16" />
-        <vers prev="1" num="1.5.0" edition="update17" />
-        <vers prev="1" num="1.5.0" edition="update18" />
-        <vers prev="1" num="1.5.0" edition="update19" />
-        <vers prev="1" num="1.5.0" edition="update2" />
-        <vers prev="1" num="1.5.0" edition="update20" />
-        <vers prev="1" num="1.5.0" edition="update21" />
-        <vers prev="1" num="1.5.0" edition="update22" />
-        <vers prev="1" num="1.5.0" edition="update23" />
-        <vers prev="1" num="1.5.0" edition="update24" />
-        <vers prev="1" num="1.5.0" edition="update25" />
-        <vers prev="1" num="1.5.0" edition="update26" />
-        <vers prev="1" num="1.5.0" edition="update27" />
-        <vers prev="1" num="1.5.0" edition="update28" />
-        <vers prev="1" num="1.5.0" edition="update29" />
-        <vers prev="1" num="1.5.0" edition="update3" />
-        <vers prev="1" num="1.5.0" edition="update31" />
-        <vers prev="1" num="1.5.0" edition="update33" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-        <vers prev="1" num="1.5.0" edition="update4" />
-        <vers prev="1" num="1.5.0" edition="update5" />
-        <vers prev="1" num="1.5.0" edition="update6" />
-        <vers prev="1" num="1.5.0" edition="update7" />
-        <vers prev="1" num="1.5.0" edition="update8" />
-        <vers prev="1" num="1.5.0" edition="update9" />
-        <vers num="1.6.0" edition="update_1" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_2" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1720" published="2012-06-16" name="CVE-2012-1720" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="3.7" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="1.9" CVSS_base_score="3.7">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier, when running on Solaris, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jdk">
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="sun" name="jdk">
-        <vers prev="1" num="1.4.2_37" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers prev="1" num="1.4.2_37" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1721" published="2012-06-16" name="CVE-2012-1721" modified="2012-06-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1722.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jdk">
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1722" published="2012-06-16" name="CVE-2012-1722" modified="2012-06-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1721.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jdk">
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1723" published="2012-06-16" name="CVE-2012-1723" modified="2012-06-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jdk">
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="sun" name="jdk">
-        <vers prev="1" num="1.4.2_37" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers prev="1" num="1.4.2_37" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1724" published="2012-06-16" name="CVE-2012-1724" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect availability, related to JAXP.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jdk">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.6.0" edition="update_31" />
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.6.0" edition="update_31" />
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="sun" name="jdk">
-        <vers num="1.6.0" edition="update1" />
-        <vers num="1.6.0" edition="update1_b06" />
-        <vers num="1.6.0" edition="update2" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_20:x64" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers num="1.6.0" edition="update_1" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_2" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1725" published="2012-06-16" name="CVE-2012-1725" modified="2012-06-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jdk">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.6.0" edition="update_31" />
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.6.0" edition="update_22" />
-        <vers prev="1" num="1.6.0" edition="update_23" />
-        <vers prev="1" num="1.6.0" edition="update_24" />
-        <vers prev="1" num="1.6.0" edition="update_25" />
-        <vers prev="1" num="1.6.0" edition="update_26" />
-        <vers prev="1" num="1.6.0" edition="update_27" />
-        <vers prev="1" num="1.6.0" edition="update_29" />
-        <vers prev="1" num="1.6.0" edition="update_30" />
-        <vers prev="1" num="1.6.0" edition="update_31" />
-        <vers prev="1" num="1.6.0" edition="update_32" />
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="sun" name="jdk">
-        <vers prev="1" num="1.5.0" edition="update1" />
-        <vers prev="1" num="1.5.0" edition="update10" />
-        <vers prev="1" num="1.5.0" edition="update11" />
-        <vers prev="1" num="1.5.0" edition="update11_b03" />
-        <vers prev="1" num="1.5.0" edition="update12" />
-        <vers prev="1" num="1.5.0" edition="update13" />
-        <vers prev="1" num="1.5.0" edition="update14" />
-        <vers prev="1" num="1.5.0" edition="update15" />
-        <vers prev="1" num="1.5.0" edition="update16" />
-        <vers prev="1" num="1.5.0" edition="update17" />
-        <vers prev="1" num="1.5.0" edition="update18" />
-        <vers prev="1" num="1.5.0" edition="update19" />
-        <vers prev="1" num="1.5.0" edition="update2" />
-        <vers prev="1" num="1.5.0" edition="update20" />
-        <vers prev="1" num="1.5.0" edition="update21" />
-        <vers prev="1" num="1.5.0" edition="update22" />
-        <vers prev="1" num="1.5.0" edition="update23" />
-        <vers prev="1" num="1.5.0" edition="update24" />
-        <vers prev="1" num="1.5.0" edition="update25" />
-        <vers prev="1" num="1.5.0" edition="update26" />
-        <vers prev="1" num="1.5.0" edition="update27" />
-        <vers prev="1" num="1.5.0" edition="update28" />
-        <vers prev="1" num="1.5.0" edition="update29" />
-        <vers prev="1" num="1.5.0" edition="update3" />
-        <vers prev="1" num="1.5.0" edition="update31" />
-        <vers prev="1" num="1.5.0" edition="update33" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-        <vers prev="1" num="1.5.0" edition="update4" />
-        <vers prev="1" num="1.5.0" edition="update5" />
-        <vers prev="1" num="1.5.0" edition="update6" />
-        <vers prev="1" num="1.5.0" edition="update7" />
-        <vers prev="1" num="1.5.0" edition="update7_b03" />
-        <vers prev="1" num="1.5.0" edition="update8" />
-        <vers prev="1" num="1.5.0" edition="update9" />
-        <vers num="1.6.0" edition="update1" />
-        <vers num="1.6.0" edition="update1_b06" />
-        <vers num="1.6.0" edition="update2" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-      <prod vendor="sun" name="jre">
-        <vers prev="1" num="1.5.0" edition="update1" />
-        <vers prev="1" num="1.5.0" edition="update10" />
-        <vers prev="1" num="1.5.0" edition="update11" />
-        <vers prev="1" num="1.5.0" edition="update12" />
-        <vers prev="1" num="1.5.0" edition="update13" />
-        <vers prev="1" num="1.5.0" edition="update14" />
-        <vers prev="1" num="1.5.0" edition="update15" />
-        <vers prev="1" num="1.5.0" edition="update16" />
-        <vers prev="1" num="1.5.0" edition="update17" />
-        <vers prev="1" num="1.5.0" edition="update18" />
-        <vers prev="1" num="1.5.0" edition="update19" />
-        <vers prev="1" num="1.5.0" edition="update2" />
-        <vers prev="1" num="1.5.0" edition="update20" />
-        <vers prev="1" num="1.5.0" edition="update21" />
-        <vers prev="1" num="1.5.0" edition="update22" />
-        <vers prev="1" num="1.5.0" edition="update23" />
-        <vers prev="1" num="1.5.0" edition="update24" />
-        <vers prev="1" num="1.5.0" edition="update25" />
-        <vers prev="1" num="1.5.0" edition="update26" />
-        <vers prev="1" num="1.5.0" edition="update27" />
-        <vers prev="1" num="1.5.0" edition="update28" />
-        <vers prev="1" num="1.5.0" edition="update29" />
-        <vers prev="1" num="1.5.0" edition="update3" />
-        <vers prev="1" num="1.5.0" edition="update31" />
-        <vers prev="1" num="1.5.0" edition="update33" />
-        <vers prev="1" num="1.5.0" edition="update35" />
-        <vers prev="1" num="1.5.0" edition="update4" />
-        <vers prev="1" num="1.5.0" edition="update5" />
-        <vers prev="1" num="1.5.0" edition="update6" />
-        <vers prev="1" num="1.5.0" edition="update7" />
-        <vers prev="1" num="1.5.0" edition="update8" />
-        <vers prev="1" num="1.5.0" edition="update9" />
-        <vers num="1.6.0" edition="update_1" />
-        <vers num="1.6.0" edition="update_10" />
-        <vers num="1.6.0" edition="update_11" />
-        <vers num="1.6.0" edition="update_12" />
-        <vers num="1.6.0" edition="update_13" />
-        <vers num="1.6.0" edition="update_14" />
-        <vers num="1.6.0" edition="update_15" />
-        <vers num="1.6.0" edition="update_16" />
-        <vers num="1.6.0" edition="update_17" />
-        <vers num="1.6.0" edition="update_18" />
-        <vers num="1.6.0" edition="update_19" />
-        <vers num="1.6.0" edition="update_2" />
-        <vers num="1.6.0" edition="update_20" />
-        <vers num="1.6.0" edition="update_21" />
-        <vers num="1.6.0" edition="update_3" />
-        <vers num="1.6.0" edition="update_4" />
-        <vers num="1.6.0" edition="update_5" />
-        <vers num="1.6.0" edition="update_6" />
-        <vers num="1.6.0" edition="update_7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1726" published="2012-06-16" name="CVE-2012-1726" modified="2012-06-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jdk">
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1727" published="2012-07-17" name="CVE-2012-1727" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Document Repository.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="e-business_suite">
-        <vers num="11.5.10.2" />
-        <vers num="12.0.4" />
-        <vers num="12.0.6" />
-        <vers num="12.1.1" />
-        <vers num="12.1.2" />
-        <vers num="12.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1728" published="2012-07-17" name="CVE-2012-1728" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Portal Framework.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="siebel_crm">
-        <vers num="8.1.1" />
-        <vers num="8.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1729" published="2012-07-17" name="CVE-2012-1729" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.1.3 and earlier allows remote attackers to affect integrity via unknown vectors related to UI and Visualization.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="hyperion">
-        <vers num="11.1.1" />
-        <vers prev="1" num="11.1.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1730" published="2012-07-17" name="CVE-2012-1730" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Password Management.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="e-business_suite">
-        <vers num="11.5.10.2" />
-        <vers num="12.0.6" />
-        <vers num="12.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1731" published="2012-07-17" name="CVE-2012-1731" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web UI.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="siebel_crm">
-        <vers num="8.1.1" />
-        <vers num="8.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1732" published="2012-07-17" name="CVE-2012-1732" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Framework.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="siebel_crm">
-        <vers num="8.1.1" />
-        <vers num="8.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1733" published="2012-07-17" name="CVE-2012-1733" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:N/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect confidentiality via unknown vectors related to CM.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1734" published="2012-07-17" name="CVE-2012-1734" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-        <vers num="5.5.1" />
-        <vers num="5.5.2" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers prev="1" num="5.1.62" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.22" />
-        <vers prev="1" num="5.5.23" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1735" published="2012-07-17" name="CVE-2012-1735" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:C)" CVSS_score="6.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="8.0" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.5.0" />
-        <vers num="5.5.1" />
-        <vers num="5.5.2" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.22" />
-        <vers prev="1" num="5.5.23" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1736" published="2012-07-17" name="CVE-2012-1736" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle MapViewer component in Oracle Fusion Middleware 10.1.3.1 allows remote attackers to affect confidentiality via unknown vectors related to Oracle Maps.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="10.1.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1737" published="2012-07-17" name="CVE-2012-1737" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Enterprise Manager Grid Control EM Base Platform 10.2.0.5, EM Base Platform 11.1.0.1, EM Plugin for DB 12.1.0.1, and EM Plugin for DB 12.1.0.2, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to DB Performance Advisories/UIs.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="11.1.0.7" />
-        <vers num="11.2.0.2" />
-        <vers num="11.2.0.3" />
-      </prod>
-      <prod vendor="oracle" name="enterprise_manager_grid_control">
-        <vers num="10.2.0.5" />
-        <vers num="11.1.0.1" />
-        <vers num="12.1.0.1" />
-        <vers num="12.1.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1738" published="2012-07-17" name="CVE-2012-1738" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite Java System Web Server 6.1 and Oracle iPlanet Web Server 7.0 allows remote attackers to affect availability via unknown vectors related to Web Server.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="iplanet_web_server">
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="oracle" name="sun_products_suite_java_system_web_server">
-        <vers num="6.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1739" published="2012-07-17" name="CVE-2012-1739" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Financials Business Intelligence.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="e-business_suite">
-        <vers num="11.5.10.2" />
-        <vers num="12.0.4" />
-        <vers num="12.0.6" />
-        <vers num="12.1.1" />
-        <vers num="12.1.2" />
-        <vers num="12.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1740" published="2012-07-17" name="CVE-2012-1740" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:N/A:N)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Application Express Listener component in Oracle Application Express Listener 1.1-ea, 1.1.1, 1.1.2, and 1.1.3 allows remote attackers to affect confidentiality via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="application_express_listener">
-        <vers num="1.1-ea" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1741" published="2012-07-17" name="CVE-2012-1741" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Enterprise Manager for Fusion Middleware component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to User Administration Pages.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="10.1.3.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1742" published="2012-07-17" name="CVE-2012-1742" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via unknown vectors related to UI Framework.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="siebel_crm">
-        <vers num="8.1.1" />
-        <vers num="8.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1743" published="2012-07-17" name="CVE-2012-1743" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:M/C:P/I:N/A:N)" CVSS_score="2.8" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="5.5" CVSS_base_score="2.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0.x, 4.6.2, and 4.6.3 allows remote authenticated users to affect confidentiality, related to HTML Surround.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="industry_applications">
-        <vers num="4.6.0" />
-        <vers num="4.6.2" />
-        <vers num="4.6.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1744" published="2012-07-17" name="CVE-2012-1744" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent users to affect availability via unknown vectors related to Outside In Filters.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
-
-'Outside In Technology is a suite of software development kits (SDKs). It does not have any particular associated protocol. If the hosting software passes data received over the network to Outside In Technology code, the CVSS score would increase to 6.8.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.5.0" />
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1745" published="2012-07-17" name="CVE-2012-1745" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Network Layer component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to affect availability via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="10.2.0.3" />
-        <vers num="10.2.0.4" />
-        <vers num="10.2.0.5" />
-        <vers num="11.1.0.7" />
-        <vers num="11.2.0.2" />
-        <vers num="11.2.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1746" published="2012-07-17" name="CVE-2012-1746" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Network Layer component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, when running on Windows, allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2012-1747.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="10.2.0.3" />
-        <vers num="10.2.0.4" />
-        <vers num="10.2.0.5" />
-        <vers num="11.1.0.7" />
-        <vers num="11.2.0.2" />
-        <vers num="11.2.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1747" published="2012-07-17" name="CVE-2012-1747" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Network Layer component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, when running on Windows, allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2012-1746.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="10.2.0.3" />
-        <vers num="10.2.0.4" />
-        <vers num="10.2.0.5" />
-        <vers num="11.1.0.7" />
-        <vers num="11.2.0.2" />
-        <vers num="11.2.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1748" published="2012-07-17" name="CVE-2012-1748" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Candidate Gateway.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1749" published="2012-07-17" name="CVE-2012-1749" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle MapViewer component in Oracle Fusion Middleware 10.1.3.1 and 11.1.1.5 allows remote attackers to affect confidentiality via unknown vectors related to Oracle Maps.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="10.1.3.1" />
-        <vers num="11.1.1.5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1750" published="2012-07-17" name="CVE-2012-1750" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="4.4" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.4" CVSS_base_score="4.4">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to mailx.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027274" source="SECTRACK">1027274</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.8" />
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1752" published="2012-07-17" name="CVE-2012-1752" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability, related to Kernel/NFS.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027274" source="SECTRACK">1027274</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.11" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1753" published="2012-07-17" name="CVE-2012-1753" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:M/C:P/I:P/A:P)" CVSS_score="5.4" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="5.5" CVSS_base_score="5.4">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to PC.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1754" published="2012-07-17" name="CVE-2012-1754" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Framework.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="siebel_crm">
-        <vers num="8.1.1" />
-        <vers num="8.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1756" published="2012-07-17" name="CVE-2012-1756" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.5.0" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.5.1" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.2" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.22" />
-        <vers prev="1" num="5.5.23" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1757" published="2012-07-17" name="CVE-2012-1757" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.5.0" />
-        <vers num="5.5.1" />
-        <vers num="5.5.2" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.22" />
-        <vers prev="1" num="5.5.23" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1758" published="2012-07-17" name="CVE-2012-1758" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle AutoVue component in Oracle Supply Chain Products Suite 20.0.2 and 20.1 allows remote authenticated users to affect availability via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="supply_chain_products_suite">
-        <vers num="20.0.2" />
-        <vers num="20.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1759" published="2012-07-17" name="CVE-2012-1759" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle AutoVue component in Oracle Supply Chain Products Suite 20.0.2 and 20.1 allows remote authenticated users to affect availability via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="supply_chain_products_suite">
-        <vers num="20.0.2" />
-        <vers num="20.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1760" published="2012-07-17" name="CVE-2012-1760" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via unknown vectors related to UI Framework.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="siebel_crm">
-        <vers num="8.1.1" />
-        <vers num="8.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1761" published="2012-07-17" name="CVE-2012-1761" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to UI Framework.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="siebel_crm">
-        <vers num="8.1.1" />
-        <vers num="8.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1762" published="2012-07-17" name="CVE-2012-1762" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect integrity, related to TECH.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1764" published="2012-07-17" name="CVE-2012-1764" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect integrity, related to MCF.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1765" published="2012-07-17" name="CVE-2012-1765" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:N/I:C/A:N)" CVSS_score="4.7" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.4" CVSS_base_score="4.7">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via unknown vectors related to Branded Zone.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027274" source="SECTRACK">1027274</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1766" published="2012-07-17" name="CVE-2012-1766" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
-
-'Outside In Technology is a suite of software development kits (SDKs). It does not have any particular associated protocol. If the hosting software passes data received over the network to Outside In Technology code, the CVSS score would increase to 6.8.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.5.0" />
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1767" published="2012-07-17" name="CVE-2012-1767" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
-
-'Outside In Technology is a suite of software development kits (SDKs). It does not have any particular associated protocol. If the hosting software passes data received over the network to Outside In Technology code, the CVSS score would increase to 6.8.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.5" />
-        <vers num="8.3.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1768" published="2012-07-17" name="CVE-2012-1768" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
-
-'Outside In Technology is a suite of software development kits (SDKs). It does not have any particular associated protocol. If the hosting software passes data received over the network to Outside In Technology code, the CVSS score would increase to 6.8.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1769" published="2012-07-17" name="CVE-2012-1769" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
-
-'Outside In Technology is a suite of software development kits (SDKs). It does not have any particular associated protocol. If the hosting software passes data received over the network to Outside In Technology code, the CVSS score would increase to 6.8.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.5.0" />
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1770" published="2012-07-17" name="CVE-2012-1770" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
-
-'Outside In Technology is a suite of software development kits (SDKs). It does not have any particular associated protocol. If the hosting software passes data received over the network to Outside In Technology code, the CVSS score would increase to 6.8.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.5.0" />
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1771" published="2012-07-17" name="CVE-2012-1771" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
-
-'Outside In Technology is a suite of software development kits (SDKs). It does not have any particular associated protocol. If the hosting software passes data received over the network to Outside In Technology code, the CVSS score would increase to 6.8.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.5.0" />
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1772" published="2012-07-17" name="CVE-2012-1772" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
-
-'Outside In Technology is a suite of software development kits (SDKs). It does not have any particular associated protocol. If the hosting software passes data received over the network to Outside In Technology code, the CVSS score would increase to 6.8.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.5.0" />
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1773" published="2012-07-17" name="CVE-2012-1773" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
-
-'Outside In Technology is a suite of software development kits (SDKs). It does not have any particular associated protocol. If the hosting software passes data received over the network to Outside In Technology code, the CVSS score would increase to 6.8.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.5.0" />
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1774" published="2012-03-17" name="CVE-2012-1774" modified="2012-04-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Open URL feature in Gretech GOM Media Player before 2.1.39.5101 has unknown impact and attack vectors, a different vulnerability than CVE-2007-5779 and CVE-2012-1264.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://player.gomlab.com/eng/download/" source="CONFIRM" patch="1" adv="1">http://player.gomlab.com/eng/download/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gomlab" name="gom_media_player">
-        <vers prev="1" num="2.1.36.5083" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1775" published="2012-03-19" name="CVE-2012-1775" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.videolan.org/security/sa1201.html" source="CONFIRM" adv="1">http://www.videolan.org/security/sa1201.html</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14820" source="OVAL">oval:org.mitre.oval:def:14820</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="videolan" name="vlc_media_player">
-        <vers num="0.1.99a" />
-        <vers num="0.1.99b" />
-        <vers num="0.1.99c" />
-        <vers num="0.1.99d" />
-        <vers num="0.1.99e" />
-        <vers num="0.1.99f" />
-        <vers num="0.1.99g" />
-        <vers num="0.1.99h" />
-        <vers num="0.1.99i" />
-        <vers num="0.2.0" />
-        <vers num="0.2.50" />
-        <vers num="0.2.60" />
-        <vers num="0.2.61" />
-        <vers num="0.2.62" />
-        <vers num="0.2.63" />
-        <vers num="0.2.70" />
-        <vers num="0.2.71" />
-        <vers num="0.2.72" />
-        <vers num="0.2.73" />
-        <vers num="0.2.80" />
-        <vers num="0.2.81" />
-        <vers num="0.2.82" />
-        <vers num="0.2.83" />
-        <vers num="0.2.90" />
-        <vers num="0.2.91" />
-        <vers num="0.2.92" />
-        <vers num="0.3.0" />
-        <vers num="0.3.1" />
-        <vers num="0.4.0" />
-        <vers num="0.4.1" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.3-ac3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.5.0" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.6.0" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.7.0" />
-        <vers num="0.7.1" />
-        <vers num="0.7.1a" />
-        <vers num="0.7.2" edition="test2" />
-        <vers num="0.7.2" edition="test3" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.1337" />
-        <vers num="0.8.2" />
-        <vers num="0.8.4" edition="test2" />
-        <vers num="0.8.4a" />
-        <vers num="0.8.5" edition="test3" />
-        <vers num="0.8.5" edition="test4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.6a" />
-        <vers num="0.8.6b" />
-        <vers num="0.8.6c" />
-        <vers num="0.8.6d" />
-        <vers num="0.8.6e" />
-        <vers num="0.8.6f" />
-        <vers num="0.8.6g" />
-        <vers num="0.8.6h" />
-        <vers num="0.8.6i" />
-        <vers num="0.9" />
-        <vers num="0.9.0" />
-        <vers num="0.9.1" />
-        <vers num="0.9.10" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="0.9.4" />
-        <vers num="0.9.5" />
-        <vers num="0.9.6" />
-        <vers num="0.9.7" />
-        <vers num="0.9.8" />
-        <vers num="0.9.8a" />
-        <vers num="0.9.9" />
-        <vers num="0.9.9a" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.10.1" />
-        <vers num="1.1.11" />
-        <vers num="1.1.13" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.4.1" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.6.1" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers prev="1" num="2.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1776" published="2012-03-19" name="CVE-2012-1776" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.videolan.org/security/sa1202.html" source="CONFIRM" adv="1">http://www.videolan.org/security/sa1202.html</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14817" source="OVAL">oval:org.mitre.oval:def:14817</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="videolan" name="vlc_media_player">
-        <vers num="0.1.99a" />
-        <vers num="0.1.99b" />
-        <vers num="0.1.99c" />
-        <vers num="0.1.99d" />
-        <vers num="0.1.99e" />
-        <vers num="0.1.99f" />
-        <vers num="0.1.99g" />
-        <vers num="0.1.99h" />
-        <vers num="0.1.99i" />
-        <vers num="0.2.0" />
-        <vers num="0.2.50" />
-        <vers num="0.2.60" />
-        <vers num="0.2.61" />
-        <vers num="0.2.62" />
-        <vers num="0.2.63" />
-        <vers num="0.2.70" />
-        <vers num="0.2.71" />
-        <vers num="0.2.72" />
-        <vers num="0.2.73" />
-        <vers num="0.2.80" />
-        <vers num="0.2.81" />
-        <vers num="0.2.82" />
-        <vers num="0.2.83" />
-        <vers num="0.2.90" />
-        <vers num="0.2.91" />
-        <vers num="0.2.92" />
-        <vers num="0.3.0" />
-        <vers num="0.3.1" />
-        <vers num="0.4.0" />
-        <vers num="0.4.1" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.3-ac3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.5.0" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.6.0" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.7.0" />
-        <vers num="0.7.1" />
-        <vers num="0.7.1a" />
-        <vers num="0.7.2" edition="test2" />
-        <vers num="0.7.2" edition="test3" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.1337" />
-        <vers num="0.8.2" />
-        <vers num="0.8.4" edition="test2" />
-        <vers num="0.8.4a" />
-        <vers num="0.8.5" edition="test3" />
-        <vers num="0.8.5" edition="test4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.6a" />
-        <vers num="0.8.6b" />
-        <vers num="0.8.6c" />
-        <vers num="0.8.6d" />
-        <vers num="0.8.6e" />
-        <vers num="0.8.6f" />
-        <vers num="0.8.6g" />
-        <vers num="0.8.6h" />
-        <vers num="0.8.6i" />
-        <vers num="0.9" />
-        <vers num="0.9.0" />
-        <vers num="0.9.1" />
-        <vers num="0.9.10" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="0.9.4" />
-        <vers num="0.9.5" />
-        <vers num="0.9.6" />
-        <vers num="0.9.7" />
-        <vers num="0.9.8" />
-        <vers num="0.9.8a" />
-        <vers num="0.9.9" />
-        <vers num="0.9.9a" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.10.1" />
-        <vers num="1.1.11" />
-        <vers num="1.1.13" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.4.1" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.6.1" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers prev="1" num="2.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1777" published="2012-04-05" name="CVE-2012-1777" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in my.activation.php3 in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0 allows remote attackers to execute arbitrary SQL commands via the state parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.sec-consult.com/files/20120328-0_F5_FirePass_SSL_VPN_unauthenticated_remote_root_v1.0.txt" source="MISC">https://www.sec-consult.com/files/20120328-0_F5_FirePass_SSL_VPN_unauthenticated_remote_root_v1.0.txt</ref>
-      <ref url="http://support.f5.com/kb/en-us/solutions/public/13000/400/sol13463.html" source="CONFIRM" adv="1">http://support.f5.com/kb/en-us/solutions/public/13000/400/sol13463.html</ref>
-      <ref url="http://secunia.com/advisories/48455" source="SECUNIA">48455</ref>
-      <ref url="http://seclists.org/fulldisclosure/2012/Mar/324" source="FULLDISC">20120328 SEC Consult SA-20120328-0 :: F5 FirePass SSL VPN unauthenticated remote root through SQL injection - CVE-2012-1777</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="f5" name="firepass">
-        <vers num="6.0" />
-        <vers num="6.1.0" />
-        <vers num="7.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1778" published="2012-03-19" name="CVE-2012-1778" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in artykul_print.php in CreateVision CMS allows remote attackers to execute arbitrary SQL commands via the id parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73483" source="XF">createvision-artykulprint-sql-injection(73483)</ref>
-      <ref url="http://www.exploit-db.com/exploits/18525" source="EXPLOIT-DB">18525</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="createvision" name="createvision_cms">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1779" published="2012-03-19" name="CVE-2012-1779" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter to index.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73505" source="XF">idevbusinessdirectory-index-xss(73505)</ref>
-      <ref url="http://www.securityfocus.com/bid/52171" source="BID">52171</ref>
-      <ref url="http://secunia.com/advisories/48173" source="SECUNIA" adv="1">48173</ref>
-      <ref url="http://packetstormsecurity.org/files/110212/idev-BusinessDirectory-3.0-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/110212/idev-BusinessDirectory-3.0-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="idevspot" name="idev-businessdirectory">
-        <vers num="3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1780" published="2012-03-19" name="CVE-2012-1780" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in search.php in SocialCMS 1.0.5 allows remote attackers to execute arbitrary SQL commands via the category parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73440" source="XF">socialcms-commentajax-sql-injection(73440)</ref>
-      <ref url="http://www.securityfocus.com/bid/52109" source="BID">52109</ref>
-      <ref url="http://secunia.com/advisories/48082" source="SECUNIA" adv="1">48082</ref>
-      <ref url="http://secunia.com/advisories/44313" source="SECUNIA" adv="1">44313</ref>
-      <ref url="http://packetstormsecurity.org/files/110043/SocialCMS-Cross-Site-Scripting-SQL-Injection.html" source="MISC">http://packetstormsecurity.org/files/110043/SocialCMS-Cross-Site-Scripting-SQL-Injection.html</ref>
-      <ref url="http://osvdb.org/79458" source="OSVDB">79458</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="socialcms" name="socialcms">
-        <vers num="1.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1781" published="2012-03-19" name="CVE-2012-1781" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) TREF_email_address or (2) TR_name parameters.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73442" source="XF">socialcms-search-xss(73442)</ref>
-      <ref url="http://www.securityfocus.com/bid/52109" source="BID">52109</ref>
-      <ref url="http://secunia.com/advisories/48082" source="SECUNIA" adv="1">48082</ref>
-      <ref url="http://packetstormsecurity.org/files/110043/SocialCMS-Cross-Site-Scripting-SQL-Injection.html" source="MISC">http://packetstormsecurity.org/files/110043/SocialCMS-Cross-Site-Scripting-SQL-Injection.html</ref>
-      <ref url="http://osvdb.org/79457" source="OSVDB">79457</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="socialcms" name="socialcms">
-        <vers num="1.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1782" published="2012-03-19" name="CVE-2012-1782" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or HTML via the (1) url bar or (2) picture bar.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=461" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=461</ref>
-      <ref url="http://www.securityfocus.com/bid/52184" source="BID">52184</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0164.html" source="BUGTRAQ">20120227 OSQA CMS v3b - Multiple Persistent Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="osqa" name="osqa">
-        <vers num="3b" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1783" published="2012-03-19" name="CVE-2012-1783" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service (crash) via a long string in a GET request without an HTTP version number.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73482" source="XF">tiny-http-dos(73482)</ref>
-      <ref url="http://www.exploit-db.com/exploits/18524" source="EXPLOIT-DB">18524</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="saurabh_gupta" name="tiny_server">
-        <vers num="1.0.5" />
-        <vers num="1.1.5" />
-        <vers prev="1" num="1.1.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1784" published="2012-03-19" name="CVE-2012-1784" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in MyJobList 0.1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter in a profile action to index.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73503" source="XF">myjoblist-index-sql-injection(73503)</ref>
-      <ref url="http://www.securityfocus.com/bid/52168" source="BID">52168</ref>
-      <ref url="http://secunia.com/advisories/48169" source="SECUNIA" adv="1">48169</ref>
-      <ref url="http://packetstormsecurity.org/files/110225/MyJobList-0.1.3-SQL-Injection.html" source="MISC">http://packetstormsecurity.org/files/110225/MyJobList-0.1.3-SQL-Injection.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="myjoblist" name="myjoblist">
-        <vers num="0.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1785" published="2012-03-19" name="CVE-2012-1785" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">kg_callffmpeg.php in the Video Embed &amp; Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://plugins.trac.wordpress.org/changeset?old_path=%2Fvideo-embed-thumbnail-generator&amp;old=507924&amp;new_path=%2Fvideo-embed-thumbnail-generator&amp;new=507924" source="CONFIRM" patch="1">http://plugins.trac.wordpress.org/changeset?old_path=%2Fvideo-embed-thumbnail-generator&amp;old=507924&amp;new_path=%2Fvideo-embed-thumbnail-generator&amp;new=507924</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73508" source="XF">videoembed-kgcallffmpeg-code-execution(73508)</ref>
-      <ref url="http://www.securityfocus.com/bid/52180" source="BID">52180</ref>
-      <ref url="http://wordpress.org/extend/plugins/video-embed-thumbnail-generator/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/video-embed-thumbnail-generator/changelog/</ref>
-      <ref url="http://secunia.com/advisories/48087" source="SECUNIA" adv="1">48087</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kylegilman" name="video_embed_&amp;_thumbnail_generator">
-        <vers num="0.2" />
-        <vers num="0.2.1" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers prev="1" num="1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1786" published="2012-03-19" name="CVE-2012-1786" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Media Upload form in the Video Embed &amp; Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://plugins.trac.wordpress.org/changeset?old_path=%2Fvideo-embed-thumbnail-generator&amp;old=507924&amp;new_path=%2Fvideo-embed-thumbnail-generator&amp;new=507924" source="CONFIRM" patch="1">http://plugins.trac.wordpress.org/changeset?old_path=%2Fvideo-embed-thumbnail-generator&amp;old=507924&amp;new_path=%2Fvideo-embed-thumbnail-generator&amp;new=507924</ref>
-      <ref url="http://wordpress.org/extend/plugins/video-embed-thumbnail-generator/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/video-embed-thumbnail-generator/changelog/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kylegilman" name="video_embed_&amp;_thumbnail_generator">
-        <vers num="0.2" />
-        <vers num="0.2.1" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers prev="1" num="1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1787" published="2012-03-19" name="CVE-2012-1787" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) FILE, or (3) DOMAIN parameters.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73485" source="XF">webglimpse-wgarcmin-xss(73485)</ref>
-      <ref url="http://www.securityfocus.com/bid/52170" source="BID">52170</ref>
-      <ref url="http://websecurity.com.ua/3089/" source="MISC">http://websecurity.com.ua/3089/</ref>
-      <ref url="http://secunia.com/advisories/48049" source="SECUNIA" adv="1">48049</ref>
-      <ref url="http://packetstormsecurity.org/files/110219/Webglimpse-Brute-Force-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/110219/Webglimpse-Brute-Force-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="webglimpse" name="webglimpse">
-        <vers num="2.10.1" />
-        <vers num="2.10.2" />
-        <vers num="2.10.4" />
-        <vers num="2.11.0" />
-        <vers num="2.12.0" />
-        <vers num="2.12.2" />
-        <vers num="2.13.0" />
-        <vers num="2.13.1" />
-        <vers num="2.13.2" />
-        <vers num="2.14.0" />
-        <vers num="2.14.1" />
-        <vers num="2.14.2" />
-        <vers num="2.14.3" />
-        <vers num="2.14.5" />
-        <vers num="2.14.6" />
-        <vers num="2.14.7" />
-        <vers num="2.14.8" />
-        <vers num="2.14.9" />
-        <vers num="2.15.0" />
-        <vers num="2.15.3" />
-        <vers num="2.15.5" />
-        <vers num="2.16.2" />
-        <vers num="2.16.3" />
-        <vers num="2.16.4" />
-        <vers num="2.17.0" />
-        <vers num="2.17.1" />
-        <vers num="2.17.2" />
-        <vers num="2.17.3" />
-        <vers num="2.18.4" />
-        <vers num="2.18.5" />
-        <vers num="2.18.8" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers prev="1" num="2.20.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.3" />
-        <vers num="2.4.0" />
-        <vers num="2.4.6" />
-        <vers num="2.5.1" />
-        <vers num="2.5.4" />
-        <vers num="2.6.2" />
-        <vers num="2.6.7" />
-        <vers num="2.7.4" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.7.8" />
-        <vers num="2.8.0" />
-        <vers num="2.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1788" published="2012-03-19" name="CVE-2012-1788" modified="2012-03-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in wonderdesk.cgi in WonderDesk SQL 4.14 allow remote attackers to inject arbitrary web script or HTML via the (1) cus_email parameter in a cust_lostpw action; or (2) help_name, (3) help_email, (4) help_website, or (5) help_example_url parameters in an hd_modify_record action.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73502" source="XF">wonderdesk-wonderdesk-xss(73502)</ref>
-      <ref url="http://st2tea.blogspot.com/2012/02/wonderdesk-cross-site-scripting.html" source="MISC">http://st2tea.blogspot.com/2012/02/wonderdesk-cross-site-scripting.html</ref>
-      <ref url="http://secunia.com/advisories/48167" source="SECUNIA" adv="1">48167</ref>
-      <ref url="http://packetstormsecurity.org/files/110224/WonderDesk-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/110224/WonderDesk-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wonderdesk" name="wonderdesk_sql">
-        <vers num="4.14" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1789" published="2012-03-19" name="CVE-2012-1789" modified="2012-03-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Kongreg8 1.7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) surname or (2) firstname parameters to modules/members/addmember.php; or (3) groupdescription or (4) groupname parameters to modules/groups/addgroupform.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73510" source="XF">kongreg8-multiple-xss(73510)</ref>
-      <ref url="http://www.securityfocus.com/bid/52178" source="BID">52178</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0154.html" source="BUGTRAQ">20120224 Kongreg8 1.7.3 Mutiple XSS</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tskynet" name="kongreg8">
-        <vers num="1.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1790" published="2012-03-19" name="CVE-2012-1790" modified="2012-03-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the file parameter to index.php.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73509" source="XF">webgrind-index-file-include(73509)</ref>
-      <ref url="http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5075.php" source="MISC">http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5075.php</ref>
-      <ref url="http://www.exploit-db.com/exploits/18523" source="EXPLOIT-DB">18523</ref>
-      <ref url="http://packetstormsecurity.org/files/110216" source="MISC">http://packetstormsecurity.org/files/110216</ref>
-      <ref url="http://code.google.com/p/webgrind/issues/detail?id=66" source="MISC">http://code.google.com/p/webgrind/issues/detail?id=66</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="joakim_nygard" name="webgrind">
-        <vers num="1.0" />
-        <vers num="1.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1792" published="2012-05-27" name="CVE-2012-1792" modified="2012-05-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Setup/Application/Install/RPC/DBCheck.php in OSCommerce Online Merchant 3.0.2, when the software is being installed, allows remote attackers to inject arbitrary web script or HTML via the name parameter to oscommerce/index.php, which is not properly handled in an error message.  NOTE: this might not be a vulnerability, since the ability to access oscommerce/index.php during installation may already imply administrator privileges.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.trustwave.com/spiderlabs/advisories/TWSL2012-005.txt" source="MISC">https://www.trustwave.com/spiderlabs/advisories/TWSL2012-005.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oscommerce" name="online_merchant">
-        <vers num="2.2" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers prev="1" num="3.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1795" published="2012-03-20" name="CVE-2012-1795" modified="2012-04-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited in the wild in March 2012.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/364363" source="CERT-VN" patch="1">VU#364363</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="webglimpse" name="webglimpse">
-        <vers num="2.10.1" />
-        <vers num="2.10.2" />
-        <vers num="2.10.4" />
-        <vers num="2.11.0" />
-        <vers num="2.12.0" />
-        <vers num="2.12.2" />
-        <vers num="2.13.0" />
-        <vers num="2.13.1" />
-        <vers num="2.13.2" />
-        <vers num="2.14.0" />
-        <vers num="2.14.1" />
-        <vers num="2.14.2" />
-        <vers num="2.14.3" />
-        <vers num="2.14.5" />
-        <vers num="2.14.6" />
-        <vers num="2.14.7" />
-        <vers num="2.14.8" />
-        <vers num="2.14.9" />
-        <vers num="2.15.0" />
-        <vers num="2.15.3" />
-        <vers num="2.15.5" />
-        <vers num="2.16.2" />
-        <vers num="2.16.3" />
-        <vers num="2.16.4" />
-        <vers num="2.17.0" />
-        <vers num="2.17.1" />
-        <vers num="2.17.2" />
-        <vers num="2.17.3" />
-        <vers num="2.18.4" />
-        <vers num="2.18.5" />
-        <vers prev="1" num="2.18.8" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.3.1" />
-        <vers num="2.3.3" />
-        <vers num="2.4.0" />
-        <vers num="2.4.6" />
-        <vers num="2.5.1" />
-        <vers num="2.5.4" />
-        <vers num="2.6.2" />
-        <vers num="2.6.7" />
-        <vers num="2.7.4" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.7.8" />
-        <vers num="2.8.0" />
-        <vers num="2.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1796" published="2012-03-20" name="CVE-2012-1796" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in IBM Tivoli Monitoring Agent (ITMA), as used in IBM DB2 9.5 before FP9 on UNIX, allows local users to gain privileges via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21586193" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg21586193</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC79970" source="AIXAPAR" adv="1">IC79970</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14526" source="OVAL">oval:org.mitre.oval:def:14526</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="db2">
-        <vers num="9.5" edition="fp1" />
-        <vers num="9.5" edition="fp2" />
-        <vers num="9.5" edition="fp2a" />
-        <vers num="9.5" edition="fp3" />
-        <vers num="9.5" edition="fp3a" />
-        <vers num="9.5" edition="fp3b" />
-        <vers num="9.5" edition="fp4" />
-        <vers num="9.5" edition="fp4a" />
-        <vers num="9.5" edition="fp5" />
-        <vers num="9.5" edition="fp6" />
-        <vers num="9.5" edition="fp6a" />
-        <vers num="9.5" edition="fp7" />
-        <vers num="9.5" edition="fp8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1797" published="2012-03-20" name="CVE-2012-1797" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC79518" source="AIXAPAR">IC79518</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?crawler=1&amp;uid=swg1IC79518" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?crawler=1&amp;uid=swg1IC79518</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14922" source="OVAL">oval:org.mitre.oval:def:14922</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="db2">
-        <vers num="9.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1798" published="2012-06-05" name="CVE-2012-1798" modified="2012-06-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted EXIF IFD in a TIFF image.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&amp;t=20629" source="CONFIRM" patch="1">http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&amp;t=20629</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74659" source="XF">imagemagick-tiffexififd-dos(74659)</ref>
-      <ref url="http://www.securityfocus.com/bid/52898" source="BID">52898</ref>
-      <ref url="http://www.osvdb.org/81023" source="OSVDB">81023</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2462" source="DEBIAN">DSA-2462</ref>
-      <ref url="http://secunia.com/advisories/49317" source="SECUNIA" adv="1">49317</ref>
-      <ref url="http://secunia.com/advisories/49068" source="SECUNIA" adv="1">49068</ref>
-      <ref url="http://secunia.com/advisories/49063" source="SECUNIA" adv="1">49063</ref>
-      <ref url="http://secunia.com/advisories/48974" source="SECUNIA" adv="1">48974</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0544.html" source="REDHAT">RHSA-2012:0544</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html" source="SUSE">openSUSE-SU-2012:0692</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="imagemagick" name="imagemagick">
-        <vers num="4.2.7" />
-        <vers num="4.2.9" />
-        <vers num="5.2" />
-        <vers num="5.2.0" />
-        <vers num="5.2.4.3" />
-        <vers num="5.2.6" />
-        <vers num="5.3" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers num="5.3.8" />
-        <vers num="5.3.8.2" />
-        <vers num="5.3.9" />
-        <vers num="5.4" />
-        <vers num="5.4.0.5" />
-        <vers num="5.4.1.2" />
-        <vers num="5.4.2.3" />
-        <vers num="5.4.3" />
-        <vers num="5.4.3.11" />
-        <vers num="5.4.4.5" />
-        <vers num="5.4.5.1" />
-        <vers num="5.4.6.3" />
-        <vers num="5.4.7" />
-        <vers num="5.4.7.4" />
-        <vers num="5.4.8" />
-        <vers num="5.4.8.2.1.1.0" />
-        <vers num="5.4.8.2_1.1.0" />
-        <vers num="5.4.8.3" />
-        <vers num="5.4.9.1" />
-        <vers num="5.5" />
-        <vers num="5.5.1.4" />
-        <vers num="5.5.2.5" />
-        <vers num="5.5.3.2" />
-        <vers num="5.5.3.2.1.2.0" />
-        <vers num="5.5.3_.2_1.2.0" />
-        <vers num="5.5.4" />
-        <vers num="5.5.4.4" />
-        <vers num="5.5.5.3" />
-        <vers num="5.5.6" />
-        <vers num="5.5.6.0_2003-04-09" />
-        <vers num="5.5.6.0_20030409" />
-        <vers num="5.5.7" />
-        <vers num="5.5.7.15" />
-        <vers num="5.5.7.31" />
-        <vers num="5.5.7.35" />
-        <vers num="5.5.7q16" />
-        <vers num="5.5.7q8" />
-        <vers num="6.0" />
-        <vers num="6.0.0.7" />
-        <vers num="6.0.1" />
-        <vers num="6.0.1.4" />
-        <vers num="6.0.2" />
-        <vers num="6.0.2.5" />
-        <vers num="6.0.2.7" />
-        <vers num="6.0.3" />
-        <vers num="6.0.3.5" />
-        <vers num="6.0.4" />
-        <vers num="6.0.4.4" />
-        <vers num="6.0.5" />
-        <vers num="6.0.5.3" />
-        <vers num="6.0.6" />
-        <vers num="6.0.6.1" />
-        <vers num="6.0.6.2" />
-        <vers num="6.0.7" />
-        <vers num="6.0.7.3" />
-        <vers num="6.0.8" />
-        <vers num="6.0.8.3" />
-        <vers num="6.1" />
-        <vers num="6.1.0.9" />
-        <vers num="6.1.1" />
-        <vers num="6.1.1.6" />
-        <vers num="6.1.2" />
-        <vers num="6.1.2.7" />
-        <vers num="6.1.3" />
-        <vers num="6.1.3.7" />
-        <vers num="6.1.4" />
-        <vers num="6.1.4.5" />
-        <vers num="6.1.5" />
-        <vers num="6.1.5.8" />
-        <vers num="6.1.6" />
-        <vers num="6.1.6.9" />
-        <vers num="6.1.7" />
-        <vers num="6.1.7.5" />
-        <vers num="6.1.8" />
-        <vers num="6.1.8.7" />
-        <vers num="6.1.9.4" />
-        <vers num="6.2" />
-        <vers num="6.2.0.3" />
-        <vers num="6.2.0.4" />
-        <vers num="6.2.0.7" />
-        <vers num="6.2.0.8" />
-        <vers num="6.2.1" />
-        <vers num="6.2.1.7" />
-        <vers num="6.2.2" />
-        <vers num="6.2.2.5" />
-        <vers num="6.2.3" />
-        <vers num="6.2.3.4" />
-        <vers num="6.2.3.6" />
-        <vers num="6.2.4" />
-        <vers num="6.2.4.3" />
-        <vers num="6.2.4.5" />
-        <vers num="6.2.5" />
-        <vers num="6.2.6" />
-        <vers num="6.2.7" />
-        <vers num="6.2.8" />
-        <vers num="6.2.8.0" />
-        <vers num="6.2.8.1" />
-        <vers num="6.2.8.2" />
-        <vers num="6.2.8.3" />
-        <vers num="6.2.9" />
-        <vers num="6.2.9.2" />
-        <vers num="6.3.0.0" />
-        <vers num="6.3.0.1" />
-        <vers num="6.3.0.2" />
-        <vers num="6.3.0.3" />
-        <vers num="6.3.0.4" />
-        <vers num="6.3.0.5" />
-        <vers num="6.3.0.7" />
-        <vers num="6.3.0.8" />
-        <vers num="6.3.1" />
-        <vers num="6.3.1-6" />
-        <vers num="6.3.1-7" />
-        <vers num="6.3.1.0" />
-        <vers num="6.3.1.1" />
-        <vers num="6.3.1.2." />
-        <vers num="6.3.1.3" />
-        <vers num="6.3.1.4" />
-        <vers num="6.3.1.5" />
-        <vers num="6.3.1.6" />
-        <vers num="6.3.1.7" />
-        <vers num="6.3.2" />
-        <vers num="6.3.2-1" />
-        <vers num="6.3.2-2" />
-        <vers num="6.3.2-3" />
-        <vers num="6.3.2-4" />
-        <vers num="6.3.2-5" />
-        <vers num="6.3.2-6" />
-        <vers num="6.3.2-7" />
-        <vers num="6.3.2-8" />
-        <vers num="6.3.2.0" />
-        <vers num="6.3.2.1" />
-        <vers num="6.3.2.2" />
-        <vers num="6.3.2.3" />
-        <vers num="6.3.2.4" />
-        <vers num="6.3.2.5" />
-        <vers num="6.3.2.6" />
-        <vers num="6.3.2.7" />
-        <vers num="6.3.2.8" />
-        <vers num="6.3.3" />
-        <vers num="6.3.3-1" />
-        <vers num="6.3.3-2" />
-        <vers num="6.3.3-3" />
-        <vers num="6.3.3-4" />
-        <vers num="6.3.3-5" />
-        <vers num="6.3.3-6" />
-        <vers num="6.3.3-7" />
-        <vers num="6.3.3-8" />
-        <vers num="6.3.3-9" />
-        <vers num="6.3.3.0" />
-        <vers num="6.3.3.1" />
-        <vers num="6.3.3.2" />
-        <vers num="6.3.3.3" />
-        <vers num="6.3.3.4" />
-        <vers num="6.3.3_3" />
-        <vers num="6.3.3_5" />
-        <vers num="6.3.3_6" />
-        <vers num="6.3.4" />
-        <vers num="6.3.4-1" />
-        <vers num="6.3.4-10" />
-        <vers num="6.3.4-2" />
-        <vers num="6.3.4-3" />
-        <vers num="6.3.4-4" />
-        <vers num="6.3.4-5" />
-        <vers num="6.3.4-6" />
-        <vers num="6.3.4-8" />
-        <vers num="6.3.4-9" />
-        <vers num="6.3.5" />
-        <vers num="6.3.5-10" />
-        <vers num="6.3.5-4" />
-        <vers num="6.3.5-5" />
-        <vers num="6.3.5-6" />
-        <vers num="6.3.5-7" />
-        <vers num="6.3.5-9" />
-        <vers num="6.3.6" />
-        <vers num="6.3.6-1" />
-        <vers num="6.3.6-10" />
-        <vers num="6.3.6-2" />
-        <vers num="6.3.6-3" />
-        <vers num="6.3.6-4" />
-        <vers num="6.3.6-5" />
-        <vers num="6.3.6-6" />
-        <vers num="6.3.6-7" />
-        <vers num="6.3.6-8" />
-        <vers num="6.3.6-9" />
-        <vers num="6.3.7" />
-        <vers num="6.3.7-1" />
-        <vers num="6.3.7-10" />
-        <vers num="6.3.7-2" />
-        <vers num="6.3.7-3" />
-        <vers num="6.3.7-4" />
-        <vers num="6.3.7-5" />
-        <vers num="6.3.7-7" />
-        <vers num="6.3.7-9" />
-        <vers num="6.3.8" />
-        <vers num="6.3.8-1" />
-        <vers num="6.3.8-10" />
-        <vers num="6.3.8-2" />
-        <vers num="6.3.8-3" />
-        <vers num="6.3.8-5" />
-        <vers num="6.3.8-6" />
-        <vers num="6.3.8-7" />
-        <vers num="6.3.8-9" />
-        <vers num="6.3.9" />
-        <vers num="6.3.9-1" />
-        <vers num="6.3.9-10" />
-        <vers num="6.3.9-2" />
-        <vers num="6.3.9-4" />
-        <vers num="6.3.9-5" />
-        <vers num="6.3.9-6" />
-        <vers num="6.3.9-7" />
-        <vers num="6.3.9-8" />
-        <vers num="6.3.9-9" />
-        <vers num="6.4.0" />
-        <vers num="6.4.0-1" />
-        <vers num="6.4.0-10" />
-        <vers num="6.4.0-11" />
-        <vers num="6.4.0-4" />
-        <vers num="6.4.0-5" />
-        <vers num="6.4.0-6" />
-        <vers num="6.4.0-7" />
-        <vers num="6.4.0-8" />
-        <vers num="6.4.1" />
-        <vers num="6.4.1-1" />
-        <vers num="6.4.1-2" />
-        <vers num="6.4.1-3" />
-        <vers num="6.4.1-4" />
-        <vers num="6.4.1-5" />
-        <vers num="6.4.1-6" />
-        <vers num="6.4.1-7" />
-        <vers num="6.4.1-8" />
-        <vers num="6.4.1-9" />
-        <vers num="6.4.2" />
-        <vers num="6.4.2-1" />
-        <vers num="6.4.2-10" />
-        <vers num="6.4.2-2" />
-        <vers num="6.4.2-4" />
-        <vers num="6.4.2-5" />
-        <vers num="6.4.2-6" />
-        <vers num="6.4.2-7" />
-        <vers num="6.4.2-8" />
-        <vers num="6.4.2-9" />
-        <vers num="6.4.3" />
-        <vers num="6.4.3-1" />
-        <vers num="6.4.3-10" />
-        <vers num="6.4.3-2" />
-        <vers num="6.4.3-3" />
-        <vers num="6.4.3-5" />
-        <vers num="6.4.3-6" />
-        <vers num="6.4.3-7" />
-        <vers num="6.4.3-8" />
-        <vers num="6.4.4" />
-        <vers num="6.4.4-1" />
-        <vers num="6.4.4-3" />
-        <vers num="6.4.4-5" />
-        <vers num="6.4.4-7" />
-        <vers num="6.4.4-8" />
-        <vers num="6.4.5" />
-        <vers num="6.4.5-1" />
-        <vers num="6.4.5-2" />
-        <vers num="6.4.5-3" />
-        <vers num="6.4.5-4" />
-        <vers num="6.4.5-6" />
-        <vers num="6.4.5-7" />
-        <vers num="6.4.5-9" />
-        <vers num="6.4.6" />
-        <vers num="6.4.6-1" />
-        <vers num="6.4.6-2" />
-        <vers num="6.4.6-3" />
-        <vers num="6.4.6-4" />
-        <vers num="6.4.6-5" />
-        <vers num="6.4.6-6" />
-        <vers num="6.4.6-8" />
-        <vers num="6.4.6-9" />
-        <vers num="6.4.7-1" />
-        <vers num="6.4.7-10" />
-        <vers num="6.4.7-2" />
-        <vers num="6.4.7-3" />
-        <vers num="6.4.7-4" />
-        <vers num="6.4.7-5" />
-        <vers num="6.4.7-6" />
-        <vers num="6.4.7-7" />
-        <vers num="6.4.7-8" />
-        <vers num="6.4.7-9" />
-        <vers num="6.4.8" />
-        <vers num="6.4.8-1" />
-        <vers num="6.4.8-10" />
-        <vers num="6.4.8-2" />
-        <vers num="6.4.8-3" />
-        <vers num="6.4.8-4" />
-        <vers num="6.4.8-5" />
-        <vers num="6.4.8-6" />
-        <vers num="6.4.8-7" />
-        <vers num="6.4.8-8" />
-        <vers num="6.4.8-9" />
-        <vers num="6.4.9" />
-        <vers num="6.4.9-10" />
-        <vers num="6.4.9-2" />
-        <vers num="6.4.9-3" />
-        <vers num="6.4.9-5" />
-        <vers num="6.4.9-7" />
-        <vers num="6.4.9-8" />
-        <vers num="6.4.9-9" />
-        <vers num="6.5.0" />
-        <vers num="6.5.0-1" />
-        <vers num="6.5.0-10" />
-        <vers num="6.5.0-2" />
-        <vers num="6.5.0-3" />
-        <vers num="6.5.0-4" />
-        <vers num="6.5.0-5" />
-        <vers num="6.5.0-6" />
-        <vers num="6.5.0-7" />
-        <vers num="6.5.0-8" />
-        <vers num="6.5.0-9" />
-        <vers num="6.5.1" />
-        <vers num="6.5.1-1" />
-        <vers num="6.5.1-10" />
-        <vers num="6.5.1-2" />
-        <vers num="6.5.1-3" />
-        <vers num="6.5.1-4" />
-        <vers num="6.5.1-5" />
-        <vers num="6.5.1-6" />
-        <vers num="6.5.1-7" />
-        <vers num="6.5.1-9" />
-        <vers num="6.5.2" />
-        <vers num="6.5.2-1" />
-        <vers num="6.5.2-10" />
-        <vers num="6.5.2-2" />
-        <vers num="6.5.2-3" />
-        <vers num="6.5.2-4" />
-        <vers num="6.5.2-5" />
-        <vers num="6.5.2-6" />
-        <vers num="6.5.2-7" />
-        <vers num="6.5.2-8" />
-        <vers num="6.5.2-9" />
-        <vers num="6.5.3" />
-        <vers num="6.5.3-1" />
-        <vers num="6.5.3-10" />
-        <vers num="6.5.3-3" />
-        <vers num="6.5.3-4" />
-        <vers num="6.5.3-5" />
-        <vers num="6.5.3-6" />
-        <vers num="6.5.3-7" />
-        <vers num="6.5.3-8" />
-        <vers num="6.5.4" />
-        <vers num="6.5.4-1" />
-        <vers num="6.5.4-10" />
-        <vers num="6.5.4-2" />
-        <vers num="6.5.4-3" />
-        <vers num="6.5.4-4" />
-        <vers num="6.5.4-5" />
-        <vers num="6.5.4-6" />
-        <vers num="6.5.4-7" />
-        <vers num="6.5.4-8" />
-        <vers num="6.5.4-9" />
-        <vers num="6.5.5" />
-        <vers num="6.5.5-1" />
-        <vers num="6.5.5-10" />
-        <vers num="6.5.5-2" />
-        <vers num="6.5.5-3" />
-        <vers num="6.5.5-4" />
-        <vers num="6.5.5-5" />
-        <vers num="6.5.5-6" />
-        <vers num="6.5.5-7" />
-        <vers num="6.5.5-8" />
-        <vers num="6.5.5-9" />
-        <vers num="6.5.6" />
-        <vers num="6.5.6-10" />
-        <vers num="6.5.6-2" />
-        <vers num="6.5.6-3" />
-        <vers num="6.5.6-4" />
-        <vers num="6.5.6-5" />
-        <vers num="6.5.6-6" />
-        <vers num="6.5.6-7" />
-        <vers num="6.5.6-8" />
-        <vers num="6.5.6-9" />
-        <vers num="6.5.7" />
-        <vers num="6.5.7-1" />
-        <vers num="6.5.7-2" />
-        <vers num="6.5.7-3" />
-        <vers num="6.5.7-4" />
-        <vers num="6.5.7-5" />
-        <vers num="6.5.7-6" />
-        <vers num="6.5.7-7" />
-        <vers num="6.5.7-8" />
-        <vers num="6.5.7-9" />
-        <vers num="6.5.8" />
-        <vers num="6.5.8-1" />
-        <vers num="6.5.8-2" />
-        <vers num="6.5.8-3" />
-        <vers num="6.5.8-4" />
-        <vers num="6.5.8-5" />
-        <vers num="6.5.8-6" />
-        <vers num="6.5.8-7" />
-        <vers num="6.5.8-8" />
-        <vers num="6.5.8-9" />
-        <vers num="6.5.9" />
-        <vers num="6.5.9-1" />
-        <vers num="6.5.9-10" />
-        <vers num="6.5.9-2" />
-        <vers num="6.5.9-3" />
-        <vers num="6.5.9-4" />
-        <vers num="6.5.9-5" />
-        <vers num="6.5.9-6" />
-        <vers num="6.5.9-7" />
-        <vers num="6.5.9-8" />
-        <vers num="6.6.0" />
-        <vers num="6.6.0-1" />
-        <vers num="6.6.0-10" />
-        <vers num="6.6.0-2" />
-        <vers num="6.6.0-4" />
-        <vers num="6.6.0-5" />
-        <vers num="6.6.0-6" />
-        <vers num="6.6.0-7" />
-        <vers num="6.6.0-8" />
-        <vers num="6.6.0-9" />
-        <vers num="6.6.1" />
-        <vers num="6.6.1-1" />
-        <vers num="6.6.1-10" />
-        <vers num="6.6.1-2" />
-        <vers num="6.6.1-3" />
-        <vers num="6.6.1-4" />
-        <vers num="6.6.1-5" />
-        <vers num="6.6.1-6" />
-        <vers num="6.6.1-7" />
-        <vers num="6.6.1-8" />
-        <vers num="6.6.1-9" />
-        <vers num="6.6.2" />
-        <vers num="6.6.2-1" />
-        <vers num="6.6.2-10" />
-        <vers num="6.6.2-2" />
-        <vers num="6.6.2-3" />
-        <vers num="6.6.2-4" />
-        <vers num="6.6.2-5" />
-        <vers num="6.6.2-6" />
-        <vers num="6.6.2-7" />
-        <vers num="6.6.2-8" />
-        <vers num="6.6.2-9" />
-        <vers num="6.6.3" />
-        <vers num="6.6.3-1" />
-        <vers num="6.6.3-10" />
-        <vers num="6.6.3-2" />
-        <vers num="6.6.3-3" />
-        <vers num="6.6.3-4" />
-        <vers num="6.6.3-5" />
-        <vers num="6.6.3-6" />
-        <vers num="6.6.3-7" />
-        <vers num="6.6.4" />
-        <vers num="6.6.4-1" />
-        <vers num="6.6.4-10" />
-        <vers num="6.6.4-2" />
-        <vers num="6.6.4-4" />
-        <vers num="6.6.4-5" />
-        <vers num="6.6.4-6" />
-        <vers num="6.6.4-7" />
-        <vers num="6.6.4-8" />
-        <vers num="6.6.4-9" />
-        <vers num="6.6.5" />
-        <vers num="6.6.5-1" />
-        <vers num="6.6.5-10" />
-        <vers num="6.6.5-2" />
-        <vers num="6.6.5-3" />
-        <vers num="6.6.5-4" />
-        <vers num="6.6.5-5" />
-        <vers num="6.6.5-6" />
-        <vers num="6.6.5-7" />
-        <vers num="6.6.5-8" />
-        <vers num="6.6.5-9" />
-        <vers num="6.6.6-0" />
-        <vers num="6.6.6-1" />
-        <vers num="6.6.6-10" />
-        <vers num="6.6.6-2" />
-        <vers num="6.6.6-3" />
-        <vers num="6.6.6-4" />
-        <vers num="6.6.6-5" />
-        <vers num="6.6.6-6" />
-        <vers num="6.6.6-7" />
-        <vers num="6.6.6-8" />
-        <vers num="6.6.6-9" />
-        <vers num="6.6.7-0" />
-        <vers num="6.6.7-1" />
-        <vers num="6.6.7-10" />
-        <vers num="6.6.7-2" />
-        <vers num="6.6.7-3" />
-        <vers num="6.6.7-4" />
-        <vers num="6.6.7-5" />
-        <vers num="6.6.7-6" />
-        <vers num="6.6.7-7" />
-        <vers num="6.6.7-8" />
-        <vers num="6.6.7-9" />
-        <vers num="6.6.8-0" />
-        <vers num="6.6.9-0" />
-        <vers num="6.6.9-1" />
-        <vers num="6.6.9-10" />
-        <vers num="6.6.9-2" />
-        <vers num="6.6.9-3" />
-        <vers num="6.6.9-4" />
-        <vers num="6.6.9-5" />
-        <vers num="6.6.9-6" />
-        <vers num="6.6.9-7" />
-        <vers num="6.6.9-8" />
-        <vers num="6.6.9-9" />
-        <vers num="6.7.0-0" />
-        <vers num="6.7.0-1" />
-        <vers num="6.7.0-10" />
-        <vers num="6.7.0-2" />
-        <vers num="6.7.0-3" />
-        <vers num="6.7.0-4" />
-        <vers num="6.7.0-5" />
-        <vers num="6.7.0-6" />
-        <vers num="6.7.0-7" />
-        <vers num="6.7.0-8" />
-        <vers num="6.7.0-9" />
-        <vers num="6.7.1-0" />
-        <vers num="6.7.1-1" />
-        <vers num="6.7.1-10" />
-        <vers num="6.7.1-2" />
-        <vers num="6.7.1-3" />
-        <vers num="6.7.1-4" />
-        <vers num="6.7.1-5" />
-        <vers num="6.7.1-6" />
-        <vers num="6.7.1-7" />
-        <vers num="6.7.1-8" />
-        <vers num="6.7.1-9" />
-        <vers num="6.7.2-0" />
-        <vers num="6.7.2-1" />
-        <vers num="6.7.2-10" />
-        <vers num="6.7.2-2" />
-        <vers num="6.7.2-3" />
-        <vers num="6.7.2-4" />
-        <vers num="6.7.2-5" />
-        <vers num="6.7.2-6" />
-        <vers num="6.7.2-7" />
-        <vers num="6.7.2-8" />
-        <vers num="6.7.2-9" />
-        <vers num="6.7.3-0" />
-        <vers num="6.7.3-1" />
-        <vers num="6.7.3-10" />
-        <vers num="6.7.3-2" />
-        <vers num="6.7.3-3" />
-        <vers num="6.7.3-4" />
-        <vers num="6.7.3-5" />
-        <vers num="6.7.3-6" />
-        <vers num="6.7.3-7" />
-        <vers num="6.7.3-8" />
-        <vers num="6.7.3-9" />
-        <vers num="6.7.4-0" />
-        <vers num="6.7.4-1" />
-        <vers num="6.7.4-10" />
-        <vers num="6.7.4-2" />
-        <vers num="6.7.4-3" />
-        <vers num="6.7.4-4" />
-        <vers num="6.7.4-5" />
-        <vers num="6.7.4-6" />
-        <vers num="6.7.4-7" />
-        <vers num="6.7.4-8" />
-        <vers num="6.7.4-9" />
-        <vers num="6.7.5-0" />
-        <vers num="6.7.5-1" />
-        <vers num="6.7.5-10" />
-        <vers num="6.7.5-2" />
-        <vers num="6.7.5-3" />
-        <vers num="6.7.5-4" />
-        <vers num="6.7.5-5" />
-        <vers num="6.7.5-6" />
-        <vers num="6.7.5-7" />
-        <vers num="6.7.5-8" />
-        <vers num="6.7.5-9" />
-        <vers num="6.7.6-0" />
-        <vers num="6.7.6-1" />
-        <vers prev="1" num="6.7.6-2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1799" published="2012-04-18" name="CVE-2012-1799" modified="2012-04-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 does not limit the rate of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack on the administrative password.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-05.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-05.pdf</ref>
-      <ref url="http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-268149.pdf" source="CONFIRM" adv="1">http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-268149.pdf</ref>
-      <ref url="http://support.automation.siemens.com/WW/view/en/59869684" source="CONFIRM">http://support.automation.siemens.com/WW/view/en/59869684</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="siemens" name="scalance_s_firmware">
-        <vers num="2.1.0" />
-        <vers num="2.2.0" />
-        <vers prev="1" num="2.3.0" />
-      </prod>
-      <prod vendor="siemens" name="scalance_s602">
-        <vers num="v2" />
-      </prod>
-      <prod vendor="siemens" name="scalance_s612">
-        <vers num="v2" />
-      </prod>
-      <prod vendor="siemens" name="scalance_s613">
-        <vers num="v2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1800" published="2012-04-18" name="CVE-2012-1800" modified="2012-04-19" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="6.1" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="6.5" CVSS_base_score="6.1">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 allows remote attackers to cause a denial of service (device outage) or possibly execute arbitrary code via a crafted DCP frame.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-05.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-05.pdf</ref>
-      <ref url="http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-268149.pdf" source="CONFIRM" adv="1">http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-268149.pdf</ref>
-      <ref url="http://support.automation.siemens.com/WW/view/en/59869684" source="CONFIRM">http://support.automation.siemens.com/WW/view/en/59869684</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="siemens" name="scalance_s_firmware">
-        <vers num="2.1.0" />
-        <vers num="2.2.0" />
-        <vers prev="1" num="2.3.0" />
-      </prod>
-      <prod vendor="siemens" name="scalance_s602">
-        <vers num="v2" />
-      </prod>
-      <prod vendor="siemens" name="scalance_s612">
-        <vers num="v2" />
-      </prod>
-      <prod vendor="siemens" name="scalance_s613">
-        <vers num="v2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1801" published="2012-04-18" name="CVE-2012-1801" modified="2012-04-19" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="7.7" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="5.1" CVSS_base_score="7.7">
-    <desc>
-      <descript source="cve">Multiple stack-based buffer overflows in (1) COM and (2) ActiveX controls in ABB WebWare Server, WebWare SDK, Interlink Module, S4 OPC Server, QuickTeach, RobotStudio S4, and RobotStudio Lite allow remote attackers to execute arbitrary code via crafted input data.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-095-01A.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-095-01A.pdf</ref>
-      <ref url="http://www05.abb.com/global/scot/scot348.nsf/veritydisplay/35df9dc4a94ae83ac12579ca0043acc1/$file/SI10231A2%20rev%200.pdf" source="CONFIRM" adv="1">http://www05.abb.com/global/scot/scot348.nsf/veritydisplay/35df9dc4a94ae83ac12579ca0043acc1/$file/SI10231A2%20rev%200.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="abb" name="interlink_module">
-        <vers num="-" />
-      </prod>
-      <prod vendor="abb" name="quickteach">
-        <vers num="-" />
-      </prod>
-      <prod vendor="abb" name="robotstudio_lite">
-        <vers num="-" />
-      </prod>
-      <prod vendor="abb" name="robotstudio_s4">
-        <vers num="-" />
-      </prod>
-      <prod vendor="abb" name="s4_opc_server">
-        <vers num="-" />
-      </prod>
-      <prod vendor="abb" name="webware_sdk">
-        <vers num="-" />
-      </prod>
-      <prod vendor="abb" name="webware_server">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1802" published="2012-04-18" name="CVE-2012-1802" modified="2012-04-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X308-2M before 3.7.2, X-300EEC before 3.7.2, XR-300 before 3.7.2, and X-300 before 3.7.2 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a malformed URL.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-04.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-04.pdf</ref>
-      <ref url="http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-130874.pdf" source="CONFIRM" adv="1">http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-130874.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="siemens" name="scalance_x-300_firmware">
-        <vers num="2.2.0" />
-        <vers num="2.3.1" />
-        <vers num="3.0.0" />
-        <vers num="3.3.1" />
-        <vers num="3.5.0" />
-        <vers num="3.5.1" />
-        <vers prev="1" num="3.7.0" />
-      </prod>
-      <prod vendor="siemens" name="scalance_x-300eec_firmware">
-        <vers num="3.5.0" />
-        <vers prev="1" num="3.7.0" />
-      </prod>
-      <prod vendor="siemens" name="scalance_x308-2m_firmware">
-        <vers num="3.1.1" />
-        <vers num="3.5.0" />
-        <vers num="3.5.2" />
-        <vers prev="1" num="3.7.0" />
-      </prod>
-      <prod vendor="siemens" name="scalance_x414-3e_firmware">
-        <vers num="1.2.2" />
-        <vers num="2.1.1" />
-        <vers num="2.2.0" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="3.0.0" />
-        <vers num="3.0.2" />
-        <vers num="3.3.0" />
-        <vers num="3.4.0" />
-        <vers prev="1" num="3.7.0" />
-      </prod>
-      <prod vendor="siemens" name="scalance_xr-300_firmware">
-        <vers num="3.1.1" />
-        <vers num="3.5.0" />
-        <vers prev="1" num="3.7.0" />
-      </prod>
-      <prod vendor="siemens" name="scalance_x-300">
-        <vers num="-" />
-      </prod>
-      <prod vendor="siemens" name="scalance_x-300eec">
-        <vers num="-" />
-      </prod>
-      <prod vendor="siemens" name="scalance_x308-2m">
-        <vers num="-" />
-      </prod>
-      <prod vendor="siemens" name="scalance_x414-3e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="siemens" name="scalance_xr-300">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1803" published="2012-04-27" name="CVE-2012-1803" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:C/I:C/A:C)" CVSS_score="8.5" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="6.8" CVSS_base_score="8.5">
-    <desc>
-      <descript source="cve">RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) TELNET, (2) remote shell (aka rsh), or (3) serial-console session.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8RCPEN" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8RCPEN</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/889195" source="CERT-VN">VU#889195</ref>
-      <ref url="http://www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/" source="MISC">http://www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/</ref>
-      <ref url="http://www.securityfocus.com/bid/53215" source="BID">53215</ref>
-      <ref url="http://www.ruggedcom.com/productbulletin/ros-security-page/" source="CONFIRM" adv="1">http://www.ruggedcom.com/productbulletin/ros-security-page/</ref>
-      <ref url="http://seclists.org/fulldisclosure/2012/Apr/277" source="FULLDISC">20120423 RuggedCom - Backdoor Accounts in my SCADA network? You don't say...</ref>
-      <ref url="http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars" source="MISC">http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ruggedcom" name="ros">
-        <vers prev="1" num="3.10" />
-        <vers num="3.2" />
-        <vers num="3.3" />
-        <vers num="3.7" />
-        <vers num="3.8" />
-        <vers num="3.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1804" published="2012-05-14" name="CVE-2012-1804" modified="2012-06-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted HTTP request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-01.pdf</ref>
-      <ref url="http://www.securityfocus.com/bid/53484" source="BID">53484</ref>
-      <ref url="http://secunia.com/advisories/49092" source="SECUNIA">49092</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="progea" name="movicon">
-        <vers prev="1" num="11.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1805" published="2012-04-13" name="CVE-2012-1805" modified="2012-04-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Buffer overflow in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 allows remote attackers to execute arbitrary code via long strings in unspecified parameters.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-02.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-02.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="koyo" name="h0-ecom">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h0-ecom100">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h2-ecom">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h2-ecom-f">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h2-ecom100">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h4-ecom">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h4-ecom-f">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h4-ecom100">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1806" published="2012-04-13" name="CVE-2012-1806" modified="2012-04-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 supports a maximum password length of 8 bytes, which makes it easier for remote attackers to obtain access via a brute-force attack.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-02.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-02.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="koyo" name="h0-ecom">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h0-ecom100">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h2-ecom">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h2-ecom-f">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h2-ecom100">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h4-ecom">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h4-ecom-f">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h4-ecom100">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1807" published="2012-04-13" name="CVE-2012-1807" modified="2012-04-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-02.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-02.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="koyo" name="h0-ecom">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h0-ecom100">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h2-ecom">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h2-ecom-f">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h2-ecom100">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h4-ecom">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h4-ecom-f">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h4-ecom100">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1808" published="2012-04-13" name="CVE-2012-1808" modified="2012-04-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 does not require authentication, which allows remote attackers to perform unspecified functions via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-02.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-02.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="koyo" name="h0-ecom">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h0-ecom100">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h2-ecom">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h2-ecom-f">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h2-ecom100">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h4-ecom">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h4-ecom-f">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h4-ecom100">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1809" published="2012-04-13" name="CVE-2012-1809" modified="2012-04-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-02.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-02.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="koyo" name="h0-ecom">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h0-ecom100">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h2-ecom">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h2-ecom-f">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h2-ecom100">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h4-ecom">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h4-ecom-f">
-        <vers num="" />
-      </prod>
-      <prod vendor="koyo" name="h4-ecom100">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1814" published="2012-06-08" name="CVE-2012-1814" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emerson" name="deltav">
-        <vers num="10.3.1" />
-        <vers num="11.3" />
-        <vers num="11.3.1" />
-        <vers num="9.3.1" />
-      </prod>
-      <prod vendor="emerson" name="deltav_proessentials_scientific_graph">
-        <vers num="5.0.0.6" />
-      </prod>
-      <prod vendor="emerson" name="deltav_workstation">
-        <vers num="10.3.1" />
-        <vers num="11.3" />
-        <vers num="11.3.1" />
-        <vers num="9.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1815" published="2012-06-08" name="CVE-2012-1815" modified="2012-06-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emerson" name="deltav">
-        <vers num="10.3.1" />
-        <vers num="11.3" />
-        <vers num="11.3.1" />
-        <vers num="9.3.1" />
-      </prod>
-      <prod vendor="emerson" name="deltav_proessentials_scientific_graph">
-        <vers num="5.0.0.6" />
-      </prod>
-      <prod vendor="emerson" name="deltav_workstation">
-        <vers num="10.3.1" />
-        <vers num="11.3" />
-        <vers num="11.3.1" />
-        <vers num="9.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1816" published="2012-06-08" name="CVE-2012-1816" modified="2012-06-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">PORTSERV.exe in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to cause a denial of service (daemon crash) via a crafted (1) TCP or (2) UDP packet to port 111.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emerson" name="deltav">
-        <vers num="10.3.1" />
-        <vers num="11.3" />
-        <vers num="11.3.1" />
-        <vers num="9.3.1" />
-      </prod>
-      <prod vendor="emerson" name="deltav_proessentials_scientific_graph">
-        <vers num="5.0.0.6" />
-      </prod>
-      <prod vendor="emerson" name="deltav_workstation">
-        <vers num="10.3.1" />
-        <vers num="11.3" />
-        <vers num="11.3.1" />
-        <vers num="9.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1817" published="2012-06-08" name="CVE-2012-1817" modified="2012-06-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Buffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via an invalid field in a project file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emerson" name="deltav">
-        <vers num="10.3.1" />
-        <vers num="11.3" />
-        <vers num="11.3.1" />
-        <vers num="9.3.1" />
-      </prod>
-      <prod vendor="emerson" name="deltav_proessentials_scientific_graph">
-        <vers num="5.0.0.6" />
-      </prod>
-      <prod vendor="emerson" name="deltav_workstation">
-        <vers num="10.3.1" />
-        <vers num="11.3" />
-        <vers num="11.3.1" />
-        <vers num="9.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1818" published="2012-06-08" name="CVE-2012-1818" modified="2012-06-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emerson" name="deltav">
-        <vers num="10.3.1" />
-        <vers num="11.3" />
-        <vers num="11.3.1" />
-        <vers num="9.3.1" />
-      </prod>
-      <prod vendor="emerson" name="deltav_proessentials_scientific_graph">
-        <vers num="5.0.0.6" />
-      </prod>
-      <prod vendor="emerson" name="deltav_workstation">
-        <vers num="10.3.1" />
-        <vers num="11.3" />
-        <vers num="11.3.1" />
-        <vers num="9.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1819" published="2012-05-02" name="CVE-2012-1819" modified="2012-05-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in WellinTech KingView 6.53 allows local users to gain privileges via a Trojan horse DLL in the current working directory.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/lists/426.html
-
-'Untrusted Search Path'</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.us-cert.gov/control_systems/pdf/ICSA-12-122-01.pdf
-
-'This vulnerability is remotely exploitable but may require the use of social engineering to exploit.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-      <sec_prot admin="1" />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-122-01.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-122-01.pdf</ref>
-      <ref url="http://en.wellintech.com/news/detail.aspx?contentid=168" source="CONFIRM" patch="1">http://en.wellintech.com/news/detail.aspx?contentid=168</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wellintech" name="kingview">
-        <vers num="6.53" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1820" published="2012-06-13" name="CVE-2012-1820" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:A/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="2.9" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="5.5" CVSS_base_score="2.9">
-    <desc>
-      <descript source="cve">The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/962587" source="CERT-VN">VU#962587</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2497" source="DEBIAN">DSA-2497</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="quagga" name="quagga">
-        <vers num="0.95" />
-        <vers num="0.96" />
-        <vers num="0.96.1" />
-        <vers num="0.96.2" />
-        <vers num="0.96.3" />
-        <vers num="0.96.4" />
-        <vers num="0.96.5" />
-        <vers num="0.97.0" />
-        <vers num="0.97.1" />
-        <vers num="0.97.2" />
-        <vers num="0.97.3" />
-        <vers num="0.97.4" />
-        <vers num="0.97.5" />
-        <vers num="0.98.0" />
-        <vers num="0.98.1" />
-        <vers num="0.98.2" />
-        <vers num="0.98.3" />
-        <vers num="0.98.4" />
-        <vers num="0.98.5" />
-        <vers num="0.98.6" />
-        <vers num="0.99.1" />
-        <vers num="0.99.10" />
-        <vers num="0.99.11" />
-        <vers num="0.99.12" />
-        <vers num="0.99.13" />
-        <vers num="0.99.14" />
-        <vers num="0.99.15" />
-        <vers num="0.99.16" />
-        <vers num="0.99.17" />
-        <vers num="0.99.18" />
-        <vers num="0.99.19" />
-        <vers num="0.99.2" />
-        <vers num="0.99.20" />
-        <vers prev="1" num="0.99.20.1" />
-        <vers num="0.99.3" />
-        <vers num="0.99.4" />
-        <vers num="0.99.5" />
-        <vers num="0.99.6" />
-        <vers num="0.99.7" />
-        <vers num="0.99.8" />
-        <vers num="0.99.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1821" published="2012-05-23" name="CVE-2012-1821" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Network Threat Protection module in the Manager component in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.700x on Windows Server 2003 allows remote attackers to cause a denial of service (web-server outage, or daemon crash or hang) via a flood of packets that triggers automated blocking of network traffic.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120522_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120522_00</ref>
-      <ref url="http://www.securityfocus.com/bid/50358" source="BID">50358</ref>
-      <ref url="http://osvdb.org/82147" source="OSVDB">82147</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="endpoint_protection">
-        <vers num="11.0.6000" />
-        <vers num="11.0.6100" />
-        <vers num="11.0.6200" />
-        <vers num="11.0.6200.754" />
-        <vers num="11.0.6300" />
-        <vers num="11.0.7000" />
-        <vers num="11.0.7100" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1823" published="2012-05-11" name="CVE-2012-1823" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/520827" source="CERT-VN">VU#520827</ref>
-      <ref url="https://bugs.php.net/bug.php?id=61910" source="CONFIRM" patch="1">https://bugs.php.net/bug.php?id=61910</ref>
-      <ref url="http://www.php.net/ChangeLog-5.php#5.4.2" source="CONFIRM" patch="1">http://www.php.net/ChangeLog-5.php#5.4.2</ref>
-      <ref url="https://bugs.php.net/patch-display.php?bug_id=61910&amp;patch=cgi.diff&amp;revision=1335984315&amp;display=1" source="CONFIRM">https://bugs.php.net/patch-display.php?bug_id=61910&amp;patch=cgi.diff&amp;revision=1335984315&amp;display=1</ref>
-      <ref url="http://www.php.net/archive/2012.php#id2012-05-03-1" source="CONFIRM">http://www.php.net/archive/2012.php#id2012-05-03-1</ref>
-      <ref url="http://secunia.com/advisories/49087" source="SECUNIA">49087</ref>
-      <ref url="http://secunia.com/advisories/49065" source="SECUNIA">49065</ref>
-      <ref url="http://secunia.com/advisories/49014" source="SECUNIA">49014</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0568.html" source="REDHAT">RHSA-2012:0568</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0547.html" source="REDHAT">RHSA-2012:0547</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0546.html" source="REDHAT">RHSA-2012:0546</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134012830914727&amp;w=2" source="HP">HPSBUX02791</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134012830914727&amp;w=2" source="HP">SSRT100856</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">HPSBMU02786</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP">SSRT100877</ref>
-      <ref url="http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/" source="MISC">http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="5.0.0" edition="beta1" />
-        <vers num="5.0.0" edition="beta2" />
-        <vers num="5.0.0" edition="beta3" />
-        <vers num="5.0.0" edition="beta4" />
-        <vers num="5.0.0" edition="rc1" />
-        <vers num="5.0.0" edition="rc2" />
-        <vers num="5.0.0" edition="rc3" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.1.0" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers num="5.2.0" />
-        <vers num="5.2.1" />
-        <vers num="5.2.10" />
-        <vers num="5.2.11" />
-        <vers num="5.2.12" />
-        <vers num="5.2.13" />
-        <vers num="5.2.14" />
-        <vers num="5.2.15" />
-        <vers num="5.2.16" />
-        <vers num="5.2.17" />
-        <vers num="5.2.2" />
-        <vers num="5.2.3" />
-        <vers num="5.2.4" />
-        <vers num="5.2.5" />
-        <vers num="5.2.6" />
-        <vers num="5.2.7" />
-        <vers num="5.2.8" />
-        <vers num="5.2.9" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.10" />
-        <vers prev="1" num="5.3.11" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers num="5.3.8" />
-        <vers num="5.3.9" />
-        <vers num="5.4.0" />
-        <vers num="5.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1824" published="2012-05-25" name="CVE-2012-1824" modified="2012-05-28" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in Measuresoft ScadaPro Client before 4.0.0 and ScadaPro Server before 4.0.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-01.pdf</ref>
-      <ref url="http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Server/DOCUMENTATION/ReleaseNotes.doc" source="MISC">http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Server/DOCUMENTATION/ReleaseNotes.doc</ref>
-      <ref url="http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Client/DOCUMENTATION/ReleaseNotes.doc" source="MISC">http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Client/DOCUMENTATION/ReleaseNotes.doc</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="measuresoft" name="scadapro_client">
-        <vers prev="1" num="3.3.1" />
-      </prod>
-      <prod vendor="measuresoft" name="scadapro_server">
-        <vers prev="1" num="3.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1825" published="2012-06-11" name="CVE-2012-1825" modified="2012-06-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the status program on the ForeScout CounterACT appliance with software 6.3.3.2 through 6.3.4.10 allow remote attackers to inject arbitrary web script or HTML via (1) the loginname parameter in a forgotpass action or (2) the username parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8TWMEJ" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8TWMEJ</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/815532" source="CERT-VN">VU#815532</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="forescout" name="counteract">
-        <vers num="6.3.3.2" />
-        <vers num="6.3.4.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1826" published="2012-06-08" name="CVE-2012-1826" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/898083" source="CERT-VN">VU#898083</ref>
-      <ref url="https://github.com/dotCMS/dotCMS/issues/281" source="CONFIRM">https://github.com/dotCMS/dotCMS/issues/281</ref>
-      <ref url="https://github.com/dotCMS/dotCMS/issues/261" source="CONFIRM">https://github.com/dotCMS/dotCMS/issues/261</ref>
-      <ref url="https://gist.github.com/2627440" source="CONFIRM">https://gist.github.com/2627440</ref>
-      <ref url="http://secunia.com/advisories/49276" source="SECUNIA">49276</ref>
-      <ref url="http://dotcms.com/dotCMSVersions/" source="CONFIRM">http://dotcms.com/dotCMSVersions/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dotcms" name="dotcms">
-        <vers num="1.9" />
-        <vers num="1.9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1827" published="2012-06-13" name="CVE-2012-1827" modified="2012-06-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authenticated users to perform database operations via a SOAP request, as demonstrated by the initializeQueryDatabase2 request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8RQL83" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8RQL83</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/773035" source="CERT-VN">VU#773035</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="efstechnology" name="autoform_pdm_archive">
-        <vers num="6.920" />
-        <vers prev="1" num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1828" published="2012-06-13" name="CVE-2012-1828" modified="2012-06-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8RQL83" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8RQL83</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/773035" source="CERT-VN">VU#773035</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="efstechnology" name="autoform_pdm_archive">
-        <vers num="6.920" />
-        <vers prev="1" num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1829" published="2012-06-13" name="CVE-2012-1829" modified="2012-06-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in AutoFORM PDM Archive before 6.920 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8RQL83" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8RQL83</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/773035" source="CERT-VN">VU#773035</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="efstechnology" name="autoform_pdm_archive">
-        <vers prev="1" num="6.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1830" published="2012-07-04" name="CVE-2012-1830" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 555.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.wellintech.com/index.php/news/33-patch-for-kingview653
-
-"KingView with the version 65.30.17249( TouchExplorer: 65.30.2003.17249; TouchVew: 65.30.2003.17376) and also the previous version is affected."</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.wellintech.com/index.php/news/33-patch-for-kingview653" source="CONFIRM" patch="1" adv="1">http://www.wellintech.com/index.php/news/33-patch-for-kingview653</ref>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf" source="MISC" patch="1" adv="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wellintech" name="kingview">
-        <vers num="3.0" />
-        <vers num="6.5.30.2010.18018" />
-        <vers num="6.52" />
-        <vers prev="1" num="6.53" />
-        <vers num="65.30.17249" />
-        <vers num="65.30.2010.18018" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1831" published="2012-07-04" name="CVE-2012-1831" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 555.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf</ref>
-      <ref url="http://www.wellintech.com/index.php/news/33-patch-for-kingview653" source="CONFIRM" patch="1" adv="1">http://www.wellintech.com/index.php/news/33-patch-for-kingview653</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wellintech" name="kingview">
-        <vers num="3.0" />
-        <vers num="6.5.30.2010.18018" />
-        <vers num="6.52" />
-        <vers prev="1" num="6.53" />
-        <vers num="65.30.17249" />
-        <vers num="65.30.2010.18018" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1832" published="2012-07-04" name="CVE-2012-1832" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">WellinTech KingView 6.53 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a crafted packet to (1) TCP or (2) UDP port 2001.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf</ref>
-      <ref url="http://www.wellintech.com/index.php/news/33-patch-for-kingview653" source="CONFIRM" patch="1" adv="1">http://www.wellintech.com/index.php/news/33-patch-for-kingview653</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wellintech" name="kingview">
-        <vers num="3.0" />
-        <vers num="6.5.30.2010.18018" />
-        <vers num="6.52" />
-        <vers prev="1" num="6.53" />
-        <vers num="65.30.17249" />
-        <vers num="65.30.2010.18018" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1835" published="2012-08-14" name="CVE-2012-1835" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to app/view/agenda-widget-form.php; (2) args, (3) title, (4) before_title, or (5) after_title parameter to app/view/agenda-widget.php; (6) button_value parameter to app/view/box_publish_button.php; or (7) msg parameter to /app/view/save_successful.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23082" source="MISC">https://www.htbridge.com/advisory/HTB23082</ref>
-      <ref url="http://www.securityfocus.com/bid/52986" source="BID">52986</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0071.html" source="BUGTRAQ">20120411 Multiple XSS vulnerabilities in All-in-One Event Calendar Plugin for WordPress</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="timely" name="all-in-one_event_calendar">
-        <vers num="1.4" />
-        <vers num="1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1836" published="2012-03-21" name="CVE-2012-1836" modified="2012-04-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses compression.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/212651" source="CERT-VN" patch="1">VU#212651</ref>
-      <ref url="https://github.com/inspircd/inspircd/commit/fe7dbd2c104c37f6f3af7d9f1646a3c332aea4a4" source="CONFIRM" patch="1">https://github.com/inspircd/inspircd/commit/fe7dbd2c104c37f6f3af7d9f1646a3c332aea4a4</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="inspire_ircd" name="inspircd">
-        <vers num="2.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1837" published="2012-03-21" name="CVE-2012-1837" modified="2012-04-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before 8.2 do not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21587743" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21587743</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="tivoli_endpoint_manager">
-        <vers num="8.0" />
-        <vers prev="1" num="8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1838" published="2012-03-22" name="CVE-2012-1838" modified="2012-04-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The web management interface on the LG-Nortel ELO GS24M switch allows remote attackers to bypass authentication, and consequently obtain cleartext credential and configuration information, via a direct request to a configuration web page.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/523027" source="CERT-VN">VU#523027</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="lg-nortel" name="elo_gs24m_switch">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1839" published="2012-03-22" name="CVE-2012-1839" modified="2012-04-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple directory traversal vulnerabilities in the Get Template feature in plugins/gui.ajax/class.AJXP_ClientDriver.php in AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) pluginName or (2) pluginPath parameter in a get_template action. NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/504019" source="CERT-VN" patch="1">VU#504019</ref>
-      <ref url="http://ajaxplorer.info/ajaxplorer-4-0-4/" source="CONFIRM" patch="1" adv="1">http://ajaxplorer.info/ajaxplorer-4-0-4/</ref>
-      <ref url="http://www.securityfocus.com/bid/52298" source="BID">52298</ref>
-      <ref url="http://www.osvdb.org/79810" source="OSVDB">79810</ref>
-      <ref url="http://secunia.com/advisories/48226" source="SECUNIA" adv="1">48226</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ajaxplorer" name="ajaxplorer">
-        <vers num="3.2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1840" published="2012-03-22" name="CVE-2012-1840" modified="2012-04-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 does not properly perform cookie authentication, which allows remote attackers to obtain login access by leveraging knowledge of a password hash.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/504019" source="CERT-VN">VU#504019</ref>
-      <ref url="http://ajaxplorer.info/ajaxplorer-4-0-4/" source="CONFIRM" patch="1" adv="1">http://ajaxplorer.info/ajaxplorer-4-0-4/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ajaxplorer" name="ajaxplorer">
-        <vers num="3.2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1841" published="2012-03-22" name="CVE-2012-1841" modified="2012-04-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to read arbitrary files via a full pathname in the file parameter.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8NVRPY" source="MISC">http://www.kb.cert.org/vuls/id/MAPG-8NVRPY</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8NNKN8" source="MISC">http://www.kb.cert.org/vuls/id/MAPG-8NNKN8</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/913483" source="CERT-VN">VU#913483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dell" name="powervault_ml6000_firmware">
-        <vers num="585g.gs003" />
-      </prod>
-      <prod vendor="quantum" name="scalar_i500_firmware">
-        <vers num="i2" />
-        <vers num="i3" />
-        <vers num="i3.1" />
-        <vers num="i4" />
-        <vers num="i5" />
-        <vers num="i5.1" />
-        <vers num="i6" />
-        <vers num="i6.1" />
-        <vers num="i7" />
-        <vers num="i7.0.1" />
-        <vers prev="1" num="i7.0.2" />
-        <vers num="sp4" />
-        <vers num="sp4.2" />
-      </prod>
-      <prod vendor="dell" name="powervault_ml6000">
-        <vers num="32u" />
-        <vers num="41u" />
-      </prod>
-      <prod vendor="dell" name="powervault_ml6010">
-        <vers num="5u" />
-      </prod>
-      <prod vendor="dell" name="powervault_ml6020">
-        <vers num="14u" />
-      </prod>
-      <prod vendor="dell" name="powervault_ml6030">
-        <vers num="23u" />
-      </prod>
-      <prod vendor="quantum" name="scalar_i500">
-        <vers num="14u" />
-        <vers num="23u" />
-        <vers num="5u" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1842" published="2012-03-22" name="CVE-2012-1842" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8NVRPY" source="MISC">http://www.kb.cert.org/vuls/id/MAPG-8NVRPY</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8NNKN8" source="MISC">http://www.kb.cert.org/vuls/id/MAPG-8NNKN8</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/913483" source="CERT-VN">VU#913483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dell" name="powervault_ml6000_firmware">
-        <vers num="585g.gs003" />
-      </prod>
-      <prod vendor="quantum" name="scalar_i500_firmware">
-        <vers num="i2" />
-        <vers num="i3" />
-        <vers num="i3.1" />
-        <vers num="i4" />
-        <vers num="i5" />
-        <vers num="i5.1" />
-        <vers num="i6" />
-        <vers num="i6.1" />
-        <vers num="i7" />
-        <vers num="i7.0.1" />
-        <vers prev="1" num="i7.0.2" />
-        <vers num="sp4" />
-        <vers num="sp4.2" />
-      </prod>
-      <prod vendor="dell" name="powervault_ml6000">
-        <vers num="32u" />
-        <vers num="41u" />
-      </prod>
-      <prod vendor="dell" name="powervault_ml6010">
-        <vers num="5u" />
-      </prod>
-      <prod vendor="dell" name="powervault_ml6020">
-        <vers num="14u" />
-      </prod>
-      <prod vendor="dell" name="powervault_ml6030">
-        <vers num="23u" />
-      </prod>
-      <prod vendor="quantum" name="scalar_i500">
-        <vers num="14u" />
-        <vers num="23u" />
-        <vers num="5u" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1843" published="2012-03-22" name="CVE-2012-1843" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to hijack the authentication of users for requests that execute Linux commands via the fileName parameter, related to a "command-injection vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8NVRPY" source="MISC">http://www.kb.cert.org/vuls/id/MAPG-8NVRPY</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8NNKN8" source="MISC">http://www.kb.cert.org/vuls/id/MAPG-8NNKN8</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/913483" source="CERT-VN">VU#913483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dell" name="powervault_ml6000_firmware">
-        <vers num="585g.gs003" />
-      </prod>
-      <prod vendor="quantum" name="scalar_i500_firmware">
-        <vers num="i2" />
-        <vers num="i3" />
-        <vers num="i3.1" />
-        <vers num="i4" />
-        <vers num="i5" />
-        <vers num="i5.1" />
-        <vers num="i6" />
-        <vers num="i6.1" />
-        <vers num="i7" />
-        <vers num="i7.0.1" />
-        <vers prev="1" num="i7.0.2" />
-        <vers num="sp4" />
-        <vers num="sp4.2" />
-      </prod>
-      <prod vendor="dell" name="powervault_ml6000">
-        <vers num="32u" />
-        <vers num="41u" />
-      </prod>
-      <prod vendor="dell" name="powervault_ml6010">
-        <vers num="5u" />
-      </prod>
-      <prod vendor="dell" name="powervault_ml6020">
-        <vers num="14u" />
-      </prod>
-      <prod vendor="dell" name="powervault_ml6030">
-        <vers num="23u" />
-      </prod>
-      <prod vendor="quantum" name="scalar_i500">
-        <vers num="14u" />
-        <vers num="23u" />
-        <vers num="5u" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1844" published="2012-03-22" name="CVE-2012-1844" modified="2012-04-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100) and the IBM TS3310 tape library with firmware before R6C (606G.GS001), uses default passwords for unspecified user accounts, which makes it easier for remote attackers to obtain access via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MORO-8QNJLE" source="MISC">http://www.kb.cert.org/vuls/id/MORO-8QNJLE</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8NVRPY" source="MISC">http://www.kb.cert.org/vuls/id/MAPG-8NVRPY</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8NNKN8" source="MISC">http://www.kb.cert.org/vuls/id/MAPG-8NNKN8</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/913483" source="CERT-VN">VU#913483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dell" name="powervault_ml6000_firmware">
-        <vers num="585g.gs003" />
-      </prod>
-      <prod vendor="ibm" name="ts3310_tape_library_firmware">
-        <vers prev="1" num="605g.g002" />
-      </prod>
-      <prod vendor="quantum" name="scalar_i500_firmware">
-        <vers num="i2" />
-        <vers num="i3" />
-        <vers num="i3.1" />
-        <vers num="i4" />
-        <vers num="i5" />
-        <vers num="i5.1" />
-        <vers num="i6" />
-        <vers num="i6.1" />
-        <vers num="i7" />
-        <vers num="i7.0.1" />
-        <vers prev="1" num="i7.0.2" />
-        <vers num="sp4" />
-        <vers num="sp4.2" />
-      </prod>
-      <prod vendor="dell" name="powervault_ml6000">
-        <vers num="32u" />
-        <vers num="41u" />
-      </prod>
-      <prod vendor="dell" name="powervault_ml6010">
-        <vers num="5u" />
-      </prod>
-      <prod vendor="dell" name="powervault_ml6020">
-        <vers num="14u" />
-      </prod>
-      <prod vendor="dell" name="powervault_ml6030">
-        <vers num="23u" />
-      </prod>
-      <prod vendor="ibm" name="ts3310_tape_library">
-        <vers num="3573" />
-        <vers num="3576" />
-      </prod>
-      <prod vendor="quantum" name="scalar_i500">
-        <vers num="14u" />
-        <vers num="23u" />
-        <vers num="5u" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1845" published="2012-03-22" name="CVE-2012-1845" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the DEP and ASLR protection mechanisms, and execute arbitrary code, via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012. NOTE: the primary affected product may be clarified later; it was not identified by the researcher, who reportedly stated "it really doesn't matter if it's third-party code."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.zdnet.com/blog/security/pwn2own-2012-google-chrome-browser-sandbox-first-to-fall/10588" source="MISC">http://www.zdnet.com/blog/security/pwn2own-2012-google-chrome-browser-sandbox-first-to-fall/10588</ref>
-      <ref url="http://www.forbes.com/sites/andygreenberg/2012/03/21/meet-the-hackers-who-sell-spies-the-tools-to-crack-your-pc-and-get-paid-six-figure-fees/" source="MISC">http://www.forbes.com/sites/andygreenberg/2012/03/21/meet-the-hackers-who-sell-spies-the-tools-to-crack-your-pc-and-get-paid-six-figure-fees/</ref>
-      <ref url="http://twitter.com/vupen/statuses/177576000761237505" source="MISC">http://twitter.com/vupen/statuses/177576000761237505</ref>
-      <ref url="http://pwn2own.zerodayinitiative.com/status.html" source="MISC">http://pwn2own.zerodayinitiative.com/status.html</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14843" source="OVAL">oval:org.mitre.oval:def:14843</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="0.1.38.1" />
-        <vers num="0.1.38.2" />
-        <vers num="0.1.38.4" />
-        <vers num="0.1.40.1" />
-        <vers num="0.1.42.2" />
-        <vers num="0.1.42.3" />
-        <vers num="0.2.149.27" />
-        <vers num="0.2.149.29" />
-        <vers num="0.2.149.30" />
-        <vers num="0.2.152.1" />
-        <vers num="0.2.153.1" />
-        <vers num="0.3.154.0" />
-        <vers num="0.3.154.3" />
-        <vers num="0.4.154.18" />
-        <vers num="0.4.154.22" />
-        <vers num="0.4.154.31" />
-        <vers num="0.4.154.33" />
-        <vers num="1.0.154.36" />
-        <vers num="1.0.154.39" />
-        <vers num="1.0.154.42" />
-        <vers num="1.0.154.43" />
-        <vers num="1.0.154.46" />
-        <vers num="1.0.154.48" />
-        <vers num="1.0.154.52" />
-        <vers num="1.0.154.53" />
-        <vers num="1.0.154.59" />
-        <vers num="1.0.154.64" />
-        <vers num="1.0.154.65" />
-        <vers num="10.0.601.0" />
-        <vers num="10.0.602.0" />
-        <vers num="10.0.603.0" />
-        <vers num="10.0.603.2" />
-        <vers num="10.0.603.3" />
-        <vers num="10.0.604.0" />
-        <vers num="10.0.605.0" />
-        <vers num="10.0.606.0" />
-        <vers num="10.0.607.0" />
-        <vers num="10.0.608.0" />
-        <vers num="10.0.609.0" />
-        <vers num="10.0.610.0" />
-        <vers num="10.0.611.0" />
-        <vers num="10.0.611.1" />
-        <vers num="10.0.612.0" />
-        <vers num="10.0.612.1" />
-        <vers num="10.0.612.2" />
-        <vers num="10.0.612.3" />
-        <vers num="10.0.613.0" />
-        <vers num="10.0.614.0" />
-        <vers num="10.0.615.0" />
-        <vers num="10.0.616.0" />
-        <vers num="10.0.617.0" />
-        <vers num="10.0.618.0" />
-        <vers num="10.0.619.0" />
-        <vers num="10.0.620.0" />
-        <vers num="10.0.621.0" />
-        <vers num="10.0.622.0" />
-        <vers num="10.0.622.1" />
-        <vers num="10.0.623.0" />
-        <vers num="10.0.624.0" />
-        <vers num="10.0.625.0" />
-        <vers num="10.0.626.0" />
-        <vers num="10.0.627.0" />
-        <vers num="10.0.628.0" />
-        <vers num="10.0.629.0" />
-        <vers num="10.0.630.0" />
-        <vers num="10.0.631.0" />
-        <vers num="10.0.632.0" />
-        <vers num="10.0.633.0" />
-        <vers num="10.0.634.0" />
-        <vers num="10.0.634.1" />
-        <vers num="10.0.635.0" />
-        <vers num="10.0.636.0" />
-        <vers num="10.0.638.0" />
-        <vers num="10.0.638.1" />
-        <vers num="10.0.639.0" />
-        <vers num="10.0.640.0" />
-        <vers num="10.0.642.0" />
-        <vers num="10.0.642.1" />
-        <vers num="10.0.642.2" />
-        <vers num="10.0.643.0" />
-        <vers num="10.0.644.0" />
-        <vers num="10.0.645.0" />
-        <vers num="10.0.646.0" />
-        <vers num="10.0.647.0" />
-        <vers num="10.0.648.0" />
-        <vers num="10.0.648.1" />
-        <vers num="10.0.648.10" />
-        <vers num="10.0.648.101" />
-        <vers num="10.0.648.103" />
-        <vers num="10.0.648.105" />
-        <vers num="10.0.648.107" />
-        <vers num="10.0.648.11" />
-        <vers num="10.0.648.114" />
-        <vers num="10.0.648.116" />
-        <vers num="10.0.648.118" />
-        <vers num="10.0.648.119" />
-        <vers num="10.0.648.12" />
-        <vers num="10.0.648.120" />
-        <vers num="10.0.648.121" />
-        <vers num="10.0.648.122" />
-        <vers num="10.0.648.123" />
-        <vers num="10.0.648.124" />
-        <vers num="10.0.648.125" />
-        <vers num="10.0.648.126" />
-        <vers num="10.0.648.127" />
-        <vers num="10.0.648.128" />
-        <vers num="10.0.648.129" />
-        <vers num="10.0.648.13" />
-        <vers num="10.0.648.130" />
-        <vers num="10.0.648.131" />
-        <vers num="10.0.648.132" />
-        <vers num="10.0.648.133" />
-        <vers num="10.0.648.134" />
-        <vers num="10.0.648.135" />
-        <vers num="10.0.648.151" />
-        <vers num="10.0.648.18" />
-        <vers num="10.0.648.2" />
-        <vers num="10.0.648.201" />
-        <vers num="10.0.648.203" />
-        <vers num="10.0.648.204" />
-        <vers num="10.0.648.205" />
-        <vers num="10.0.648.23" />
-        <vers num="10.0.648.26" />
-        <vers num="10.0.648.28" />
-        <vers num="10.0.648.3" />
-        <vers num="10.0.648.32" />
-        <vers num="10.0.648.35" />
-        <vers num="10.0.648.38" />
-        <vers num="10.0.648.4" />
-        <vers num="10.0.648.42" />
-        <vers num="10.0.648.45" />
-        <vers num="10.0.648.49" />
-        <vers num="10.0.648.5" />
-        <vers num="10.0.648.54" />
-        <vers num="10.0.648.56" />
-        <vers num="10.0.648.59" />
-        <vers num="10.0.648.6" />
-        <vers num="10.0.648.62" />
-        <vers num="10.0.648.66" />
-        <vers num="10.0.648.68" />
-        <vers num="10.0.648.7" />
-        <vers num="10.0.648.70" />
-        <vers num="10.0.648.72" />
-        <vers num="10.0.648.76" />
-        <vers num="10.0.648.79" />
-        <vers num="10.0.648.8" />
-        <vers num="10.0.648.82" />
-        <vers num="10.0.648.84" />
-        <vers num="10.0.648.87" />
-        <vers num="10.0.648.9" />
-        <vers num="10.0.648.90" />
-        <vers num="10.0.649.0" />
-        <vers num="10.0.650.0" />
-        <vers num="10.0.651.0" />
-        <vers num="11.0.652.0" />
-        <vers num="11.0.653.0" />
-        <vers num="11.0.654.0" />
-        <vers num="11.0.655.0" />
-        <vers num="11.0.656.0" />
-        <vers num="11.0.657.0" />
-        <vers num="11.0.658.0" />
-        <vers num="11.0.658.1" />
-        <vers num="11.0.659.0" />
-        <vers num="11.0.660.0" />
-        <vers num="11.0.661.0" />
-        <vers num="11.0.662.0" />
-        <vers num="11.0.663.0" />
-        <vers num="11.0.664.1" />
-        <vers num="11.0.665.0" />
-        <vers num="11.0.666.0" />
-        <vers num="11.0.667.0" />
-        <vers num="11.0.667.2" />
-        <vers num="11.0.667.3" />
-        <vers num="11.0.667.4" />
-        <vers num="11.0.668.0" />
-        <vers num="11.0.669.0" />
-        <vers num="11.0.670.0" />
-        <vers num="11.0.671.0" />
-        <vers num="11.0.672.0" />
-        <vers num="11.0.672.1" />
-        <vers num="11.0.672.2" />
-        <vers num="11.0.673.0" />
-        <vers num="11.0.674.0" />
-        <vers num="11.0.675.0" />
-        <vers num="11.0.676.0" />
-        <vers num="11.0.677.0" />
-        <vers num="11.0.678.0" />
-        <vers num="11.0.679.0" />
-        <vers num="11.0.680.0" />
-        <vers num="11.0.681.0" />
-        <vers num="11.0.682.0" />
-        <vers num="11.0.683.0" />
-        <vers num="11.0.684.0" />
-        <vers num="11.0.685.0" />
-        <vers num="11.0.686.0" />
-        <vers num="11.0.686.1" />
-        <vers num="11.0.686.2" />
-        <vers num="11.0.686.3" />
-        <vers num="11.0.687.0" />
-        <vers num="11.0.687.1" />
-        <vers num="11.0.688.0" />
-        <vers num="11.0.689.0" />
-        <vers num="11.0.690.0" />
-        <vers num="11.0.690.1" />
-        <vers num="11.0.691.0" />
-        <vers num="11.0.692.0" />
-        <vers num="11.0.693.0" />
-        <vers num="11.0.694.0" />
-        <vers num="11.0.695.0" />
-        <vers num="11.0.696.0" />
-        <vers num="11.0.696.1" />
-        <vers num="11.0.696.10" />
-        <vers num="11.0.696.11" />
-        <vers num="11.0.696.12" />
-        <vers num="11.0.696.13" />
-        <vers num="11.0.696.14" />
-        <vers num="11.0.696.15" />
-        <vers num="11.0.696.16" />
-        <vers num="11.0.696.17" />
-        <vers num="11.0.696.18" />
-        <vers num="11.0.696.19" />
-        <vers num="11.0.696.2" />
-        <vers num="11.0.696.20" />
-        <vers num="11.0.696.21" />
-        <vers num="11.0.696.22" />
-        <vers num="11.0.696.23" />
-        <vers num="11.0.696.24" />
-        <vers num="11.0.696.25" />
-        <vers num="11.0.696.26" />
-        <vers num="11.0.696.27" />
-        <vers num="11.0.696.28" />
-        <vers num="11.0.696.29" />
-        <vers num="11.0.696.3" />
-        <vers num="11.0.696.30" />
-        <vers num="11.0.696.31" />
-        <vers num="11.0.696.32" />
-        <vers num="11.0.696.33" />
-        <vers num="11.0.696.34" />
-        <vers num="11.0.696.35" />
-        <vers num="11.0.696.36" />
-        <vers num="11.0.696.37" />
-        <vers num="11.0.696.38" />
-        <vers num="11.0.696.39" />
-        <vers num="11.0.696.4" />
-        <vers num="11.0.696.40" />
-        <vers num="11.0.696.41" />
-        <vers num="11.0.696.42" />
-        <vers num="11.0.696.43" />
-        <vers num="11.0.696.44" />
-        <vers num="11.0.696.45" />
-        <vers num="11.0.696.46" />
-        <vers num="11.0.696.47" />
-        <vers num="11.0.696.48" />
-        <vers num="11.0.696.49" />
-        <vers num="11.0.696.5" />
-        <vers num="11.0.696.50" />
-        <vers num="11.0.696.51" />
-        <vers num="11.0.696.52" />
-        <vers num="11.0.696.53" />
-        <vers num="11.0.696.54" />
-        <vers num="11.0.696.55" />
-        <vers num="11.0.696.56" />
-        <vers num="11.0.696.57" />
-        <vers num="11.0.696.58" />
-        <vers num="11.0.696.59" />
-        <vers num="11.0.696.60" />
-        <vers num="11.0.696.61" />
-        <vers num="11.0.696.62" />
-        <vers num="11.0.696.63" />
-        <vers num="11.0.696.64" />
-        <vers num="11.0.696.65" />
-        <vers num="11.0.696.66" />
-        <vers num="11.0.696.67" />
-        <vers num="11.0.696.68" />
-        <vers num="11.0.696.69" />
-        <vers num="11.0.696.7" />
-        <vers num="11.0.696.70" />
-        <vers num="11.0.696.71" />
-        <vers num="11.0.696.72" />
-        <vers num="11.0.696.77" />
-        <vers num="11.0.696.8" />
-        <vers num="11.0.696.9" />
-        <vers num="11.0.697.0" />
-        <vers num="11.0.698.0" />
-        <vers num="11.0.699.0" />
-        <vers num="12.0.700.0" />
-        <vers num="12.0.701.0" />
-        <vers num="12.0.702.0" />
-        <vers num="12.0.702.1" />
-        <vers num="12.0.702.2" />
-        <vers num="12.0.703.0" />
-        <vers num="12.0.704.0" />
-        <vers num="12.0.705.0" />
-        <vers num="12.0.706.0" />
-        <vers num="12.0.707.0" />
-        <vers num="12.0.708.0" />
-        <vers num="12.0.709.0" />
-        <vers num="12.0.710.0" />
-        <vers num="12.0.711.0" />
-        <vers num="12.0.712.0" />
-        <vers num="12.0.713.0" />
-        <vers num="12.0.714.0" />
-        <vers num="12.0.715.0" />
-        <vers num="12.0.716.0" />
-        <vers num="12.0.717.0" />
-        <vers num="12.0.718.0" />
-        <vers num="12.0.719.0" />
-        <vers num="12.0.719.1" />
-        <vers num="12.0.720.0" />
-        <vers num="12.0.721.0" />
-        <vers num="12.0.721.1" />
-        <vers num="12.0.722.0" />
-        <vers num="12.0.723.0" />
-        <vers num="12.0.723.1" />
-        <vers num="12.0.724.0" />
-        <vers num="12.0.725.0" />
-        <vers num="12.0.726.0" />
-        <vers num="12.0.727.0" />
-        <vers num="12.0.728.0" />
-        <vers num="12.0.729.0" />
-        <vers num="12.0.730.0" />
-        <vers num="12.0.731.0" />
-        <vers num="12.0.732.0" />
-        <vers num="12.0.733.0" />
-        <vers num="12.0.734.0" />
-        <vers num="12.0.735.0" />
-        <vers num="12.0.736.0" />
-        <vers num="12.0.737.0" />
-        <vers num="12.0.738.0" />
-        <vers num="12.0.739.0" />
-        <vers num="12.0.740.0" />
-        <vers num="12.0.741.0" />
-        <vers num="12.0.742.0" />
-        <vers num="12.0.742.1" />
-        <vers num="12.0.742.10" />
-        <vers num="12.0.742.100" />
-        <vers num="12.0.742.105" />
-        <vers num="12.0.742.11" />
-        <vers num="12.0.742.111" />
-        <vers num="12.0.742.112" />
-        <vers num="12.0.742.113" />
-        <vers num="12.0.742.114" />
-        <vers num="12.0.742.115" />
-        <vers num="12.0.742.12" />
-        <vers num="12.0.742.120" />
-        <vers num="12.0.742.121" />
-        <vers num="12.0.742.122" />
-        <vers num="12.0.742.123" />
-        <vers num="12.0.742.124" />
-        <vers num="12.0.742.13" />
-        <vers num="12.0.742.14" />
-        <vers num="12.0.742.15" />
-        <vers num="12.0.742.16" />
-        <vers num="12.0.742.17" />
-        <vers num="12.0.742.18" />
-        <vers num="12.0.742.19" />
-        <vers num="12.0.742.2" />
-        <vers num="12.0.742.20" />
-        <vers num="12.0.742.21" />
-        <vers num="12.0.742.22" />
-        <vers num="12.0.742.3" />
-        <vers num="12.0.742.30" />
-        <vers num="12.0.742.4" />
-        <vers num="12.0.742.41" />
-        <vers num="12.0.742.42" />
-        <vers num="12.0.742.43" />
-        <vers num="12.0.742.44" />
-        <vers num="12.0.742.45" />
-        <vers num="12.0.742.46" />
-        <vers num="12.0.742.47" />
-        <vers num="12.0.742.48" />
-        <vers num="12.0.742.49" />
-        <vers num="12.0.742.5" />
-        <vers num="12.0.742.50" />
-        <vers num="12.0.742.51" />
-        <vers num="12.0.742.52" />
-        <vers num="12.0.742.53" />
-        <vers num="12.0.742.54" />
-        <vers num="12.0.742.55" />
-        <vers num="12.0.742.56" />
-        <vers num="12.0.742.57" />
-        <vers num="12.0.742.58" />
-        <vers num="12.0.742.59" />
-        <vers num="12.0.742.6" />
-        <vers num="12.0.742.60" />
-        <vers num="12.0.742.61" />
-        <vers num="12.0.742.63" />
-        <vers num="12.0.742.64" />
-        <vers num="12.0.742.65" />
-        <vers num="12.0.742.66" />
-        <vers num="12.0.742.67" />
-        <vers num="12.0.742.68" />
-        <vers num="12.0.742.69" />
-        <vers num="12.0.742.70" />
-        <vers num="12.0.742.71" />
-        <vers num="12.0.742.72" />
-        <vers num="12.0.742.73" />
-        <vers num="12.0.742.74" />
-        <vers num="12.0.742.75" />
-        <vers num="12.0.742.77" />
-        <vers num="12.0.742.8" />
-        <vers num="12.0.742.82" />
-        <vers num="12.0.742.9" />
-        <vers num="12.0.742.91" />
-        <vers num="12.0.742.92" />
-        <vers num="12.0.742.93" />
-        <vers num="12.0.742.94" />
-        <vers num="12.0.743.0" />
-        <vers num="12.0.744.0" />
-        <vers num="12.0.745.0" />
-        <vers num="12.0.746.0" />
-        <vers num="12.0.747.0" />
-        <vers num="13.0.748.0" />
-        <vers num="13.0.749.0" />
-        <vers num="13.0.750.0" />
-        <vers num="13.0.751.0" />
-        <vers num="13.0.752.0" />
-        <vers num="13.0.753.0" />
-        <vers num="13.0.754.0" />
-        <vers num="13.0.755.0" />
-        <vers num="13.0.756.0" />
-        <vers num="13.0.757.0" />
-        <vers num="13.0.758.0" />
-        <vers num="13.0.759.0" />
-        <vers num="13.0.760.0" />
-        <vers num="13.0.761.0" />
-        <vers num="13.0.761.1" />
-        <vers num="13.0.762.0" />
-        <vers num="13.0.762.1" />
-        <vers num="13.0.763.0" />
-        <vers num="13.0.764.0" />
-        <vers num="13.0.765.0" />
-        <vers num="13.0.766.0" />
-        <vers num="13.0.767.0" />
-        <vers num="13.0.767.1" />
-        <vers num="13.0.768.0" />
-        <vers num="13.0.769.0" />
-        <vers num="13.0.770.0" />
-        <vers num="13.0.771.0" />
-        <vers num="13.0.772.0" />
-        <vers num="13.0.773.0" />
-        <vers num="13.0.774.0" />
-        <vers num="13.0.775.0" />
-        <vers num="13.0.775.1" />
-        <vers num="13.0.775.2" />
-        <vers num="13.0.775.4" />
-        <vers num="13.0.776.0" />
-        <vers num="13.0.776.1" />
-        <vers num="13.0.777.0" />
-        <vers num="13.0.777.1" />
-        <vers num="13.0.777.2" />
-        <vers num="13.0.777.3" />
-        <vers num="13.0.777.4" />
-        <vers num="13.0.777.5" />
-        <vers num="13.0.777.6" />
-        <vers num="13.0.778.0" />
-        <vers num="13.0.779.0" />
-        <vers num="13.0.780.0" />
-        <vers num="13.0.781.0" />
-        <vers num="13.0.782.0" />
-        <vers num="13.0.782.1" />
-        <vers num="13.0.782.10" />
-        <vers num="13.0.782.100" />
-        <vers num="13.0.782.101" />
-        <vers num="13.0.782.102" />
-        <vers num="13.0.782.103" />
-        <vers num="13.0.782.104" />
-        <vers num="13.0.782.105" />
-        <vers num="13.0.782.106" />
-        <vers num="13.0.782.107" />
-        <vers num="13.0.782.108" />
-        <vers num="13.0.782.109" />
-        <vers num="13.0.782.11" />
-        <vers num="13.0.782.112" />
-        <vers num="13.0.782.12" />
-        <vers num="13.0.782.13" />
-        <vers num="13.0.782.14" />
-        <vers num="13.0.782.15" />
-        <vers num="13.0.782.16" />
-        <vers num="13.0.782.17" />
-        <vers num="13.0.782.18" />
-        <vers num="13.0.782.19" />
-        <vers num="13.0.782.20" />
-        <vers num="13.0.782.21" />
-        <vers num="13.0.782.210" />
-        <vers num="13.0.782.211" />
-        <vers num="13.0.782.212" />
-        <vers num="13.0.782.213" />
-        <vers num="13.0.782.214" />
-        <vers num="13.0.782.215" />
-        <vers num="13.0.782.216" />
-        <vers num="13.0.782.217" />
-        <vers num="13.0.782.218" />
-        <vers num="13.0.782.219" />
-        <vers num="13.0.782.220" />
-        <vers num="13.0.782.23" />
-        <vers num="13.0.782.237" />
-        <vers num="13.0.782.238" />
-        <vers num="13.0.782.24" />
-        <vers num="13.0.782.25" />
-        <vers num="13.0.782.26" />
-        <vers num="13.0.782.27" />
-        <vers num="13.0.782.28" />
-        <vers num="13.0.782.29" />
-        <vers num="13.0.782.3" />
-        <vers num="13.0.782.30" />
-        <vers num="13.0.782.31" />
-        <vers num="13.0.782.32" />
-        <vers num="13.0.782.33" />
-        <vers num="13.0.782.34" />
-        <vers num="13.0.782.35" />
-        <vers num="13.0.782.36" />
-        <vers num="13.0.782.37" />
-        <vers num="13.0.782.38" />
-        <vers num="13.0.782.39" />
-        <vers num="13.0.782.4" />
-        <vers num="13.0.782.40" />
-        <vers num="13.0.782.41" />
-        <vers num="13.0.782.42" />
-        <vers num="13.0.782.43" />
-        <vers num="13.0.782.44" />
-        <vers num="13.0.782.45" />
-        <vers num="13.0.782.46" />
-        <vers num="13.0.782.47" />
-        <vers num="13.0.782.48" />
-        <vers num="13.0.782.49" />
-        <vers num="13.0.782.50" />
-        <vers num="13.0.782.51" />
-        <vers num="13.0.782.52" />
-        <vers num="13.0.782.53" />
-        <vers num="13.0.782.55" />
-        <vers num="13.0.782.56" />
-        <vers num="13.0.782.6" />
-        <vers num="13.0.782.7" />
-        <vers num="13.0.782.81" />
-        <vers num="13.0.782.82" />
-        <vers num="13.0.782.83" />
-        <vers num="13.0.782.84" />
-        <vers num="13.0.782.85" />
-        <vers num="13.0.782.86" />
-        <vers num="13.0.782.87" />
-        <vers num="13.0.782.88" />
-        <vers num="13.0.782.89" />
-        <vers num="13.0.782.90" />
-        <vers num="13.0.782.91" />
-        <vers num="13.0.782.92" />
-        <vers num="13.0.782.93" />
-        <vers num="13.0.782.94" />
-        <vers num="13.0.782.95" />
-        <vers num="13.0.782.96" />
-        <vers num="13.0.782.97" />
-        <vers num="13.0.782.98" />
-        <vers num="13.0.782.99" />
-        <vers num="14.0.783.0" />
-        <vers num="14.0.784.0" />
-        <vers num="14.0.785.0" />
-        <vers num="14.0.786.0" />
-        <vers num="14.0.787.0" />
-        <vers num="14.0.788.0" />
-        <vers num="14.0.789.0" />
-        <vers num="14.0.790.0" />
-        <vers num="14.0.791.0" />
-        <vers num="14.0.792.0" />
-        <vers num="14.0.793.0" />
-        <vers num="14.0.794.0" />
-        <vers num="14.0.795.0" />
-        <vers num="14.0.796.0" />
-        <vers num="14.0.797.0" />
-        <vers num="14.0.798.0" />
-        <vers num="14.0.799.0" />
-        <vers num="14.0.800.0" />
-        <vers num="14.0.801.0" />
-        <vers num="14.0.802.0" />
-        <vers num="14.0.803.0" />
-        <vers num="14.0.804.0" />
-        <vers num="14.0.805.0" />
-        <vers num="14.0.806.0" />
-        <vers num="14.0.807.0" />
-        <vers num="14.0.808.0" />
-        <vers num="14.0.809.0" />
-        <vers num="14.0.810.0" />
-        <vers num="14.0.811.0" />
-        <vers num="14.0.812.0" />
-        <vers num="14.0.813.0" />
-        <vers num="14.0.814.0" />
-        <vers num="14.0.815.0" />
-        <vers num="14.0.816.0" />
-        <vers num="14.0.818.0" />
-        <vers num="14.0.819.0" />
-        <vers num="14.0.820.0" />
-        <vers num="14.0.821.0" />
-        <vers num="14.0.822.0" />
-        <vers num="14.0.823.0" />
-        <vers num="14.0.824.0" />
-        <vers num="14.0.825.0" />
-        <vers num="14.0.826.0" />
-        <vers num="14.0.827.0" />
-        <vers num="14.0.827.10" />
-        <vers num="14.0.827.12" />
-        <vers num="14.0.829.1" />
-        <vers num="14.0.830.0" />
-        <vers num="14.0.831.0" />
-        <vers num="14.0.832.0" />
-        <vers num="14.0.833.0" />
-        <vers num="14.0.834.0" />
-        <vers num="14.0.835.0" />
-        <vers num="14.0.835.1" />
-        <vers num="14.0.835.100" />
-        <vers num="14.0.835.101" />
-        <vers num="14.0.835.102" />
-        <vers num="14.0.835.103" />
-        <vers num="14.0.835.104" />
-        <vers num="14.0.835.105" />
-        <vers num="14.0.835.106" />
-        <vers num="14.0.835.107" />
-        <vers num="14.0.835.108" />
-        <vers num="14.0.835.109" />
-        <vers num="14.0.835.11" />
-        <vers num="14.0.835.110" />
-        <vers num="14.0.835.111" />
-        <vers num="14.0.835.112" />
-        <vers num="14.0.835.113" />
-        <vers num="14.0.835.114" />
-        <vers num="14.0.835.115" />
-        <vers num="14.0.835.116" />
-        <vers num="14.0.835.117" />
-        <vers num="14.0.835.118" />
-        <vers num="14.0.835.119" />
-        <vers num="14.0.835.120" />
-        <vers num="14.0.835.121" />
-        <vers num="14.0.835.122" />
-        <vers num="14.0.835.123" />
-        <vers num="14.0.835.124" />
-        <vers num="14.0.835.125" />
-        <vers num="14.0.835.126" />
-        <vers num="14.0.835.127" />
-        <vers num="14.0.835.128" />
-        <vers num="14.0.835.13" />
-        <vers num="14.0.835.14" />
-        <vers num="14.0.835.149" />
-        <vers num="14.0.835.15" />
-        <vers num="14.0.835.150" />
-        <vers num="14.0.835.151" />
-        <vers num="14.0.835.152" />
-        <vers num="14.0.835.153" />
-        <vers num="14.0.835.154" />
-        <vers num="14.0.835.155" />
-        <vers num="14.0.835.156" />
-        <vers num="14.0.835.157" />
-        <vers num="14.0.835.158" />
-        <vers num="14.0.835.159" />
-        <vers num="14.0.835.16" />
-        <vers num="14.0.835.160" />
-        <vers num="14.0.835.161" />
-        <vers num="14.0.835.162" />
-        <vers num="14.0.835.163" />
-        <vers num="14.0.835.18" />
-        <vers num="14.0.835.184" />
-        <vers num="14.0.835.186" />
-        <vers num="14.0.835.187" />
-        <vers num="14.0.835.2" />
-        <vers num="14.0.835.20" />
-        <vers num="14.0.835.202" />
-        <vers num="14.0.835.203" />
-        <vers num="14.0.835.204" />
-        <vers num="14.0.835.21" />
-        <vers num="14.0.835.22" />
-        <vers num="14.0.835.23" />
-        <vers num="14.0.835.24" />
-        <vers num="14.0.835.25" />
-        <vers num="14.0.835.26" />
-        <vers num="14.0.835.27" />
-        <vers num="14.0.835.28" />
-        <vers num="14.0.835.29" />
-        <vers num="14.0.835.30" />
-        <vers num="14.0.835.31" />
-        <vers num="14.0.835.32" />
-        <vers num="14.0.835.33" />
-        <vers num="14.0.835.34" />
-        <vers num="14.0.835.35" />
-        <vers num="14.0.835.4" />
-        <vers num="14.0.835.8" />
-        <vers num="14.0.835.86" />
-        <vers num="14.0.835.87" />
-        <vers num="14.0.835.88" />
-        <vers num="14.0.835.89" />
-        <vers num="14.0.835.9" />
-        <vers num="14.0.835.90" />
-        <vers num="14.0.835.91" />
-        <vers num="14.0.835.92" />
-        <vers num="14.0.835.93" />
-        <vers num="14.0.835.94" />
-        <vers num="14.0.835.95" />
-        <vers num="14.0.835.96" />
-        <vers num="14.0.835.97" />
-        <vers num="14.0.835.98" />
-        <vers num="14.0.835.99" />
-        <vers num="14.0.836.0" />
-        <vers num="14.0.837.0" />
-        <vers num="14.0.838.0" />
-        <vers num="14.0.839.0" />
-        <vers num="15.0.859.0" />
-        <vers num="15.0.860.0" />
-        <vers num="15.0.861.0" />
-        <vers num="15.0.862.0" />
-        <vers num="15.0.862.1" />
-        <vers num="15.0.863.0" />
-        <vers num="15.0.864.0" />
-        <vers num="15.0.865.0" />
-        <vers num="15.0.866.0" />
-        <vers num="15.0.867.0" />
-        <vers num="15.0.868.0" />
-        <vers num="15.0.868.1" />
-        <vers num="15.0.869.0" />
-        <vers num="15.0.870.0" />
-        <vers num="15.0.871.0" />
-        <vers num="15.0.871.1" />
-        <vers num="15.0.872.0" />
-        <vers num="15.0.873.0" />
-        <vers num="15.0.874.0" />
-        <vers num="15.0.874.1" />
-        <vers num="15.0.874.10" />
-        <vers num="15.0.874.101" />
-        <vers num="15.0.874.102" />
-        <vers num="15.0.874.103" />
-        <vers num="15.0.874.104" />
-        <vers num="15.0.874.106" />
-        <vers num="15.0.874.11" />
-        <vers num="15.0.874.116" />
-        <vers num="15.0.874.117" />
-        <vers num="15.0.874.119" />
-        <vers num="15.0.874.12" />
-        <vers num="15.0.874.120" />
-        <vers num="15.0.874.121" />
-        <vers num="15.0.874.13" />
-        <vers num="15.0.874.14" />
-        <vers num="15.0.874.15" />
-        <vers num="15.0.874.16" />
-        <vers num="15.0.874.17" />
-        <vers num="15.0.874.18" />
-        <vers num="15.0.874.19" />
-        <vers num="15.0.874.2" />
-        <vers num="15.0.874.20" />
-        <vers num="15.0.874.21" />
-        <vers num="15.0.874.22" />
-        <vers num="15.0.874.23" />
-        <vers num="15.0.874.24" />
-        <vers num="15.0.874.3" />
-        <vers num="15.0.874.4" />
-        <vers num="15.0.874.44" />
-        <vers num="15.0.874.45" />
-        <vers num="15.0.874.46" />
-        <vers num="15.0.874.47" />
-        <vers num="15.0.874.48" />
-        <vers num="15.0.874.49" />
-        <vers num="15.0.874.5" />
-        <vers num="15.0.874.6" />
-        <vers num="15.0.874.7" />
-        <vers num="15.0.874.8" />
-        <vers num="15.0.874.9" />
-        <vers num="16.0.877.0" />
-        <vers num="16.0.878.0" />
-        <vers num="16.0.879.0" />
-        <vers num="16.0.880.0" />
-        <vers num="16.0.881.0" />
-        <vers num="16.0.882.0" />
-        <vers num="16.0.883.0" />
-        <vers num="16.0.884.0" />
-        <vers num="16.0.885.0" />
-        <vers num="16.0.886.0" />
-        <vers num="16.0.886.1" />
-        <vers num="16.0.887.0" />
-        <vers num="16.0.888.0" />
-        <vers num="16.0.889.0" />
-        <vers num="16.0.889.2" />
-        <vers num="16.0.889.3" />
-        <vers num="16.0.890.0" />
-        <vers num="16.0.890.1" />
-        <vers num="16.0.891.0" />
-        <vers num="16.0.891.1" />
-        <vers num="16.0.892.0" />
-        <vers num="16.0.893.0" />
-        <vers num="16.0.893.1" />
-        <vers num="16.0.894.0" />
-        <vers num="16.0.895.0" />
-        <vers num="16.0.896.0" />
-        <vers num="16.0.897.0" />
-        <vers num="16.0.898.0" />
-        <vers num="16.0.899.0" />
-        <vers num="16.0.900.0" />
-        <vers num="16.0.901.0" />
-        <vers num="16.0.902.0" />
-        <vers num="16.0.903.0" />
-        <vers num="16.0.904.0" />
-        <vers num="16.0.905.0" />
-        <vers num="16.0.906.0" />
-        <vers num="16.0.906.1" />
-        <vers num="16.0.907.0" />
-        <vers num="16.0.908.0" />
-        <vers num="16.0.909.0" />
-        <vers num="16.0.910.0" />
-        <vers num="16.0.911.0" />
-        <vers num="16.0.911.1" />
-        <vers num="16.0.911.2" />
-        <vers num="16.0.912.0" />
-        <vers num="16.0.912.1" />
-        <vers num="16.0.912.10" />
-        <vers num="16.0.912.11" />
-        <vers num="16.0.912.12" />
-        <vers num="16.0.912.13" />
-        <vers num="16.0.912.14" />
-        <vers num="16.0.912.15" />
-        <vers num="16.0.912.19" />
-        <vers num="16.0.912.2" />
-        <vers num="16.0.912.20" />
-        <vers num="16.0.912.21" />
-        <vers num="16.0.912.22" />
-        <vers num="16.0.912.23" />
-        <vers num="16.0.912.24" />
-        <vers num="16.0.912.25" />
-        <vers num="16.0.912.26" />
-        <vers num="16.0.912.27" />
-        <vers num="16.0.912.28" />
-        <vers num="16.0.912.29" />
-        <vers num="16.0.912.3" />
-        <vers num="16.0.912.30" />
-        <vers num="16.0.912.31" />
-        <vers num="16.0.912.32" />
-        <vers num="16.0.912.33" />
-        <vers num="16.0.912.34" />
-        <vers num="16.0.912.35" />
-        <vers num="16.0.912.36" />
-        <vers num="16.0.912.37" />
-        <vers num="16.0.912.38" />
-        <vers num="16.0.912.39" />
-        <vers num="16.0.912.4" />
-        <vers num="16.0.912.40" />
-        <vers num="16.0.912.41" />
-        <vers num="16.0.912.42" />
-        <vers num="16.0.912.43" />
-        <vers num="16.0.912.5" />
-        <vers num="16.0.912.6" />
-        <vers num="16.0.912.62" />
-        <vers num="16.0.912.63" />
-        <vers num="16.0.912.66" />
-        <vers num="16.0.912.7" />
-        <vers num="16.0.912.74" />
-        <vers num="16.0.912.75" />
-        <vers num="16.0.912.76" />
-        <vers num="16.0.912.77" />
-        <vers num="16.0.912.8" />
-        <vers num="16.0.912.9" />
-        <vers num="17.0.921.3" />
-        <vers num="17.0.922.0" />
-        <vers num="17.0.923.0" />
-        <vers num="17.0.923.1" />
-        <vers num="17.0.924.0" />
-        <vers num="17.0.925.0" />
-        <vers num="17.0.926.0" />
-        <vers num="17.0.927.0" />
-        <vers num="17.0.928.0" />
-        <vers num="17.0.928.1" />
-        <vers num="17.0.928.2" />
-        <vers num="17.0.928.3" />
-        <vers num="17.0.929.0" />
-        <vers num="17.0.930.0" />
-        <vers num="17.0.931.0" />
-        <vers num="17.0.932.0" />
-        <vers num="17.0.933.0" />
-        <vers num="17.0.933.1" />
-        <vers num="17.0.934.0" />
-        <vers num="17.0.935.0" />
-        <vers num="17.0.935.1" />
-        <vers num="17.0.936.0" />
-        <vers num="17.0.936.1" />
-        <vers num="17.0.937.0" />
-        <vers num="17.0.938.0" />
-        <vers num="17.0.939.0" />
-        <vers num="17.0.939.1" />
-        <vers num="17.0.940.0" />
-        <vers num="17.0.941.0" />
-        <vers num="17.0.942.0" />
-        <vers num="17.0.943.0" />
-        <vers num="17.0.944.0" />
-        <vers num="17.0.945.0" />
-        <vers num="17.0.946.0" />
-        <vers num="17.0.947.0" />
-        <vers num="17.0.948.0" />
-        <vers num="17.0.949.0" />
-        <vers num="17.0.950.0" />
-        <vers num="17.0.951.0" />
-        <vers num="17.0.952.0" />
-        <vers num="17.0.953.0" />
-        <vers num="17.0.954.0" />
-        <vers num="17.0.954.1" />
-        <vers num="17.0.954.2" />
-        <vers num="17.0.954.3" />
-        <vers num="17.0.955.0" />
-        <vers num="17.0.956.0" />
-        <vers num="17.0.957.0" />
-        <vers num="17.0.958.0" />
-        <vers num="17.0.958.1" />
-        <vers num="17.0.959.0" />
-        <vers num="17.0.960.0" />
-        <vers num="17.0.961.0" />
-        <vers num="17.0.962.0" />
-        <vers num="17.0.963.0" />
-        <vers num="17.0.963.1" />
-        <vers num="17.0.963.10" />
-        <vers num="17.0.963.11" />
-        <vers num="17.0.963.12" />
-        <vers num="17.0.963.13" />
-        <vers num="17.0.963.14" />
-        <vers num="17.0.963.15" />
-        <vers num="17.0.963.16" />
-        <vers num="17.0.963.17" />
-        <vers num="17.0.963.18" />
-        <vers num="17.0.963.19" />
-        <vers num="17.0.963.2" />
-        <vers num="17.0.963.20" />
-        <vers num="17.0.963.21" />
-        <vers num="17.0.963.22" />
-        <vers num="17.0.963.23" />
-        <vers num="17.0.963.24" />
-        <vers num="17.0.963.25" />
-        <vers num="17.0.963.26" />
-        <vers num="17.0.963.27" />
-        <vers num="17.0.963.28" />
-        <vers num="17.0.963.29" />
-        <vers num="17.0.963.3" />
-        <vers num="17.0.963.30" />
-        <vers num="17.0.963.31" />
-        <vers num="17.0.963.32" />
-        <vers num="17.0.963.33" />
-        <vers num="17.0.963.34" />
-        <vers num="17.0.963.35" />
-        <vers num="17.0.963.36" />
-        <vers num="17.0.963.37" />
-        <vers num="17.0.963.38" />
-        <vers num="17.0.963.39" />
-        <vers num="17.0.963.4" />
-        <vers num="17.0.963.40" />
-        <vers num="17.0.963.41" />
-        <vers num="17.0.963.42" />
-        <vers num="17.0.963.43" />
-        <vers num="17.0.963.44" />
-        <vers num="17.0.963.45" />
-        <vers num="17.0.963.46" />
-        <vers num="17.0.963.47" />
-        <vers num="17.0.963.48" />
-        <vers num="17.0.963.49" />
-        <vers num="17.0.963.5" />
-        <vers num="17.0.963.50" />
-        <vers num="17.0.963.51" />
-        <vers num="17.0.963.52" />
-        <vers num="17.0.963.53" />
-        <vers num="17.0.963.54" />
-        <vers num="17.0.963.55" />
-        <vers num="17.0.963.56" />
-        <vers num="17.0.963.57" />
-        <vers num="17.0.963.59" />
-        <vers num="17.0.963.6" />
-        <vers num="17.0.963.60" />
-        <vers num="17.0.963.61" />
-        <vers num="17.0.963.62" />
-        <vers num="17.0.963.63" />
-        <vers num="17.0.963.64" />
-        <vers num="17.0.963.65" />
-        <vers prev="1" num="17.0.963.66" />
-        <vers num="17.0.963.7" />
-        <vers num="17.0.963.8" />
-        <vers num="17.0.963.9" />
-        <vers num="2.0.156.1" />
-        <vers num="2.0.157.0" />
-        <vers num="2.0.157.2" />
-        <vers num="2.0.158.0" />
-        <vers num="2.0.159.0" />
-        <vers num="2.0.169.0" />
-        <vers num="2.0.169.1" />
-        <vers num="2.0.170.0" />
-        <vers num="2.0.172" />
-        <vers num="2.0.172.2" />
-        <vers num="2.0.172.27" />
-        <vers num="2.0.172.28" />
-        <vers num="2.0.172.30" />
-        <vers num="2.0.172.31" />
-        <vers num="2.0.172.33" />
-        <vers num="2.0.172.37" />
-        <vers num="2.0.172.38" />
-        <vers num="2.0.172.8" />
-        <vers num="3.0.182.2" />
-        <vers num="3.0.190.2" />
-        <vers num="3.0.193.2" edition="beta" />
-        <vers num="3.0.195.2" />
-        <vers num="3.0.195.21" />
-        <vers num="3.0.195.24" />
-        <vers num="3.0.195.25" />
-        <vers num="3.0.195.27" />
-        <vers num="3.0.195.32" />
-        <vers num="3.0.195.33" />
-        <vers num="3.0.195.36" />
-        <vers num="3.0.195.37" />
-        <vers num="3.0.195.38" />
-        <vers num="4.0.212.0" />
-        <vers num="4.0.212.1" />
-        <vers num="4.0.221.8" />
-        <vers num="4.0.222.0" />
-        <vers num="4.0.222.1" />
-        <vers num="4.0.222.12" />
-        <vers num="4.0.222.5" />
-        <vers num="4.0.223.0" />
-        <vers num="4.0.223.1" />
-        <vers num="4.0.223.2" />
-        <vers num="4.0.223.4" />
-        <vers num="4.0.223.5" />
-        <vers num="4.0.223.7" />
-        <vers num="4.0.223.8" />
-        <vers num="4.0.223.9" />
-        <vers num="4.0.224.0" />
-        <vers num="4.0.229.1" />
-        <vers num="4.0.235.0" />
-        <vers num="4.0.236.0" />
-        <vers num="4.0.237.0" />
-        <vers num="4.0.237.1" />
-        <vers num="4.0.239.0" />
-        <vers num="4.0.240.0" />
-        <vers num="4.0.241.0" />
-        <vers num="4.0.242.0" />
-        <vers num="4.0.243.0" />
-        <vers num="4.0.244.0" />
-        <vers num="4.0.245.0" />
-        <vers num="4.0.245.1" />
-        <vers num="4.0.246.0" />
-        <vers num="4.0.247.0" />
-        <vers num="4.0.248.0" />
-        <vers num="4.0.249.0" />
-        <vers num="4.0.249.1" />
-        <vers num="4.0.249.10" />
-        <vers num="4.0.249.11" />
-        <vers num="4.0.249.12" />
-        <vers num="4.0.249.14" />
-        <vers num="4.0.249.16" />
-        <vers num="4.0.249.17" />
-        <vers num="4.0.249.18" />
-        <vers num="4.0.249.19" />
-        <vers num="4.0.249.2" />
-        <vers num="4.0.249.20" />
-        <vers num="4.0.249.21" />
-        <vers num="4.0.249.22" />
-        <vers num="4.0.249.23" />
-        <vers num="4.0.249.24" />
-        <vers num="4.0.249.25" />
-        <vers num="4.0.249.26" />
-        <vers num="4.0.249.27" />
-        <vers num="4.0.249.28" />
-        <vers num="4.0.249.29" />
-        <vers num="4.0.249.3" />
-        <vers num="4.0.249.30" />
-        <vers num="4.0.249.31" />
-        <vers num="4.0.249.32" />
-        <vers num="4.0.249.33" />
-        <vers num="4.0.249.34" />
-        <vers num="4.0.249.35" />
-        <vers num="4.0.249.36" />
-        <vers num="4.0.249.37" />
-        <vers num="4.0.249.38" />
-        <vers num="4.0.249.39" />
-        <vers num="4.0.249.4" />
-        <vers num="4.0.249.40" />
-        <vers num="4.0.249.41" />
-        <vers num="4.0.249.42" />
-        <vers num="4.0.249.43" />
-        <vers num="4.0.249.44" />
-        <vers num="4.0.249.45" />
-        <vers num="4.0.249.46" />
-        <vers num="4.0.249.47" />
-        <vers num="4.0.249.48" />
-        <vers num="4.0.249.49" />
-        <vers num="4.0.249.5" />
-        <vers num="4.0.249.50" />
-        <vers num="4.0.249.51" />
-        <vers num="4.0.249.52" />
-        <vers num="4.0.249.53" />
-        <vers num="4.0.249.54" />
-        <vers num="4.0.249.55" />
-        <vers num="4.0.249.56" />
-        <vers num="4.0.249.57" />
-        <vers num="4.0.249.58" />
-        <vers num="4.0.249.59" />
-        <vers num="4.0.249.6" />
-        <vers num="4.0.249.60" />
-        <vers num="4.0.249.61" />
-        <vers num="4.0.249.62" />
-        <vers num="4.0.249.63" />
-        <vers num="4.0.249.64" />
-        <vers num="4.0.249.65" />
-        <vers num="4.0.249.66" />
-        <vers num="4.0.249.67" />
-        <vers num="4.0.249.68" />
-        <vers num="4.0.249.69" />
-        <vers num="4.0.249.7" />
-        <vers num="4.0.249.70" />
-        <vers num="4.0.249.71" />
-        <vers num="4.0.249.72" />
-        <vers num="4.0.249.73" />
-        <vers num="4.0.249.74" />
-        <vers num="4.0.249.75" />
-        <vers num="4.0.249.76" />
-        <vers num="4.0.249.77" />
-        <vers num="4.0.249.78" edition="beta" />
-        <vers num="4.0.249.79" />
-        <vers num="4.0.249.8" />
-        <vers num="4.0.249.80" />
-        <vers num="4.0.249.81" />
-        <vers num="4.0.249.82" />
-        <vers num="4.0.249.89" />
-        <vers num="4.0.249.9" />
-        <vers num="4.0.250.0" />
-        <vers num="4.0.250.2" />
-        <vers num="4.0.251.0" />
-        <vers num="4.0.252.0" />
-        <vers num="4.0.254.0" />
-        <vers num="4.0.255.0" />
-        <vers num="4.0.256.0" />
-        <vers num="4.0.257.0" />
-        <vers num="4.0.258.0" />
-        <vers num="4.0.259.0" />
-        <vers num="4.0.260.0" />
-        <vers num="4.0.261.0" />
-        <vers num="4.0.262.0" />
-        <vers num="4.0.263.0" />
-        <vers num="4.0.264.0" />
-        <vers num="4.0.265.0" />
-        <vers num="4.0.266.0" />
-        <vers num="4.0.267.0" />
-        <vers num="4.0.268.0" />
-        <vers num="4.0.269.0" />
-        <vers num="4.0.271.0" />
-        <vers num="4.0.272.0" />
-        <vers num="4.0.275.0" />
-        <vers num="4.0.275.1" />
-        <vers num="4.0.276.0" />
-        <vers num="4.0.277.0" />
-        <vers num="4.0.278.0" />
-        <vers num="4.0.286.0" />
-        <vers num="4.0.287.0" />
-        <vers num="4.0.288.0" />
-        <vers num="4.0.288.1" />
-        <vers num="4.0.289.0" />
-        <vers num="4.0.290.0" />
-        <vers num="4.0.292.0" />
-        <vers num="4.0.294.0" />
-        <vers num="4.0.295.0" />
-        <vers num="4.0.296.0" />
-        <vers num="4.0.299.0" />
-        <vers num="4.0.300.0" />
-        <vers num="4.0.301.0" />
-        <vers num="4.0.302.0" />
-        <vers num="4.0.302.1" />
-        <vers num="4.0.302.2" />
-        <vers num="4.0.302.3" />
-        <vers num="4.0.303.0" />
-        <vers num="4.0.304.0" />
-        <vers num="4.0.305.0" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.1.249.0" />
-        <vers num="4.1.249.1001" />
-        <vers num="4.1.249.1004" />
-        <vers num="4.1.249.1006" />
-        <vers num="4.1.249.1007" />
-        <vers num="4.1.249.1008" />
-        <vers num="4.1.249.1009" />
-        <vers num="4.1.249.1010" />
-        <vers num="4.1.249.1011" />
-        <vers num="4.1.249.1012" />
-        <vers num="4.1.249.1013" />
-        <vers num="4.1.249.1014" />
-        <vers num="4.1.249.1015" />
-        <vers num="4.1.249.1016" />
-        <vers num="4.1.249.1017" />
-        <vers num="4.1.249.1018" />
-        <vers num="4.1.249.1019" />
-        <vers num="4.1.249.1020" />
-        <vers num="4.1.249.1021" />
-        <vers num="4.1.249.1022" />
-        <vers num="4.1.249.1023" />
-        <vers num="4.1.249.1024" />
-        <vers num="4.1.249.1025" />
-        <vers num="4.1.249.1026" />
-        <vers num="4.1.249.1027" />
-        <vers num="4.1.249.1028" />
-        <vers num="4.1.249.1029" />
-        <vers num="4.1.249.1030" />
-        <vers num="4.1.249.1031" />
-        <vers num="4.1.249.1032" />
-        <vers num="4.1.249.1033" />
-        <vers num="4.1.249.1034" />
-        <vers num="4.1.249.1035" />
-        <vers num="4.1.249.1036" />
-        <vers num="4.1.249.1037" />
-        <vers num="4.1.249.1038" />
-        <vers num="4.1.249.1039" />
-        <vers num="4.1.249.1040" />
-        <vers num="4.1.249.1041" />
-        <vers num="4.1.249.1042" />
-        <vers num="4.1.249.1043" />
-        <vers num="4.1.249.1044" />
-        <vers num="4.1.249.1045" />
-        <vers num="4.1.249.1046" />
-        <vers num="4.1.249.1047" />
-        <vers num="4.1.249.1048" />
-        <vers num="4.1.249.1049" />
-        <vers num="4.1.249.1050" />
-        <vers num="4.1.249.1051" />
-        <vers num="4.1.249.1052" />
-        <vers num="4.1.249.1053" />
-        <vers num="4.1.249.1054" />
-        <vers num="4.1.249.1055" />
-        <vers num="4.1.249.1056" />
-        <vers num="4.1.249.1057" />
-        <vers num="4.1.249.1058" />
-        <vers num="4.1.249.1059" />
-        <vers num="4.1.249.1060" />
-        <vers num="4.1.249.1061" />
-        <vers num="4.1.249.1062" />
-        <vers num="4.1.249.1063" />
-        <vers num="4.1.249.1064" />
-        <vers num="5.0.306.0" />
-        <vers num="5.0.306.1" />
-        <vers num="5.0.307.1" />
-        <vers num="5.0.307.10" />
-        <vers num="5.0.307.11" />
-        <vers num="5.0.307.3" />
-        <vers num="5.0.307.4" />
-        <vers num="5.0.307.5" />
-        <vers num="5.0.307.6" />
-        <vers num="5.0.307.7" />
-        <vers num="5.0.307.8" />
-        <vers num="5.0.307.9" />
-        <vers num="5.0.308.0" />
-        <vers num="5.0.309.0" />
-        <vers num="5.0.313.0" />
-        <vers num="5.0.314.0" />
-        <vers num="5.0.314.1" />
-        <vers num="5.0.315.0" />
-        <vers num="5.0.316.0" />
-        <vers num="5.0.317.0" />
-        <vers num="5.0.317.1" />
-        <vers num="5.0.317.2" />
-        <vers num="5.0.318.0" />
-        <vers num="5.0.319.0" />
-        <vers num="5.0.320.0" />
-        <vers num="5.0.321.0" />
-        <vers num="5.0.322.0" />
-        <vers num="5.0.322.1" />
-        <vers num="5.0.322.2" />
-        <vers num="5.0.323.0" />
-        <vers num="5.0.324.0" />
-        <vers num="5.0.325.0" />
-        <vers num="5.0.326.0" />
-        <vers num="5.0.327.0" />
-        <vers num="5.0.328.0" />
-        <vers num="5.0.329.0" />
-        <vers num="5.0.330.0" />
-        <vers num="5.0.332.0" />
-        <vers num="5.0.333.0" />
-        <vers num="5.0.334.0" />
-        <vers num="5.0.335.0" />
-        <vers num="5.0.335.1" />
-        <vers num="5.0.335.2" />
-        <vers num="5.0.335.3" />
-        <vers num="5.0.335.4" />
-        <vers num="5.0.336.0" />
-        <vers num="5.0.337.0" />
-        <vers num="5.0.338.0" />
-        <vers num="5.0.339.0" />
-        <vers num="5.0.340.0" />
-        <vers num="5.0.341.0" />
-        <vers num="5.0.342.0" />
-        <vers num="5.0.342.1" />
-        <vers num="5.0.342.2" />
-        <vers num="5.0.342.3" />
-        <vers num="5.0.342.4" />
-        <vers num="5.0.342.5" />
-        <vers num="5.0.342.6" />
-        <vers num="5.0.342.7" />
-        <vers num="5.0.342.8" />
-        <vers num="5.0.342.9" />
-        <vers num="5.0.343.0" />
-        <vers num="5.0.344.0" />
-        <vers num="5.0.345.0" />
-        <vers num="5.0.346.0" />
-        <vers num="5.0.347.0" />
-        <vers num="5.0.348.0" />
-        <vers num="5.0.349.0" />
-        <vers num="5.0.350.0" />
-        <vers num="5.0.350.1" />
-        <vers num="5.0.351.0" />
-        <vers num="5.0.353.0" />
-        <vers num="5.0.354.0" />
-        <vers num="5.0.354.1" />
-        <vers num="5.0.355.0" />
-        <vers num="5.0.356.0" />
-        <vers num="5.0.356.1" />
-        <vers num="5.0.356.2" />
-        <vers num="5.0.357.0" />
-        <vers num="5.0.358.0" />
-        <vers num="5.0.359.0" />
-        <vers num="5.0.360.0" />
-        <vers num="5.0.360.3" />
-        <vers num="5.0.360.4" />
-        <vers num="5.0.360.5" />
-        <vers num="5.0.361.0" />
-        <vers num="5.0.362.0" />
-        <vers num="5.0.363.0" />
-        <vers num="5.0.364.0" />
-        <vers num="5.0.365.0" />
-        <vers num="5.0.366.0" />
-        <vers num="5.0.366.1" />
-        <vers num="5.0.366.2" />
-        <vers num="5.0.366.3" />
-        <vers num="5.0.366.4" />
-        <vers num="5.0.367.0" />
-        <vers num="5.0.368.0" />
-        <vers num="5.0.369.0" />
-        <vers num="5.0.369.1" />
-        <vers num="5.0.369.2" />
-        <vers num="5.0.370.0" />
-        <vers num="5.0.371.0" />
-        <vers num="5.0.372.0" />
-        <vers num="5.0.373.0" />
-        <vers num="5.0.374.0" />
-        <vers num="5.0.375.0" />
-        <vers num="5.0.375.1" />
-        <vers num="5.0.375.10" />
-        <vers num="5.0.375.11" />
-        <vers num="5.0.375.12" />
-        <vers num="5.0.375.125" />
-        <vers num="5.0.375.126" />
-        <vers num="5.0.375.127" />
-        <vers num="5.0.375.13" />
-        <vers num="5.0.375.14" />
-        <vers num="5.0.375.15" />
-        <vers num="5.0.375.16" />
-        <vers num="5.0.375.17" />
-        <vers num="5.0.375.18" />
-        <vers num="5.0.375.19" />
-        <vers num="5.0.375.2" />
-        <vers num="5.0.375.20" />
-        <vers num="5.0.375.21" />
-        <vers num="5.0.375.22" />
-        <vers num="5.0.375.23" />
-        <vers num="5.0.375.25" />
-        <vers num="5.0.375.26" />
-        <vers num="5.0.375.27" />
-        <vers num="5.0.375.28" />
-        <vers num="5.0.375.29" />
-        <vers num="5.0.375.3" />
-        <vers num="5.0.375.30" />
-        <vers num="5.0.375.31" />
-        <vers num="5.0.375.32" />
-        <vers num="5.0.375.33" />
-        <vers num="5.0.375.34" />
-        <vers num="5.0.375.35" />
-        <vers num="5.0.375.36" />
-        <vers num="5.0.375.37" />
-        <vers num="5.0.375.38" />
-        <vers num="5.0.375.39" />
-        <vers num="5.0.375.4" />
-        <vers num="5.0.375.40" />
-        <vers num="5.0.375.41" />
-        <vers num="5.0.375.42" />
-        <vers num="5.0.375.43" />
-        <vers num="5.0.375.44" />
-        <vers num="5.0.375.45" />
-        <vers num="5.0.375.46" />
-        <vers num="5.0.375.47" />
-        <vers num="5.0.375.48" />
-        <vers num="5.0.375.49" />
-        <vers num="5.0.375.5" />
-        <vers num="5.0.375.50" />
-        <vers num="5.0.375.51" />
-        <vers num="5.0.375.52" />
-        <vers num="5.0.375.53" />
-        <vers num="5.0.375.54" />
-        <vers num="5.0.375.55" />
-        <vers num="5.0.375.56" />
-        <vers num="5.0.375.57" />
-        <vers num="5.0.375.58" />
-        <vers num="5.0.375.59" />
-        <vers num="5.0.375.6" />
-        <vers num="5.0.375.60" />
-        <vers num="5.0.375.61" />
-        <vers num="5.0.375.62" />
-        <vers num="5.0.375.63" />
-        <vers num="5.0.375.64" />
-        <vers num="5.0.375.65" />
-        <vers num="5.0.375.66" />
-        <vers num="5.0.375.67" />
-        <vers num="5.0.375.68" />
-        <vers num="5.0.375.69" />
-        <vers num="5.0.375.7" />
-        <vers num="5.0.375.70" />
-        <vers num="5.0.375.71" />
-        <vers num="5.0.375.72" />
-        <vers num="5.0.375.73" />
-        <vers num="5.0.375.74" />
-        <vers num="5.0.375.75" />
-        <vers num="5.0.375.76" />
-        <vers num="5.0.375.77" />
-        <vers num="5.0.375.78" />
-        <vers num="5.0.375.79" />
-        <vers num="5.0.375.8" />
-        <vers num="5.0.375.80" />
-        <vers num="5.0.375.81" />
-        <vers num="5.0.375.82" />
-        <vers num="5.0.375.83" />
-        <vers num="5.0.375.84" />
-        <vers num="5.0.375.85" />
-        <vers num="5.0.375.86" />
-        <vers num="5.0.375.87" />
-        <vers num="5.0.375.88" />
-        <vers num="5.0.375.89" />
-        <vers num="5.0.375.9" />
-        <vers num="5.0.375.90" />
-        <vers num="5.0.375.91" />
-        <vers num="5.0.375.92" />
-        <vers num="5.0.375.93" />
-        <vers num="5.0.375.94" />
-        <vers num="5.0.375.95" />
-        <vers num="5.0.375.96" />
-        <vers num="5.0.375.97" />
-        <vers num="5.0.375.98" />
-        <vers num="5.0.375.99" />
-        <vers num="5.0.376.0" />
-        <vers num="5.0.378.0" />
-        <vers num="5.0.379.0" />
-        <vers num="5.0.380.0" />
-        <vers num="5.0.381.0" />
-        <vers num="5.0.382.0" />
-        <vers num="5.0.382.3" />
-        <vers num="5.0.383.0" />
-        <vers num="5.0.384.0" />
-        <vers num="5.0.385.0" />
-        <vers num="5.0.386.0" />
-        <vers num="5.0.387.0" />
-        <vers num="5.0.390.0" />
-        <vers num="5.0.391.0" />
-        <vers num="5.0.392.0" />
-        <vers num="5.0.393.0" />
-        <vers num="5.0.394.0" />
-        <vers num="5.0.395.0" />
-        <vers num="5.0.396.0" />
-        <vers num="6.0.397.0" />
-        <vers num="6.0.398.0" />
-        <vers num="6.0.399.0" />
-        <vers num="6.0.400.0" />
-        <vers num="6.0.401.0" />
-        <vers num="6.0.401.1" />
-        <vers num="6.0.403.0" />
-        <vers num="6.0.404.0" />
-        <vers num="6.0.404.1" />
-        <vers num="6.0.404.2" />
-        <vers num="6.0.405.0" />
-        <vers num="6.0.406.0" />
-        <vers num="6.0.407.0" />
-        <vers num="6.0.408.0" />
-        <vers num="6.0.408.1" />
-        <vers num="6.0.408.10" />
-        <vers num="6.0.408.2" />
-        <vers num="6.0.408.3" />
-        <vers num="6.0.408.4" />
-        <vers num="6.0.408.5" />
-        <vers num="6.0.408.6" />
-        <vers num="6.0.408.7" />
-        <vers num="6.0.408.8" />
-        <vers num="6.0.408.9" />
-        <vers num="6.0.409.0" />
-        <vers num="6.0.410.0" />
-        <vers num="6.0.411.0" />
-        <vers num="6.0.412.0" />
-        <vers num="6.0.413.0" />
-        <vers num="6.0.414.0" />
-        <vers num="6.0.415.0" />
-        <vers num="6.0.415.1" />
-        <vers num="6.0.416.0" />
-        <vers num="6.0.416.1" />
-        <vers num="6.0.417.0" />
-        <vers num="6.0.418.0" />
-        <vers num="6.0.418.1" />
-        <vers num="6.0.418.2" />
-        <vers num="6.0.418.3" />
-        <vers num="6.0.418.4" />
-        <vers num="6.0.418.5" />
-        <vers num="6.0.418.6" />
-        <vers num="6.0.418.7" />
-        <vers num="6.0.418.8" />
-        <vers num="6.0.418.9" />
-        <vers num="6.0.419.0" />
-        <vers num="6.0.421.0" />
-        <vers num="6.0.422.0" />
-        <vers num="6.0.423.0" />
-        <vers num="6.0.424.0" />
-        <vers num="6.0.425.0" />
-        <vers num="6.0.426.0" />
-        <vers num="6.0.427.0" />
-        <vers num="6.0.428.0" />
-        <vers num="6.0.430.0" />
-        <vers num="6.0.431.0" />
-        <vers num="6.0.432.0" />
-        <vers num="6.0.433.0" />
-        <vers num="6.0.434.0" />
-        <vers num="6.0.435.0" />
-        <vers num="6.0.436.0" />
-        <vers num="6.0.437.0" />
-        <vers num="6.0.437.1" />
-        <vers num="6.0.437.2" />
-        <vers num="6.0.437.3" />
-        <vers num="6.0.438.0" />
-        <vers num="6.0.440.0" />
-        <vers num="6.0.441.0" />
-        <vers num="6.0.443.0" />
-        <vers num="6.0.444.0" />
-        <vers num="6.0.445.0" />
-        <vers num="6.0.445.1" />
-        <vers num="6.0.446.0" />
-        <vers num="6.0.447.0" />
-        <vers num="6.0.447.1" />
-        <vers num="6.0.447.2" />
-        <vers num="6.0.449.0" />
-        <vers num="6.0.450.0" />
-        <vers num="6.0.450.1" />
-        <vers num="6.0.450.2" />
-        <vers num="6.0.450.3" />
-        <vers num="6.0.450.4" />
-        <vers num="6.0.451.0" />
-        <vers num="6.0.452.0" />
-        <vers num="6.0.452.1" />
-        <vers num="6.0.453.0" />
-        <vers num="6.0.453.1" />
-        <vers num="6.0.454.0" />
-        <vers num="6.0.455.0" />
-        <vers num="6.0.456.0" />
-        <vers num="6.0.457.0" />
-        <vers num="6.0.458.0" />
-        <vers num="6.0.458.1" />
-        <vers num="6.0.458.2" />
-        <vers num="6.0.459.0" />
-        <vers num="6.0.460.0" />
-        <vers num="6.0.461.0" />
-        <vers num="6.0.462.0" />
-        <vers num="6.0.464.1" />
-        <vers num="6.0.465.1" />
-        <vers num="6.0.465.2" />
-        <vers num="6.0.466.0" />
-        <vers num="6.0.466.1" />
-        <vers num="6.0.466.2" />
-        <vers num="6.0.466.3" />
-        <vers num="6.0.466.4" />
-        <vers num="6.0.466.5" />
-        <vers num="6.0.466.6" />
-        <vers num="6.0.467.0" />
-        <vers num="6.0.469.0" />
-        <vers num="6.0.470.0" />
-        <vers num="6.0.471.0" />
-        <vers num="6.0.472.0" />
-        <vers num="6.0.472.1" />
-        <vers num="6.0.472.10" />
-        <vers num="6.0.472.11" />
-        <vers num="6.0.472.12" />
-        <vers num="6.0.472.13" />
-        <vers num="6.0.472.14" />
-        <vers num="6.0.472.15" />
-        <vers num="6.0.472.16" />
-        <vers num="6.0.472.17" />
-        <vers num="6.0.472.18" />
-        <vers num="6.0.472.19" />
-        <vers num="6.0.472.2" />
-        <vers num="6.0.472.20" />
-        <vers num="6.0.472.21" />
-        <vers num="6.0.472.22" />
-        <vers num="6.0.472.23" />
-        <vers num="6.0.472.24" />
-        <vers num="6.0.472.25" />
-        <vers num="6.0.472.26" />
-        <vers num="6.0.472.27" />
-        <vers num="6.0.472.28" />
-        <vers num="6.0.472.29" />
-        <vers num="6.0.472.3" />
-        <vers num="6.0.472.30" />
-        <vers num="6.0.472.31" />
-        <vers num="6.0.472.32" />
-        <vers num="6.0.472.33" />
-        <vers num="6.0.472.34" />
-        <vers num="6.0.472.35" />
-        <vers num="6.0.472.36" />
-        <vers num="6.0.472.37" />
-        <vers num="6.0.472.38" />
-        <vers num="6.0.472.39" />
-        <vers num="6.0.472.4" />
-        <vers num="6.0.472.40" />
-        <vers num="6.0.472.41" />
-        <vers num="6.0.472.42" />
-        <vers num="6.0.472.43" />
-        <vers num="6.0.472.44" />
-        <vers num="6.0.472.45" />
-        <vers num="6.0.472.46" />
-        <vers num="6.0.472.47" />
-        <vers num="6.0.472.48" />
-        <vers num="6.0.472.49" />
-        <vers num="6.0.472.5" />
-        <vers num="6.0.472.50" />
-        <vers num="6.0.472.51" />
-        <vers num="6.0.472.52" />
-        <vers num="6.0.472.53" />
-        <vers num="6.0.472.54" />
-        <vers num="6.0.472.55" />
-        <vers num="6.0.472.56" />
-        <vers num="6.0.472.57" />
-        <vers num="6.0.472.58" />
-        <vers num="6.0.472.59" />
-        <vers num="6.0.472.6" />
-        <vers num="6.0.472.60" />
-        <vers num="6.0.472.61" />
-        <vers num="6.0.472.62" />
-        <vers num="6.0.472.63" />
-        <vers num="6.0.472.7" />
-        <vers num="6.0.472.8" />
-        <vers num="6.0.472.9" />
-        <vers num="6.0.473.0" />
-        <vers num="6.0.474.0" />
-        <vers num="6.0.475.0" />
-        <vers num="6.0.476.0" />
-        <vers num="6.0.477.0" />
-        <vers num="6.0.478.0" />
-        <vers num="6.0.479.0" />
-        <vers num="6.0.480.0" />
-        <vers num="6.0.481.0" />
-        <vers num="6.0.482.0" />
-        <vers num="6.0.483.0" />
-        <vers num="6.0.484.0" />
-        <vers num="6.0.485.0" />
-        <vers num="6.0.486.0" />
-        <vers num="6.0.487.0" />
-        <vers num="6.0.488.0" />
-        <vers num="6.0.489.0" />
-        <vers num="6.0.490.0" />
-        <vers num="6.0.490.1" />
-        <vers num="6.0.491.0" />
-        <vers num="6.0.492.0" />
-        <vers num="6.0.493.0" />
-        <vers num="6.0.494.0" />
-        <vers num="6.0.495.0" />
-        <vers num="6.0.495.1" />
-        <vers num="6.0.496.0" />
-        <vers num="7.0.497.0" />
-        <vers num="7.0.498.0" />
-        <vers num="7.0.499.0" />
-        <vers num="7.0.499.1" />
-        <vers num="7.0.500.0" />
-        <vers num="7.0.500.1" />
-        <vers num="7.0.503.0" />
-        <vers num="7.0.503.1" />
-        <vers num="7.0.504.0" />
-        <vers num="7.0.505.0" />
-        <vers num="7.0.506.0" />
-        <vers num="7.0.507.0" />
-        <vers num="7.0.507.1" />
-        <vers num="7.0.507.2" />
-        <vers num="7.0.507.3" />
-        <vers num="7.0.509.0" />
-        <vers num="7.0.510.0" />
-        <vers num="7.0.511.1" />
-        <vers num="7.0.511.2" />
-        <vers num="7.0.511.4" />
-        <vers num="7.0.512.0" />
-        <vers num="7.0.513.0" />
-        <vers num="7.0.514.0" />
-        <vers num="7.0.514.1" />
-        <vers num="7.0.515.0" />
-        <vers num="7.0.516.0" />
-        <vers num="7.0.517.0" />
-        <vers num="7.0.517.10" />
-        <vers num="7.0.517.11" />
-        <vers num="7.0.517.12" />
-        <vers num="7.0.517.13" />
-        <vers num="7.0.517.14" />
-        <vers num="7.0.517.16" />
-        <vers num="7.0.517.17" />
-        <vers num="7.0.517.18" />
-        <vers num="7.0.517.19" />
-        <vers num="7.0.517.2" />
-        <vers num="7.0.517.20" />
-        <vers num="7.0.517.21" />
-        <vers num="7.0.517.22" />
-        <vers num="7.0.517.23" />
-        <vers num="7.0.517.24" />
-        <vers num="7.0.517.25" />
-        <vers num="7.0.517.26" />
-        <vers num="7.0.517.27" />
-        <vers num="7.0.517.28" />
-        <vers num="7.0.517.29" />
-        <vers num="7.0.517.30" />
-        <vers num="7.0.517.31" />
-        <vers num="7.0.517.32" />
-        <vers num="7.0.517.33" />
-        <vers num="7.0.517.34" />
-        <vers num="7.0.517.35" />
-        <vers num="7.0.517.36" />
-        <vers num="7.0.517.37" />
-        <vers num="7.0.517.38" />
-        <vers num="7.0.517.39" />
-        <vers num="7.0.517.4" />
-        <vers num="7.0.517.40" />
-        <vers num="7.0.517.41" />
-        <vers num="7.0.517.42" />
-        <vers num="7.0.517.43" />
-        <vers num="7.0.517.44" />
-        <vers num="7.0.517.5" />
-        <vers num="7.0.517.6" />
-        <vers num="7.0.517.7" />
-        <vers num="7.0.517.8" />
-        <vers num="7.0.517.9" />
-        <vers num="7.0.518.0" />
-        <vers num="7.0.519.0" />
-        <vers num="7.0.520.0" />
-        <vers num="7.0.521.0" />
-        <vers num="7.0.522.0" />
-        <vers num="7.0.524.0" />
-        <vers num="7.0.525.0" />
-        <vers num="7.0.526.0" />
-        <vers num="7.0.528.0" />
-        <vers num="7.0.529.0" />
-        <vers num="7.0.529.1" />
-        <vers num="7.0.529.2" />
-        <vers num="7.0.530.0" />
-        <vers num="7.0.531.0" />
-        <vers num="7.0.531.1" />
-        <vers num="7.0.531.2" />
-        <vers num="7.0.535.1" />
-        <vers num="7.0.535.2" />
-        <vers num="7.0.536.0" />
-        <vers num="7.0.536.1" />
-        <vers num="7.0.536.2" />
-        <vers num="7.0.536.3" />
-        <vers num="7.0.536.4" />
-        <vers num="7.0.537.0" />
-        <vers num="7.0.538.0" />
-        <vers num="7.0.539.0" />
-        <vers num="7.0.540.0" />
-        <vers num="7.0.541.0" />
-        <vers num="7.0.542.0" />
-        <vers num="7.0.544.0" />
-        <vers num="7.0.547.0" />
-        <vers num="7.0.547.1" />
-        <vers num="7.0.548.0" />
-        <vers num="8.0.549.0" />
-        <vers num="8.0.550.0" />
-        <vers num="8.0.551.0" />
-        <vers num="8.0.551.1" />
-        <vers num="8.0.552.0" />
-        <vers num="8.0.552.1" />
-        <vers num="8.0.552.10" />
-        <vers num="8.0.552.100" />
-        <vers num="8.0.552.101" />
-        <vers num="8.0.552.102" />
-        <vers num="8.0.552.103" />
-        <vers num="8.0.552.104" />
-        <vers num="8.0.552.105" />
-        <vers num="8.0.552.11" />
-        <vers num="8.0.552.12" />
-        <vers num="8.0.552.13" />
-        <vers num="8.0.552.14" />
-        <vers num="8.0.552.15" />
-        <vers num="8.0.552.16" />
-        <vers num="8.0.552.17" />
-        <vers num="8.0.552.18" />
-        <vers num="8.0.552.19" />
-        <vers num="8.0.552.2" />
-        <vers num="8.0.552.20" />
-        <vers num="8.0.552.200" />
-        <vers num="8.0.552.201" />
-        <vers num="8.0.552.202" />
-        <vers num="8.0.552.203" />
-        <vers num="8.0.552.204" />
-        <vers num="8.0.552.205" />
-        <vers num="8.0.552.206" />
-        <vers num="8.0.552.207" />
-        <vers num="8.0.552.208" />
-        <vers num="8.0.552.209" />
-        <vers num="8.0.552.21" />
-        <vers num="8.0.552.210" />
-        <vers num="8.0.552.211" />
-        <vers num="8.0.552.212" />
-        <vers num="8.0.552.213" />
-        <vers num="8.0.552.214" />
-        <vers num="8.0.552.215" />
-        <vers num="8.0.552.216" />
-        <vers num="8.0.552.217" />
-        <vers num="8.0.552.218" />
-        <vers num="8.0.552.219" />
-        <vers num="8.0.552.220" />
-        <vers num="8.0.552.221" />
-        <vers num="8.0.552.222" />
-        <vers num="8.0.552.223" />
-        <vers num="8.0.552.224" />
-        <vers num="8.0.552.225" />
-        <vers num="8.0.552.226" />
-        <vers num="8.0.552.227" />
-        <vers num="8.0.552.228" />
-        <vers num="8.0.552.229" />
-        <vers num="8.0.552.23" />
-        <vers num="8.0.552.230" />
-        <vers num="8.0.552.231" />
-        <vers num="8.0.552.232" />
-        <vers num="8.0.552.233" />
-        <vers num="8.0.552.234" />
-        <vers num="8.0.552.235" />
-        <vers num="8.0.552.237" />
-        <vers num="8.0.552.24" />
-        <vers num="8.0.552.25" />
-        <vers num="8.0.552.26" />
-        <vers num="8.0.552.27" />
-        <vers num="8.0.552.28" />
-        <vers num="8.0.552.29" />
-        <vers num="8.0.552.300" />
-        <vers num="8.0.552.301" />
-        <vers num="8.0.552.302" />
-        <vers num="8.0.552.303" />
-        <vers num="8.0.552.304" />
-        <vers num="8.0.552.305" />
-        <vers num="8.0.552.306" />
-        <vers num="8.0.552.307" />
-        <vers num="8.0.552.308" />
-        <vers num="8.0.552.309" />
-        <vers num="8.0.552.310" />
-        <vers num="8.0.552.311" />
-        <vers num="8.0.552.312" />
-        <vers num="8.0.552.313" />
-        <vers num="8.0.552.315" />
-        <vers num="8.0.552.316" />
-        <vers num="8.0.552.317" />
-        <vers num="8.0.552.318" />
-        <vers num="8.0.552.319" />
-        <vers num="8.0.552.320" />
-        <vers num="8.0.552.321" />
-        <vers num="8.0.552.322" />
-        <vers num="8.0.552.323" />
-        <vers num="8.0.552.324" />
-        <vers num="8.0.552.325" />
-        <vers num="8.0.552.326" />
-        <vers num="8.0.552.327" />
-        <vers num="8.0.552.328" />
-        <vers num="8.0.552.329" />
-        <vers num="8.0.552.330" />
-        <vers num="8.0.552.331" />
-        <vers num="8.0.552.332" />
-        <vers num="8.0.552.333" />
-        <vers num="8.0.552.334" />
-        <vers num="8.0.552.335" />
-        <vers num="8.0.552.336" />
-        <vers num="8.0.552.337" />
-        <vers num="8.0.552.338" />
-        <vers num="8.0.552.339" />
-        <vers num="8.0.552.340" />
-        <vers num="8.0.552.341" />
-        <vers num="8.0.552.342" />
-        <vers num="8.0.552.343" />
-        <vers num="8.0.552.344" />
-        <vers num="8.0.552.35" />
-        <vers num="8.0.552.4" />
-        <vers num="8.0.552.40" />
-        <vers num="8.0.552.41" />
-        <vers num="8.0.552.42" />
-        <vers num="8.0.552.43" />
-        <vers num="8.0.552.44" />
-        <vers num="8.0.552.45" />
-        <vers num="8.0.552.47" />
-        <vers num="8.0.552.48" />
-        <vers num="8.0.552.49" />
-        <vers num="8.0.552.5" />
-        <vers num="8.0.552.50" />
-        <vers num="8.0.552.51" />
-        <vers num="8.0.552.52" />
-        <vers num="8.0.552.6" />
-        <vers num="8.0.552.7" />
-        <vers num="8.0.552.8" />
-        <vers num="8.0.552.9" />
-        <vers num="8.0.553.0" />
-        <vers num="8.0.554.0" />
-        <vers num="8.0.555.0" />
-        <vers num="8.0.556.0" />
-        <vers num="8.0.557.0" />
-        <vers num="8.0.558.0" />
-        <vers num="8.0.559.0" />
-        <vers num="8.0.560.0" />
-        <vers num="8.0.561.0" />
-        <vers num="9.0.562.0" />
-        <vers num="9.0.563.0" />
-        <vers num="9.0.564.0" />
-        <vers num="9.0.565.0" />
-        <vers num="9.0.566.0" />
-        <vers num="9.0.567.0" />
-        <vers num="9.0.568.0" />
-        <vers num="9.0.569.0" />
-        <vers num="9.0.570.0" />
-        <vers num="9.0.570.1" />
-        <vers num="9.0.571.0" />
-        <vers num="9.0.572.0" />
-        <vers num="9.0.572.1" />
-        <vers num="9.0.573.0" />
-        <vers num="9.0.574.0" />
-        <vers num="9.0.575.0" />
-        <vers num="9.0.576.0" />
-        <vers num="9.0.577.0" />
-        <vers num="9.0.578.0" />
-        <vers num="9.0.579.0" />
-        <vers num="9.0.580.0" />
-        <vers num="9.0.581.0" />
-        <vers num="9.0.582.0" />
-        <vers num="9.0.583.0" />
-        <vers num="9.0.584.0" />
-        <vers num="9.0.585.0" />
-        <vers num="9.0.586.0" />
-        <vers num="9.0.587.0" />
-        <vers num="9.0.587.1" />
-        <vers num="9.0.588.0" />
-        <vers num="9.0.589.0" />
-        <vers num="9.0.590.0" />
-        <vers num="9.0.591.0" />
-        <vers num="9.0.592.0" />
-        <vers num="9.0.593.0" />
-        <vers num="9.0.594.0" />
-        <vers num="9.0.595.0" />
-        <vers num="9.0.596.0" />
-        <vers num="9.0.597.0" />
-        <vers num="9.0.597.1" />
-        <vers num="9.0.597.10" />
-        <vers num="9.0.597.100" />
-        <vers num="9.0.597.101" />
-        <vers num="9.0.597.102" />
-        <vers num="9.0.597.106" />
-        <vers num="9.0.597.107" />
-        <vers num="9.0.597.11" />
-        <vers num="9.0.597.12" />
-        <vers num="9.0.597.14" />
-        <vers num="9.0.597.15" />
-        <vers num="9.0.597.16" />
-        <vers num="9.0.597.17" />
-        <vers num="9.0.597.18" />
-        <vers num="9.0.597.19" />
-        <vers num="9.0.597.2" />
-        <vers num="9.0.597.20" />
-        <vers num="9.0.597.21" />
-        <vers num="9.0.597.22" />
-        <vers num="9.0.597.23" />
-        <vers num="9.0.597.24" />
-        <vers num="9.0.597.25" />
-        <vers num="9.0.597.26" />
-        <vers num="9.0.597.27" />
-        <vers num="9.0.597.28" />
-        <vers num="9.0.597.29" />
-        <vers num="9.0.597.30" />
-        <vers num="9.0.597.31" />
-        <vers num="9.0.597.32" />
-        <vers num="9.0.597.33" />
-        <vers num="9.0.597.34" />
-        <vers num="9.0.597.35" />
-        <vers num="9.0.597.36" />
-        <vers num="9.0.597.37" />
-        <vers num="9.0.597.38" />
-        <vers num="9.0.597.39" />
-        <vers num="9.0.597.4" />
-        <vers num="9.0.597.40" />
-        <vers num="9.0.597.41" />
-        <vers num="9.0.597.42" />
-        <vers num="9.0.597.44" />
-        <vers num="9.0.597.45" />
-        <vers num="9.0.597.46" />
-        <vers num="9.0.597.47" />
-        <vers num="9.0.597.5" />
-        <vers num="9.0.597.54" />
-        <vers num="9.0.597.55" />
-        <vers num="9.0.597.56" />
-        <vers num="9.0.597.57" />
-        <vers num="9.0.597.58" />
-        <vers num="9.0.597.59" />
-        <vers num="9.0.597.60" />
-        <vers num="9.0.597.62" />
-        <vers num="9.0.597.63" />
-        <vers num="9.0.597.64" />
-        <vers num="9.0.597.65" />
-        <vers num="9.0.597.66" />
-        <vers num="9.0.597.67" />
-        <vers num="9.0.597.68" />
-        <vers num="9.0.597.69" />
-        <vers num="9.0.597.7" />
-        <vers num="9.0.597.70" />
-        <vers num="9.0.597.71" />
-        <vers num="9.0.597.72" />
-        <vers num="9.0.597.73" />
-        <vers num="9.0.597.74" />
-        <vers num="9.0.597.75" />
-        <vers num="9.0.597.76" />
-        <vers num="9.0.597.77" />
-        <vers num="9.0.597.78" />
-        <vers num="9.0.597.79" />
-        <vers num="9.0.597.8" />
-        <vers num="9.0.597.80" />
-        <vers num="9.0.597.81" />
-        <vers num="9.0.597.82" />
-        <vers num="9.0.597.83" />
-        <vers num="9.0.597.84" />
-        <vers num="9.0.597.85" />
-        <vers num="9.0.597.86" />
-        <vers num="9.0.597.88" />
-        <vers num="9.0.597.9" />
-        <vers num="9.0.597.90" />
-        <vers num="9.0.597.92" />
-        <vers num="9.0.597.94" />
-        <vers num="9.0.597.96" />
-        <vers num="9.0.597.97" />
-        <vers num="9.0.597.98" />
-        <vers num="9.0.597.99" />
-        <vers num="9.0.598.0" />
-        <vers num="9.0.599.0" />
-        <vers num="9.0.600.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1846" published="2012-03-22" name="CVE-2012-1846" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a sandboxed process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012.  NOTE: the primary affected product may be clarified later; it was not identified by the researcher, who reportedly stated "it really doesn't matter if it's third-party code."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.zdnet.com/blog/security/pwn2own-2012-google-chrome-browser-sandbox-first-to-fall/10588" source="MISC">http://www.zdnet.com/blog/security/pwn2own-2012-google-chrome-browser-sandbox-first-to-fall/10588</ref>
-      <ref url="http://www.forbes.com/sites/andygreenberg/2012/03/21/meet-the-hackers-who-sell-spies-the-tools-to-crack-your-pc-and-get-paid-six-figure-fees/" source="MISC">http://www.forbes.com/sites/andygreenberg/2012/03/21/meet-the-hackers-who-sell-spies-the-tools-to-crack-your-pc-and-get-paid-six-figure-fees/</ref>
-      <ref url="http://twitter.com/vupen/statuses/177576000761237505" source="MISC">http://twitter.com/vupen/statuses/177576000761237505</ref>
-      <ref url="http://pwn2own.zerodayinitiative.com/status.html" source="MISC">http://pwn2own.zerodayinitiative.com/status.html</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14940" source="OVAL">oval:org.mitre.oval:def:14940</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="0.1.38.1" />
-        <vers num="0.1.38.2" />
-        <vers num="0.1.38.4" />
-        <vers num="0.1.40.1" />
-        <vers num="0.1.42.2" />
-        <vers num="0.1.42.3" />
-        <vers num="0.2.149.27" />
-        <vers num="0.2.149.29" />
-        <vers num="0.2.149.30" />
-        <vers num="0.2.152.1" />
-        <vers num="0.2.153.1" />
-        <vers num="0.3.154.0" />
-        <vers num="0.3.154.3" />
-        <vers num="0.4.154.18" />
-        <vers num="0.4.154.22" />
-        <vers num="0.4.154.31" />
-        <vers num="0.4.154.33" />
-        <vers num="1.0.154.36" />
-        <vers num="1.0.154.39" />
-        <vers num="1.0.154.42" />
-        <vers num="1.0.154.43" />
-        <vers num="1.0.154.46" />
-        <vers num="1.0.154.48" />
-        <vers num="1.0.154.52" />
-        <vers num="1.0.154.53" />
-        <vers num="1.0.154.59" />
-        <vers num="1.0.154.64" />
-        <vers num="1.0.154.65" />
-        <vers num="10.0.601.0" />
-        <vers num="10.0.602.0" />
-        <vers num="10.0.603.0" />
-        <vers num="10.0.603.2" />
-        <vers num="10.0.603.3" />
-        <vers num="10.0.604.0" />
-        <vers num="10.0.605.0" />
-        <vers num="10.0.606.0" />
-        <vers num="10.0.607.0" />
-        <vers num="10.0.608.0" />
-        <vers num="10.0.609.0" />
-        <vers num="10.0.610.0" />
-        <vers num="10.0.611.0" />
-        <vers num="10.0.611.1" />
-        <vers num="10.0.612.0" />
-        <vers num="10.0.612.1" />
-        <vers num="10.0.612.2" />
-        <vers num="10.0.612.3" />
-        <vers num="10.0.613.0" />
-        <vers num="10.0.614.0" />
-        <vers num="10.0.615.0" />
-        <vers num="10.0.616.0" />
-        <vers num="10.0.617.0" />
-        <vers num="10.0.618.0" />
-        <vers num="10.0.619.0" />
-        <vers num="10.0.620.0" />
-        <vers num="10.0.621.0" />
-        <vers num="10.0.622.0" />
-        <vers num="10.0.622.1" />
-        <vers num="10.0.623.0" />
-        <vers num="10.0.624.0" />
-        <vers num="10.0.625.0" />
-        <vers num="10.0.626.0" />
-        <vers num="10.0.627.0" />
-        <vers num="10.0.628.0" />
-        <vers num="10.0.629.0" />
-        <vers num="10.0.630.0" />
-        <vers num="10.0.631.0" />
-        <vers num="10.0.632.0" />
-        <vers num="10.0.633.0" />
-        <vers num="10.0.634.0" />
-        <vers num="10.0.634.1" />
-        <vers num="10.0.635.0" />
-        <vers num="10.0.636.0" />
-        <vers num="10.0.638.0" />
-        <vers num="10.0.638.1" />
-        <vers num="10.0.639.0" />
-        <vers num="10.0.640.0" />
-        <vers num="10.0.642.0" />
-        <vers num="10.0.642.1" />
-        <vers num="10.0.642.2" />
-        <vers num="10.0.643.0" />
-        <vers num="10.0.644.0" />
-        <vers num="10.0.645.0" />
-        <vers num="10.0.646.0" />
-        <vers num="10.0.647.0" />
-        <vers num="10.0.648.0" />
-        <vers num="10.0.648.1" />
-        <vers num="10.0.648.10" />
-        <vers num="10.0.648.101" />
-        <vers num="10.0.648.103" />
-        <vers num="10.0.648.105" />
-        <vers num="10.0.648.107" />
-        <vers num="10.0.648.11" />
-        <vers num="10.0.648.114" />
-        <vers num="10.0.648.116" />
-        <vers num="10.0.648.118" />
-        <vers num="10.0.648.119" />
-        <vers num="10.0.648.12" />
-        <vers num="10.0.648.120" />
-        <vers num="10.0.648.121" />
-        <vers num="10.0.648.122" />
-        <vers num="10.0.648.123" />
-        <vers num="10.0.648.124" />
-        <vers num="10.0.648.125" />
-        <vers num="10.0.648.126" />
-        <vers num="10.0.648.127" />
-        <vers num="10.0.648.128" />
-        <vers num="10.0.648.129" />
-        <vers num="10.0.648.13" />
-        <vers num="10.0.648.130" />
-        <vers num="10.0.648.131" />
-        <vers num="10.0.648.132" />
-        <vers num="10.0.648.133" />
-        <vers num="10.0.648.134" />
-        <vers num="10.0.648.135" />
-        <vers num="10.0.648.151" />
-        <vers num="10.0.648.18" />
-        <vers num="10.0.648.2" />
-        <vers num="10.0.648.201" />
-        <vers num="10.0.648.203" />
-        <vers num="10.0.648.204" />
-        <vers num="10.0.648.205" />
-        <vers num="10.0.648.23" />
-        <vers num="10.0.648.26" />
-        <vers num="10.0.648.28" />
-        <vers num="10.0.648.3" />
-        <vers num="10.0.648.32" />
-        <vers num="10.0.648.35" />
-        <vers num="10.0.648.38" />
-        <vers num="10.0.648.4" />
-        <vers num="10.0.648.42" />
-        <vers num="10.0.648.45" />
-        <vers num="10.0.648.49" />
-        <vers num="10.0.648.5" />
-        <vers num="10.0.648.54" />
-        <vers num="10.0.648.56" />
-        <vers num="10.0.648.59" />
-        <vers num="10.0.648.6" />
-        <vers num="10.0.648.62" />
-        <vers num="10.0.648.66" />
-        <vers num="10.0.648.68" />
-        <vers num="10.0.648.7" />
-        <vers num="10.0.648.70" />
-        <vers num="10.0.648.72" />
-        <vers num="10.0.648.76" />
-        <vers num="10.0.648.79" />
-        <vers num="10.0.648.8" />
-        <vers num="10.0.648.82" />
-        <vers num="10.0.648.84" />
-        <vers num="10.0.648.87" />
-        <vers num="10.0.648.9" />
-        <vers num="10.0.648.90" />
-        <vers num="10.0.649.0" />
-        <vers num="10.0.650.0" />
-        <vers num="10.0.651.0" />
-        <vers num="11.0.652.0" />
-        <vers num="11.0.653.0" />
-        <vers num="11.0.654.0" />
-        <vers num="11.0.655.0" />
-        <vers num="11.0.656.0" />
-        <vers num="11.0.657.0" />
-        <vers num="11.0.658.0" />
-        <vers num="11.0.658.1" />
-        <vers num="11.0.659.0" />
-        <vers num="11.0.660.0" />
-        <vers num="11.0.661.0" />
-        <vers num="11.0.662.0" />
-        <vers num="11.0.663.0" />
-        <vers num="11.0.664.1" />
-        <vers num="11.0.665.0" />
-        <vers num="11.0.666.0" />
-        <vers num="11.0.667.0" />
-        <vers num="11.0.667.2" />
-        <vers num="11.0.667.3" />
-        <vers num="11.0.667.4" />
-        <vers num="11.0.668.0" />
-        <vers num="11.0.669.0" />
-        <vers num="11.0.670.0" />
-        <vers num="11.0.671.0" />
-        <vers num="11.0.672.0" />
-        <vers num="11.0.672.1" />
-        <vers num="11.0.672.2" />
-        <vers num="11.0.673.0" />
-        <vers num="11.0.674.0" />
-        <vers num="11.0.675.0" />
-        <vers num="11.0.676.0" />
-        <vers num="11.0.677.0" />
-        <vers num="11.0.678.0" />
-        <vers num="11.0.679.0" />
-        <vers num="11.0.680.0" />
-        <vers num="11.0.681.0" />
-        <vers num="11.0.682.0" />
-        <vers num="11.0.683.0" />
-        <vers num="11.0.684.0" />
-        <vers num="11.0.685.0" />
-        <vers num="11.0.686.0" />
-        <vers num="11.0.686.1" />
-        <vers num="11.0.686.2" />
-        <vers num="11.0.686.3" />
-        <vers num="11.0.687.0" />
-        <vers num="11.0.687.1" />
-        <vers num="11.0.688.0" />
-        <vers num="11.0.689.0" />
-        <vers num="11.0.690.0" />
-        <vers num="11.0.690.1" />
-        <vers num="11.0.691.0" />
-        <vers num="11.0.692.0" />
-        <vers num="11.0.693.0" />
-        <vers num="11.0.694.0" />
-        <vers num="11.0.695.0" />
-        <vers num="11.0.696.0" />
-        <vers num="11.0.696.1" />
-        <vers num="11.0.696.10" />
-        <vers num="11.0.696.11" />
-        <vers num="11.0.696.12" />
-        <vers num="11.0.696.13" />
-        <vers num="11.0.696.14" />
-        <vers num="11.0.696.15" />
-        <vers num="11.0.696.16" />
-        <vers num="11.0.696.17" />
-        <vers num="11.0.696.18" />
-        <vers num="11.0.696.19" />
-        <vers num="11.0.696.2" />
-        <vers num="11.0.696.20" />
-        <vers num="11.0.696.21" />
-        <vers num="11.0.696.22" />
-        <vers num="11.0.696.23" />
-        <vers num="11.0.696.24" />
-        <vers num="11.0.696.25" />
-        <vers num="11.0.696.26" />
-        <vers num="11.0.696.27" />
-        <vers num="11.0.696.28" />
-        <vers num="11.0.696.29" />
-        <vers num="11.0.696.3" />
-        <vers num="11.0.696.30" />
-        <vers num="11.0.696.31" />
-        <vers num="11.0.696.32" />
-        <vers num="11.0.696.33" />
-        <vers num="11.0.696.34" />
-        <vers num="11.0.696.35" />
-        <vers num="11.0.696.36" />
-        <vers num="11.0.696.37" />
-        <vers num="11.0.696.38" />
-        <vers num="11.0.696.39" />
-        <vers num="11.0.696.4" />
-        <vers num="11.0.696.40" />
-        <vers num="11.0.696.41" />
-        <vers num="11.0.696.42" />
-        <vers num="11.0.696.43" />
-        <vers num="11.0.696.44" />
-        <vers num="11.0.696.45" />
-        <vers num="11.0.696.46" />
-        <vers num="11.0.696.47" />
-        <vers num="11.0.696.48" />
-        <vers num="11.0.696.49" />
-        <vers num="11.0.696.5" />
-        <vers num="11.0.696.50" />
-        <vers num="11.0.696.51" />
-        <vers num="11.0.696.52" />
-        <vers num="11.0.696.53" />
-        <vers num="11.0.696.54" />
-        <vers num="11.0.696.55" />
-        <vers num="11.0.696.56" />
-        <vers num="11.0.696.57" />
-        <vers num="11.0.696.58" />
-        <vers num="11.0.696.59" />
-        <vers num="11.0.696.60" />
-        <vers num="11.0.696.61" />
-        <vers num="11.0.696.62" />
-        <vers num="11.0.696.63" />
-        <vers num="11.0.696.64" />
-        <vers num="11.0.696.65" />
-        <vers num="11.0.696.66" />
-        <vers num="11.0.696.67" />
-        <vers num="11.0.696.68" />
-        <vers num="11.0.696.69" />
-        <vers num="11.0.696.7" />
-        <vers num="11.0.696.70" />
-        <vers num="11.0.696.71" />
-        <vers num="11.0.696.72" />
-        <vers num="11.0.696.77" />
-        <vers num="11.0.696.8" />
-        <vers num="11.0.696.9" />
-        <vers num="11.0.697.0" />
-        <vers num="11.0.698.0" />
-        <vers num="11.0.699.0" />
-        <vers num="12.0.700.0" />
-        <vers num="12.0.701.0" />
-        <vers num="12.0.702.0" />
-        <vers num="12.0.702.1" />
-        <vers num="12.0.702.2" />
-        <vers num="12.0.703.0" />
-        <vers num="12.0.704.0" />
-        <vers num="12.0.705.0" />
-        <vers num="12.0.706.0" />
-        <vers num="12.0.707.0" />
-        <vers num="12.0.708.0" />
-        <vers num="12.0.709.0" />
-        <vers num="12.0.710.0" />
-        <vers num="12.0.711.0" />
-        <vers num="12.0.712.0" />
-        <vers num="12.0.713.0" />
-        <vers num="12.0.714.0" />
-        <vers num="12.0.715.0" />
-        <vers num="12.0.716.0" />
-        <vers num="12.0.717.0" />
-        <vers num="12.0.718.0" />
-        <vers num="12.0.719.0" />
-        <vers num="12.0.719.1" />
-        <vers num="12.0.720.0" />
-        <vers num="12.0.721.0" />
-        <vers num="12.0.721.1" />
-        <vers num="12.0.722.0" />
-        <vers num="12.0.723.0" />
-        <vers num="12.0.723.1" />
-        <vers num="12.0.724.0" />
-        <vers num="12.0.725.0" />
-        <vers num="12.0.726.0" />
-        <vers num="12.0.727.0" />
-        <vers num="12.0.728.0" />
-        <vers num="12.0.729.0" />
-        <vers num="12.0.730.0" />
-        <vers num="12.0.731.0" />
-        <vers num="12.0.732.0" />
-        <vers num="12.0.733.0" />
-        <vers num="12.0.734.0" />
-        <vers num="12.0.735.0" />
-        <vers num="12.0.736.0" />
-        <vers num="12.0.737.0" />
-        <vers num="12.0.738.0" />
-        <vers num="12.0.739.0" />
-        <vers num="12.0.740.0" />
-        <vers num="12.0.741.0" />
-        <vers num="12.0.742.0" />
-        <vers num="12.0.742.1" />
-        <vers num="12.0.742.10" />
-        <vers num="12.0.742.100" />
-        <vers num="12.0.742.105" />
-        <vers num="12.0.742.11" />
-        <vers num="12.0.742.111" />
-        <vers num="12.0.742.112" />
-        <vers num="12.0.742.113" />
-        <vers num="12.0.742.114" />
-        <vers num="12.0.742.115" />
-        <vers num="12.0.742.12" />
-        <vers num="12.0.742.120" />
-        <vers num="12.0.742.121" />
-        <vers num="12.0.742.122" />
-        <vers num="12.0.742.123" />
-        <vers num="12.0.742.124" />
-        <vers num="12.0.742.13" />
-        <vers num="12.0.742.14" />
-        <vers num="12.0.742.15" />
-        <vers num="12.0.742.16" />
-        <vers num="12.0.742.17" />
-        <vers num="12.0.742.18" />
-        <vers num="12.0.742.19" />
-        <vers num="12.0.742.2" />
-        <vers num="12.0.742.20" />
-        <vers num="12.0.742.21" />
-        <vers num="12.0.742.22" />
-        <vers num="12.0.742.3" />
-        <vers num="12.0.742.30" />
-        <vers num="12.0.742.4" />
-        <vers num="12.0.742.41" />
-        <vers num="12.0.742.42" />
-        <vers num="12.0.742.43" />
-        <vers num="12.0.742.44" />
-        <vers num="12.0.742.45" />
-        <vers num="12.0.742.46" />
-        <vers num="12.0.742.47" />
-        <vers num="12.0.742.48" />
-        <vers num="12.0.742.49" />
-        <vers num="12.0.742.5" />
-        <vers num="12.0.742.50" />
-        <vers num="12.0.742.51" />
-        <vers num="12.0.742.52" />
-        <vers num="12.0.742.53" />
-        <vers num="12.0.742.54" />
-        <vers num="12.0.742.55" />
-        <vers num="12.0.742.56" />
-        <vers num="12.0.742.57" />
-        <vers num="12.0.742.58" />
-        <vers num="12.0.742.59" />
-        <vers num="12.0.742.6" />
-        <vers num="12.0.742.60" />
-        <vers num="12.0.742.61" />
-        <vers num="12.0.742.63" />
-        <vers num="12.0.742.64" />
-        <vers num="12.0.742.65" />
-        <vers num="12.0.742.66" />
-        <vers num="12.0.742.67" />
-        <vers num="12.0.742.68" />
-        <vers num="12.0.742.69" />
-        <vers num="12.0.742.70" />
-        <vers num="12.0.742.71" />
-        <vers num="12.0.742.72" />
-        <vers num="12.0.742.73" />
-        <vers num="12.0.742.74" />
-        <vers num="12.0.742.75" />
-        <vers num="12.0.742.77" />
-        <vers num="12.0.742.8" />
-        <vers num="12.0.742.82" />
-        <vers num="12.0.742.9" />
-        <vers num="12.0.742.91" />
-        <vers num="12.0.742.92" />
-        <vers num="12.0.742.93" />
-        <vers num="12.0.742.94" />
-        <vers num="12.0.743.0" />
-        <vers num="12.0.744.0" />
-        <vers num="12.0.745.0" />
-        <vers num="12.0.746.0" />
-        <vers num="12.0.747.0" />
-        <vers num="13.0.748.0" />
-        <vers num="13.0.749.0" />
-        <vers num="13.0.750.0" />
-        <vers num="13.0.751.0" />
-        <vers num="13.0.752.0" />
-        <vers num="13.0.753.0" />
-        <vers num="13.0.754.0" />
-        <vers num="13.0.755.0" />
-        <vers num="13.0.756.0" />
-        <vers num="13.0.757.0" />
-        <vers num="13.0.758.0" />
-        <vers num="13.0.759.0" />
-        <vers num="13.0.760.0" />
-        <vers num="13.0.761.0" />
-        <vers num="13.0.761.1" />
-        <vers num="13.0.762.0" />
-        <vers num="13.0.762.1" />
-        <vers num="13.0.763.0" />
-        <vers num="13.0.764.0" />
-        <vers num="13.0.765.0" />
-        <vers num="13.0.766.0" />
-        <vers num="13.0.767.0" />
-        <vers num="13.0.767.1" />
-        <vers num="13.0.768.0" />
-        <vers num="13.0.769.0" />
-        <vers num="13.0.770.0" />
-        <vers num="13.0.771.0" />
-        <vers num="13.0.772.0" />
-        <vers num="13.0.773.0" />
-        <vers num="13.0.774.0" />
-        <vers num="13.0.775.0" />
-        <vers num="13.0.775.1" />
-        <vers num="13.0.775.2" />
-        <vers num="13.0.775.4" />
-        <vers num="13.0.776.0" />
-        <vers num="13.0.776.1" />
-        <vers num="13.0.777.0" />
-        <vers num="13.0.777.1" />
-        <vers num="13.0.777.2" />
-        <vers num="13.0.777.3" />
-        <vers num="13.0.777.4" />
-        <vers num="13.0.777.5" />
-        <vers num="13.0.777.6" />
-        <vers num="13.0.778.0" />
-        <vers num="13.0.779.0" />
-        <vers num="13.0.780.0" />
-        <vers num="13.0.781.0" />
-        <vers num="13.0.782.0" />
-        <vers num="13.0.782.1" />
-        <vers num="13.0.782.10" />
-        <vers num="13.0.782.100" />
-        <vers num="13.0.782.101" />
-        <vers num="13.0.782.102" />
-        <vers num="13.0.782.103" />
-        <vers num="13.0.782.104" />
-        <vers num="13.0.782.105" />
-        <vers num="13.0.782.106" />
-        <vers num="13.0.782.107" />
-        <vers num="13.0.782.108" />
-        <vers num="13.0.782.109" />
-        <vers num="13.0.782.11" />
-        <vers num="13.0.782.112" />
-        <vers num="13.0.782.12" />
-        <vers num="13.0.782.13" />
-        <vers num="13.0.782.14" />
-        <vers num="13.0.782.15" />
-        <vers num="13.0.782.16" />
-        <vers num="13.0.782.17" />
-        <vers num="13.0.782.18" />
-        <vers num="13.0.782.19" />
-        <vers num="13.0.782.20" />
-        <vers num="13.0.782.21" />
-        <vers num="13.0.782.210" />
-        <vers num="13.0.782.211" />
-        <vers num="13.0.782.212" />
-        <vers num="13.0.782.213" />
-        <vers num="13.0.782.214" />
-        <vers num="13.0.782.215" />
-        <vers num="13.0.782.216" />
-        <vers num="13.0.782.217" />
-        <vers num="13.0.782.218" />
-        <vers num="13.0.782.219" />
-        <vers num="13.0.782.220" />
-        <vers num="13.0.782.23" />
-        <vers num="13.0.782.237" />
-        <vers num="13.0.782.238" />
-        <vers num="13.0.782.24" />
-        <vers num="13.0.782.25" />
-        <vers num="13.0.782.26" />
-        <vers num="13.0.782.27" />
-        <vers num="13.0.782.28" />
-        <vers num="13.0.782.29" />
-        <vers num="13.0.782.3" />
-        <vers num="13.0.782.30" />
-        <vers num="13.0.782.31" />
-        <vers num="13.0.782.32" />
-        <vers num="13.0.782.33" />
-        <vers num="13.0.782.34" />
-        <vers num="13.0.782.35" />
-        <vers num="13.0.782.36" />
-        <vers num="13.0.782.37" />
-        <vers num="13.0.782.38" />
-        <vers num="13.0.782.39" />
-        <vers num="13.0.782.4" />
-        <vers num="13.0.782.40" />
-        <vers num="13.0.782.41" />
-        <vers num="13.0.782.42" />
-        <vers num="13.0.782.43" />
-        <vers num="13.0.782.44" />
-        <vers num="13.0.782.45" />
-        <vers num="13.0.782.46" />
-        <vers num="13.0.782.47" />
-        <vers num="13.0.782.48" />
-        <vers num="13.0.782.49" />
-        <vers num="13.0.782.50" />
-        <vers num="13.0.782.51" />
-        <vers num="13.0.782.52" />
-        <vers num="13.0.782.53" />
-        <vers num="13.0.782.55" />
-        <vers num="13.0.782.56" />
-        <vers num="13.0.782.6" />
-        <vers num="13.0.782.7" />
-        <vers num="13.0.782.81" />
-        <vers num="13.0.782.82" />
-        <vers num="13.0.782.83" />
-        <vers num="13.0.782.84" />
-        <vers num="13.0.782.85" />
-        <vers num="13.0.782.86" />
-        <vers num="13.0.782.87" />
-        <vers num="13.0.782.88" />
-        <vers num="13.0.782.89" />
-        <vers num="13.0.782.90" />
-        <vers num="13.0.782.91" />
-        <vers num="13.0.782.92" />
-        <vers num="13.0.782.93" />
-        <vers num="13.0.782.94" />
-        <vers num="13.0.782.95" />
-        <vers num="13.0.782.96" />
-        <vers num="13.0.782.97" />
-        <vers num="13.0.782.98" />
-        <vers num="13.0.782.99" />
-        <vers num="14.0.783.0" />
-        <vers num="14.0.784.0" />
-        <vers num="14.0.785.0" />
-        <vers num="14.0.786.0" />
-        <vers num="14.0.787.0" />
-        <vers num="14.0.788.0" />
-        <vers num="14.0.789.0" />
-        <vers num="14.0.790.0" />
-        <vers num="14.0.791.0" />
-        <vers num="14.0.792.0" />
-        <vers num="14.0.793.0" />
-        <vers num="14.0.794.0" />
-        <vers num="14.0.795.0" />
-        <vers num="14.0.796.0" />
-        <vers num="14.0.797.0" />
-        <vers num="14.0.798.0" />
-        <vers num="14.0.799.0" />
-        <vers num="14.0.800.0" />
-        <vers num="14.0.801.0" />
-        <vers num="14.0.802.0" />
-        <vers num="14.0.803.0" />
-        <vers num="14.0.804.0" />
-        <vers num="14.0.805.0" />
-        <vers num="14.0.806.0" />
-        <vers num="14.0.807.0" />
-        <vers num="14.0.808.0" />
-        <vers num="14.0.809.0" />
-        <vers num="14.0.810.0" />
-        <vers num="14.0.811.0" />
-        <vers num="14.0.812.0" />
-        <vers num="14.0.813.0" />
-        <vers num="14.0.814.0" />
-        <vers num="14.0.815.0" />
-        <vers num="14.0.816.0" />
-        <vers num="14.0.818.0" />
-        <vers num="14.0.819.0" />
-        <vers num="14.0.820.0" />
-        <vers num="14.0.821.0" />
-        <vers num="14.0.822.0" />
-        <vers num="14.0.823.0" />
-        <vers num="14.0.824.0" />
-        <vers num="14.0.825.0" />
-        <vers num="14.0.826.0" />
-        <vers num="14.0.827.0" />
-        <vers num="14.0.827.10" />
-        <vers num="14.0.827.12" />
-        <vers num="14.0.829.1" />
-        <vers num="14.0.830.0" />
-        <vers num="14.0.831.0" />
-        <vers num="14.0.832.0" />
-        <vers num="14.0.833.0" />
-        <vers num="14.0.834.0" />
-        <vers num="14.0.835.0" />
-        <vers num="14.0.835.1" />
-        <vers num="14.0.835.100" />
-        <vers num="14.0.835.101" />
-        <vers num="14.0.835.102" />
-        <vers num="14.0.835.103" />
-        <vers num="14.0.835.104" />
-        <vers num="14.0.835.105" />
-        <vers num="14.0.835.106" />
-        <vers num="14.0.835.107" />
-        <vers num="14.0.835.108" />
-        <vers num="14.0.835.109" />
-        <vers num="14.0.835.11" />
-        <vers num="14.0.835.110" />
-        <vers num="14.0.835.111" />
-        <vers num="14.0.835.112" />
-        <vers num="14.0.835.113" />
-        <vers num="14.0.835.114" />
-        <vers num="14.0.835.115" />
-        <vers num="14.0.835.116" />
-        <vers num="14.0.835.117" />
-        <vers num="14.0.835.118" />
-        <vers num="14.0.835.119" />
-        <vers num="14.0.835.120" />
-        <vers num="14.0.835.121" />
-        <vers num="14.0.835.122" />
-        <vers num="14.0.835.123" />
-        <vers num="14.0.835.124" />
-        <vers num="14.0.835.125" />
-        <vers num="14.0.835.126" />
-        <vers num="14.0.835.127" />
-        <vers num="14.0.835.128" />
-        <vers num="14.0.835.13" />
-        <vers num="14.0.835.14" />
-        <vers num="14.0.835.149" />
-        <vers num="14.0.835.15" />
-        <vers num="14.0.835.150" />
-        <vers num="14.0.835.151" />
-        <vers num="14.0.835.152" />
-        <vers num="14.0.835.153" />
-        <vers num="14.0.835.154" />
-        <vers num="14.0.835.155" />
-        <vers num="14.0.835.156" />
-        <vers num="14.0.835.157" />
-        <vers num="14.0.835.158" />
-        <vers num="14.0.835.159" />
-        <vers num="14.0.835.16" />
-        <vers num="14.0.835.160" />
-        <vers num="14.0.835.161" />
-        <vers num="14.0.835.162" />
-        <vers num="14.0.835.163" />
-        <vers num="14.0.835.18" />
-        <vers num="14.0.835.184" />
-        <vers num="14.0.835.186" />
-        <vers num="14.0.835.187" />
-        <vers num="14.0.835.2" />
-        <vers num="14.0.835.20" />
-        <vers num="14.0.835.202" />
-        <vers num="14.0.835.203" />
-        <vers num="14.0.835.204" />
-        <vers num="14.0.835.21" />
-        <vers num="14.0.835.22" />
-        <vers num="14.0.835.23" />
-        <vers num="14.0.835.24" />
-        <vers num="14.0.835.25" />
-        <vers num="14.0.835.26" />
-        <vers num="14.0.835.27" />
-        <vers num="14.0.835.28" />
-        <vers num="14.0.835.29" />
-        <vers num="14.0.835.30" />
-        <vers num="14.0.835.31" />
-        <vers num="14.0.835.32" />
-        <vers num="14.0.835.33" />
-        <vers num="14.0.835.34" />
-        <vers num="14.0.835.35" />
-        <vers num="14.0.835.4" />
-        <vers num="14.0.835.8" />
-        <vers num="14.0.835.86" />
-        <vers num="14.0.835.87" />
-        <vers num="14.0.835.88" />
-        <vers num="14.0.835.89" />
-        <vers num="14.0.835.9" />
-        <vers num="14.0.835.90" />
-        <vers num="14.0.835.91" />
-        <vers num="14.0.835.92" />
-        <vers num="14.0.835.93" />
-        <vers num="14.0.835.94" />
-        <vers num="14.0.835.95" />
-        <vers num="14.0.835.96" />
-        <vers num="14.0.835.97" />
-        <vers num="14.0.835.98" />
-        <vers num="14.0.835.99" />
-        <vers num="14.0.836.0" />
-        <vers num="14.0.837.0" />
-        <vers num="14.0.838.0" />
-        <vers num="14.0.839.0" />
-        <vers num="15.0.859.0" />
-        <vers num="15.0.860.0" />
-        <vers num="15.0.861.0" />
-        <vers num="15.0.862.0" />
-        <vers num="15.0.862.1" />
-        <vers num="15.0.863.0" />
-        <vers num="15.0.864.0" />
-        <vers num="15.0.865.0" />
-        <vers num="15.0.866.0" />
-        <vers num="15.0.867.0" />
-        <vers num="15.0.868.0" />
-        <vers num="15.0.868.1" />
-        <vers num="15.0.869.0" />
-        <vers num="15.0.870.0" />
-        <vers num="15.0.871.0" />
-        <vers num="15.0.871.1" />
-        <vers num="15.0.872.0" />
-        <vers num="15.0.873.0" />
-        <vers num="15.0.874.0" />
-        <vers num="15.0.874.1" />
-        <vers num="15.0.874.10" />
-        <vers num="15.0.874.101" />
-        <vers num="15.0.874.102" />
-        <vers num="15.0.874.103" />
-        <vers num="15.0.874.104" />
-        <vers num="15.0.874.106" />
-        <vers num="15.0.874.11" />
-        <vers num="15.0.874.116" />
-        <vers num="15.0.874.117" />
-        <vers num="15.0.874.119" />
-        <vers num="15.0.874.12" />
-        <vers num="15.0.874.120" />
-        <vers num="15.0.874.121" />
-        <vers num="15.0.874.13" />
-        <vers num="15.0.874.14" />
-        <vers num="15.0.874.15" />
-        <vers num="15.0.874.16" />
-        <vers num="15.0.874.17" />
-        <vers num="15.0.874.18" />
-        <vers num="15.0.874.19" />
-        <vers num="15.0.874.2" />
-        <vers num="15.0.874.20" />
-        <vers num="15.0.874.21" />
-        <vers num="15.0.874.22" />
-        <vers num="15.0.874.23" />
-        <vers num="15.0.874.24" />
-        <vers num="15.0.874.3" />
-        <vers num="15.0.874.4" />
-        <vers num="15.0.874.44" />
-        <vers num="15.0.874.45" />
-        <vers num="15.0.874.46" />
-        <vers num="15.0.874.47" />
-        <vers num="15.0.874.48" />
-        <vers num="15.0.874.49" />
-        <vers num="15.0.874.5" />
-        <vers num="15.0.874.6" />
-        <vers num="15.0.874.7" />
-        <vers num="15.0.874.8" />
-        <vers num="15.0.874.9" />
-        <vers num="16.0.877.0" />
-        <vers num="16.0.878.0" />
-        <vers num="16.0.879.0" />
-        <vers num="16.0.880.0" />
-        <vers num="16.0.881.0" />
-        <vers num="16.0.882.0" />
-        <vers num="16.0.883.0" />
-        <vers num="16.0.884.0" />
-        <vers num="16.0.885.0" />
-        <vers num="16.0.886.0" />
-        <vers num="16.0.886.1" />
-        <vers num="16.0.887.0" />
-        <vers num="16.0.888.0" />
-        <vers num="16.0.889.0" />
-        <vers num="16.0.889.2" />
-        <vers num="16.0.889.3" />
-        <vers num="16.0.890.0" />
-        <vers num="16.0.890.1" />
-        <vers num="16.0.891.0" />
-        <vers num="16.0.891.1" />
-        <vers num="16.0.892.0" />
-        <vers num="16.0.893.0" />
-        <vers num="16.0.893.1" />
-        <vers num="16.0.894.0" />
-        <vers num="16.0.895.0" />
-        <vers num="16.0.896.0" />
-        <vers num="16.0.897.0" />
-        <vers num="16.0.898.0" />
-        <vers num="16.0.899.0" />
-        <vers num="16.0.900.0" />
-        <vers num="16.0.901.0" />
-        <vers num="16.0.902.0" />
-        <vers num="16.0.903.0" />
-        <vers num="16.0.904.0" />
-        <vers num="16.0.905.0" />
-        <vers num="16.0.906.0" />
-        <vers num="16.0.906.1" />
-        <vers num="16.0.907.0" />
-        <vers num="16.0.908.0" />
-        <vers num="16.0.909.0" />
-        <vers num="16.0.910.0" />
-        <vers num="16.0.911.0" />
-        <vers num="16.0.911.1" />
-        <vers num="16.0.911.2" />
-        <vers num="16.0.912.0" />
-        <vers num="16.0.912.1" />
-        <vers num="16.0.912.10" />
-        <vers num="16.0.912.11" />
-        <vers num="16.0.912.12" />
-        <vers num="16.0.912.13" />
-        <vers num="16.0.912.14" />
-        <vers num="16.0.912.15" />
-        <vers num="16.0.912.19" />
-        <vers num="16.0.912.2" />
-        <vers num="16.0.912.20" />
-        <vers num="16.0.912.21" />
-        <vers num="16.0.912.22" />
-        <vers num="16.0.912.23" />
-        <vers num="16.0.912.24" />
-        <vers num="16.0.912.25" />
-        <vers num="16.0.912.26" />
-        <vers num="16.0.912.27" />
-        <vers num="16.0.912.28" />
-        <vers num="16.0.912.29" />
-        <vers num="16.0.912.3" />
-        <vers num="16.0.912.30" />
-        <vers num="16.0.912.31" />
-        <vers num="16.0.912.32" />
-        <vers num="16.0.912.33" />
-        <vers num="16.0.912.34" />
-        <vers num="16.0.912.35" />
-        <vers num="16.0.912.36" />
-        <vers num="16.0.912.37" />
-        <vers num="16.0.912.38" />
-        <vers num="16.0.912.39" />
-        <vers num="16.0.912.4" />
-        <vers num="16.0.912.40" />
-        <vers num="16.0.912.41" />
-        <vers num="16.0.912.42" />
-        <vers num="16.0.912.43" />
-        <vers num="16.0.912.5" />
-        <vers num="16.0.912.6" />
-        <vers num="16.0.912.62" />
-        <vers num="16.0.912.63" />
-        <vers num="16.0.912.66" />
-        <vers num="16.0.912.7" />
-        <vers num="16.0.912.74" />
-        <vers num="16.0.912.75" />
-        <vers num="16.0.912.76" />
-        <vers num="16.0.912.77" />
-        <vers num="16.0.912.8" />
-        <vers num="16.0.912.9" />
-        <vers num="17.0.921.3" />
-        <vers num="17.0.922.0" />
-        <vers num="17.0.923.0" />
-        <vers num="17.0.923.1" />
-        <vers num="17.0.924.0" />
-        <vers num="17.0.925.0" />
-        <vers num="17.0.926.0" />
-        <vers num="17.0.927.0" />
-        <vers num="17.0.928.0" />
-        <vers num="17.0.928.1" />
-        <vers num="17.0.928.2" />
-        <vers num="17.0.928.3" />
-        <vers num="17.0.929.0" />
-        <vers num="17.0.930.0" />
-        <vers num="17.0.931.0" />
-        <vers num="17.0.932.0" />
-        <vers num="17.0.933.0" />
-        <vers num="17.0.933.1" />
-        <vers num="17.0.934.0" />
-        <vers num="17.0.935.0" />
-        <vers num="17.0.935.1" />
-        <vers num="17.0.936.0" />
-        <vers num="17.0.936.1" />
-        <vers num="17.0.937.0" />
-        <vers num="17.0.938.0" />
-        <vers num="17.0.939.0" />
-        <vers num="17.0.939.1" />
-        <vers num="17.0.940.0" />
-        <vers num="17.0.941.0" />
-        <vers num="17.0.942.0" />
-        <vers num="17.0.943.0" />
-        <vers num="17.0.944.0" />
-        <vers num="17.0.945.0" />
-        <vers num="17.0.946.0" />
-        <vers num="17.0.947.0" />
-        <vers num="17.0.948.0" />
-        <vers num="17.0.949.0" />
-        <vers num="17.0.950.0" />
-        <vers num="17.0.951.0" />
-        <vers num="17.0.952.0" />
-        <vers num="17.0.953.0" />
-        <vers num="17.0.954.0" />
-        <vers num="17.0.954.1" />
-        <vers num="17.0.954.2" />
-        <vers num="17.0.954.3" />
-        <vers num="17.0.955.0" />
-        <vers num="17.0.956.0" />
-        <vers num="17.0.957.0" />
-        <vers num="17.0.958.0" />
-        <vers num="17.0.958.1" />
-        <vers num="17.0.959.0" />
-        <vers num="17.0.960.0" />
-        <vers num="17.0.961.0" />
-        <vers num="17.0.962.0" />
-        <vers num="17.0.963.0" />
-        <vers num="17.0.963.1" />
-        <vers num="17.0.963.10" />
-        <vers num="17.0.963.11" />
-        <vers num="17.0.963.12" />
-        <vers num="17.0.963.13" />
-        <vers num="17.0.963.14" />
-        <vers num="17.0.963.15" />
-        <vers num="17.0.963.16" />
-        <vers num="17.0.963.17" />
-        <vers num="17.0.963.18" />
-        <vers num="17.0.963.19" />
-        <vers num="17.0.963.2" />
-        <vers num="17.0.963.20" />
-        <vers num="17.0.963.21" />
-        <vers num="17.0.963.22" />
-        <vers num="17.0.963.23" />
-        <vers num="17.0.963.24" />
-        <vers num="17.0.963.25" />
-        <vers num="17.0.963.26" />
-        <vers num="17.0.963.27" />
-        <vers num="17.0.963.28" />
-        <vers num="17.0.963.29" />
-        <vers num="17.0.963.3" />
-        <vers num="17.0.963.30" />
-        <vers num="17.0.963.31" />
-        <vers num="17.0.963.32" />
-        <vers num="17.0.963.33" />
-        <vers num="17.0.963.34" />
-        <vers num="17.0.963.35" />
-        <vers num="17.0.963.36" />
-        <vers num="17.0.963.37" />
-        <vers num="17.0.963.38" />
-        <vers num="17.0.963.39" />
-        <vers num="17.0.963.4" />
-        <vers num="17.0.963.40" />
-        <vers num="17.0.963.41" />
-        <vers num="17.0.963.42" />
-        <vers num="17.0.963.43" />
-        <vers num="17.0.963.44" />
-        <vers num="17.0.963.45" />
-        <vers num="17.0.963.46" />
-        <vers num="17.0.963.47" />
-        <vers num="17.0.963.48" />
-        <vers num="17.0.963.49" />
-        <vers num="17.0.963.5" />
-        <vers num="17.0.963.50" />
-        <vers num="17.0.963.51" />
-        <vers num="17.0.963.52" />
-        <vers num="17.0.963.53" />
-        <vers num="17.0.963.54" />
-        <vers num="17.0.963.55" />
-        <vers num="17.0.963.56" />
-        <vers num="17.0.963.57" />
-        <vers num="17.0.963.59" />
-        <vers num="17.0.963.6" />
-        <vers num="17.0.963.60" />
-        <vers num="17.0.963.61" />
-        <vers num="17.0.963.62" />
-        <vers num="17.0.963.63" />
-        <vers num="17.0.963.64" />
-        <vers num="17.0.963.65" />
-        <vers prev="1" num="17.0.963.66" />
-        <vers num="17.0.963.7" />
-        <vers num="17.0.963.8" />
-        <vers num="17.0.963.9" />
-        <vers num="2.0.156.1" />
-        <vers num="2.0.157.0" />
-        <vers num="2.0.157.2" />
-        <vers num="2.0.158.0" />
-        <vers num="2.0.159.0" />
-        <vers num="2.0.169.0" />
-        <vers num="2.0.169.1" />
-        <vers num="2.0.170.0" />
-        <vers num="2.0.172" />
-        <vers num="2.0.172.2" />
-        <vers num="2.0.172.27" />
-        <vers num="2.0.172.28" />
-        <vers num="2.0.172.30" />
-        <vers num="2.0.172.31" />
-        <vers num="2.0.172.33" />
-        <vers num="2.0.172.37" />
-        <vers num="2.0.172.38" />
-        <vers num="2.0.172.8" />
-        <vers num="3.0.182.2" />
-        <vers num="3.0.190.2" />
-        <vers num="3.0.193.2" edition="beta" />
-        <vers num="3.0.195.2" />
-        <vers num="3.0.195.21" />
-        <vers num="3.0.195.24" />
-        <vers num="3.0.195.25" />
-        <vers num="3.0.195.27" />
-        <vers num="3.0.195.32" />
-        <vers num="3.0.195.33" />
-        <vers num="3.0.195.36" />
-        <vers num="3.0.195.37" />
-        <vers num="3.0.195.38" />
-        <vers num="4.0.212.0" />
-        <vers num="4.0.212.1" />
-        <vers num="4.0.221.8" />
-        <vers num="4.0.222.0" />
-        <vers num="4.0.222.1" />
-        <vers num="4.0.222.12" />
-        <vers num="4.0.222.5" />
-        <vers num="4.0.223.0" />
-        <vers num="4.0.223.1" />
-        <vers num="4.0.223.2" />
-        <vers num="4.0.223.4" />
-        <vers num="4.0.223.5" />
-        <vers num="4.0.223.7" />
-        <vers num="4.0.223.8" />
-        <vers num="4.0.223.9" />
-        <vers num="4.0.224.0" />
-        <vers num="4.0.229.1" />
-        <vers num="4.0.235.0" />
-        <vers num="4.0.236.0" />
-        <vers num="4.0.237.0" />
-        <vers num="4.0.237.1" />
-        <vers num="4.0.239.0" />
-        <vers num="4.0.240.0" />
-        <vers num="4.0.241.0" />
-        <vers num="4.0.242.0" />
-        <vers num="4.0.243.0" />
-        <vers num="4.0.244.0" />
-        <vers num="4.0.245.0" />
-        <vers num="4.0.245.1" />
-        <vers num="4.0.246.0" />
-        <vers num="4.0.247.0" />
-        <vers num="4.0.248.0" />
-        <vers num="4.0.249.0" />
-        <vers num="4.0.249.1" />
-        <vers num="4.0.249.10" />
-        <vers num="4.0.249.11" />
-        <vers num="4.0.249.12" />
-        <vers num="4.0.249.14" />
-        <vers num="4.0.249.16" />
-        <vers num="4.0.249.17" />
-        <vers num="4.0.249.18" />
-        <vers num="4.0.249.19" />
-        <vers num="4.0.249.2" />
-        <vers num="4.0.249.20" />
-        <vers num="4.0.249.21" />
-        <vers num="4.0.249.22" />
-        <vers num="4.0.249.23" />
-        <vers num="4.0.249.24" />
-        <vers num="4.0.249.25" />
-        <vers num="4.0.249.26" />
-        <vers num="4.0.249.27" />
-        <vers num="4.0.249.28" />
-        <vers num="4.0.249.29" />
-        <vers num="4.0.249.3" />
-        <vers num="4.0.249.30" />
-        <vers num="4.0.249.31" />
-        <vers num="4.0.249.32" />
-        <vers num="4.0.249.33" />
-        <vers num="4.0.249.34" />
-        <vers num="4.0.249.35" />
-        <vers num="4.0.249.36" />
-        <vers num="4.0.249.37" />
-        <vers num="4.0.249.38" />
-        <vers num="4.0.249.39" />
-        <vers num="4.0.249.4" />
-        <vers num="4.0.249.40" />
-        <vers num="4.0.249.41" />
-        <vers num="4.0.249.42" />
-        <vers num="4.0.249.43" />
-        <vers num="4.0.249.44" />
-        <vers num="4.0.249.45" />
-        <vers num="4.0.249.46" />
-        <vers num="4.0.249.47" />
-        <vers num="4.0.249.48" />
-        <vers num="4.0.249.49" />
-        <vers num="4.0.249.5" />
-        <vers num="4.0.249.50" />
-        <vers num="4.0.249.51" />
-        <vers num="4.0.249.52" />
-        <vers num="4.0.249.53" />
-        <vers num="4.0.249.54" />
-        <vers num="4.0.249.55" />
-        <vers num="4.0.249.56" />
-        <vers num="4.0.249.57" />
-        <vers num="4.0.249.58" />
-        <vers num="4.0.249.59" />
-        <vers num="4.0.249.6" />
-        <vers num="4.0.249.60" />
-        <vers num="4.0.249.61" />
-        <vers num="4.0.249.62" />
-        <vers num="4.0.249.63" />
-        <vers num="4.0.249.64" />
-        <vers num="4.0.249.65" />
-        <vers num="4.0.249.66" />
-        <vers num="4.0.249.67" />
-        <vers num="4.0.249.68" />
-        <vers num="4.0.249.69" />
-        <vers num="4.0.249.7" />
-        <vers num="4.0.249.70" />
-        <vers num="4.0.249.71" />
-        <vers num="4.0.249.72" />
-        <vers num="4.0.249.73" />
-        <vers num="4.0.249.74" />
-        <vers num="4.0.249.75" />
-        <vers num="4.0.249.76" />
-        <vers num="4.0.249.77" />
-        <vers num="4.0.249.78" edition="beta" />
-        <vers num="4.0.249.79" />
-        <vers num="4.0.249.8" />
-        <vers num="4.0.249.80" />
-        <vers num="4.0.249.81" />
-        <vers num="4.0.249.82" />
-        <vers num="4.0.249.89" />
-        <vers num="4.0.249.9" />
-        <vers num="4.0.250.0" />
-        <vers num="4.0.250.2" />
-        <vers num="4.0.251.0" />
-        <vers num="4.0.252.0" />
-        <vers num="4.0.254.0" />
-        <vers num="4.0.255.0" />
-        <vers num="4.0.256.0" />
-        <vers num="4.0.257.0" />
-        <vers num="4.0.258.0" />
-        <vers num="4.0.259.0" />
-        <vers num="4.0.260.0" />
-        <vers num="4.0.261.0" />
-        <vers num="4.0.262.0" />
-        <vers num="4.0.263.0" />
-        <vers num="4.0.264.0" />
-        <vers num="4.0.265.0" />
-        <vers num="4.0.266.0" />
-        <vers num="4.0.267.0" />
-        <vers num="4.0.268.0" />
-        <vers num="4.0.269.0" />
-        <vers num="4.0.271.0" />
-        <vers num="4.0.272.0" />
-        <vers num="4.0.275.0" />
-        <vers num="4.0.275.1" />
-        <vers num="4.0.276.0" />
-        <vers num="4.0.277.0" />
-        <vers num="4.0.278.0" />
-        <vers num="4.0.286.0" />
-        <vers num="4.0.287.0" />
-        <vers num="4.0.288.0" />
-        <vers num="4.0.288.1" />
-        <vers num="4.0.289.0" />
-        <vers num="4.0.290.0" />
-        <vers num="4.0.292.0" />
-        <vers num="4.0.294.0" />
-        <vers num="4.0.295.0" />
-        <vers num="4.0.296.0" />
-        <vers num="4.0.299.0" />
-        <vers num="4.0.300.0" />
-        <vers num="4.0.301.0" />
-        <vers num="4.0.302.0" />
-        <vers num="4.0.302.1" />
-        <vers num="4.0.302.2" />
-        <vers num="4.0.302.3" />
-        <vers num="4.0.303.0" />
-        <vers num="4.0.304.0" />
-        <vers num="4.0.305.0" />
-        <vers num="4.1" edition="beta" />
-        <vers num="4.1.249.0" />
-        <vers num="4.1.249.1001" />
-        <vers num="4.1.249.1004" />
-        <vers num="4.1.249.1006" />
-        <vers num="4.1.249.1007" />
-        <vers num="4.1.249.1008" />
-        <vers num="4.1.249.1009" />
-        <vers num="4.1.249.1010" />
-        <vers num="4.1.249.1011" />
-        <vers num="4.1.249.1012" />
-        <vers num="4.1.249.1013" />
-        <vers num="4.1.249.1014" />
-        <vers num="4.1.249.1015" />
-        <vers num="4.1.249.1016" />
-        <vers num="4.1.249.1017" />
-        <vers num="4.1.249.1018" />
-        <vers num="4.1.249.1019" />
-        <vers num="4.1.249.1020" />
-        <vers num="4.1.249.1021" />
-        <vers num="4.1.249.1022" />
-        <vers num="4.1.249.1023" />
-        <vers num="4.1.249.1024" />
-        <vers num="4.1.249.1025" />
-        <vers num="4.1.249.1026" />
-        <vers num="4.1.249.1027" />
-        <vers num="4.1.249.1028" />
-        <vers num="4.1.249.1029" />
-        <vers num="4.1.249.1030" />
-        <vers num="4.1.249.1031" />
-        <vers num="4.1.249.1032" />
-        <vers num="4.1.249.1033" />
-        <vers num="4.1.249.1034" />
-        <vers num="4.1.249.1035" />
-        <vers num="4.1.249.1036" />
-        <vers num="4.1.249.1037" />
-        <vers num="4.1.249.1038" />
-        <vers num="4.1.249.1039" />
-        <vers num="4.1.249.1040" />
-        <vers num="4.1.249.1041" />
-        <vers num="4.1.249.1042" />
-        <vers num="4.1.249.1043" />
-        <vers num="4.1.249.1044" />
-        <vers num="4.1.249.1045" />
-        <vers num="4.1.249.1046" />
-        <vers num="4.1.249.1047" />
-        <vers num="4.1.249.1048" />
-        <vers num="4.1.249.1049" />
-        <vers num="4.1.249.1050" />
-        <vers num="4.1.249.1051" />
-        <vers num="4.1.249.1052" />
-        <vers num="4.1.249.1053" />
-        <vers num="4.1.249.1054" />
-        <vers num="4.1.249.1055" />
-        <vers num="4.1.249.1056" />
-        <vers num="4.1.249.1057" />
-        <vers num="4.1.249.1058" />
-        <vers num="4.1.249.1059" />
-        <vers num="4.1.249.1060" />
-        <vers num="4.1.249.1061" />
-        <vers num="4.1.249.1062" />
-        <vers num="4.1.249.1063" />
-        <vers num="4.1.249.1064" />
-        <vers num="5.0.306.0" />
-        <vers num="5.0.306.1" />
-        <vers num="5.0.307.1" />
-        <vers num="5.0.307.10" />
-        <vers num="5.0.307.11" />
-        <vers num="5.0.307.3" />
-        <vers num="5.0.307.4" />
-        <vers num="5.0.307.5" />
-        <vers num="5.0.307.6" />
-        <vers num="5.0.307.7" />
-        <vers num="5.0.307.8" />
-        <vers num="5.0.307.9" />
-        <vers num="5.0.308.0" />
-        <vers num="5.0.309.0" />
-        <vers num="5.0.313.0" />
-        <vers num="5.0.314.0" />
-        <vers num="5.0.314.1" />
-        <vers num="5.0.315.0" />
-        <vers num="5.0.316.0" />
-        <vers num="5.0.317.0" />
-        <vers num="5.0.317.1" />
-        <vers num="5.0.317.2" />
-        <vers num="5.0.318.0" />
-        <vers num="5.0.319.0" />
-        <vers num="5.0.320.0" />
-        <vers num="5.0.321.0" />
-        <vers num="5.0.322.0" />
-        <vers num="5.0.322.1" />
-        <vers num="5.0.322.2" />
-        <vers num="5.0.323.0" />
-        <vers num="5.0.324.0" />
-        <vers num="5.0.325.0" />
-        <vers num="5.0.326.0" />
-        <vers num="5.0.327.0" />
-        <vers num="5.0.328.0" />
-        <vers num="5.0.329.0" />
-        <vers num="5.0.330.0" />
-        <vers num="5.0.332.0" />
-        <vers num="5.0.333.0" />
-        <vers num="5.0.334.0" />
-        <vers num="5.0.335.0" />
-        <vers num="5.0.335.1" />
-        <vers num="5.0.335.2" />
-        <vers num="5.0.335.3" />
-        <vers num="5.0.335.4" />
-        <vers num="5.0.336.0" />
-        <vers num="5.0.337.0" />
-        <vers num="5.0.338.0" />
-        <vers num="5.0.339.0" />
-        <vers num="5.0.340.0" />
-        <vers num="5.0.341.0" />
-        <vers num="5.0.342.0" />
-        <vers num="5.0.342.1" />
-        <vers num="5.0.342.2" />
-        <vers num="5.0.342.3" />
-        <vers num="5.0.342.4" />
-        <vers num="5.0.342.5" />
-        <vers num="5.0.342.6" />
-        <vers num="5.0.342.7" />
-        <vers num="5.0.342.8" />
-        <vers num="5.0.342.9" />
-        <vers num="5.0.343.0" />
-        <vers num="5.0.344.0" />
-        <vers num="5.0.345.0" />
-        <vers num="5.0.346.0" />
-        <vers num="5.0.347.0" />
-        <vers num="5.0.348.0" />
-        <vers num="5.0.349.0" />
-        <vers num="5.0.350.0" />
-        <vers num="5.0.350.1" />
-        <vers num="5.0.351.0" />
-        <vers num="5.0.353.0" />
-        <vers num="5.0.354.0" />
-        <vers num="5.0.354.1" />
-        <vers num="5.0.355.0" />
-        <vers num="5.0.356.0" />
-        <vers num="5.0.356.1" />
-        <vers num="5.0.356.2" />
-        <vers num="5.0.357.0" />
-        <vers num="5.0.358.0" />
-        <vers num="5.0.359.0" />
-        <vers num="5.0.360.0" />
-        <vers num="5.0.360.3" />
-        <vers num="5.0.360.4" />
-        <vers num="5.0.360.5" />
-        <vers num="5.0.361.0" />
-        <vers num="5.0.362.0" />
-        <vers num="5.0.363.0" />
-        <vers num="5.0.364.0" />
-        <vers num="5.0.365.0" />
-        <vers num="5.0.366.0" />
-        <vers num="5.0.366.1" />
-        <vers num="5.0.366.2" />
-        <vers num="5.0.366.3" />
-        <vers num="5.0.366.4" />
-        <vers num="5.0.367.0" />
-        <vers num="5.0.368.0" />
-        <vers num="5.0.369.0" />
-        <vers num="5.0.369.1" />
-        <vers num="5.0.369.2" />
-        <vers num="5.0.370.0" />
-        <vers num="5.0.371.0" />
-        <vers num="5.0.372.0" />
-        <vers num="5.0.373.0" />
-        <vers num="5.0.374.0" />
-        <vers num="5.0.375.0" />
-        <vers num="5.0.375.1" />
-        <vers num="5.0.375.10" />
-        <vers num="5.0.375.11" />
-        <vers num="5.0.375.12" />
-        <vers num="5.0.375.125" />
-        <vers num="5.0.375.126" />
-        <vers num="5.0.375.127" />
-        <vers num="5.0.375.13" />
-        <vers num="5.0.375.14" />
-        <vers num="5.0.375.15" />
-        <vers num="5.0.375.16" />
-        <vers num="5.0.375.17" />
-        <vers num="5.0.375.18" />
-        <vers num="5.0.375.19" />
-        <vers num="5.0.375.2" />
-        <vers num="5.0.375.20" />
-        <vers num="5.0.375.21" />
-        <vers num="5.0.375.22" />
-        <vers num="5.0.375.23" />
-        <vers num="5.0.375.25" />
-        <vers num="5.0.375.26" />
-        <vers num="5.0.375.27" />
-        <vers num="5.0.375.28" />
-        <vers num="5.0.375.29" />
-        <vers num="5.0.375.3" />
-        <vers num="5.0.375.30" />
-        <vers num="5.0.375.31" />
-        <vers num="5.0.375.32" />
-        <vers num="5.0.375.33" />
-        <vers num="5.0.375.34" />
-        <vers num="5.0.375.35" />
-        <vers num="5.0.375.36" />
-        <vers num="5.0.375.37" />
-        <vers num="5.0.375.38" />
-        <vers num="5.0.375.39" />
-        <vers num="5.0.375.4" />
-        <vers num="5.0.375.40" />
-        <vers num="5.0.375.41" />
-        <vers num="5.0.375.42" />
-        <vers num="5.0.375.43" />
-        <vers num="5.0.375.44" />
-        <vers num="5.0.375.45" />
-        <vers num="5.0.375.46" />
-        <vers num="5.0.375.47" />
-        <vers num="5.0.375.48" />
-        <vers num="5.0.375.49" />
-        <vers num="5.0.375.5" />
-        <vers num="5.0.375.50" />
-        <vers num="5.0.375.51" />
-        <vers num="5.0.375.52" />
-        <vers num="5.0.375.53" />
-        <vers num="5.0.375.54" />
-        <vers num="5.0.375.55" />
-        <vers num="5.0.375.56" />
-        <vers num="5.0.375.57" />
-        <vers num="5.0.375.58" />
-        <vers num="5.0.375.59" />
-        <vers num="5.0.375.6" />
-        <vers num="5.0.375.60" />
-        <vers num="5.0.375.61" />
-        <vers num="5.0.375.62" />
-        <vers num="5.0.375.63" />
-        <vers num="5.0.375.64" />
-        <vers num="5.0.375.65" />
-        <vers num="5.0.375.66" />
-        <vers num="5.0.375.67" />
-        <vers num="5.0.375.68" />
-        <vers num="5.0.375.69" />
-        <vers num="5.0.375.7" />
-        <vers num="5.0.375.70" />
-        <vers num="5.0.375.71" />
-        <vers num="5.0.375.72" />
-        <vers num="5.0.375.73" />
-        <vers num="5.0.375.74" />
-        <vers num="5.0.375.75" />
-        <vers num="5.0.375.76" />
-        <vers num="5.0.375.77" />
-        <vers num="5.0.375.78" />
-        <vers num="5.0.375.79" />
-        <vers num="5.0.375.8" />
-        <vers num="5.0.375.80" />
-        <vers num="5.0.375.81" />
-        <vers num="5.0.375.82" />
-        <vers num="5.0.375.83" />
-        <vers num="5.0.375.84" />
-        <vers num="5.0.375.85" />
-        <vers num="5.0.375.86" />
-        <vers num="5.0.375.87" />
-        <vers num="5.0.375.88" />
-        <vers num="5.0.375.89" />
-        <vers num="5.0.375.9" />
-        <vers num="5.0.375.90" />
-        <vers num="5.0.375.91" />
-        <vers num="5.0.375.92" />
-        <vers num="5.0.375.93" />
-        <vers num="5.0.375.94" />
-        <vers num="5.0.375.95" />
-        <vers num="5.0.375.96" />
-        <vers num="5.0.375.97" />
-        <vers num="5.0.375.98" />
-        <vers num="5.0.375.99" />
-        <vers num="5.0.376.0" />
-        <vers num="5.0.378.0" />
-        <vers num="5.0.379.0" />
-        <vers num="5.0.380.0" />
-        <vers num="5.0.381.0" />
-        <vers num="5.0.382.0" />
-        <vers num="5.0.382.3" />
-        <vers num="5.0.383.0" />
-        <vers num="5.0.384.0" />
-        <vers num="5.0.385.0" />
-        <vers num="5.0.386.0" />
-        <vers num="5.0.387.0" />
-        <vers num="5.0.390.0" />
-        <vers num="5.0.391.0" />
-        <vers num="5.0.392.0" />
-        <vers num="5.0.393.0" />
-        <vers num="5.0.394.0" />
-        <vers num="5.0.395.0" />
-        <vers num="5.0.396.0" />
-        <vers num="6.0.397.0" />
-        <vers num="6.0.398.0" />
-        <vers num="6.0.399.0" />
-        <vers num="6.0.400.0" />
-        <vers num="6.0.401.0" />
-        <vers num="6.0.401.1" />
-        <vers num="6.0.403.0" />
-        <vers num="6.0.404.0" />
-        <vers num="6.0.404.1" />
-        <vers num="6.0.404.2" />
-        <vers num="6.0.405.0" />
-        <vers num="6.0.406.0" />
-        <vers num="6.0.407.0" />
-        <vers num="6.0.408.0" />
-        <vers num="6.0.408.1" />
-        <vers num="6.0.408.10" />
-        <vers num="6.0.408.2" />
-        <vers num="6.0.408.3" />
-        <vers num="6.0.408.4" />
-        <vers num="6.0.408.5" />
-        <vers num="6.0.408.6" />
-        <vers num="6.0.408.7" />
-        <vers num="6.0.408.8" />
-        <vers num="6.0.408.9" />
-        <vers num="6.0.409.0" />
-        <vers num="6.0.410.0" />
-        <vers num="6.0.411.0" />
-        <vers num="6.0.412.0" />
-        <vers num="6.0.413.0" />
-        <vers num="6.0.414.0" />
-        <vers num="6.0.415.0" />
-        <vers num="6.0.415.1" />
-        <vers num="6.0.416.0" />
-        <vers num="6.0.416.1" />
-        <vers num="6.0.417.0" />
-        <vers num="6.0.418.0" />
-        <vers num="6.0.418.1" />
-        <vers num="6.0.418.2" />
-        <vers num="6.0.418.3" />
-        <vers num="6.0.418.4" />
-        <vers num="6.0.418.5" />
-        <vers num="6.0.418.6" />
-        <vers num="6.0.418.7" />
-        <vers num="6.0.418.8" />
-        <vers num="6.0.418.9" />
-        <vers num="6.0.419.0" />
-        <vers num="6.0.421.0" />
-        <vers num="6.0.422.0" />
-        <vers num="6.0.423.0" />
-        <vers num="6.0.424.0" />
-        <vers num="6.0.425.0" />
-        <vers num="6.0.426.0" />
-        <vers num="6.0.427.0" />
-        <vers num="6.0.428.0" />
-        <vers num="6.0.430.0" />
-        <vers num="6.0.431.0" />
-        <vers num="6.0.432.0" />
-        <vers num="6.0.433.0" />
-        <vers num="6.0.434.0" />
-        <vers num="6.0.435.0" />
-        <vers num="6.0.436.0" />
-        <vers num="6.0.437.0" />
-        <vers num="6.0.437.1" />
-        <vers num="6.0.437.2" />
-        <vers num="6.0.437.3" />
-        <vers num="6.0.438.0" />
-        <vers num="6.0.440.0" />
-        <vers num="6.0.441.0" />
-        <vers num="6.0.443.0" />
-        <vers num="6.0.444.0" />
-        <vers num="6.0.445.0" />
-        <vers num="6.0.445.1" />
-        <vers num="6.0.446.0" />
-        <vers num="6.0.447.0" />
-        <vers num="6.0.447.1" />
-        <vers num="6.0.447.2" />
-        <vers num="6.0.449.0" />
-        <vers num="6.0.450.0" />
-        <vers num="6.0.450.1" />
-        <vers num="6.0.450.2" />
-        <vers num="6.0.450.3" />
-        <vers num="6.0.450.4" />
-        <vers num="6.0.451.0" />
-        <vers num="6.0.452.0" />
-        <vers num="6.0.452.1" />
-        <vers num="6.0.453.0" />
-        <vers num="6.0.453.1" />
-        <vers num="6.0.454.0" />
-        <vers num="6.0.455.0" />
-        <vers num="6.0.456.0" />
-        <vers num="6.0.457.0" />
-        <vers num="6.0.458.0" />
-        <vers num="6.0.458.1" />
-        <vers num="6.0.458.2" />
-        <vers num="6.0.459.0" />
-        <vers num="6.0.460.0" />
-        <vers num="6.0.461.0" />
-        <vers num="6.0.462.0" />
-        <vers num="6.0.464.1" />
-        <vers num="6.0.465.1" />
-        <vers num="6.0.465.2" />
-        <vers num="6.0.466.0" />
-        <vers num="6.0.466.1" />
-        <vers num="6.0.466.2" />
-        <vers num="6.0.466.3" />
-        <vers num="6.0.466.4" />
-        <vers num="6.0.466.5" />
-        <vers num="6.0.466.6" />
-        <vers num="6.0.467.0" />
-        <vers num="6.0.469.0" />
-        <vers num="6.0.470.0" />
-        <vers num="6.0.471.0" />
-        <vers num="6.0.472.0" />
-        <vers num="6.0.472.1" />
-        <vers num="6.0.472.10" />
-        <vers num="6.0.472.11" />
-        <vers num="6.0.472.12" />
-        <vers num="6.0.472.13" />
-        <vers num="6.0.472.14" />
-        <vers num="6.0.472.15" />
-        <vers num="6.0.472.16" />
-        <vers num="6.0.472.17" />
-        <vers num="6.0.472.18" />
-        <vers num="6.0.472.19" />
-        <vers num="6.0.472.2" />
-        <vers num="6.0.472.20" />
-        <vers num="6.0.472.21" />
-        <vers num="6.0.472.22" />
-        <vers num="6.0.472.23" />
-        <vers num="6.0.472.24" />
-        <vers num="6.0.472.25" />
-        <vers num="6.0.472.26" />
-        <vers num="6.0.472.27" />
-        <vers num="6.0.472.28" />
-        <vers num="6.0.472.29" />
-        <vers num="6.0.472.3" />
-        <vers num="6.0.472.30" />
-        <vers num="6.0.472.31" />
-        <vers num="6.0.472.32" />
-        <vers num="6.0.472.33" />
-        <vers num="6.0.472.34" />
-        <vers num="6.0.472.35" />
-        <vers num="6.0.472.36" />
-        <vers num="6.0.472.37" />
-        <vers num="6.0.472.38" />
-        <vers num="6.0.472.39" />
-        <vers num="6.0.472.4" />
-        <vers num="6.0.472.40" />
-        <vers num="6.0.472.41" />
-        <vers num="6.0.472.42" />
-        <vers num="6.0.472.43" />
-        <vers num="6.0.472.44" />
-        <vers num="6.0.472.45" />
-        <vers num="6.0.472.46" />
-        <vers num="6.0.472.47" />
-        <vers num="6.0.472.48" />
-        <vers num="6.0.472.49" />
-        <vers num="6.0.472.5" />
-        <vers num="6.0.472.50" />
-        <vers num="6.0.472.51" />
-        <vers num="6.0.472.52" />
-        <vers num="6.0.472.53" />
-        <vers num="6.0.472.54" />
-        <vers num="6.0.472.55" />
-        <vers num="6.0.472.56" />
-        <vers num="6.0.472.57" />
-        <vers num="6.0.472.58" />
-        <vers num="6.0.472.59" />
-        <vers num="6.0.472.6" />
-        <vers num="6.0.472.60" />
-        <vers num="6.0.472.61" />
-        <vers num="6.0.472.62" />
-        <vers num="6.0.472.63" />
-        <vers num="6.0.472.7" />
-        <vers num="6.0.472.8" />
-        <vers num="6.0.472.9" />
-        <vers num="6.0.473.0" />
-        <vers num="6.0.474.0" />
-        <vers num="6.0.475.0" />
-        <vers num="6.0.476.0" />
-        <vers num="6.0.477.0" />
-        <vers num="6.0.478.0" />
-        <vers num="6.0.479.0" />
-        <vers num="6.0.480.0" />
-        <vers num="6.0.481.0" />
-        <vers num="6.0.482.0" />
-        <vers num="6.0.483.0" />
-        <vers num="6.0.484.0" />
-        <vers num="6.0.485.0" />
-        <vers num="6.0.486.0" />
-        <vers num="6.0.487.0" />
-        <vers num="6.0.488.0" />
-        <vers num="6.0.489.0" />
-        <vers num="6.0.490.0" />
-        <vers num="6.0.490.1" />
-        <vers num="6.0.491.0" />
-        <vers num="6.0.492.0" />
-        <vers num="6.0.493.0" />
-        <vers num="6.0.494.0" />
-        <vers num="6.0.495.0" />
-        <vers num="6.0.495.1" />
-        <vers num="6.0.496.0" />
-        <vers num="7.0.497.0" />
-        <vers num="7.0.498.0" />
-        <vers num="7.0.499.0" />
-        <vers num="7.0.499.1" />
-        <vers num="7.0.500.0" />
-        <vers num="7.0.500.1" />
-        <vers num="7.0.503.0" />
-        <vers num="7.0.503.1" />
-        <vers num="7.0.504.0" />
-        <vers num="7.0.505.0" />
-        <vers num="7.0.506.0" />
-        <vers num="7.0.507.0" />
-        <vers num="7.0.507.1" />
-        <vers num="7.0.507.2" />
-        <vers num="7.0.507.3" />
-        <vers num="7.0.509.0" />
-        <vers num="7.0.510.0" />
-        <vers num="7.0.511.1" />
-        <vers num="7.0.511.2" />
-        <vers num="7.0.511.4" />
-        <vers num="7.0.512.0" />
-        <vers num="7.0.513.0" />
-        <vers num="7.0.514.0" />
-        <vers num="7.0.514.1" />
-        <vers num="7.0.515.0" />
-        <vers num="7.0.516.0" />
-        <vers num="7.0.517.0" />
-        <vers num="7.0.517.10" />
-        <vers num="7.0.517.11" />
-        <vers num="7.0.517.12" />
-        <vers num="7.0.517.13" />
-        <vers num="7.0.517.14" />
-        <vers num="7.0.517.16" />
-        <vers num="7.0.517.17" />
-        <vers num="7.0.517.18" />
-        <vers num="7.0.517.19" />
-        <vers num="7.0.517.2" />
-        <vers num="7.0.517.20" />
-        <vers num="7.0.517.21" />
-        <vers num="7.0.517.22" />
-        <vers num="7.0.517.23" />
-        <vers num="7.0.517.24" />
-        <vers num="7.0.517.25" />
-        <vers num="7.0.517.26" />
-        <vers num="7.0.517.27" />
-        <vers num="7.0.517.28" />
-        <vers num="7.0.517.29" />
-        <vers num="7.0.517.30" />
-        <vers num="7.0.517.31" />
-        <vers num="7.0.517.32" />
-        <vers num="7.0.517.33" />
-        <vers num="7.0.517.34" />
-        <vers num="7.0.517.35" />
-        <vers num="7.0.517.36" />
-        <vers num="7.0.517.37" />
-        <vers num="7.0.517.38" />
-        <vers num="7.0.517.39" />
-        <vers num="7.0.517.4" />
-        <vers num="7.0.517.40" />
-        <vers num="7.0.517.41" />
-        <vers num="7.0.517.42" />
-        <vers num="7.0.517.43" />
-        <vers num="7.0.517.44" />
-        <vers num="7.0.517.5" />
-        <vers num="7.0.517.6" />
-        <vers num="7.0.517.7" />
-        <vers num="7.0.517.8" />
-        <vers num="7.0.517.9" />
-        <vers num="7.0.518.0" />
-        <vers num="7.0.519.0" />
-        <vers num="7.0.520.0" />
-        <vers num="7.0.521.0" />
-        <vers num="7.0.522.0" />
-        <vers num="7.0.524.0" />
-        <vers num="7.0.525.0" />
-        <vers num="7.0.526.0" />
-        <vers num="7.0.528.0" />
-        <vers num="7.0.529.0" />
-        <vers num="7.0.529.1" />
-        <vers num="7.0.529.2" />
-        <vers num="7.0.530.0" />
-        <vers num="7.0.531.0" />
-        <vers num="7.0.531.1" />
-        <vers num="7.0.531.2" />
-        <vers num="7.0.535.1" />
-        <vers num="7.0.535.2" />
-        <vers num="7.0.536.0" />
-        <vers num="7.0.536.1" />
-        <vers num="7.0.536.2" />
-        <vers num="7.0.536.3" />
-        <vers num="7.0.536.4" />
-        <vers num="7.0.537.0" />
-        <vers num="7.0.538.0" />
-        <vers num="7.0.539.0" />
-        <vers num="7.0.540.0" />
-        <vers num="7.0.541.0" />
-        <vers num="7.0.542.0" />
-        <vers num="7.0.544.0" />
-        <vers num="7.0.547.0" />
-        <vers num="7.0.547.1" />
-        <vers num="7.0.548.0" />
-        <vers num="8.0.549.0" />
-        <vers num="8.0.550.0" />
-        <vers num="8.0.551.0" />
-        <vers num="8.0.551.1" />
-        <vers num="8.0.552.0" />
-        <vers num="8.0.552.1" />
-        <vers num="8.0.552.10" />
-        <vers num="8.0.552.100" />
-        <vers num="8.0.552.101" />
-        <vers num="8.0.552.102" />
-        <vers num="8.0.552.103" />
-        <vers num="8.0.552.104" />
-        <vers num="8.0.552.105" />
-        <vers num="8.0.552.11" />
-        <vers num="8.0.552.12" />
-        <vers num="8.0.552.13" />
-        <vers num="8.0.552.14" />
-        <vers num="8.0.552.15" />
-        <vers num="8.0.552.16" />
-        <vers num="8.0.552.17" />
-        <vers num="8.0.552.18" />
-        <vers num="8.0.552.19" />
-        <vers num="8.0.552.2" />
-        <vers num="8.0.552.20" />
-        <vers num="8.0.552.200" />
-        <vers num="8.0.552.201" />
-        <vers num="8.0.552.202" />
-        <vers num="8.0.552.203" />
-        <vers num="8.0.552.204" />
-        <vers num="8.0.552.205" />
-        <vers num="8.0.552.206" />
-        <vers num="8.0.552.207" />
-        <vers num="8.0.552.208" />
-        <vers num="8.0.552.209" />
-        <vers num="8.0.552.21" />
-        <vers num="8.0.552.210" />
-        <vers num="8.0.552.211" />
-        <vers num="8.0.552.212" />
-        <vers num="8.0.552.213" />
-        <vers num="8.0.552.214" />
-        <vers num="8.0.552.215" />
-        <vers num="8.0.552.216" />
-        <vers num="8.0.552.217" />
-        <vers num="8.0.552.218" />
-        <vers num="8.0.552.219" />
-        <vers num="8.0.552.220" />
-        <vers num="8.0.552.221" />
-        <vers num="8.0.552.222" />
-        <vers num="8.0.552.223" />
-        <vers num="8.0.552.224" />
-        <vers num="8.0.552.225" />
-        <vers num="8.0.552.226" />
-        <vers num="8.0.552.227" />
-        <vers num="8.0.552.228" />
-        <vers num="8.0.552.229" />
-        <vers num="8.0.552.23" />
-        <vers num="8.0.552.230" />
-        <vers num="8.0.552.231" />
-        <vers num="8.0.552.232" />
-        <vers num="8.0.552.233" />
-        <vers num="8.0.552.234" />
-        <vers num="8.0.552.235" />
-        <vers num="8.0.552.237" />
-        <vers num="8.0.552.24" />
-        <vers num="8.0.552.25" />
-        <vers num="8.0.552.26" />
-        <vers num="8.0.552.27" />
-        <vers num="8.0.552.28" />
-        <vers num="8.0.552.29" />
-        <vers num="8.0.552.300" />
-        <vers num="8.0.552.301" />
-        <vers num="8.0.552.302" />
-        <vers num="8.0.552.303" />
-        <vers num="8.0.552.304" />
-        <vers num="8.0.552.305" />
-        <vers num="8.0.552.306" />
-        <vers num="8.0.552.307" />
-        <vers num="8.0.552.308" />
-        <vers num="8.0.552.309" />
-        <vers num="8.0.552.310" />
-        <vers num="8.0.552.311" />
-        <vers num="8.0.552.312" />
-        <vers num="8.0.552.313" />
-        <vers num="8.0.552.315" />
-        <vers num="8.0.552.316" />
-        <vers num="8.0.552.317" />
-        <vers num="8.0.552.318" />
-        <vers num="8.0.552.319" />
-        <vers num="8.0.552.320" />
-        <vers num="8.0.552.321" />
-        <vers num="8.0.552.322" />
-        <vers num="8.0.552.323" />
-        <vers num="8.0.552.324" />
-        <vers num="8.0.552.325" />
-        <vers num="8.0.552.326" />
-        <vers num="8.0.552.327" />
-        <vers num="8.0.552.328" />
-        <vers num="8.0.552.329" />
-        <vers num="8.0.552.330" />
-        <vers num="8.0.552.331" />
-        <vers num="8.0.552.332" />
-        <vers num="8.0.552.333" />
-        <vers num="8.0.552.334" />
-        <vers num="8.0.552.335" />
-        <vers num="8.0.552.336" />
-        <vers num="8.0.552.337" />
-        <vers num="8.0.552.338" />
-        <vers num="8.0.552.339" />
-        <vers num="8.0.552.340" />
-        <vers num="8.0.552.341" />
-        <vers num="8.0.552.342" />
-        <vers num="8.0.552.343" />
-        <vers num="8.0.552.344" />
-        <vers num="8.0.552.35" />
-        <vers num="8.0.552.4" />
-        <vers num="8.0.552.40" />
-        <vers num="8.0.552.41" />
-        <vers num="8.0.552.42" />
-        <vers num="8.0.552.43" />
-        <vers num="8.0.552.44" />
-        <vers num="8.0.552.45" />
-        <vers num="8.0.552.47" />
-        <vers num="8.0.552.48" />
-        <vers num="8.0.552.49" />
-        <vers num="8.0.552.5" />
-        <vers num="8.0.552.50" />
-        <vers num="8.0.552.51" />
-        <vers num="8.0.552.52" />
-        <vers num="8.0.552.6" />
-        <vers num="8.0.552.7" />
-        <vers num="8.0.552.8" />
-        <vers num="8.0.552.9" />
-        <vers num="8.0.553.0" />
-        <vers num="8.0.554.0" />
-        <vers num="8.0.555.0" />
-        <vers num="8.0.556.0" />
-        <vers num="8.0.557.0" />
-        <vers num="8.0.558.0" />
-        <vers num="8.0.559.0" />
-        <vers num="8.0.560.0" />
-        <vers num="8.0.561.0" />
-        <vers num="9.0.562.0" />
-        <vers num="9.0.563.0" />
-        <vers num="9.0.564.0" />
-        <vers num="9.0.565.0" />
-        <vers num="9.0.566.0" />
-        <vers num="9.0.567.0" />
-        <vers num="9.0.568.0" />
-        <vers num="9.0.569.0" />
-        <vers num="9.0.570.0" />
-        <vers num="9.0.570.1" />
-        <vers num="9.0.571.0" />
-        <vers num="9.0.572.0" />
-        <vers num="9.0.572.1" />
-        <vers num="9.0.573.0" />
-        <vers num="9.0.574.0" />
-        <vers num="9.0.575.0" />
-        <vers num="9.0.576.0" />
-        <vers num="9.0.577.0" />
-        <vers num="9.0.578.0" />
-        <vers num="9.0.579.0" />
-        <vers num="9.0.580.0" />
-        <vers num="9.0.581.0" />
-        <vers num="9.0.582.0" />
-        <vers num="9.0.583.0" />
-        <vers num="9.0.584.0" />
-        <vers num="9.0.585.0" />
-        <vers num="9.0.586.0" />
-        <vers num="9.0.587.0" />
-        <vers num="9.0.587.1" />
-        <vers num="9.0.588.0" />
-        <vers num="9.0.589.0" />
-        <vers num="9.0.590.0" />
-        <vers num="9.0.591.0" />
-        <vers num="9.0.592.0" />
-        <vers num="9.0.593.0" />
-        <vers num="9.0.594.0" />
-        <vers num="9.0.595.0" />
-        <vers num="9.0.596.0" />
-        <vers num="9.0.597.0" />
-        <vers num="9.0.597.1" />
-        <vers num="9.0.597.10" />
-        <vers num="9.0.597.100" />
-        <vers num="9.0.597.101" />
-        <vers num="9.0.597.102" />
-        <vers num="9.0.597.106" />
-        <vers num="9.0.597.107" />
-        <vers num="9.0.597.11" />
-        <vers num="9.0.597.12" />
-        <vers num="9.0.597.14" />
-        <vers num="9.0.597.15" />
-        <vers num="9.0.597.16" />
-        <vers num="9.0.597.17" />
-        <vers num="9.0.597.18" />
-        <vers num="9.0.597.19" />
-        <vers num="9.0.597.2" />
-        <vers num="9.0.597.20" />
-        <vers num="9.0.597.21" />
-        <vers num="9.0.597.22" />
-        <vers num="9.0.597.23" />
-        <vers num="9.0.597.24" />
-        <vers num="9.0.597.25" />
-        <vers num="9.0.597.26" />
-        <vers num="9.0.597.27" />
-        <vers num="9.0.597.28" />
-        <vers num="9.0.597.29" />
-        <vers num="9.0.597.30" />
-        <vers num="9.0.597.31" />
-        <vers num="9.0.597.32" />
-        <vers num="9.0.597.33" />
-        <vers num="9.0.597.34" />
-        <vers num="9.0.597.35" />
-        <vers num="9.0.597.36" />
-        <vers num="9.0.597.37" />
-        <vers num="9.0.597.38" />
-        <vers num="9.0.597.39" />
-        <vers num="9.0.597.4" />
-        <vers num="9.0.597.40" />
-        <vers num="9.0.597.41" />
-        <vers num="9.0.597.42" />
-        <vers num="9.0.597.44" />
-        <vers num="9.0.597.45" />
-        <vers num="9.0.597.46" />
-        <vers num="9.0.597.47" />
-        <vers num="9.0.597.5" />
-        <vers num="9.0.597.54" />
-        <vers num="9.0.597.55" />
-        <vers num="9.0.597.56" />
-        <vers num="9.0.597.57" />
-        <vers num="9.0.597.58" />
-        <vers num="9.0.597.59" />
-        <vers num="9.0.597.60" />
-        <vers num="9.0.597.62" />
-        <vers num="9.0.597.63" />
-        <vers num="9.0.597.64" />
-        <vers num="9.0.597.65" />
-        <vers num="9.0.597.66" />
-        <vers num="9.0.597.67" />
-        <vers num="9.0.597.68" />
-        <vers num="9.0.597.69" />
-        <vers num="9.0.597.7" />
-        <vers num="9.0.597.70" />
-        <vers num="9.0.597.71" />
-        <vers num="9.0.597.72" />
-        <vers num="9.0.597.73" />
-        <vers num="9.0.597.74" />
-        <vers num="9.0.597.75" />
-        <vers num="9.0.597.76" />
-        <vers num="9.0.597.77" />
-        <vers num="9.0.597.78" />
-        <vers num="9.0.597.79" />
-        <vers num="9.0.597.8" />
-        <vers num="9.0.597.80" />
-        <vers num="9.0.597.81" />
-        <vers num="9.0.597.82" />
-        <vers num="9.0.597.83" />
-        <vers num="9.0.597.84" />
-        <vers num="9.0.597.85" />
-        <vers num="9.0.597.86" />
-        <vers num="9.0.597.88" />
-        <vers num="9.0.597.9" />
-        <vers num="9.0.597.90" />
-        <vers num="9.0.597.92" />
-        <vers num="9.0.597.94" />
-        <vers num="9.0.597.96" />
-        <vers num="9.0.597.97" />
-        <vers num="9.0.597.98" />
-        <vers num="9.0.597.99" />
-        <vers num="9.0.598.0" />
-        <vers num="9.0.599.0" />
-        <vers num="9.0.600.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1847" published="2012-05-08" name="CVE-2012-1847" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Series Record Parsing Type Mismatch Could Result in Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027041" source="SECTRACK">1027041</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-030" source="MS" adv="1">MS12-030</ref>
-      <ref url="http://secunia.com/advisories/49112" source="SECUNIA">49112</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15575" source="OVAL">oval:org.mitre.oval:def:15575</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="excel">
-        <vers num="2003" edition="sp3" />
-        <vers num="2007" edition="sp2" />
-        <vers num="2007" edition="sp3" />
-        <vers num="2010" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="excel_viewer">
-        <vers num="" />
-      </prod>
-      <prod vendor="microsoft" name="office">
-        <vers num="2008" />
-        <vers num="2011" edition="" />
-        <vers num="2011" edition=":mac" />
-      </prod>
-      <prod vendor="microsoft" name="office_compatibility_pack">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1848" published="2012-05-08" name="CVE-2012-1848" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Scrollbar Calculation Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027039" source="SECTRACK">1027039</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-034" source="MS" adv="1">MS12-034</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15555" source="OVAL">oval:org.mitre.oval:def:15555</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x86" />
-        <vers num="" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1849" published="2012-06-12" name="CVE-2012-1849" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka "Lync Insecure Library Loading Vulnerability."</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://technet.microsoft.com/en-us/security/bulletin/ms12-039
-
-AV:N per "How could an attacker exploit the vulnerability? 
-An attacker could convince a user to open a legitimate Microsoft Lync related file (such as an .ocsmeet file) that is located in the same network directory as a specially crafted dynamic link library (DLL) file. Then, while opening the legitimate file, Microsoft Lync could attempt to load the DLL file and execute any code it contained.
-
-In an email attack scenario, an attacker could exploit the vulnerability by sending a legitimate Microsoft Lync-related file (such as an .ocsmeet file) to a user, and convincing the user to place the attachment into a directory that contains a specially crafted DLL file and to open the legitimate file. Then, while opening the legitimate file, Microsoft Lync could attempt to load the DLL file and execute any code it contained.
-
-In a network attack scenario, an attacker could place a legitimate Microsoft Lync-related file and a specially crafted DLL in a network share, a UNC, or WebDAV location and then convince the user to open the file."</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-039" source="MS" patch="1" adv="1">MS12-039</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14874" source="OVAL">oval:org.mitre.oval:def:14874</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="lync">
-        <vers num="2010" edition="" />
-        <vers num="2010" edition=":attendee" />
-        <vers num="2010" edition=":x64" />
-        <vers num="2010" edition=":attendant_x64" />
-        <vers num="2010" edition=":x86" />
-        <vers num="2010" edition=":attendant_x86" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1850" published="2012-08-14" name="CVE-2012-1850" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle RAP responses, which allows remote attackers to cause a denial of service (service hang) via crafted RAP packets, aka "Remote Administration Protocol Denial of Service Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-054" source="MS" patch="1" adv="1">MS12-054</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x86" />
-        <vers num="" edition=":x64" />
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x86" />
-        <vers num="" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="r2" />
-        <vers num="" edition="r2:x64" />
-        <vers num="" edition="r2:itanium" />
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1851" published="2012-08-14" name="CVE-2012-1851" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted response, aka "Print Spooler Service Format String Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-054" source="MS" patch="1" adv="1">MS12-054</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x86" />
-        <vers num="" edition=":x64" />
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x86" />
-        <vers num="" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="r2" />
-        <vers num="" edition="r2:x64" />
-        <vers num="" edition="r2:itanium" />
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1852" published="2012-08-14" name="CVE-2012-1852" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted RAP response packets, aka "Remote Administration Protocol Heap Overflow Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-054" source="MS" patch="1" adv="1">MS12-054</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1853" published="2012-08-14" name="CVE-2012-1853" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in the Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP3 allows remote attackers to execute arbitrary code via crafted RAP response packets, aka "Remote Administration Protocol Stack Overflow Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-054" source="MS" patch="1" adv="1">MS12-054</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1854" published="2012-07-10" name="CVE-2012-1854" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Visual Basic for Applications Insecure Library Loading Vulnerability," as exploited in the wild in July 2012.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-046" source="MS" adv="1">MS12-046</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14950" source="OVAL">oval:org.mitre.oval:def:14950</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="office">
-        <vers num="2003" edition="sp3" />
-        <vers num="2007" edition="sp2" />
-        <vers num="2007" edition="sp3" />
-        <vers num="2010" edition="" />
-        <vers num="2010" edition=":x86" />
-        <vers num="2010" edition="sp1" />
-        <vers num="2010" edition="sp1:x86" />
-        <vers num="2010" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="visual_basic_for_applications">
-        <vers num="" />
-      </prod>
-      <prod vendor="microsoft" name="visual_basic_for_applications_sdk">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1855" published="2012-06-12" name="CVE-2012-1855" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function pointers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Memory Access Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-038" source="MS" patch="1" adv="1">MS12-038</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14717" source="OVAL">oval:org.mitre.oval:def:14717</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name=".net_framework">
-        <vers num="2.0" edition="sp2" />
-        <vers num="3.5.1" />
-        <vers num="4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1856" published="2012-08-14" name="CVE-2012-1856" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerce Server 2007 SP2, Commerce Server 2009 Gold and R2, Host Integration Server 2004 SP1, Visual FoxPro 8.0 SP1, Visual FoxPro 9.0 SP2, and Visual Basic 6.0 Runtime allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption, aka "MSCOMCTL.OCX RCE Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-060" source="MS" patch="1" adv="1">MS12-060</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="commerce_server">
-        <vers num="2002" edition="sp4" />
-        <vers num="2007" edition="sp2" />
-        <vers num="2009" edition="r2" />
-      </prod>
-      <prod vendor="microsoft" name="host_integration_server">
-        <vers num="2004" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="office">
-        <vers num="2003" edition="sp3" />
-        <vers num="2007" edition="sp2" />
-        <vers num="2007" edition="sp3" />
-        <vers num="2010" edition="sp1" />
-        <vers num="2010" edition="sp1:x86" />
-      </prod>
-      <prod vendor="microsoft" name="office_web_components">
-        <vers num="2003" edition="sp3" />
-      </prod>
-      <prod vendor="microsoft" name="sql_server">
-        <vers num="2000" edition="sp4" />
-        <vers num="2000" edition="sp4:analysis_services" />
-        <vers num="2005" edition="sp4" />
-        <vers num="2005" edition="sp4:express_advanced_services" />
-        <vers num="2005" edition="sp4:x64" />
-        <vers num="2005" edition="sp4:x86" />
-        <vers num="2005" edition="sp4:itanium" />
-        <vers num="2008" edition="r2" />
-        <vers num="2008" edition="r2:itanium" />
-        <vers num="2008" edition="r2:x64" />
-        <vers num="2008" edition="r2:x86" />
-        <vers num="2008" edition="r2_sp1" />
-        <vers num="2008" edition="r2_sp1:x64" />
-        <vers num="2008" edition="r2_sp1:x86" />
-        <vers num="2008" edition="r2_sp1:itanium" />
-        <vers num="2008" edition="r2_sp2" />
-        <vers num="2008" edition="r2_sp2:itanium" />
-        <vers num="2008" edition="r2_sp2:x64" />
-        <vers num="2008" edition="r2_sp2:x86" />
-        <vers num="2008" edition="sp2" />
-        <vers num="2008" edition="sp2:itanium" />
-        <vers num="2008" edition="sp2:x64" />
-        <vers num="2008" edition="sp2:x86" />
-        <vers num="2008" edition="sp3" />
-        <vers num="2008" edition="sp3:x64" />
-        <vers num="2008" edition="sp3:itanium" />
-        <vers num="2008" edition="sp3:x86" />
-      </prod>
-      <prod vendor="microsoft" name="visual_basic">
-        <vers num="6.0" edition="" />
-        <vers num="6.0" edition=":runtime_extended_files" />
-      </prod>
-      <prod vendor="microsoft" name="visual_foxpro">
-        <vers num="8.0" edition="sp1" />
-        <vers num="9.0" edition="sp2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1857" published="2012-06-12" name="CVE-2012-1857" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Enterprise Portal component in Microsoft Dynamics AX 2012 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Dynamics AX Enterprise Portal XSS Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-040" source="MS" adv="1">MS12-040</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="dynamics_ax">
-        <vers num="2012" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1858" published="2012-06-12" name="CVE-2012-1858" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Attendee does not properly handle event attributes and script, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document, aka "HTML Sanitization Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-039" source="MS" patch="1" adv="1">MS12-039</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-037" source="MS" patch="1" adv="1">MS12-037</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-050" source="MS">MS12-050</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15530" source="OVAL">oval:org.mitre.oval:def:15530</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-      <prod vendor="microsoft" name="lync">
-        <vers num="2010" edition="" />
-        <vers num="2010" edition=":attendee" />
-        <vers num="2010" edition=":x64" />
-        <vers num="2010" edition=":x86" />
-      </prod>
-      <prod vendor="microsoft" name="office_communicator">
-        <vers num="2007" edition="r2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1859" published="2012-07-10" name="CVE-2012-1859" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "XSS scriptresx.ashx Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-050" source="MS" adv="1">MS12-050</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15589" source="OVAL">oval:org.mitre.oval:def:15589</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="office_web_apps">
-        <vers num="2010" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="sharepoint_foundation">
-        <vers num="2010" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="sharepoint_server">
-        <vers num="2010" edition="sp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1860" published="2012-07-10" name="CVE-2012-1860" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:P)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search scopes, which allows remote authenticated users to obtain sensitive information or cause a denial of service (data modification) by changing a parameter in a search-scope URL, aka "SharePoint Search Scope Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-050" source="MS" adv="1">MS12-050</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15265" source="OVAL">oval:org.mitre.oval:def:15265</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="office_web_apps">
-        <vers num="2010" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="sharepoint_server">
-        <vers num="2007" edition="sp1" />
-        <vers num="2007" edition="sp2" />
-        <vers num="2007" edition="sp3" />
-        <vers num="2010" edition="sp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1861" published="2012-07-10" name="CVE-2012-1861" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Script in Username Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-050" source="MS" adv="1">MS12-050</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15544" source="OVAL">oval:org.mitre.oval:def:15544</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="office_web_apps">
-        <vers num="2010" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="sharepoint_foundation">
-        <vers num="2010" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="sharepoint_server">
-        <vers num="2010" edition="sp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1862" published="2012-07-10" name="CVE-2012-1862" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Open redirect vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "SharePoint URL Redirection Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-050" source="MS" adv="1">MS12-050</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15657" source="OVAL">oval:org.mitre.oval:def:15657</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="sharepoint_server">
-        <vers num="2007" edition="sp2" />
-        <vers num="2007" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1863" published="2012-07-10" name="CVE-2012-1863" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Reflected List Parameter Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-050" source="MS" adv="1">MS12-050</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15689" source="OVAL">oval:org.mitre.oval:def:15689</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="office_sharepoint_server">
-        <vers num="2007" edition="sp2" />
-        <vers num="2007" edition="sp2:x64" />
-        <vers num="2007" edition="sp2:x32" />
-        <vers num="2007" edition="sp3" />
-        <vers num="2007" edition="sp3:x32" />
-        <vers num="2007" edition="sp3:x64" />
-      </prod>
-      <prod vendor="microsoft" name="sharepoint_foundation">
-        <vers num="2010" edition="sp1" />
-      </prod>
-      <prod vendor="microsoft" name="sharepoint_server">
-        <vers num="2007" edition="sp2" />
-        <vers num="2007" edition="sp3" />
-      </prod>
-      <prod vendor="microsoft" name="sharepoint_services">
-        <vers num="3.0" edition="sp2" />
-        <vers num="3.0" edition="sp2:x32" />
-        <vers num="3.0" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1864" published="2012-06-12" name="CVE-2012-1864" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "String Atom Class Name Handling Vulnerability," a different vulnerability than CVE-2012-1865.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-041" source="MS" patch="1" adv="1">MS12-041</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15496" source="OVAL">oval:org.mitre.oval:def:15496</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_2003_server">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x86" />
-        <vers num="-" edition="-" />
-        <vers num="-" edition="-:x86" />
-        <vers num="-" edition="-:x64" />
-        <vers num="-" edition="sp1" />
-        <vers num="-" edition="sp1:x86" />
-        <vers num="-" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="r2" />
-        <vers num="" edition="r2:x64" />
-        <vers num="" edition="r2:itanium" />
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1865" published="2012-06-12" name="CVE-2012-1865" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "String Atom Class Name Handling Vulnerability," a different vulnerability than CVE-2012-1864.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-041" source="MS" adv="1">MS12-041</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15649" source="OVAL">oval:org.mitre.oval:def:15649</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_2003_server">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x86" />
-        <vers num="-" edition="-" />
-        <vers num="-" edition="-:x86" />
-        <vers num="-" edition="-:x64" />
-        <vers num="-" edition="sp1" />
-        <vers num="-" edition="sp1:x86" />
-        <vers num="-" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="r2" />
-        <vers num="" edition="r2:x64" />
-        <vers num="" edition="r2:itanium" />
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1866" published="2012-06-12" name="CVE-2012-1866" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "Clipboard Format Atom Name Handling Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-041" source="MS" patch="1" adv="1">MS12-041</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15096" source="OVAL">oval:org.mitre.oval:def:15096</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_2003_server">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x86" />
-        <vers num="-" edition="-" />
-        <vers num="-" edition="-:x86" />
-        <vers num="-" edition="-:x64" />
-        <vers num="-" edition="sp1" />
-        <vers num="-" edition="sp1:x86" />
-        <vers num="-" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="r2" />
-        <vers num="" edition="r2:x64" />
-        <vers num="" edition="r2:itanium" />
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1867" published="2012-06-12" name="CVE-2012-1867" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">Integer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted TrueType font file that triggers incorrect memory allocation, aka "Font Resource Refcount Integer Overflow Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-041" source="MS" adv="1">MS12-041</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15510" source="OVAL">oval:org.mitre.oval:def:15510</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_2003_server">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x86" />
-        <vers num="-" edition="-" />
-        <vers num="-" edition="-:x86" />
-        <vers num="-" edition="-:x64" />
-        <vers num="-" edition="sp1" />
-        <vers num="-" edition="sp1:x86" />
-        <vers num="-" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="r2" />
-        <vers num="" edition="r2:x64" />
-        <vers num="" edition="r2:itanium" />
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1868" published="2012-06-12" name="CVE-2012-1868" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Race condition in the thread-creation implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3 allows local users to gain privileges via a crafted application, aka "Win32k.sys Race Condition Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-041" source="MS" patch="1" adv="1">MS12-041</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15647" source="OVAL">oval:org.mitre.oval:def:15647</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1870" published="2012-07-10" name="CVE-2012-1870" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The CBC mode in the TLS protocol, as used in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and other products, allows remote web servers to obtain plaintext data by triggering multiple requests to a third-party HTTPS server and sniffing the network during the resulting HTTPS session, aka "TLS Protocol Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-049" source="MS" adv="1">MS12-049</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15644" source="OVAL">oval:org.mitre.oval:def:15644</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="-" edition="-" />
-        <vers num="-" edition="-:x86" />
-        <vers num="-" edition="-:x64" />
-        <vers num="-" edition="sp1" />
-        <vers num="-" edition="sp1:x86" />
-        <vers num="-" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:x86" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1872" published="2012-06-12" name="CVE-2012-1872" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to inject arbitrary web script or HTML via crafted character sequences with EUC-JP encoding, aka "EUC-JP Character Encoding Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-037" source="MS" patch="1" adv="1">MS12-037</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15629" source="OVAL">oval:org.mitre.oval:def:15629</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1873" published="2012-06-12" name="CVE-2012-1873" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 7 through 9 does not properly create and initialize string data, which allows remote attackers to obtain sensitive information from process memory via a crafted HTML document, aka "Null Byte Information Disclosure Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-037" source="MS" patch="1" adv="1">MS12-037</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15026" source="OVAL">oval:org.mitre.oval:def:15026</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="7" />
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1874" published="2012-06-12" name="CVE-2012-1874" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows user-assisted remote attackers to execute arbitrary code by accessing a deleted object, aka "Developer Toolbar Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-037" source="MS" adv="1">MS12-037</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15425" source="OVAL">oval:org.mitre.oval:def:15425</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1875" published="2012-06-12" name="CVE-2012-1875" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Same ID Property Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-037" source="MS" patch="1" adv="1">MS12-037</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15663" source="OVAL">oval:org.mitre.oval:def:15663</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1876" published="2012-06-12" name="CVE-2012-1876" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access a nonexistent object, leading to a heap-based buffer overflow, aka "Col Element Remote Code Execution Vulnerability," as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.zdnet.com/blog/security/pwn2own-2012-ie-9-hacked-with-two-0day-vulnerabilities/10621" source="MISC">http://www.zdnet.com/blog/security/pwn2own-2012-ie-9-hacked-with-two-0day-vulnerabilities/10621</ref>
-      <ref url="http://twitter.com/vupen/statuses/177895844828291073" source="MISC">http://twitter.com/vupen/statuses/177895844828291073</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-037" source="MS" adv="1">MS12-037</ref>
-      <ref url="http://pwn2own.zerodayinitiative.com/status.html" source="MISC">http://pwn2own.zerodayinitiative.com/status.html</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15539" source="OVAL">oval:org.mitre.oval:def:15539</ref>
-      <ref url="http://arstechnica.com/business/news/2012/03/ie-9-on-latest-windows-gets-stomped-at-hacker-contest.ars" source="MISC">http://arstechnica.com/business/news/2012/03/ie-9-on-latest-windows-gets-stomped-at-hacker-contest.ars</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1877" published="2012-06-12" name="CVE-2012-1877" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Title Element Change Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-037" source="MS" patch="1" adv="1">MS12-037</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15472" source="OVAL">oval:org.mitre.oval:def:15472</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1878" published="2012-06-12" name="CVE-2012-1878" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnBeforeDeactivate Event Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-037" source="MS" adv="1">MS12-037</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15632" source="OVAL">oval:org.mitre.oval:def:15632</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1879" published="2012-06-12" name="CVE-2012-1879" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access an undefined memory location, aka "insertAdjacentText Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-037" source="MS" patch="1" adv="1">MS12-037</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15588" source="OVAL">oval:org.mitre.oval:def:15588</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1880" published="2012-06-12" name="CVE-2012-1880" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "insertRow Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-037" source="MS" adv="1">MS12-037</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14975" source="OVAL">oval:org.mitre.oval:def:14975</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1881" published="2012-06-12" name="CVE-2012-1881" modified="2012-09-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnRowsInserted Event Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-037" source="MS" patch="1" adv="1">MS12-037</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15378" source="OVAL">oval:org.mitre.oval:def:15378</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1882" published="2012-06-12" name="CVE-2012-1882" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 6 through 9 does not block cross-domain scrolling events, which allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Scrolling Events Information Disclosure Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-037" source="MS" patch="1" adv="1">MS12-037</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15367" source="OVAL">oval:org.mitre.oval:def:15367</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="ie">
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1888" published="2012-08-14" name="CVE-2012-1888" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka "Visio DXF File Format Buffer Overflow Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-059" source="MS" patch="1" adv="1">MS12-059</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="visio">
-        <vers num="2010" edition="sp1" />
-        <vers num="2010" edition="sp1:x64" />
-        <vers num="2010" edition="sp1:x86" />
-      </prod>
-      <prod vendor="microsoft" name="visio_viewer">
-        <vers num="2010" edition="sp1" />
-        <vers num="2010" edition="sp1:x86" />
-        <vers num="2010" edition="sp1:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1889" published="2012-06-13" name="CVE-2012-1889" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-043" source="MS">MS12-043</ref>
-      <ref url="http://technet.microsoft.com/security/advisory/2719615" source="CONFIRM" adv="1">http://technet.microsoft.com/security/advisory/2719615</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15195" source="OVAL">oval:org.mitre.oval:def:15195</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="xml_core_services">
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1890" published="2012-07-10" name="CVE-2012-1890" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle keyboard-layout files, which allows local users to gain privileges via a crafted application, aka "Keyboard Layout Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-047" source="MS" patch="1" adv="1">MS12-047</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15416" source="OVAL">oval:org.mitre.oval:def:15416</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x86" />
-        <vers num="" edition=":x64" />
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x86" />
-        <vers num="" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1891" published="2012-07-10" name="CVE-2012-1891" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an uninitialized object in memory, aka "ADO Cachesize Heap Overflow RCE Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-045" source="MS" adv="1">MS12-045</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14783" source="OVAL">oval:org.mitre.oval:def:14783</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="data_access_components">
-        <vers num="2.8" edition="sp1" />
-        <vers num="2.8" edition="sp2" />
-      </prod>
-      <prod vendor="microsoft" name="windows_data_access_components">
-        <vers num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1892" published="2012-09-11" name="CVE-2012-1892" modified="2012-09-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-061" source="MS" adv="1">MS12-061</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="visual_studio_team_foundation_server">
-        <vers num="2010" edition="sp1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1893" published="2012-07-10" name="CVE-2012-1893" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate callback parameters during creation of a hook procedure, which allows local users to gain privileges via a crafted application, aka "Win32k Incorrect Type Handling Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-047" source="MS" patch="1" adv="1">MS12-047</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15654" source="OVAL">oval:org.mitre.oval:def:15654</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x86" />
-        <vers num="" edition=":x64" />
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x86" />
-        <vers num="" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="r2" edition="" />
-        <vers num="r2" edition=":x64" />
-        <vers num="r2" edition=":itanium" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1894" published="2012-07-10" name="CVE-2012-1894" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Microsoft Office for Mac 2011 uses world-writable permissions for the "Applications/Microsoft Office 2011/" directory and certain other directories, which allows local users to gain privileges by placing a Trojan horse executable file in one of these directories, aka "Office for Mac Improper Folder Permissions Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-051" source="MS" patch="1" adv="1">MS12-051</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15602" source="OVAL">oval:org.mitre.oval:def:15602</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="office">
-        <vers num="2011" edition="" />
-        <vers num="2011" edition=":mac" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-1899" published="2012-09-17" name="CVE-2012-1899" modified="2012-09-17">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in webfolio/admin/users/edit in Webfolio CMS 1.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) First name, (2) Last name or (3) Email (required) fields.</descript>
-    </desc>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73738" source="XF">webfoliocms-multiple-xss(73738)</ref>
-      <ref url="http://www.securityfocus.com/bid/52335" source="BID">52335</ref>
-      <ref url="http://packetstormsecurity.org/files/110524/Webfolio-CMS-1.1.4-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/110524/Webfolio-CMS-1.1.4-Cross-Site-Scripting.html</ref>
-      <ref url="http://ivanobinetti.blogspot.com/2012/03/webfolio-114-multiple-xss.html" source="MISC">http://ivanobinetti.blogspot.com/2012/03/webfolio-114-multiple-xss.html</ref>
-    </refs>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1902" published="2012-04-06" name="CVE-2012-1902" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">show_config_errors.php in phpMyAdmin 3.4.x before 3.4.10.2, when a configuration file does not exist, allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message about this missing file.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.phpmyadmin.net/home_page/security/PMASA-2012-2.php" source="CONFIRM" patch="1" adv="1">http://www.phpmyadmin.net/home_page/security/PMASA-2012-2.php</ref>
-      <ref url="https://github.com/phpmyadmin/phpmyadmin/commit/c51817d3b8cb05ff54dca9373c0667e29b8498d4" source="CONFIRM">https://github.com/phpmyadmin/phpmyadmin/commit/c51817d3b8cb05ff54dca9373c0667e29b8498d4</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079566.html" source="FEDORA">FEDORA-2012-5599</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="phpmyadmin" name="phpmyadmin">
-        <vers num="3.4.0.0" />
-        <vers num="3.4.1.0" />
-        <vers num="3.4.10.0" />
-        <vers num="3.4.10.1" />
-        <vers num="3.4.2.0" />
-        <vers num="3.4.3.0" />
-        <vers num="3.4.3.1" />
-        <vers num="3.4.3.2" />
-        <vers num="3.4.4.0" />
-        <vers num="3.4.5.0" />
-        <vers num="3.4.6.0" />
-        <vers num="3.4.7.0" />
-        <vers num="3.4.7.1" />
-        <vers num="3.4.8.0" />
-        <vers num="3.4.9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1904" published="2012-03-28" name="CVE-2012-1904" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Build 12.0.0.756 and earlier, allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted MP4 file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027076" source="SECTRACK">1027076</ref>
-      <ref url="http://secunia.com/advisories/49193" source="SECUNIA">49193</ref>
-      <ref url="http://packetstormsecurity.org/files/111162/RealPlayer-1.1.4-Memory-Corruption.html" source="MISC">http://packetstormsecurity.org/files/111162/RealPlayer-1.1.4-Memory-Corruption.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="realplayer">
-        <vers num="10.0" />
-        <vers num="10.5" />
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="11.0.2" />
-        <vers num="11.0.2.1744" />
-        <vers num="11.0.2.2315" />
-        <vers num="11.0.3" />
-        <vers num="11.0.4" />
-        <vers num="11.0.5" />
-        <vers num="11.1" />
-        <vers num="11.1.3" />
-        <vers num="11_build_6.0.14.748" />
-        <vers num="12.0.0.1444" />
-        <vers num="12.0.0.1548" />
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.0.1.609" />
-        <vers num="14.0.2" />
-        <vers num="14.0.3" />
-        <vers num="14.0.4" />
-        <vers num="14.0.5" />
-        <vers prev="1" num="15.0.0" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-      </prod>
-      <prod vendor="realnetworks" name="realplayer_sp">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers prev="1" num="1.1.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1906" published="2012-05-29" name="CVE-2012-1906" modified="2012-05-30" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:N/I:P/A:P)" CVSS_score="3.3" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.4" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from a remote source, which allows local users to overwrite arbitrary files or install arbitrary packages via a symlink attack on a temporary file in /tmp.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74793" source="XF">puppet-macosx-symlink(74793)</ref>
-      <ref url="http://www.securityfocus.com/bid/52975" source="BID">52975</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2451" source="DEBIAN">DSA-2451</ref>
-      <ref url="http://ubuntu.com/usn/usn-1419-1" source="UBUNTU">USN-1419-1</ref>
-      <ref url="http://secunia.com/advisories/48789" source="SECUNIA" adv="1">48789</ref>
-      <ref url="http://secunia.com/advisories/48748" source="SECUNIA" adv="1">48748</ref>
-      <ref url="http://secunia.com/advisories/48743" source="SECUNIA" adv="1">48743</ref>
-      <ref url="http://puppetlabs.com/security/cve/cve-2012-1906/" source="CONFIRM" adv="1">http://puppetlabs.com/security/cve/cve-2012-1906/</ref>
-      <ref url="http://projects.puppetlabs.com/issues/13260" source="MISC" adv="1">http://projects.puppetlabs.com/issues/13260</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="puppetlabs" name="puppet">
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.10" />
-        <vers num="2.6.11" />
-        <vers num="2.6.12" />
-        <vers num="2.6.13" />
-        <vers num="2.6.14" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.6.7" />
-        <vers num="2.6.8" />
-        <vers num="2.6.9" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.11" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-      </prod>
-      <prod vendor="puppetlabs" name="puppet_enterprise_users">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1907" published="2012-03-28" name="CVE-2012-1907" modified="2012-04-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The scanner engine in PrivaWall Antivirus 5.6 and earlier does not recognize the Office XML (aka Open Document XML) file format, which allows remote attackers to bypass malware detection via a crafted file embedded in a WordML document.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/521948/30/0/threaded" source="BUGTRAQ">20120313 PrivaWall Antivirus Office XML Format Evasion/Bypass Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="privawall" name="privawall_antivirus">
-        <vers prev="1" num="5.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1908" published="2012-08-16" name="CVE-2012-1908" modified="2012-08-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.splunk.com/view/SP-CAAAGTK#38585" source="CONFIRM" adv="1">http://www.splunk.com/view/SP-CAAAGTK#38585</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="splunk" name="splunk">
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.10" />
-        <vers num="4.0.11" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" />
-        <vers num="4.0.8" />
-        <vers num="4.0.9" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="4.1.3" />
-        <vers num="4.1.4" />
-        <vers num="4.1.5" />
-        <vers num="4.1.6" />
-        <vers num="4.1.7" />
-        <vers num="4.1.8" />
-        <vers num="4.2" />
-        <vers num="4.2.1" />
-        <vers num="4.2.2" />
-        <vers num="4.2.3" />
-        <vers num="4.2.4" />
-        <vers num="4.2.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1909" published="2012-08-06" name="CVE-2012-1909" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Bitcoin protocol, as used in bitcoind before 0.4.4, wxBitcoin, Bitcoin-Qt, and other programs, does not properly handle multiple transactions with the same identifier, which allows remote attackers to cause a denial of service (unspendable transaction) by leveraging the ability to create a duplicate coinbase transaction.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/sipa/bitcoin/commit/a206b0ea12eb4606b93323268fc81a4f1f952531" source="CONFIRM" patch="1">https://github.com/sipa/bitcoin/commit/a206b0ea12eb4606b93323268fc81a4f1f952531</ref>
-      <ref url="https://en.bitcoin.it/wiki/CVEs" source="CONFIRM" adv="1">https://en.bitcoin.it/wiki/CVEs</ref>
-      <ref url="https://en.bitcoin.it/wiki/BIP_0030" source="CONFIRM" adv="1">https://en.bitcoin.it/wiki/BIP_0030</ref>
-      <ref url="https://bugs.gentoo.org/show_bug.cgi?id=407793" source="CONFIRM">https://bugs.gentoo.org/show_bug.cgi?id=407793</ref>
-      <ref url="https://bitcointalk.org/index.php?topic=67738.0" source="CONFIRM">https://bitcointalk.org/index.php?topic=67738.0</ref>
-      <ref url="http://sourceforge.net/mailarchive/forum.php?thread_name=CAPg%2BsBhmGHnMResVxPDZdfpmWTb9uqD0RrQD7oSXBQq7oHpm8g%40mail.gmail.com&amp;forum_name=bitcoin-development" source="MLIST">[bitcoin-development] 20120228 Duplicate transactions vulnerability</ref>
-      <ref url="http://r6.ca/blog/20120206T005236Z.html" source="MISC">http://r6.ca/blog/20120206T005236Z.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bitcoin" name="bitcoin-qt">
-        <vers num="" />
-      </prod>
-      <prod vendor="bitcoin" name="bitcoind">
-        <vers num="0.3.10" />
-        <vers num="0.3.11" />
-        <vers num="0.3.12" />
-        <vers num="0.3.4" />
-        <vers num="0.3.5" />
-        <vers num="0.3.8" />
-        <vers num="0.4.0" />
-        <vers num="0.4.1" edition="rc6" />
-        <vers prev="1" num="0.4.4" edition="rc2" />
-      </prod>
-      <prod vendor="bitcoin" name="wxbitcoin">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1910" published="2012-08-06" name="CVE-2012-1910" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Bitcoin-Qt 0.5.0.x before 0.5.0.5; 0.5.1.x, 0.5.2.x, and 0.5.3.x before 0.5.3.1; and 0.6.x before 0.6.0rc4 on Windows does not use MinGW multithread-safe exception handling, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted Bitcoin protocol messages.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/bitcoin/bitcoin/commit/8864019f6d88b13d3442843d9e6ebeb8dd938831" source="CONFIRM" patch="1">https://github.com/bitcoin/bitcoin/commit/8864019f6d88b13d3442843d9e6ebeb8dd938831</ref>
-      <ref url="https://en.bitcoin.it/wiki/CVEs" source="CONFIRM">https://en.bitcoin.it/wiki/CVEs</ref>
-      <ref url="https://bitcointalk.org/index.php?topic=69120.0" source="CONFIRM">https://bitcointalk.org/index.php?topic=69120.0</ref>
-      <ref url="http://gavintech.blogspot.com/2012/03/full-disclosure-bitcoin-qt-on-windows.html" source="CONFIRM">http://gavintech.blogspot.com/2012/03/full-disclosure-bitcoin-qt-on-windows.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bitcoin" name="bitcoin-qt">
-        <vers num="0.5.0" edition="rc1" />
-        <vers num="0.5.0.4" />
-        <vers num="0.5.1" edition="rc1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3.0" />
-        <vers num="0.6.0" edition="rc1" />
-        <vers num="0.6.0" edition="rc3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1911" published="2012-09-09" name="CVE-2012-1911" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) to_group parameter to group.php or (2) id parameter to vcard.php.  NOTE: the edit.php vector is already covered by CVE-2008-2565.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73943" source="XF">phpaddressbook-multiple-sql-injection(73943)</ref>
-      <ref url="http://www.securityfocus.com/bid/52396" source="BID">52396</ref>
-      <ref url="http://www.exploit-db.com/exploits/18578" source="EXPLOIT-DB">18578</ref>
-      <ref url="http://www.darksecurity.de/advisories/2012/SSCHADV2012-007.txt" source="MISC">http://www.darksecurity.de/advisories/2012/SSCHADV2012-007.txt</ref>
-      <ref url="http://sourceforge.net/tracker/?func=detail&amp;aid=3501716&amp;group_id=157964&amp;atid=805929" source="MISC">http://sourceforge.net/tracker/?func=detail&amp;aid=3501716&amp;group_id=157964&amp;atid=805929</ref>
-      <ref url="http://sourceforge.net/tracker/?func=detail&amp;aid=3496653&amp;group_id=157964&amp;atid=805929" source="MISC">http://sourceforge.net/tracker/?func=detail&amp;aid=3496653&amp;group_id=157964&amp;atid=805929</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="chatelao" name="php_address_book">
-        <vers num="1.0" />
-        <vers num="1.2" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.4" />
-        <vers num="2.6" />
-        <vers num="3.0" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.10" />
-        <vers num="3.2.11" />
-        <vers num="3.2.12" />
-        <vers num="3.2.13" />
-        <vers num="3.2.14" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" />
-        <vers num="3.2.8" />
-        <vers num="3.2.9" />
-        <vers num="3.3" />
-        <vers num="3.3.1" />
-        <vers num="3.3.10" />
-        <vers num="3.3.12" />
-        <vers num="3.3.13" />
-        <vers num="3.3.14" />
-        <vers num="3.3.15" />
-        <vers num="3.3.16" />
-        <vers num="3.3.17" />
-        <vers num="3.3.18" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers num="3.3.4" />
-        <vers num="3.3.5" />
-        <vers num="3.3.6" />
-        <vers num="3.3.7" />
-        <vers num="3.3.8" />
-        <vers num="3.3.9" />
-        <vers num="3.4" />
-        <vers num="3.4.1" />
-        <vers num="3.4.2" />
-        <vers num="3.4.3" />
-        <vers num="3.4.4" />
-        <vers num="3.4.5" />
-        <vers num="3.4.6" />
-        <vers num="3.4.7" />
-        <vers num="3.4.8" />
-        <vers num="3.4.9" />
-        <vers num="4.0" />
-        <vers num="4.0.2" />
-        <vers num="4.1.1" />
-        <vers num="4.1.3" />
-        <vers num="4.1.4" />
-        <vers num="5.0" edition="beta" />
-        <vers num="5.1" />
-        <vers num="5.2" />
-        <vers num="5.3" />
-        <vers num="5.4" />
-        <vers num="5.4.1" />
-        <vers num="5.4.2" />
-        <vers num="5.4.3" />
-        <vers num="5.4.4" />
-        <vers num="5.4.5" />
-        <vers num="5.4.6" />
-        <vers num="5.4.7" />
-        <vers num="5.4.9" />
-        <vers num="5.5" />
-        <vers num="5.6" />
-        <vers num="5.7" />
-        <vers num="5.7.1" />
-        <vers num="5.7.2" />
-        <vers num="5.7.3" />
-        <vers num="5.7.4" />
-        <vers num="5.7.5" />
-        <vers num="5.8.1" />
-        <vers num="6.0" />
-        <vers num="6.1" />
-        <vers num="6.1.1" />
-        <vers num="6.1.2" />
-        <vers num="6.1.3" />
-        <vers num="6.1.4" />
-        <vers num="6.2" />
-        <vers num="6.2.1" />
-        <vers num="6.2.10" />
-        <vers prev="1" num="6.2.11" />
-        <vers num="6.2.2" />
-        <vers num="6.2.3" />
-        <vers num="6.2.4" />
-        <vers num="6.2.5" />
-        <vers num="6.2.6" />
-        <vers num="6.2.7" />
-        <vers num="6.2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1912" published="2012-09-09" name="CVE-2012-1912" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter.  NOTE: the index.php vector is already covered by CVE-2008-2566.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73944" source="XF">phpaddressbook-multiple-xss(73944)</ref>
-      <ref url="http://www.securityfocus.com/bid/53598" source="BID">53598</ref>
-      <ref url="http://www.securityfocus.com/bid/52396" source="BID">52396</ref>
-      <ref url="http://www.exploit-db.com/exploits/18578" source="EXPLOIT-DB">18578</ref>
-      <ref url="http://www.darksecurity.de/index.php?/215-SSCHADV2012-013-PHP-Address-Book-7.0.0-Multiple-security-vulnerabilities.html" source="MISC">http://www.darksecurity.de/index.php?/215-SSCHADV2012-013-PHP-Address-Book-7.0.0-Multiple-security-vulnerabilities.html</ref>
-      <ref url="http://www.darksecurity.de/advisories/2012/SSCHADV2012-007.txt" source="MISC">http://www.darksecurity.de/advisories/2012/SSCHADV2012-007.txt</ref>
-      <ref url="http://sourceforge.net/tracker/?func=detail&amp;aid=3527242&amp;group_id=157964&amp;atid=805929" source="MISC">http://sourceforge.net/tracker/?func=detail&amp;aid=3527242&amp;group_id=157964&amp;atid=805929</ref>
-      <ref url="http://sourceforge.net/tracker/?func=detail&amp;aid=3501716&amp;group_id=157964&amp;atid=805929" source="MISC">http://sourceforge.net/tracker/?func=detail&amp;aid=3501716&amp;group_id=157964&amp;atid=805929</ref>
-      <ref url="http://sourceforge.net/tracker/?func=detail&amp;aid=3496653&amp;group_id=157964&amp;atid=805929" source="MISC">http://sourceforge.net/tracker/?func=detail&amp;aid=3496653&amp;group_id=157964&amp;atid=805929</ref>
-      <ref url="http://secunia.com/advisories/49212" source="SECUNIA" adv="1">49212</ref>
-      <ref url="http://secunia.com/advisories/42781" source="SECUNIA" adv="1">42781</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="chatelao" name="php_address_book">
-        <vers num="1.0" />
-        <vers num="1.2" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.4" />
-        <vers num="2.6" />
-        <vers num="3.0" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.10" />
-        <vers num="3.2.11" />
-        <vers num="3.2.12" />
-        <vers num="3.2.13" />
-        <vers num="3.2.14" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" />
-        <vers num="3.2.8" />
-        <vers num="3.2.9" />
-        <vers num="3.3" />
-        <vers num="3.3.1" />
-        <vers num="3.3.10" />
-        <vers num="3.3.12" />
-        <vers num="3.3.13" />
-        <vers num="3.3.14" />
-        <vers num="3.3.15" />
-        <vers num="3.3.16" />
-        <vers num="3.3.17" />
-        <vers num="3.3.18" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers num="3.3.4" />
-        <vers num="3.3.5" />
-        <vers num="3.3.6" />
-        <vers num="3.3.7" />
-        <vers num="3.3.8" />
-        <vers num="3.3.9" />
-        <vers num="3.4" />
-        <vers num="3.4.1" />
-        <vers num="3.4.2" />
-        <vers num="3.4.3" />
-        <vers num="3.4.4" />
-        <vers num="3.4.5" />
-        <vers num="3.4.6" />
-        <vers num="3.4.7" />
-        <vers num="3.4.8" />
-        <vers num="3.4.9" />
-        <vers num="4.0" />
-        <vers num="4.0.2" />
-        <vers num="4.1.1" />
-        <vers num="4.1.3" />
-        <vers num="4.1.4" />
-        <vers num="5.0" edition="beta" />
-        <vers num="5.1" />
-        <vers num="5.2" />
-        <vers num="5.3" />
-        <vers num="5.4" />
-        <vers num="5.4.1" />
-        <vers num="5.4.2" />
-        <vers num="5.4.3" />
-        <vers num="5.4.4" />
-        <vers num="5.4.5" />
-        <vers num="5.4.6" />
-        <vers num="5.4.7" />
-        <vers num="5.4.9" />
-        <vers num="5.5" />
-        <vers num="5.6" />
-        <vers num="5.7" />
-        <vers num="5.7.1" />
-        <vers num="5.7.2" />
-        <vers num="5.7.3" />
-        <vers num="5.7.4" />
-        <vers num="5.7.5" />
-        <vers num="5.8.1" />
-        <vers num="6.0" />
-        <vers num="6.1" />
-        <vers num="6.1.1" />
-        <vers num="6.1.2" />
-        <vers num="6.1.3" />
-        <vers num="6.1.4" />
-        <vers num="6.2" />
-        <vers num="6.2.1" />
-        <vers num="6.2.10" />
-        <vers num="6.2.11" />
-        <vers num="6.2.12" />
-        <vers num="6.2.2" />
-        <vers num="6.2.3" />
-        <vers num="6.2.4" />
-        <vers num="6.2.5" />
-        <vers num="6.2.6" />
-        <vers num="6.2.7" />
-        <vers num="6.2.9" />
-        <vers prev="1" num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-1913" reject="1" published="2012-03-28" name="CVE-2012-1913" modified="2012-03-28">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-0754.  Reason: This candidate is a reservation duplicate of CVE-2010-0754.  Notes: All CVE users should reference CVE-2010-0754 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1916" published="2012-03-27" name="CVE-2012-1916" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">@Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to execute arbitrary code via an e-mail attachment with an executable extension, leading to the creation of an executable file under tmp/.</descript>
-      <descript source="nvd">Per: http://www.kb.cert.org/vuls/id/743555 'CWE-434: Unrestricted Upload of File with Dangerous Type'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/743555" source="CERT-VN">VU#743555</ref>
-      <ref url="http://atmail.org/download/atmailopen.tgz" source="CONFIRM" patch="1">http://atmail.org/download/atmailopen.tgz</ref>
-      <ref url="http://secunia.com/advisories/47012" source="SECUNIA">47012</ref>
-      <ref url="http://en.securitylab.ru/lab/PT-2011-48" source="MISC">http://en.securitylab.ru/lab/PT-2011-48</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="atmail" name="atmail_open">
-        <vers prev="1" num="1.04" edition="" />
-        <vers prev="1" num="1.04" edition=":open-source" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1917" published="2012-03-27" name="CVE-2012-1917" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">compose.php in @Mail WebMail Client in AtMail Open-Source before 1.05 does not properly handle ../ (dot dot slash) sequences in the unique parameter, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ..././ (dot dot dot slash dot slash) sequence.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/743555" source="CERT-VN">VU#743555</ref>
-      <ref url="http://atmail.org/download/atmailopen.tgz" source="CONFIRM" patch="1">http://atmail.org/download/atmailopen.tgz</ref>
-      <ref url="http://secunia.com/advisories/47012" source="SECUNIA">47012</ref>
-      <ref url="http://en.securitylab.ru/lab/PT-2011-48" source="MISC">http://en.securitylab.ru/lab/PT-2011-48</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="atmail" name="atmail_open">
-        <vers prev="1" num="1.04" edition="" />
-        <vers prev="1" num="1.04" edition=":open-source" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1918" published="2012-03-27" name="CVE-2012-1918" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Multiple directory traversal vulnerabilities in (1) compose.php and (2) libs/Atmail/SendMsg.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allow remote attackers to read arbitrary files via a .. (dot dot) in the Attachment[] parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/743555" source="CERT-VN">VU#743555</ref>
-      <ref url="http://atmail.org/download/atmailopen.tgz" source="CONFIRM" patch="1">http://atmail.org/download/atmailopen.tgz</ref>
-      <ref url="http://secunia.com/advisories/47012" source="SECUNIA">47012</ref>
-      <ref url="http://en.securitylab.ru/lab/PT-2011-48" source="MISC">http://en.securitylab.ru/lab/PT-2011-48</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="atmail" name="atmail_open">
-        <vers prev="1" num="1.04" edition="" />
-        <vers prev="1" num="1.04" edition=":open-source" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1919" published="2012-03-27" name="CVE-2012-1919" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">CRLF injection vulnerability in mime.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to conduct directory traversal attacks and read arbitrary files via a %0A sequence followed by a .. (dot dot) in the file parameter.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/743555" source="CERT-VN">VU#743555</ref>
-      <ref url="http://atmail.org/download/atmailopen.tgz" source="CONFIRM" patch="1">http://atmail.org/download/atmailopen.tgz</ref>
-      <ref url="http://secunia.com/advisories/47012" source="SECUNIA">47012</ref>
-      <ref url="http://en.securitylab.ru/lab/PT-2011-48" source="MISC">http://en.securitylab.ru/lab/PT-2011-48</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="atmail" name="atmail_open">
-        <vers prev="1" num="1.04" edition="" />
-        <vers prev="1" num="1.04" edition=":open-source" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1920" published="2012-03-27" name="CVE-2012-1920" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">@Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/743555" source="CERT-VN">VU#743555</ref>
-      <ref url="http://secunia.com/advisories/47012" source="SECUNIA">47012</ref>
-      <ref url="http://en.securitylab.ru/lab/PT-2011-48" source="MISC">http://en.securitylab.ru/lab/PT-2011-48</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="atmail" name="atmail_open">
-        <vers num="1.04" edition="" />
-        <vers num="1.04" edition=":open-source" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1921" published="2012-08-26" name="CVE-2012-1921" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attackers to hijack the authentication of administrators for requests that change the router passphrase via the pskValue parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://packetstormsecurity.org/files/110770/Sitecom-WLM-2501-Cross-Site-Request-Forgery.html" source="MISC">http://packetstormsecurity.org/files/110770/Sitecom-WLM-2501-Cross-Site-Request-Forgery.html</ref>
-      <ref url="http://ivanobinetti.blogspot.com/2012/03/sitecom-wlm-2501-change-wireless.html" source="MISC">http://ivanobinetti.blogspot.com/2012/03/sitecom-wlm-2501-change-wireless.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sitecom" name="wlm-2501">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1923" published="2012-04-17" name="CVE-2012-1923" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users\, which allows local users to obtain sensitive information by reading a database.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52929" source="BID">52929</ref>
-      <ref url="http://secunia.com/secunia_research/2012-8/" source="MISC">http://secunia.com/secunia_research/2012-8/</ref>
-      <ref url="http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf" source="CONFIRM" adv="1">http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="helix_mobile_server">
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-      </prod>
-      <prod vendor="realnetworks" name="helix_server">
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.2" />
-        <vers num="14.2.0.212" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1924" published="2012-03-27" name="CVE-2012-1924" modified="2012-04-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Opera before 11.62 allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/support/kb/view/1010/" source="CONFIRM" adv="1">http://www.opera.com/support/kb/view/1010/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1162/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1162/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1162/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers prev="1" num="11.61" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1925" published="2012-03-27" name="CVE-2012-1925" modified="2012-04-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Opera before 11.62 does not ensure that a dialog window is placed on top of content windows, which makes it easier for user-assisted remote attackers to trick users into downloading and executing arbitrary files via a download dialog located under other windows.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/support/kb/view/1011/" source="CONFIRM" adv="1">http://www.opera.com/support/kb/view/1011/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1162/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1162/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1162/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers prev="1" num="11.61" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1926" published="2012-03-27" name="CVE-2012-1926" modified="2012-04-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState functions in conjunction with cross-domain frames, leading to unintended read access to history.state information.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/support/kb/view/1012/" source="CONFIRM">http://www.opera.com/support/kb/view/1012/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1162/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1162/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1162/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers prev="1" num="11.61" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1927" published="2012-03-27" name="CVE-2012-1927" modified="2012-04-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Opera before 11.62 allows remote attackers to spoof the address field by triggering the launch of a dialog window associated with a different domain.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/support/kb/view/1013/" source="CONFIRM" adv="1">http://www.opera.com/support/kb/view/1013/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1162/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1162/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1162/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers prev="1" num="11.61" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1928" published="2012-03-27" name="CVE-2012-1928" modified="2012-04-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Opera before 11.62 allows remote attackers to spoof the address field by triggering a page reload followed by a redirect to a different domain.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/support/kb/view/1014/" source="CONFIRM" adv="1">http://www.opera.com/support/kb/view/1014/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1162/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1162/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1162/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers prev="1" num="11.61" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1929" published="2012-03-27" name="CVE-2012-1929" modified="2012-04-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Opera before 11.62 on Mac OS X allows remote attackers to spoof the address field and security dialogs via crafted styling that causes page content to be displayed outside of the intended content area.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/support/kb/view/1009/" source="CONFIRM" adv="1">http://www.opera.com/support/kb/view/1009/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1162/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers prev="1" num="11.61" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1930" published="2012-03-27" name="CVE-2012-1930" modified="2012-04-16" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="4.6" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.9" CVSS_base_score="4.6">
-    <desc>
-      <descript source="cve">Opera before 11.62 on UNIX uses world-readable permissions for temporary files during printing, which allows local users to obtain sensitive information by reading these files.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/support/kb/view/1015/" source="CONFIRM" adv="1">http://www.opera.com/support/kb/view/1015/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1162/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers prev="1" num="11.61" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1931" published="2012-03-27" name="CVE-2012-1931" modified="2012-04-16" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="4.6" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.9" CVSS_base_score="4.6">
-    <desc>
-      <descript source="cve">Opera before 11.62 on UNIX, when used in conjunction with an unspecified printing application, allows local users to overwrite arbitrary files via a symlink attack on a temporary file during printing.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/support/kb/view/1015/" source="CONFIRM" adv="1">http://www.opera.com/support/kb/view/1015/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1162/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1162/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers prev="1" num="11.61" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1933" published="2012-08-27" name="CVE-2012-1933" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) include/phorum_load.php, (2) conf/install_conf.php, or (3) conf/liveuser_configuration.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23084" source="MISC">https://www.htbridge.com/advisory/HTB23084</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75031" source="XF">newscoop-gcampsitedir-file-include(75031)</ref>
-      <ref url="http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm" source="CONFIRM">http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm</ref>
-      <ref url="http://www.securityfocus.com/bid/53147" source="BID">53147</ref>
-      <ref url="http://www.exploit-db.com/exploits/18752" source="EXPLOIT-DB">18752</ref>
-      <ref url="http://secunia.com/advisories/48769" source="SECUNIA" adv="1">48769</ref>
-      <ref url="http://dev.sourcefabric.org/browse/CS-4179" source="MISC">http://dev.sourcefabric.org/browse/CS-4179</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0130.html" source="BUGTRAQ">20120418 Multiple vulnerabilities in Newscoop</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sourcefabric" name="newscoop">
-        <vers num="3.5.0" />
-        <vers num="3.5.1" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="4.0" edition="rc3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1934" published="2012-08-27" name="CVE-2012-1934" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attackers to execute arbitrary SQL commands via the f_country_code parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23084" source="MISC">https://www.htbridge.com/advisory/HTB23084</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74780" source="XF">newscoop-edit-sql-injection(74780)</ref>
-      <ref url="http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm" source="CONFIRM" adv="1">http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm</ref>
-      <ref url="http://www.securityfocus.com/bid/52941" source="BID">52941</ref>
-      <ref url="http://www.exploit-db.com/exploits/18752" source="EXPLOIT-DB">18752</ref>
-      <ref url="http://secunia.com/advisories/48769" source="SECUNIA" adv="1">48769</ref>
-      <ref url="http://dev.sourcefabric.org/browse/CS-4181" source="CONFIRM">http://dev.sourcefabric.org/browse/CS-4181</ref>
-      <ref url="http://dev.sourcefabric.org/browse/CS-4179" source="CONFIRM" adv="1">http://dev.sourcefabric.org/browse/CS-4179</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0130.html" source="BUGTRAQ">20120418 Multiple vulnerabilities in Newscoop</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sourcefabric" name="newscoop">
-        <vers num="3.5.0" />
-        <vers num="3.5.1" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="4" edition="rc3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1935" published="2012-08-27" name="CVE-2012-1935" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote attackers to inject arbitrary web script or HTML via the (1) Back parameter to admin/ad.php, or the (2) token or (3) f_email parameter to admin/password_check_token.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23084" source="MISC">https://www.htbridge.com/advisory/HTB23084</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74781" source="XF">newscoop-multiple-xss(74781)</ref>
-      <ref url="http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm" source="CONFIRM" adv="1">http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm</ref>
-      <ref url="http://www.securityfocus.com/bid/52941" source="BID">52941</ref>
-      <ref url="http://www.exploit-db.com/exploits/18752" source="EXPLOIT-DB">18752</ref>
-      <ref url="http://secunia.com/advisories/48769" source="SECUNIA" adv="1">48769</ref>
-      <ref url="http://dev.sourcefabric.org/browse/CS-4183" source="CONFIRM" adv="1">http://dev.sourcefabric.org/browse/CS-4183</ref>
-      <ref url="http://dev.sourcefabric.org/browse/CS-4182" source="CONFIRM" adv="1">http://dev.sourcefabric.org/browse/CS-4182</ref>
-      <ref url="http://dev.sourcefabric.org/browse/CS-4179" source="CONFIRM" adv="1">http://dev.sourcefabric.org/browse/CS-4179</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0130.html" source="BUGTRAQ">20120418 Multiple vulnerabilities in Newscoop</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sourcefabric" name="newscoop">
-        <vers num="3.5.0" />
-        <vers num="3.5.1" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="4" edition="rc3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1936" published="2012-05-03" name="CVE-2012-1936" modified="2012-05-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">** DISPUTED ** The wp_create_nonce function in wp-includes/pluggable.php in WordPress 3.3.1 and earlier associates a nonce with a user account instead of a user session, which might make it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks on specific actions and objects by sniffing the network, as demonstrated by attacks against the wp-admin/admin-ajax.php and wp-admin/user-new.php scripts.  NOTE: the vendor reportedly disputes the significance of this issue because wp_create_nonce operates as intended, even if it is arguably inconsistent with certain CSRF protection details advocated by external organizations.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.webapp-security.com/wp-content/uploads/2012/04/Wordpress-3.3.1-Multiple-CSRF-Vulnerabilities6.txt" source="MISC">http://www.webapp-security.com/wp-content/uploads/2012/04/Wordpress-3.3.1-Multiple-CSRF-Vulnerabilities6.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wordpress" name="wordpress">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" edition="a" />
-        <vers num="1.3" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.1" />
-        <vers num="1.5.1.2" />
-        <vers num="1.5.1.3" />
-        <vers num="1.5.2" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.2" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.5" />
-        <vers num="2.7" />
-        <vers num="2.7.1" />
-        <vers num="2.8" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" edition="a" />
-        <vers num="2.8.5" />
-        <vers num="2.8.5.1" />
-        <vers num="2.8.5.2" />
-        <vers num="2.8.6" />
-        <vers num="2.9" />
-        <vers num="2.9.1" />
-        <vers num="2.9.1.1" />
-        <vers num="2.9.2" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" edition="" />
-        <vers num="3.0.3" edition=":iis" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.2" edition="beta1" />
-        <vers num="3.2.1" />
-        <vers num="3.3" />
-        <vers prev="1" num="3.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1937" published="2012-06-05" name="CVE-2012-1937" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=745580" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=745580</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=745494" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=745494</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=745254" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=745254</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=723465" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=723465</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=643967" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=643967</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-34.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-34.html</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2499" source="DEBIAN">DSA-2499</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1938" published="2012-06-05" name="CVE-2012-1938" modified="2012-06-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) methodjit/ImmutableSync.cpp, (2) the JSObject::makeDenseArraySlow function in js/src/jsarray.cpp, and unknown other components.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=748948" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=748948</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=736012" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=736012</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=730415" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=730415</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=723971" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=723971</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=723773" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=723773</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=718852" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=718852</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=716067" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=716067</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=708688" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=708688</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=699594" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=699594</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=670317" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=670317</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-34.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-34.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="0.1" />
-        <vers num="0.10" />
-        <vers num="0.10.1" />
-        <vers num="0.2" />
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.8" />
-        <vers num="0.9" edition="rc" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers prev="1" num="12.0" edition="beta6" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="0.1" />
-        <vers num="0.2" />
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="0.6" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.8" />
-        <vers num="0.9" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers prev="1" num="12.0" />
-        <vers num="13.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1939" published="2012-06-05" name="CVE-2012-1939" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted JavaScript code.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=748613" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=748613</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-34.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-34.html</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2499" source="DEBIAN">DSA-2499</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1940" published="2012-06-05" name="CVE-2012-1940" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) by changing the size of a container of absolutely positioned elements in a column.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=747688" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=747688</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-40.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-40.html</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2499" source="DEBIAN">DSA-2499</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1941" published="2012-06-05" name="CVE-2012-1941" modified="2012-06-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the nsHTMLReflowState::CalculateHypotheticalBox function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allows remote attackers to execute arbitrary code by resizing a window displaying absolutely positioned and relatively positioned elements in nested columns.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=750066" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=750066</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-40.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-40.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1942" published="2012-06-05" name="CVE-2012-1942" modified="2012-06-14" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">The Mozilla Updater and Windows Updater Service in Mozilla Firefox 12.0, Thunderbird 12.0, and SeaMonkey 2.9 on Windows allow local users to gain privileges by loading a DLL file in a privileged context.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=748764" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=748764</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-35.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-35.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="12.0" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.9" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="12.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1943" published="2012-06-05" nvd_name="Untrusted Search Path" name="CVE-2012-1943" modified="2012-06-14" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in Updater.exe in the Windows Updater Service in Mozilla Firefox 12.0, Thunderbird 12.0, and SeaMonkey 2.9 on Windows allows local users to gain privileges via a Trojan horse wsock32.dll file in an application directory.</descript>
-      <descript source="nvd">http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=750850" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=750850</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-35.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-35.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="12.0" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.9" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="12.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1944" published="2012-06-05" name="CVE-2012-1944" modified="2012-06-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not block inline event handlers, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=751422" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=751422</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-36.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-36.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1945" published="2012-06-05" name="CVE-2012-1945" modified="2012-06-14" CVSS_version="2.0" CVSS_vector="(AV:A/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="2.9" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="5.5" CVSS_base_score="2.9">
-    <desc>
-      <descript source="cve">Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow local users to obtain sensitive information via an HTML document that loads a shortcut (aka .lnk) file for display within an IFRAME element, as demonstrated by a network share implemented by (1) Microsoft Windows or (2) Samba.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local_network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=670514" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=670514</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-37.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-37.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1946" published="2012-06-05" name="CVE-2012-1946" modified="2012-06-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the nsINode::ReplaceOrInsertBefore function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 might allow remote attackers to execute arbitrary code via document changes involving replacement or insertion of a node.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=750109" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=750109</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-38.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-38.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1947" published="2012-06-05" name="CVE-2012-1947" modified="2012-06-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the utf16_to_isolatin1 function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allows remote attackers to execute arbitrary code via vectors that trigger a character-set conversion failure.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=744541" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=744541</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-40.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-40.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1948" published="2012-07-18" name="CVE-2012-1948" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=772282" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=772282</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=763225" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=763225</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=758471" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=758471</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=756600" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=756600</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=754989" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=754989</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=750575" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=750575</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=749385" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=749385</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=746896" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=746896</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=746103" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=746103</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=732233" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=732233</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-42.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-42.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers prev="1" num="2.10" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1949" published="2012-07-18" name="CVE-2012-1949" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Thunderbird 5.0 through 13.0, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=766304" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=766304</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=766018" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=766018</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=765179" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=765179</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=757431" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=757431</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=754725" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=754725</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=752662" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=752662</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=743876" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=743876</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=738841" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=738841</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=725499" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=725499</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=718290" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=718290</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=717488" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=717488</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=712914" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=712914</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-42.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-42.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers prev="1" num="2.10" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1950" published="2012-07-18" name="CVE-2012-1950" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote attackers to spoof the address bar by canceling a page load.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=725611" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=725611</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=724599" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=724599</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=724247" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=724247</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-43.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-43.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1951" published="2012-07-18" name="CVE-2012-1951" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code by interacting with objects used for SMIL Timing.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=752902" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=752902</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-44.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-44.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers prev="1" num="2.10" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1952" published="2012-07-18" name="CVE-2012-1952" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=759249" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=759249</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-44.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-44.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers prev="1" num="2.10" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1953" published="2012-07-18" name="CVE-2012-1953" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (buffer over-read, incorrect pointer dereference, and heap-based buffer overflow) or possibly execute arbitrary code via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=765218" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=765218</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-44.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-44.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers prev="1" num="2.10" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1954" published="2012-07-18" name="CVE-2012-1954" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors involving multiple adoptions and empty documents.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=765139" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=765139</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-44.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-44.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers prev="1" num="2.10" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1955" published="2012-07-18" name="CVE-2012-1955" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to spoof the address bar via vectors involving history.forward and history.back calls.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=757376" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=757376</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-45.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-45.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers prev="1" num="2.10" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1956" published="2012-08-29" name="CVE-2012-1956" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=756719" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=756719</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-59.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-59.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1957" published="2012-07-18" name="CVE-2012-1957" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly handle EMBED elements within description elements in RSS feeds, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a feed.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=750096" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=750096</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-47.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-47.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers prev="1" num="2.10" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1958" published="2012-07-18" name="CVE-2012-1958" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 might allow remote attackers to execute arbitrary code via vectors related to focused content.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=750820" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=750820</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-48.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-48.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers prev="1" num="2.10" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1959" published="2012-07-18" name="CVE-2012-1959" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not consider the presence of same-compartment security wrappers (SCSW) during the cross-compartment wrapping of objects, which allows remote attackers to bypass intended XBL access restrictions via crafted content.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=754044" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=754044</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=737559" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=737559</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-49.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-49.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers prev="1" num="2.10" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1960" published="2012-07-18" name="CVE-2012-1960" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The qcms_transform_data_rgb_out_lut_sse2 function in the QCMS implementation in Mozilla Firefox 4.x through 13.0, Thunderbird 5.0 through 13.0, and SeaMonkey before 2.11 might allow remote attackers to obtain sensitive information from process memory via a crafted color profile that triggers an out-of-bounds read operation.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=761014" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=761014</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-50.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-50.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers prev="1" num="2.10" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1961" published="2012-07-18" name="CVE-2012-1961" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly handle duplicate values in X-Frame-Options headers, which makes it easier for remote attackers to conduct clickjacking attacks via a FRAME element referencing a web site that produces these duplicate values.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=761655" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=761655</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-51.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-51.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers prev="1" num="2.10" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1962" published="2012-07-18" name="CVE-2012-1962" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving strings with multiple dependencies.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=764296" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=764296</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-52.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-52.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers prev="1" num="2.10" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1963" published="2012-07-18" name="CVE-2012-1963" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings placed into the blocked-uri parameter of a violation report, which allows remote web servers to capture OpenID credentials and OAuth 2.0 access tokens by triggering a violation.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=767778" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=767778</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-53.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-53.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers prev="1" num="2.10" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1964" published="2012-07-18" name="CVE-2012-1964" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="4.9" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=633691" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=633691</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-54.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-54.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers prev="1" num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1965" published="2012-07-18" name="CVE-2012-1965" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a feed: URL, which allows remote attackers to bypass unspecified cross-site scripting (XSS) protection mechanisms via a feed:javascript: URL.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=758990" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=758990</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-55.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-55.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1966" published="2012-07-18" name="CVE-2012-1966" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context-menu restrictions for data: URLs as for javascript: URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=734076" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=734076</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-46.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-46.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1967" published="2012-07-18" name="CVE-2012-1967" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=758344" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=758344</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-56.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-56.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers prev="1" num="2.10" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1968" published="2012-07-30" name="CVE-2012-1968" modified="2012-07-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Bugzilla 4.1.x and 4.2.x before 4.2.2 and 4.3.x before 4.3.2 uses bug-editor privileges instead of bugmail-recipient privileges during construction of HTML bugmail documents, which allows remote attackers to obtain sensitive description information by reading the tooltip portions of an HTML e-mail message.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=777398" source="CONFIRM" patch="1">https://bugzilla.mozilla.org/show_bug.cgi?id=777398</ref>
-      <ref url="http://www.bugzilla.org/security/3.6.9/" source="CONFIRM" adv="1">http://www.bugzilla.org/security/3.6.9/</ref>
-      <ref url="http://secunia.com/advisories/50040" source="SECUNIA">50040</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="bugzilla">
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="4.1.3" />
-        <vers num="4.2" edition="rc1" />
-        <vers num="4.2" edition="rc2" />
-        <vers num="4.2.1" />
-        <vers num="4.3" />
-        <vers num="4.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1969" published="2012-07-30" name="CVE-2012-1969" modified="2012-07-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The get_attachment_link function in Template.pm in Bugzilla 2.x and 3.x before 3.6.10, 3.7.x and 4.0.x before 4.0.7, 4.1.x and 4.2.x before 4.2.2, and 4.3.x before 4.3.2 does not check whether an attachment is private before presenting the attachment description within a public comment, which allows remote attackers to obtain sensitive description information by reading a comment.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=777586" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=777586</ref>
-      <ref url="http://www.bugzilla.org/security/3.6.9/" source="CONFIRM">http://www.bugzilla.org/security/3.6.9/</ref>
-      <ref url="http://secunia.com/advisories/50040" source="SECUNIA">50040</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="bugzilla">
-        <vers num="2.0" />
-        <vers num="2.10" />
-        <vers num="2.12" />
-        <vers num="2.14" />
-        <vers num="2.14.1" />
-        <vers num="2.14.2" />
-        <vers num="2.14.3" />
-        <vers num="2.14.4" />
-        <vers num="2.14.5" />
-        <vers num="2.16" edition="rc1" />
-        <vers num="2.16" edition="rc2" />
-        <vers num="2.16.1" />
-        <vers num="2.16.10" />
-        <vers num="2.16.11" />
-        <vers num="2.16.2" />
-        <vers num="2.16.3" />
-        <vers num="2.16.4" />
-        <vers num="2.16.5" />
-        <vers num="2.16.6" />
-        <vers num="2.16.7" />
-        <vers num="2.16.8" />
-        <vers num="2.16.9" />
-        <vers num="2.17" />
-        <vers num="2.17.1" />
-        <vers num="2.17.2" />
-        <vers num="2.17.3" />
-        <vers num="2.17.4" />
-        <vers num="2.17.5" />
-        <vers num="2.17.6" />
-        <vers num="2.17.7" />
-        <vers num="2.18" edition="rc1" />
-        <vers num="2.18" edition="rc2" />
-        <vers num="2.18" edition="rc3" />
-        <vers num="2.18.1" />
-        <vers num="2.18.2" />
-        <vers num="2.18.3" />
-        <vers num="2.18.4" />
-        <vers num="2.18.5" />
-        <vers num="2.18.6" />
-        <vers num="2.18.6+" />
-        <vers num="2.18.7" />
-        <vers num="2.18.8" />
-        <vers num="2.18.9" />
-        <vers num="2.19" />
-        <vers num="2.19.1" />
-        <vers num="2.19.2" />
-        <vers num="2.19.3" />
-        <vers num="2.2" />
-        <vers num="2.20" edition="rc1" />
-        <vers num="2.20" edition="rc2" />
-        <vers num="2.20.1" />
-        <vers num="2.20.2" />
-        <vers num="2.20.3" />
-        <vers num="2.20.4" />
-        <vers num="2.20.5" />
-        <vers num="2.20.6" />
-        <vers num="2.20.7" />
-        <vers num="2.21" />
-        <vers num="2.21.1" />
-        <vers num="2.21.2" edition="rc1" />
-        <vers num="2.22" edition="rc1" />
-        <vers num="2.22.1" />
-        <vers num="2.22.2" />
-        <vers num="2.22.3" />
-        <vers num="2.22.4" />
-        <vers num="2.22.5" />
-        <vers num="2.22.6" />
-        <vers num="2.22.7" />
-        <vers num="2.23" />
-        <vers num="2.23.1" />
-        <vers num="2.23.2" />
-        <vers num="2.23.3" />
-        <vers num="2.23.4" />
-        <vers num="2.4" />
-        <vers num="2.6" />
-        <vers num="2.8" />
-        <vers num="2.9" />
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.2" edition="rc1" />
-        <vers num="3.2" edition="rc2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.10" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" />
-        <vers num="3.2.8" />
-        <vers num="3.2.9" />
-        <vers num="3.3" />
-        <vers num="3.3.1" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers num="3.3.4" />
-        <vers num="3.4" edition="rc1" />
-        <vers num="3.4.1" />
-        <vers num="3.4.10" />
-        <vers num="3.4.11" />
-        <vers num="3.4.12" />
-        <vers num="3.4.13" />
-        <vers num="3.4.2" />
-        <vers num="3.4.3" />
-        <vers num="3.4.4" />
-        <vers num="3.4.5" />
-        <vers num="3.4.6" />
-        <vers num="3.4.7" />
-        <vers num="3.4.8" />
-        <vers num="3.4.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.6" edition="rc1" />
-        <vers num="3.6.0" />
-        <vers num="3.6.1" />
-        <vers num="3.6.2" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.5" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="3.7" />
-        <vers num="3.7.1" />
-        <vers num="3.7.2" />
-        <vers num="3.7.3" />
-        <vers num="4.0" edition="rc1" />
-        <vers num="4.0" edition="rc2" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.6" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="4.1.3" />
-        <vers num="4.2" edition="rc1" />
-        <vers num="4.2" edition="rc2" />
-        <vers num="4.2.1" />
-        <vers num="4.3" />
-        <vers num="4.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1970" published="2012-08-29" name="CVE-2012-1970" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=778765" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=778765</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=777806" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=777806</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=775206" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=775206</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=764176" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=764176</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=761831" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=761831</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=758408" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=758408</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=745158" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=745158</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-57.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-57.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1971" published="2012-08-29" name="CVE-2012-1971" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to garbage collection after certain MethodJIT execution, and unknown other vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=780712" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=780712</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=779849" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=779849</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=773097" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=773097</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=765936" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=765936</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=755916" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=755916</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=754242" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=754242</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=754150" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=754150</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=753162" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=753162</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=752087" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=752087</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=752038" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=752038</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=749039" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=749039</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=748119" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=748119</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=732870" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=732870</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=730208" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=730208</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=719750" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=719750</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-57.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-57.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1972" published="2012-08-29" name="CVE-2012-1972" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=778428" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=778428</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-58.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-58.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1973" published="2012-08-29" name="CVE-2012-1973" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=773207" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=773207</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-58.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-58.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1974" published="2012-08-29" name="CVE-2012-1974" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=769303" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=769303</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-58.html" source="CONFIRM">http://www.mozilla.org/security/announce/2012/mfsa2012-58.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1975" published="2012-08-29" name="CVE-2012-1975" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=777578" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=777578</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-58.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-58.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1976" published="2012-08-29" name="CVE-2012-1976" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the nsHTMLSelectElement::SubmitNamesValues function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=776213" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=776213</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-58.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-58.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-1977" published="2012-05-09" name="CVE-2012-1977" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:N/A:N)" CVSS_score="7.1" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="8.6" CVSS_base_score="7.1">
-    <desc>
-      <descript source="cve">WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-129-01.pdf" source="MISC" adv="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-129-01.pdf</ref>
-      <ref url="http://dsecrg.com/pages/vul/show.php?id=405" source="MISC">http://dsecrg.com/pages/vul/show.php?id=405</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wellintech" name="kingview">
-        <vers num="3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1979" published="2012-04-17" name="CVE-2012-1979" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the email parameter (aka Email address field) in an edit_user configuration action.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.webapp-security.com/wp-content/uploads/2012/03/syndeocms_3.0.01-Persistent-XSS.txt" source="MISC">http://www.webapp-security.com/wp-content/uploads/2012/03/syndeocms_3.0.01-Persistent-XSS.txt</ref>
-      <ref url="http://www.securityfocus.com/bid/52840" source="BID">52840</ref>
-      <ref url="http://www.exploit-db.com/exploits/18686/" source="EXPLOIT-DB">18686</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="syndeocms" name="syndeocms">
-        <vers num="2.4" />
-        <vers num="2.4.10" />
-        <vers num="2.5.00" />
-        <vers num="2.5.01" />
-        <vers num="2.6.00" />
-        <vers num="2.7.00" />
-        <vers num="2.8.00" />
-        <vers num="2.8.02" />
-        <vers num="2.8.1" />
-        <vers num="2.9.00" />
-        <vers num="3.0.00" />
-        <vers prev="1" num="3.0.01" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1982" published="2012-04-05" name="CVE-2012-1982" modified="2012-04-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in my_admin/admin1_list_pages.php in SocialCMS 1.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the TR_title parameter in an edit action.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.webapp-security.com/wp-content/uploads/2012/03/SocialCMS-1.0.2-XSS-Persistent-and-Reflected-Vulnerabilities1.txt" source="MISC">http://www.webapp-security.com/wp-content/uploads/2012/03/SocialCMS-1.0.2-XSS-Persistent-and-Reflected-Vulnerabilities1.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="socialcms" name="socialcms">
-        <vers prev="1" num="1.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1984" published="2012-04-17" name="CVE-2012-1984" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52929" source="BID">52929</ref>
-      <ref url="http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf" source="CONFIRM" adv="1">http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="helix_mobile_server">
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-      </prod>
-      <prod vendor="realnetworks" name="helix_server">
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.2" />
-        <vers num="14.2.0.212" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1985" published="2012-04-17" name="CVE-2012-1985" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of administrators for requests that cause a denial of service (stack consumption and daemon crash) via a malformed URL.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52929" source="BID">52929</ref>
-      <ref url="http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf" source="CONFIRM" adv="1">http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="helix_mobile_server">
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-      </prod>
-      <prod vendor="realnetworks" name="helix_server">
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.2" />
-        <vers num="14.2.0.212" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1986" published="2012-05-29" name="CVE-2012-1986" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with an authorized SSL key and certain permissions on the puppet master to read arbitrary files via a symlink attack in conjunction with a crafted REST request for a file in a filebucket.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15087408" source="SUSE">openSUSE-SU-2012:0835</ref>
-      <ref url="https://hermes.opensuse.org/messages/14523305" source="SUSE">openSUSE-SU-2012:0608</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74794" source="XF">puppet-rest-symlink(74794)</ref>
-      <ref url="http://www.securityfocus.com/bid/52975" source="BID">52975</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2451" source="DEBIAN">DSA-2451</ref>
-      <ref url="http://ubuntu.com/usn/usn-1419-1" source="UBUNTU">USN-1419-1</ref>
-      <ref url="http://secunia.com/advisories/49136" source="SECUNIA" adv="1">49136</ref>
-      <ref url="http://secunia.com/advisories/48789" source="SECUNIA" adv="1">48789</ref>
-      <ref url="http://secunia.com/advisories/48748" source="SECUNIA" adv="1">48748</ref>
-      <ref url="http://secunia.com/advisories/48743" source="SECUNIA" adv="1">48743</ref>
-      <ref url="http://puppetlabs.com/security/cve/cve-2012-1986/" source="CONFIRM" adv="1">http://puppetlabs.com/security/cve/cve-2012-1986/</ref>
-      <ref url="http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.15" source="CONFIRM">http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.15</ref>
-      <ref url="http://projects.puppetlabs.com/issues/13511" source="MISC">http://projects.puppetlabs.com/issues/13511</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080003.html" source="FEDORA">FEDORA-2012-6674</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079289.html" source="FEDORA">FEDORA-2012-6055</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079227.html" source="FEDORA">FEDORA-2012-5999</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="puppetlabs" name="puppet">
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.10" />
-        <vers num="2.6.11" />
-        <vers num="2.6.12" />
-        <vers num="2.6.13" />
-        <vers num="2.6.14" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.6.7" />
-        <vers num="2.6.8" />
-        <vers num="2.6.9" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.11" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-      </prod>
-      <prod vendor="puppetlabs" name="puppet_enterprise_users">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1987" published="2012-05-29" name="CVE-2012-1987" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:P)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys to (1) cause a denial of service (memory consumption) via a REST request to a stream that triggers a thread block, as demonstrated using CVE-2012-1986 and /dev/random; or (2) cause a denial of service (filesystem consumption) via crafted REST requests that use "a marshaled form of a Puppet::FileBucket::File object" to write to arbitrary file locations.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15087408" source="SUSE">openSUSE-SU-2012:0835</ref>
-      <ref url="https://hermes.opensuse.org/messages/14523305" source="SUSE">openSUSE-SU-2012:0608</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74794" source="XF">puppet-rest-dos(74795)</ref>
-      <ref url="http://www.securityfocus.com/bid/52975" source="BID">52975</ref>
-      <ref url="http://www.osvdb.org/81308" source="OSVDB">81308</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2451" source="DEBIAN">DSA-2451</ref>
-      <ref url="http://ubuntu.com/usn/usn-1419-1" source="UBUNTU">USN-1419-1</ref>
-      <ref url="http://secunia.com/advisories/49136" source="SECUNIA" adv="1">49136</ref>
-      <ref url="http://secunia.com/advisories/48789" source="SECUNIA" adv="1">48789</ref>
-      <ref url="http://secunia.com/advisories/48748" source="SECUNIA" adv="1">48748</ref>
-      <ref url="http://secunia.com/advisories/48743" source="SECUNIA" adv="1">48743</ref>
-      <ref url="http://puppetlabs.com/security/cve/cve-2012-1987/hotfixes/" source="CONFIRM">http://puppetlabs.com/security/cve/cve-2012-1987/hotfixes/</ref>
-      <ref url="http://puppetlabs.com/security/cve/cve-2012-1987/" source="CONFIRM" adv="1">http://puppetlabs.com/security/cve/cve-2012-1987/</ref>
-      <ref url="http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.15" source="CONFIRM">http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.15</ref>
-      <ref url="http://projects.puppetlabs.com/issues/13553" source="MISC" adv="1">http://projects.puppetlabs.com/issues/13553</ref>
-      <ref url="http://projects.puppetlabs.com/issues/13552" source="MISC" adv="1">http://projects.puppetlabs.com/issues/13552</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080003.html" source="FEDORA">FEDORA-2012-6674</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079289.html" source="FEDORA">FEDORA-2012-6055</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079227.html" source="FEDORA">FEDORA-2012-5999</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="puppetlabs" name="puppet">
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.10" />
-        <vers num="2.6.11" />
-        <vers num="2.6.12" />
-        <vers num="2.6.13" />
-        <vers num="2.6.14" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.6.7" />
-        <vers num="2.6.8" />
-        <vers num="2.6.9" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.11" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-      </prod>
-      <prod vendor="puppetlabs" name="puppet_enterprise_users">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1988" published="2012-05-29" name="CVE-2012-1988" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys and file-creation permissions on the puppet master to execute arbitrary commands by creating a file whose full pathname contains shell metacharacters, then performing a filebucket request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15087408" source="SUSE">openSUSE-SU-2012:0835</ref>
-      <ref url="https://hermes.opensuse.org/messages/14523305" source="SUSE">openSUSE-SU-2012:0608</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74796" source="XF">puppet-file-bucket-command-exec(74796)</ref>
-      <ref url="http://www.securityfocus.com/bid/52975" source="BID">52975</ref>
-      <ref url="http://www.osvdb.org/81309" source="OSVDB">81309</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2451" source="DEBIAN">DSA-2451</ref>
-      <ref url="http://ubuntu.com/usn/usn-1419-1" source="UBUNTU">USN-1419-1</ref>
-      <ref url="http://secunia.com/advisories/49136" source="SECUNIA" adv="1">49136</ref>
-      <ref url="http://secunia.com/advisories/48789" source="SECUNIA" adv="1">48789</ref>
-      <ref url="http://secunia.com/advisories/48748" source="SECUNIA" adv="1">48748</ref>
-      <ref url="http://secunia.com/advisories/48743" source="SECUNIA" adv="1">48743</ref>
-      <ref url="http://puppetlabs.com/security/cve/cve-2012-1988%20/" source="CONFIRM">http://puppetlabs.com/security/cve/cve-2012-1988 /</ref>
-      <ref url="http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.15" source="CONFIRM">http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.15</ref>
-      <ref url="http://projects.puppetlabs.com/issues/13518" source="MISC" adv="1">http://projects.puppetlabs.com/issues/13518</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080003.html" source="FEDORA">FEDORA-2012-6674</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079289.html" source="FEDORA">FEDORA-2012-6055</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079227.html" source="FEDORA">FEDORA-2012-5999</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="puppetlabs" name="puppet">
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.10" />
-        <vers num="2.6.11" />
-        <vers num="2.6.12" />
-        <vers num="2.6.13" />
-        <vers num="2.6.14" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.6.7" />
-        <vers num="2.6.8" />
-        <vers num="2.6.9" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.11" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-      </prod>
-      <prod vendor="puppetlabs" name="puppet_enterprise_users">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1989" published="2012-06-27" name="CVE-2012-1989" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="3.6" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.9" CVSS_base_score="3.6">
-    <desc>
-      <descript source="cve">telnet.rb in Puppet 2.7.x before 2.7.13 and Puppet Enterprise (PE) 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows local users to overwrite arbitrary files via a symlink attack on the NET::Telnet connection log (/tmp/out.log).</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15087408" source="SUSE">openSUSE-SU-2012:0835</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74797" source="XF">puppet-nettelnet-symlink(74797)</ref>
-      <ref url="http://www.securityfocus.com/bid/52975" source="BID">52975</ref>
-      <ref url="http://ubuntu.com/usn/usn-1419-1" source="UBUNTU">USN-1419-1</ref>
-      <ref url="http://secunia.com/advisories/49136" source="SECUNIA" adv="1">49136</ref>
-      <ref url="http://secunia.com/advisories/48748" source="SECUNIA" adv="1">48748</ref>
-      <ref url="http://secunia.com/advisories/48743" source="SECUNIA" adv="1">48743</ref>
-      <ref url="http://puppetlabs.com/security/cve/cve-2012-1989/" source="CONFIRM" adv="1">http://puppetlabs.com/security/cve/cve-2012-1989/</ref>
-      <ref url="http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.7.13" source="CONFIRM">http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.7.13</ref>
-      <ref url="http://projects.puppetlabs.com/issues/13606" source="MISC">http://projects.puppetlabs.com/issues/13606</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-05/msg00012.html" source="SUSE">openSUSE-SU-2012:0608</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="puppetlabs" name="puppet">
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.11" />
-        <vers num="2.7.12" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-      </prod>
-      <prod vendor="puppetlabs" name="puppet_enterprise_users">
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1990" published="2012-05-22" name="CVE-2012-1990" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric Kerweb before 3.0.1 and Kerwin before 6.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the evtvariablename parameter in an evts.xml action to kw.dll, (2) unspecified search fields, or (3) unspecified content-display fields.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53409" source="BID">53409</ref>
-      <ref url="http://www.phocean.net/2012/05/08/cve-2012-1990-kerwebkerwin-xss-vulnerabilities.html" source="MISC">http://www.phocean.net/2012/05/08/cve-2012-1990-kerwebkerwin-xss-vulnerabilities.html</ref>
-      <ref url="http://secunia.com/advisories/49041" source="SECUNIA">49041</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="schneider-electric-kerweb" name="3.0">
-        <vers num="" />
-      </prod>
-      <prod vendor="schneider-electric-kerwin" name="6.0">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-1992" published="2012-04-11" name="CVE-2012-1992" modified="2012-04-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in admin/edituser.php in CMS Made Simple 1.10.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the email parameter (aka the Email Address field in the Edit User template).</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.webapp-security.com/wp-content/uploads/2012/04/CMS-Made-Simple-1.10.3-XSS-Vulnerability2.txt" source="MISC">http://www.webapp-security.com/wp-content/uploads/2012/04/CMS-Made-Simple-1.10.3-XSS-Vulnerability2.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cmsmadesimple" name="cms_made_simple">
-        <vers num="0.1" />
-        <vers num="0.10" />
-        <vers num="0.10.1" />
-        <vers num="0.10.2" />
-        <vers num="0.10.3" />
-        <vers num="0.10.4" />
-        <vers num="0.11" edition="beta5" />
-        <vers num="0.11" edition="beta6" />
-        <vers num="0.11.1" />
-        <vers num="0.11.2" />
-        <vers num="0.12" edition="beta1" />
-        <vers num="0.12" edition="beta2" />
-        <vers num="0.12.1" />
-        <vers num="0.12.2" />
-        <vers num="0.13" edition="beta1" />
-        <vers num="0.13" edition="beta2" />
-        <vers num="0.13" edition="beta3" />
-        <vers num="0.2" />
-        <vers num="0.2.1" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.4" />
-        <vers num="0.4.1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.8" />
-        <vers num="0.8.1" />
-        <vers num="0.8.2" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="1.0" edition="beta1" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0" edition="beta3" />
-        <vers num="1.0" edition="beta4" />
-        <vers num="1.0" edition="beta5" />
-        <vers num="1.0" edition="beta6" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.1" edition="rc1" />
-        <vers num="1.1" edition="rc2" />
-        <vers num="1.1" edition="rc3" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.3.1" />
-        <vers num="1.1.4" />
-        <vers num="1.1.4.1" />
-        <vers num="1.10" />
-        <vers num="1.10.1" />
-        <vers num="1.10.2" />
-        <vers prev="1" num="1.10.3" />
-        <vers num="1.2" edition="beta1" />
-        <vers num="1.2" edition="beta2" />
-        <vers num="1.2" edition="beta3" />
-        <vers num="1.2" edition="rc1" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" edition="beta1" />
-        <vers num="1.3" edition="beta2" />
-        <vers num="1.3.1" />
-        <vers num="1.4" edition="beta1" />
-        <vers num="1.4" edition="beta2" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.6" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-        <vers num="1.6.8" />
-        <vers num="1.7" />
-        <vers num="1.7.1" />
-        <vers num="1.8" />
-        <vers num="1.8.1" />
-        <vers num="1.8.2" />
-        <vers num="1.9" />
-        <vers num="1.9.1" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.4" />
-        <vers num="1.9.4.1" />
-        <vers num="1.9.4.2" />
-        <vers num="1.9.4.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-1993" published="2012-04-18" name="CVE-2012-1993" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:S/C:P/I:P/A:N)" CVSS_score="3.2" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.1" CVSS_base_score="3.2">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows local users to modify data or obtain sensitive information via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026925" source="SECTRACK">1026925</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522374" source="HP">HPSBMU02764</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522374" source="HP">SSRT100827</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="system_management_homepage">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.1.104" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.106" />
-        <vers num="2.1" />
-        <vers num="2.1.0-103" />
-        <vers num="2.1.0-103(a)" />
-        <vers num="2.1.0-109" />
-        <vers num="2.1.0-118" />
-        <vers num="2.1.0.121" />
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.10-186" />
-        <vers num="2.1.10.186" edition="b" />
-        <vers num="2.1.10.186" edition="c" />
-        <vers num="2.1.11" />
-        <vers num="2.1.11-197" />
-        <vers num="2.1.11.197" edition="a" />
-        <vers num="2.1.12-118" />
-        <vers num="2.1.12-200" />
-        <vers num="2.1.12.201" />
-        <vers num="2.1.14.20" />
-        <vers num="2.1.15-210" />
-        <vers num="2.1.15.210" />
-        <vers num="2.1.2" />
-        <vers num="2.1.2-127" />
-        <vers num="2.1.2.127" />
-        <vers num="2.1.3" />
-        <vers num="2.1.3.132" />
-        <vers num="2.1.4" />
-        <vers num="2.1.4-143" />
-        <vers num="2.1.4.143" />
-        <vers num="2.1.5" />
-        <vers num="2.1.5-146" />
-        <vers num="2.1.5.146" edition="b" />
-        <vers num="2.1.6" />
-        <vers num="2.1.6-156" />
-        <vers num="2.1.6.156" />
-        <vers num="2.1.7" />
-        <vers num="2.1.7-168" />
-        <vers num="2.1.7.168" />
-        <vers num="2.1.8" />
-        <vers num="2.1.8-177" />
-        <vers num="2.1.8.179" />
-        <vers num="2.1.9" />
-        <vers num="2.1.9-178" />
-        <vers num="2.2.6" />
-        <vers num="2.2.8" />
-        <vers num="3.0.0-68" />
-        <vers num="3.0.0.64" />
-        <vers num="3.0.1-73" />
-        <vers num="3.0.1.73" />
-        <vers num="3.0.2-77" />
-        <vers num="3.0.2.77" edition="b" />
-        <vers num="6.0" />
-        <vers num="6.0.0-95" />
-        <vers num="6.0.0.96" />
-        <vers num="6.1" />
-        <vers prev="1" num="6.1.0-103" />
-        <vers num="6.1.0.102" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2000" published="2012-05-02" name="CVE-2012-2000" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in HP System Health Application and Command Line Utilities before 9.0.0 allow remote attackers to execute arbitrary code via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522549" source="HP">SSRT100603</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522549" source="HP">HPSBMU02772</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="system_health_application_and_command_line_utilities">
-        <vers num="8.1.0-104.rhel5" />
-        <vers num="8.1.1-14.rhel5" />
-        <vers num="8.2.0-283.rhel5" />
-        <vers num="8.2.2-19.rhel5" />
-        <vers num="8.2.5-50.rhel5" />
-        <vers num="8.2.6-5.rhel5" />
-        <vers num="8.3.0" />
-        <vers num="8.3.1" />
-        <vers num="8.3.2" />
-        <vers num="8.4.0" />
-        <vers num="8.5.0" />
-        <vers num="8.6.0" />
-        <vers num="8.6.3" />
-        <vers prev="1" num="8.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2001" published="2012-05-02" name="CVE-2012-2001" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in HP SNMP Agents for Linux before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522546" source="HP">SSRT100558</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522546" source="HP">HPSBMU02771</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="snmp_agents_for_linux">
-        <vers num="8.1.0-110.sles10" />
-        <vers num="8.1.1-22.sles10" />
-        <vers num="8.2.0-284.sles10" />
-        <vers num="8.2.2-20.sles10" />
-        <vers num="8.2.5-50.sles10" />
-        <vers num="8.2.6-5.sles10" />
-        <vers num="8.3.0" />
-        <vers num="8.4.0" />
-        <vers num="8.5.0" />
-        <vers num="8.6.0" />
-        <vers prev="1" num="8.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2002" published="2012-05-02" name="CVE-2012-2002" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:P/A:P)" CVSS_score="8.3" CVSS_impact_subscore="8.5" CVSS_exploit_subscore="8.6" CVSS_base_score="8.3">
-    <desc>
-      <descript source="cve">Open redirect vulnerability in HP SNMP Agents for Linux before 9.0.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522546" source="HP">SSRT100558</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522546" source="HP">HPSBMU02771</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="snmp_agents_for_linux">
-        <vers num="8.1.0-110.sles10" />
-        <vers num="8.1.1-22.sles10" />
-        <vers num="8.2.0-284.sles10" />
-        <vers num="8.2.2-20.sles10" />
-        <vers num="8.2.5-50.sles10" />
-        <vers num="8.2.6-5.sles10" />
-        <vers num="8.3.0" />
-        <vers num="8.4.0" />
-        <vers num="8.5.0" />
-        <vers num="8.6.0" />
-        <vers prev="1" num="8.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2003" published="2012-05-02" name="CVE-2012-2003" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522548" source="HP">SSRT100848</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522548" source="HP">HPSBMU02770</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="insight_management_agents">
-        <vers num="6.30.0.0" />
-        <vers num="6.31.0.0" edition="b" />
-        <vers num="6.40.0.0" />
-        <vers num="7.0.0.0" />
-        <vers num="7.10.0.0" />
-        <vers num="7.20.0.0" />
-        <vers num="7.30.0.0" />
-        <vers num="7.40.0.0" />
-        <vers num="7.40.1.0" />
-        <vers num="7.41.0.0" />
-        <vers num="7.50.0.0" />
-        <vers num="7.51.0.0" />
-        <vers num="7.60.0.0" />
-        <vers num="7.70.0.0" />
-        <vers num="7.80.0.0" />
-        <vers num="7.90.0.0" />
-        <vers num="7.91.0.0" />
-        <vers num="7.95.0.0" />
-        <vers num="8.0.0.0" />
-        <vers num="8.1.0.0" />
-        <vers num="8.10.0.0" />
-        <vers num="8.11.0.0" />
-        <vers num="8.15.0.0" />
-        <vers num="8.20.0.0" />
-        <vers num="8.22.0.0" />
-        <vers num="8.26.0.0" />
-        <vers num="8.30.0.0" />
-        <vers num="8.40.0.0" />
-        <vers num="8.5" />
-        <vers num="8.50.0.0" />
-        <vers num="8.60.0.0" />
-        <vers prev="1" num="8.70.0.0" edition="b" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2004" published="2012-05-02" name="CVE-2012-2004" modified="2012-05-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:P/A:P)" CVSS_score="8.3" CVSS_impact_subscore="8.5" CVSS_exploit_subscore="8.6" CVSS_base_score="8.3">
-    <desc>
-      <descript source="cve">Open redirect vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522548" source="HP">HPSBMU02770</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522548" source="HP">SSRT100848</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="insight_management_agents">
-        <vers num="6.30.0.0" />
-        <vers num="6.31.0.0" edition="b" />
-        <vers num="6.40.0.0" />
-        <vers num="7.0.0.0" />
-        <vers num="7.10.0.0" />
-        <vers num="7.20.0.0" />
-        <vers num="7.30.0.0" />
-        <vers num="7.40.0.0" />
-        <vers num="7.40.1.0" />
-        <vers num="7.41.0.0" />
-        <vers num="7.50.0.0" />
-        <vers num="7.51.0.0" />
-        <vers num="7.60.0.0" />
-        <vers num="7.70.0.0" />
-        <vers num="7.80.0.0" />
-        <vers num="7.90.0.0" />
-        <vers num="7.91.0.0" />
-        <vers num="7.95.0.0" />
-        <vers num="8.0.0.0" />
-        <vers num="8.1.0.0" />
-        <vers num="8.10.0.0" />
-        <vers num="8.11.0.0" />
-        <vers num="8.15.0.0" />
-        <vers num="8.20.0.0" />
-        <vers num="8.22.0.0" />
-        <vers num="8.26.0.0" />
-        <vers num="8.30.0.0" />
-        <vers num="8.40.0.0" />
-        <vers num="8.5" />
-        <vers num="8.50.0.0" />
-        <vers num="8.60.0.0" />
-        <vers prev="1" num="8.70.0.0" edition="b" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2005" published="2012-05-02" name="CVE-2012-2005" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522548" source="HP">SSRT100848</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522548" source="HP">HPSBMU02770</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="insight_management_agents">
-        <vers num="6.30.0.0" />
-        <vers num="6.31.0.0" edition="b" />
-        <vers num="6.40.0.0" />
-        <vers num="7.0.0.0" />
-        <vers num="7.10.0.0" />
-        <vers num="7.20.0.0" />
-        <vers num="7.30.0.0" />
-        <vers num="7.40.0.0" />
-        <vers num="7.40.1.0" />
-        <vers num="7.41.0.0" />
-        <vers num="7.50.0.0" />
-        <vers num="7.51.0.0" />
-        <vers num="7.60.0.0" />
-        <vers num="7.70.0.0" />
-        <vers num="7.80.0.0" />
-        <vers num="7.90.0.0" />
-        <vers num="7.91.0.0" />
-        <vers num="7.95.0.0" />
-        <vers num="8.0.0.0" />
-        <vers num="8.1.0.0" />
-        <vers num="8.10.0.0" />
-        <vers num="8.11.0.0" />
-        <vers num="8.15.0.0" />
-        <vers num="8.20.0.0" />
-        <vers num="8.22.0.0" />
-        <vers num="8.26.0.0" />
-        <vers num="8.30.0.0" />
-        <vers num="8.40.0.0" />
-        <vers num="8.5" />
-        <vers num="8.50.0.0" />
-        <vers num="8.60.0.0" />
-        <vers prev="1" num="8.70.0.0" edition="b" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2006" published="2012-05-02" name="CVE-2012-2006" modified="2012-05-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:P)" CVSS_score="4.9" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="6.8" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to modify data or cause a denial of service via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522548" source="HP">SSRT100848</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522548" source="HP">HPSBMU02770</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="insight_management_agents">
-        <vers num="6.30.0.0" />
-        <vers num="6.31.0.0" edition="b" />
-        <vers num="6.40.0.0" />
-        <vers num="7.0.0.0" />
-        <vers num="7.10.0.0" />
-        <vers num="7.20.0.0" />
-        <vers num="7.30.0.0" />
-        <vers num="7.40.0.0" />
-        <vers num="7.40.1.0" />
-        <vers num="7.41.0.0" />
-        <vers num="7.50.0.0" />
-        <vers num="7.51.0.0" />
-        <vers num="7.60.0.0" />
-        <vers num="7.70.0.0" />
-        <vers num="7.80.0.0" />
-        <vers num="7.90.0.0" />
-        <vers num="7.91.0.0" />
-        <vers num="7.95.0.0" />
-        <vers num="8.0.0.0" />
-        <vers num="8.1.0.0" />
-        <vers num="8.10.0.0" />
-        <vers num="8.11.0.0" />
-        <vers num="8.15.0.0" />
-        <vers num="8.20.0.0" />
-        <vers num="8.22.0.0" />
-        <vers num="8.26.0.0" />
-        <vers num="8.30.0.0" />
-        <vers num="8.40.0.0" />
-        <vers num="8.5" />
-        <vers num="8.50.0.0" />
-        <vers num="8.60.0.0" />
-        <vers prev="1" num="8.70.0.0" edition="b" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2007" published="2012-05-09" name="CVE-2012-2007" modified="2012-05-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03312417" source="HP" adv="1">SSRT100853</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03312417" source="HP" adv="1">HPSBMU02775</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="performance_insight">
-        <vers num="5.3" />
-        <vers num="5.41" />
-        <vers num="5.41.001" />
-        <vers num="5.41.002" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2008" published="2012-05-09" name="CVE-2012-2008" modified="2012-05-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03312417" source="HP" adv="1">HPSBMU02775</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03312417" source="HP" adv="1">SSRT100853</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="performance_insight">
-        <vers num="5.3" />
-        <vers num="5.41" />
-        <vers num="5.41.001" />
-        <vers num="5.41.002" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2009" published="2012-05-09" name="CVE-2012-2009" modified="2012-05-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote authenticated users to gain privileges via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03312417" source="HP" adv="1">SSRT100853</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03312417" source="HP" adv="1">HPSBMU02775</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="performance_insight">
-        <vers num="5.3" />
-        <vers num="5.41" />
-        <vers num="5.41.001" />
-        <vers num="5.41.002" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2010" published="2012-05-18" name="CVE-2012-2010" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SYS$ACM system service is enabled, allows local users to gain privileges via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03333494" source="HP" adv="1">HPSBOV02780</ref>
-      <ref url="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03333494" source="HP">SSRT100766</ref>
-      <ref url="http://www.securityfocus.com/bid/53613" source="BID">53613</ref>
-      <ref url="http://osvdb.org/82015" source="OSVDB">82015</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="openvms">
-        <vers num="8.3" edition="" />
-        <vers num="8.3" edition=":alpha" />
-        <vers num="8.3-1h1" edition="" />
-        <vers num="8.3-1h1" edition=":integrity_servers" />
-        <vers num="8.4" edition="" />
-        <vers num="8.4" edition=":itanium" />
-        <vers num="8.4" edition=":alpha" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2011" published="2012-06-13" name="CVE-2012-2011" modified="2012-06-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in HP Web Jetadmin 8.x allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03331603" source="HP" adv="1">HPSBPI02779</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03331603" source="HP" adv="1">SSRT100855</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="web_jetadmin">
-        <vers num="8.0" />
-        <vers num="8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2012" published="2012-06-29" name="CVE-2012-2012" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">HP System Management Homepage (SMH) before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP" patch="1" adv="1">SSRT100877</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP" patch="1" adv="1">HPSBMU02786</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="system_management_homepage">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.1.104" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.106" />
-        <vers num="2.1" />
-        <vers num="2.1.0-103" />
-        <vers num="2.1.0-103(a)" />
-        <vers num="2.1.0-109" />
-        <vers num="2.1.0-118" />
-        <vers num="2.1.0.121" />
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.10-186" />
-        <vers num="2.1.10.186" edition="b" />
-        <vers num="2.1.10.186" edition="c" />
-        <vers num="2.1.11" />
-        <vers num="2.1.11-197" />
-        <vers num="2.1.11.197" edition="a" />
-        <vers num="2.1.12-118" />
-        <vers num="2.1.12-200" />
-        <vers num="2.1.12.201" />
-        <vers num="2.1.14" />
-        <vers num="2.1.14.20" />
-        <vers num="2.1.15" />
-        <vers num="2.1.15-210" />
-        <vers num="2.1.15.210" />
-        <vers num="2.1.2" />
-        <vers num="2.1.2-127" />
-        <vers num="2.1.2.127" />
-        <vers num="2.1.3" />
-        <vers num="2.1.3.132" />
-        <vers num="2.1.4" />
-        <vers num="2.1.4-143" />
-        <vers num="2.1.4.143" />
-        <vers num="2.1.5" />
-        <vers num="2.1.5-146" />
-        <vers num="2.1.5.146" edition="b" />
-        <vers num="2.1.6" />
-        <vers num="2.1.6-156" />
-        <vers num="2.1.6.156" />
-        <vers num="2.1.7" />
-        <vers num="2.1.7-168" />
-        <vers num="2.1.7.168" />
-        <vers num="2.1.8" />
-        <vers num="2.1.8-177" />
-        <vers num="2.1.8.179" />
-        <vers num="2.1.9" />
-        <vers num="2.1.9-178" />
-        <vers num="2.2.6" />
-        <vers num="2.2.8" />
-        <vers num="3.0.0" />
-        <vers num="3.0.0-68" />
-        <vers num="3.0.0.64" />
-        <vers num="3.0.1" />
-        <vers num="3.0.1-73" />
-        <vers num="3.0.1.73" />
-        <vers num="3.0.2" />
-        <vers num="3.0.2-77" />
-        <vers num="3.0.2.77" edition="b" />
-        <vers num="6.0" />
-        <vers num="6.0.0-95" />
-        <vers num="6.0.0.96" />
-        <vers num="6.1" />
-        <vers num="6.1.0-103" />
-        <vers num="6.1.0.102" />
-        <vers num="6.2.0" />
-        <vers num="6.2.2.7" />
-        <vers num="6.3.0" />
-        <vers num="6.3.1" />
-        <vers num="7.0" />
-        <vers prev="1" num="7.1.0-16" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2013" published="2012-06-29" name="CVE-2012-2013" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote attackers to cause a denial of service, or possibly obtain sensitive information or modify data, via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP" patch="1" adv="1">SSRT100877</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP" patch="1" adv="1">HPSBMU02786</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="system_management_homepage">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.1.104" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.106" />
-        <vers num="2.1" />
-        <vers num="2.1.0-103" />
-        <vers num="2.1.0-103(a)" />
-        <vers num="2.1.0-109" />
-        <vers num="2.1.0-118" />
-        <vers num="2.1.0.121" />
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.10-186" />
-        <vers num="2.1.10.186" edition="b" />
-        <vers num="2.1.10.186" edition="c" />
-        <vers num="2.1.11" />
-        <vers num="2.1.11-197" />
-        <vers num="2.1.11.197" edition="a" />
-        <vers num="2.1.12-118" />
-        <vers num="2.1.12-200" />
-        <vers num="2.1.12.201" />
-        <vers num="2.1.14" />
-        <vers num="2.1.14.20" />
-        <vers num="2.1.15" />
-        <vers num="2.1.15-210" />
-        <vers num="2.1.15.210" />
-        <vers num="2.1.2" />
-        <vers num="2.1.2-127" />
-        <vers num="2.1.2.127" />
-        <vers num="2.1.3" />
-        <vers num="2.1.3.132" />
-        <vers num="2.1.4" />
-        <vers num="2.1.4-143" />
-        <vers num="2.1.4.143" />
-        <vers num="2.1.5" />
-        <vers num="2.1.5-146" />
-        <vers num="2.1.5.146" edition="b" />
-        <vers num="2.1.6" />
-        <vers num="2.1.6-156" />
-        <vers num="2.1.6.156" />
-        <vers num="2.1.7" />
-        <vers num="2.1.7-168" />
-        <vers num="2.1.7.168" />
-        <vers num="2.1.8" />
-        <vers num="2.1.8-177" />
-        <vers num="2.1.8.179" />
-        <vers num="2.1.9" />
-        <vers num="2.1.9-178" />
-        <vers num="2.2.6" />
-        <vers num="2.2.8" />
-        <vers num="3.0.0" />
-        <vers num="3.0.0-68" />
-        <vers num="3.0.0.64" />
-        <vers num="3.0.1" />
-        <vers num="3.0.1-73" />
-        <vers num="3.0.1.73" />
-        <vers num="3.0.2" />
-        <vers num="3.0.2-77" />
-        <vers num="3.0.2.77" edition="b" />
-        <vers num="6.0" />
-        <vers num="6.0.0-95" />
-        <vers num="6.0.0.96" />
-        <vers num="6.1" />
-        <vers num="6.1.0-103" />
-        <vers num="6.1.0.102" />
-        <vers num="6.2.0" />
-        <vers num="6.2.2.7" />
-        <vers num="6.3.0" />
-        <vers num="6.3.1" />
-        <vers num="7.0" />
-        <vers prev="1" num="7.1.0-16" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2014" published="2012-06-29" name="CVE-2012-2014" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">HP System Management Homepage (SMH) before 7.1.1 does not properly validate input, which allows remote authenticated users to have an unspecified impact via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP" patch="1" adv="1">SSRT100877</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP" patch="1" adv="1">HPSBMU02786</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="system_management_homepage">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.1.104" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.106" />
-        <vers num="2.1" />
-        <vers num="2.1.0-103" />
-        <vers num="2.1.0-103(a)" />
-        <vers num="2.1.0-109" />
-        <vers num="2.1.0-118" />
-        <vers num="2.1.0.121" />
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.10-186" />
-        <vers num="2.1.10.186" edition="b" />
-        <vers num="2.1.10.186" edition="c" />
-        <vers num="2.1.11" />
-        <vers num="2.1.11-197" />
-        <vers num="2.1.11.197" edition="a" />
-        <vers num="2.1.12-118" />
-        <vers num="2.1.12-200" />
-        <vers num="2.1.12.201" />
-        <vers num="2.1.14" />
-        <vers num="2.1.14.20" />
-        <vers num="2.1.15" />
-        <vers num="2.1.15-210" />
-        <vers num="2.1.15.210" />
-        <vers num="2.1.2" />
-        <vers num="2.1.2-127" />
-        <vers num="2.1.2.127" />
-        <vers num="2.1.3" />
-        <vers num="2.1.3.132" />
-        <vers num="2.1.4" />
-        <vers num="2.1.4-143" />
-        <vers num="2.1.4.143" />
-        <vers num="2.1.5" />
-        <vers num="2.1.5-146" />
-        <vers num="2.1.5.146" edition="b" />
-        <vers num="2.1.6" />
-        <vers num="2.1.6-156" />
-        <vers num="2.1.6.156" />
-        <vers num="2.1.7" />
-        <vers num="2.1.7-168" />
-        <vers num="2.1.7.168" />
-        <vers num="2.1.8" />
-        <vers num="2.1.8-177" />
-        <vers num="2.1.8.179" />
-        <vers num="2.1.9" />
-        <vers num="2.1.9-178" />
-        <vers num="2.2.6" />
-        <vers num="2.2.8" />
-        <vers num="3.0.0" />
-        <vers num="3.0.0-68" />
-        <vers num="3.0.0.64" />
-        <vers num="3.0.1" />
-        <vers num="3.0.1-73" />
-        <vers num="3.0.1.73" />
-        <vers num="3.0.2" />
-        <vers num="3.0.2-77" />
-        <vers num="3.0.2.77" edition="b" />
-        <vers num="6.0" />
-        <vers num="6.0.0-95" />
-        <vers num="6.0.0.96" />
-        <vers num="6.1" />
-        <vers num="6.1.0-103" />
-        <vers num="6.1.0.102" />
-        <vers num="6.2.0" />
-        <vers num="6.2.2.7" />
-        <vers num="6.3.0" />
-        <vers num="6.3.1" />
-        <vers num="7.0" />
-        <vers prev="1" num="7.1.0-16" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2015" published="2012-06-29" name="CVE-2012-2015" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote authenticated users to gain privileges and obtain sensitive information via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP" patch="1" adv="1">HPSBMU02786</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP" patch="1" adv="1">SSRT100877</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="system_management_homepage">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.1.104" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.106" />
-        <vers num="2.1" />
-        <vers num="2.1.0-103" />
-        <vers num="2.1.0-103(a)" />
-        <vers num="2.1.0-109" />
-        <vers num="2.1.0-118" />
-        <vers num="2.1.0.121" />
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.10-186" />
-        <vers num="2.1.10.186" edition="b" />
-        <vers num="2.1.10.186" edition="c" />
-        <vers num="2.1.11" />
-        <vers num="2.1.11-197" />
-        <vers num="2.1.11.197" edition="a" />
-        <vers num="2.1.12-118" />
-        <vers num="2.1.12-200" />
-        <vers num="2.1.12.201" />
-        <vers num="2.1.14" />
-        <vers num="2.1.14.20" />
-        <vers num="2.1.15" />
-        <vers num="2.1.15-210" />
-        <vers num="2.1.15.210" />
-        <vers num="2.1.2" />
-        <vers num="2.1.2-127" />
-        <vers num="2.1.2.127" />
-        <vers num="2.1.3" />
-        <vers num="2.1.3.132" />
-        <vers num="2.1.4" />
-        <vers num="2.1.4-143" />
-        <vers num="2.1.4.143" />
-        <vers num="2.1.5" />
-        <vers num="2.1.5-146" />
-        <vers num="2.1.5.146" edition="b" />
-        <vers num="2.1.6" />
-        <vers num="2.1.6-156" />
-        <vers num="2.1.6.156" />
-        <vers num="2.1.7" />
-        <vers num="2.1.7-168" />
-        <vers num="2.1.7.168" />
-        <vers num="2.1.8" />
-        <vers num="2.1.8-177" />
-        <vers num="2.1.8.179" />
-        <vers num="2.1.9" />
-        <vers num="2.1.9-178" />
-        <vers num="2.2.6" />
-        <vers num="2.2.8" />
-        <vers num="3.0.0" />
-        <vers num="3.0.0-68" />
-        <vers num="3.0.0.64" />
-        <vers num="3.0.1" />
-        <vers num="3.0.1-73" />
-        <vers num="3.0.1.73" />
-        <vers num="3.0.2" />
-        <vers num="3.0.2-77" />
-        <vers num="3.0.2.77" edition="b" />
-        <vers num="6.0" />
-        <vers num="6.0.0-95" />
-        <vers num="6.0.0.96" />
-        <vers num="6.1" />
-        <vers num="6.1.0-103" />
-        <vers num="6.1.0.102" />
-        <vers num="6.2.0" />
-        <vers num="6.2.2.7" />
-        <vers num="6.3.0" />
-        <vers num="6.3.1" />
-        <vers num="7.0" />
-        <vers prev="1" num="7.1.0-16" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2016" published="2012-06-29" name="CVE-2012-2016" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:N/A:N)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows local users to obtain sensitive information via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP" patch="1" adv="1">HPSBMU02786</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" source="HP" patch="1" adv="1">SSRT100877</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="system_management_homepage">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.1.104" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.106" />
-        <vers num="2.1" />
-        <vers num="2.1.0-103" />
-        <vers num="2.1.0-103(a)" />
-        <vers num="2.1.0-109" />
-        <vers num="2.1.0-118" />
-        <vers num="2.1.0.121" />
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.10-186" />
-        <vers num="2.1.10.186" edition="b" />
-        <vers num="2.1.10.186" edition="c" />
-        <vers num="2.1.11" />
-        <vers num="2.1.11-197" />
-        <vers num="2.1.11.197" edition="a" />
-        <vers num="2.1.12-118" />
-        <vers num="2.1.12-200" />
-        <vers num="2.1.12.201" />
-        <vers num="2.1.14" />
-        <vers num="2.1.14.20" />
-        <vers num="2.1.15" />
-        <vers num="2.1.15-210" />
-        <vers num="2.1.15.210" />
-        <vers num="2.1.2" />
-        <vers num="2.1.2-127" />
-        <vers num="2.1.2.127" />
-        <vers num="2.1.3" />
-        <vers num="2.1.3.132" />
-        <vers num="2.1.4" />
-        <vers num="2.1.4-143" />
-        <vers num="2.1.4.143" />
-        <vers num="2.1.5" />
-        <vers num="2.1.5-146" />
-        <vers num="2.1.5.146" edition="b" />
-        <vers num="2.1.6" />
-        <vers num="2.1.6-156" />
-        <vers num="2.1.6.156" />
-        <vers num="2.1.7" />
-        <vers num="2.1.7-168" />
-        <vers num="2.1.7.168" />
-        <vers num="2.1.8" />
-        <vers num="2.1.8-177" />
-        <vers num="2.1.8.179" />
-        <vers num="2.1.9" />
-        <vers num="2.1.9-178" />
-        <vers num="2.2.6" />
-        <vers num="2.2.8" />
-        <vers num="3.0.0" />
-        <vers num="3.0.0-68" />
-        <vers num="3.0.0.64" />
-        <vers num="3.0.1" />
-        <vers num="3.0.1-73" />
-        <vers num="3.0.1.73" />
-        <vers num="3.0.2" />
-        <vers num="3.0.2-77" />
-        <vers num="3.0.2.77" edition="b" />
-        <vers num="6.0" />
-        <vers num="6.0.0-95" />
-        <vers num="6.0.0.96" />
-        <vers num="6.1" />
-        <vers num="6.1.0-103" />
-        <vers num="6.1.0.102" />
-        <vers num="6.2.0" />
-        <vers num="6.2.2.7" />
-        <vers num="6.3.0" />
-        <vers num="6.3.1" />
-        <vers num="7.0" />
-        <vers prev="1" num="7.1.0-16" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2017" published="2012-06-30" name="CVE-2012-2017" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability on HP Photosmart Wireless e-All-in-One B110, e-All-in-One D110, Plus e-All-in-One B210, eStation All-in-One C510, Ink Advantage e-All-in-One K510, and Premium Fax e-All-in-One C410 printers allows remote attackers to cause a denial of service via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02931414" source="HP" adv="1">SSRT100542</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02931414" source="HP" adv="1">HPSBPI02794</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="photosmart_e-all-in-one_printer_series">
-        <vers num="d110" />
-      </prod>
-      <prod vendor="hp" name="photosmart_estation_all-in-one-printer_series">
-        <vers num="c510" />
-      </prod>
-      <prod vendor="hp" name="photosmart_ink_advantage_e-all-in-one">
-        <vers num="k510" />
-      </prod>
-      <prod vendor="hp" name="photosmart_plus_e-all-in-one_printer_series">
-        <vers num="b210" />
-      </prod>
-      <prod vendor="hp" name="photosmart_premium_fax_e-all-in-one_printer_series">
-        <vers num="c410" />
-      </prod>
-      <prod vendor="hp" name="photosmart_wireless_e-all-in-one_printer_series">
-        <vers num="b110" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2018" published="2012-07-05" name="CVE-2012-2018" modified="2012-07-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 8.x, 9.0x, and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03343724" source="HP" adv="1">SSRT100806</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03343724" source="HP" adv="1">HPSBMU02783</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="network_node_manager_i">
-        <vers num="8.10" />
-        <vers num="8.11.002" />
-        <vers num="8.12.004" />
-        <vers num="8.13.005" />
-        <vers num="8.13.006" />
-        <vers num="9.0" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.03" />
-        <vers num="9.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2019" published="2012-07-11" name="CVE-2012-2019" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1325.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03397769" source="HP" adv="1">HPSBMU02796</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03397769" source="HP" adv="1">SSRT100594</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="operations_agent">
-        <vers prev="1" num="11.0" />
-        <vers num="7.36" />
-        <vers num="8.51" />
-        <vers num="8.51.102" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.60" />
-        <vers num="8.60.005" />
-        <vers num="8.60.006" />
-        <vers num="8.60.007" />
-        <vers num="8.60.008" />
-        <vers num="8.60.501" />
-        <vers num="8.60.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2020" published="2012-07-11" name="CVE-2012-2020" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1326.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03397769" source="HP" adv="1">HPSBMU02796</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03397769" source="HP" adv="1">SSRT100594</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="operations_agent">
-        <vers prev="1" num="11.0" />
-        <vers num="7.36" />
-        <vers num="8.51" />
-        <vers num="8.51.102" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.60" />
-        <vers num="8.60.005" />
-        <vers num="8.60.006" />
-        <vers num="8.60.007" />
-        <vers num="8.60.008" />
-        <vers num="8.60.501" />
-        <vers num="8.60.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2021" published="2012-07-16" name="CVE-2012-2021" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in HP AssetManager 5.20, 5.21, 5.22, and 9.30 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03403333" source="HP" adv="1">SSRT100876</ref>
-      <ref url="http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03403333" source="HP" adv="1">HPSBGN02787</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="assetmanager">
-        <vers num="5.20" />
-        <vers num="5.21" />
-        <vers num="5.22" />
-        <vers num="9.30" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2022" published="2012-08-07" name="CVE-2012-2022" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i (NNMi) 8.x, 9.0x, 9.1x, and 9.20 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03405705" source="HP" adv="1">HPSBMU02798</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03405705" source="HP" adv="1">SSRT100908</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="network_node_manager_i">
-        <vers num="8.0" />
-        <vers num="8.10" />
-        <vers num="8.11.002" />
-        <vers num="8.12.004" />
-        <vers num="8.13.005" />
-        <vers num="8.13.006" />
-        <vers num="9.0" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.03" />
-        <vers num="9.10" />
-        <vers num="9.20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2023" published="2012-05-09" name="CVE-2012-2023" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-10.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-10.html</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75446" source="XF">adobe-illustrator-code-exec(75446)</ref>
-      <ref url="http://www.securityfocus.com/bid/53422" source="BID">53422</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="illustrator">
-        <vers num="10.0" />
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="12.0.0" />
-        <vers num="13.0" />
-        <vers num="13.0.1" />
-        <vers num="13.0.2" />
-        <vers num="13.0.3" />
-        <vers num="14.0" />
-        <vers num="15.0" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="adobe" name="illustrator_cs5.5">
-        <vers prev="1" num="15" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2024" published="2012-05-09" name="CVE-2012-2024" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2025, and CVE-2012-2026.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-10.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-10.html</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75447" source="XF">illustrator-code-execution(75447)</ref>
-      <ref url="http://www.securityfocus.com/bid/53422" source="BID">53422</ref>
-      <ref url="http://osvdb.org/81756" source="OSVDB">81756</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="illustrator">
-        <vers num="10.0" />
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="12.0.0" />
-        <vers num="13.0" />
-        <vers num="13.0.1" />
-        <vers num="13.0.2" />
-        <vers num="13.0.3" />
-        <vers num="14.0" />
-        <vers num="15.0" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="adobe" name="illustrator_cs5.5">
-        <vers prev="1" num="15" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2025" published="2012-05-09" name="CVE-2012-2025" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2024, and CVE-2012-2026.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-10.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-10.html</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75448" source="XF">adobe-illustrator-code-execution(75448)</ref>
-      <ref url="http://www.securityfocus.com/bid/53422" source="BID">53422</ref>
-      <ref url="http://osvdb.org/81757" source="OSVDB">81757</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="illustrator">
-        <vers num="10.0" />
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="12.0.0" />
-        <vers num="13.0" />
-        <vers num="13.0.1" />
-        <vers num="13.0.2" />
-        <vers num="13.0.3" />
-        <vers num="14.0" />
-        <vers num="15.0" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="adobe" name="illustrator_cs5.5">
-        <vers prev="1" num="15" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2026" published="2012-05-09" name="CVE-2012-2026" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2024, and CVE-2012-2025.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-10.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-10.html</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75449" source="XF">adobe-jpegformat-bo(75449)</ref>
-      <ref url="http://www.securityfocus.com/bid/53422" source="BID">53422</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="illustrator">
-        <vers num="10.0" />
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="12.0.0" />
-        <vers num="13.0" />
-        <vers num="13.0.1" />
-        <vers num="13.0.2" />
-        <vers num="13.0.3" />
-        <vers num="14.0" />
-        <vers num="15.0" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="adobe" name="illustrator_cs5.5">
-        <vers prev="1" num="15" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2027" published="2012-05-09" name="CVE-2012-2027" modified="2012-05-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in Adobe Photoshop before CS6 allows remote attackers to execute arbitrary code via a crafted TIFF (aka .TIF) file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-11.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-11.html</ref>
-      <ref url="http://www.securityfocus.com/bid/52634" source="BID">52634</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="photoshop">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="11.0" edition="" />
-        <vers num="11.0" edition=":~~~~x64~" />
-        <vers num="11.0.1" />
-        <vers num="11.0.2" />
-        <vers num="11.0.4" />
-        <vers num="12.0.0" />
-        <vers num="12.0.1" />
-        <vers num="12.0.2" />
-        <vers num="12.0.3" />
-        <vers num="12.0.4" />
-        <vers num="2.5" edition="" />
-        <vers num="2.5" edition=":pro" />
-        <vers num="3.0" edition="" />
-        <vers num="3.0" edition=":pro" />
-        <vers num="4.0" edition="" />
-        <vers num="4.0" edition=":pro" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":pro" />
-        <vers num="6.0" edition="" />
-        <vers num="6.0" edition=":pro" />
-        <vers num="6.0.1" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-      </prod>
-      <prod vendor="adobe" name="photoshop_cs4">
-        <vers num="11.0" />
-      </prod>
-      <prod vendor="adobe" name="photoshop_cs5.5">
-        <vers prev="1" num="12.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2028" published="2012-05-09" name="CVE-2012-2028" modified="2012-05-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in Adobe Photoshop before CS6 allows remote attackers to execute arbitrary code via a crafted TIFF (aka .TIF) file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-11.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-11.html</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75457" source="XF">photoshop-unspec-bo(75457)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="photoshop">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="11.0" edition="" />
-        <vers num="11.0" edition=":~~~~x64~" />
-        <vers num="11.0.1" />
-        <vers num="11.0.2" />
-        <vers num="11.0.4" />
-        <vers num="12.0.0" />
-        <vers num="12.0.1" />
-        <vers num="12.0.2" />
-        <vers num="12.0.3" />
-        <vers num="12.0.4" />
-        <vers num="2.5" edition="" />
-        <vers num="2.5" edition=":pro" />
-        <vers num="3.0" edition="" />
-        <vers num="3.0" edition=":pro" />
-        <vers num="4.0" edition="" />
-        <vers num="4.0" edition=":pro" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":pro" />
-        <vers num="6.0" edition="" />
-        <vers num="6.0" edition=":pro" />
-        <vers num="6.0.1" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-      </prod>
-      <prod vendor="adobe" name="photoshop_cs4">
-        <vers num="11.0" />
-      </prod>
-      <prod vendor="adobe" name="photoshop_cs5.5">
-        <vers prev="1" num="12.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2029" published="2012-05-09" name="CVE-2012-2029" modified="2012-05-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2030, CVE-2012-2031, CVE-2012-2032, and CVE-2012-2033.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-13.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-13.html</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75458" source="XF">asp-unspecified-ce(75458)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.10.620" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers num="11.6.3.633" />
-        <vers prev="1" num="11.6.4.634" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2030" published="2012-05-09" name="CVE-2012-2030" modified="2012-05-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2031, CVE-2012-2032, and CVE-2012-2033.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-13.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-13.html</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75459" source="XF">shockwave-player-file-code-execution(75459)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.10.620" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers num="11.6.3.633" />
-        <vers prev="1" num="11.6.4.634" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2031" published="2012-05-09" name="CVE-2012-2031" modified="2012-05-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2032, and CVE-2012-2033.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-13.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-13.html</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75460" source="XF">asp-memory-code-exec(75460)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.10.620" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers num="11.6.3.633" />
-        <vers prev="1" num="11.6.4.634" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2032" published="2012-05-09" name="CVE-2012-2032" modified="2012-05-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2031, and CVE-2012-2033.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-13.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-13.html</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75461" source="XF">asp-file-code-execution(75461)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.10.620" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers num="11.6.3.633" />
-        <vers prev="1" num="11.6.4.634" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2033" published="2012-05-09" name="CVE-2012-2033" modified="2012-05-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2031, and CVE-2012-2032.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-13.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-13.html</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75462" source="XF">adobe-shockwave-file-ce(75462)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.10.620" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers num="11.6.3.633" />
-        <vers prev="1" num="11.6.4.634" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2034" published="2012-06-08" name="CVE-2012-2034" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-14.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-14.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="adobe_air">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.4990" />
-        <vers num="1.0.8.4990" />
-        <vers num="1.1" />
-        <vers num="1.1.0.5790" />
-        <vers num="1.5" />
-        <vers num="1.5.0.7220" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.8210" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.9120" />
-        <vers num="1.5.3.9130" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.12610" />
-        <vers num="2.0.3" />
-        <vers num="2.0.3.13070" />
-        <vers num="2.0.4" />
-        <vers num="2.5.0.16600" />
-        <vers num="2.5.1.17730" />
-        <vers num="2.6" />
-        <vers num="2.6.0.19120" />
-        <vers num="2.6.0.19140" />
-        <vers num="2.7" />
-        <vers num="2.7.0.1948" />
-        <vers num="2.7.0.19480" />
-        <vers num="2.7.0.1953" />
-        <vers num="2.7.0.19530" />
-        <vers num="2.7.1" />
-        <vers num="2.7.1.19610" />
-        <vers num="3.0.0.408" />
-        <vers num="3.0.0.4080" />
-        <vers num="3.1.0.485" />
-        <vers num="3.1.0.488" />
-        <vers num="3.1.0.4880" />
-        <vers prev="1" num="3.2.0.207" />
-        <vers num="3.2.0.2070" />
-      </prod>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.2.54" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.106.17" />
-        <vers num="10.1.52.14" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.23" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers num="10.3.183.16" />
-        <vers num="10.3.183.18" />
-        <vers num="10.3.183.19" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="10.3.185.22" />
-        <vers num="10.3.185.24" />
-        <vers num="10.3.186.3" />
-        <vers num="10.3.186.6" />
-        <vers num="10.3.186.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.59" />
-        <vers num="11.1.102.62" />
-        <vers num="11.1.102.63" />
-        <vers prev="1" num="11.1.111.8" />
-        <vers prev="1" num="11.1.115.7" />
-        <vers num="11.2.202.228" />
-        <vers prev="1" num="11.2.202.233" />
-        <vers num="11.2.202.235" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.8.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2035" published="2012-06-08" name="CVE-2012-2035" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-14.html" source="CONFIRM">http://www.adobe.com/support/security/bulletins/apsb12-14.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="adobe_air">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.4990" />
-        <vers num="1.0.8.4990" />
-        <vers num="1.1" />
-        <vers num="1.1.0.5790" />
-        <vers num="1.5" />
-        <vers num="1.5.0.7220" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.8210" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.9120" />
-        <vers num="1.5.3.9130" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.12610" />
-        <vers num="2.0.3" />
-        <vers num="2.0.3.13070" />
-        <vers num="2.0.4" />
-        <vers num="2.5.0.16600" />
-        <vers num="2.5.1.17730" />
-        <vers num="2.6" />
-        <vers num="2.6.0.19120" />
-        <vers num="2.6.0.19140" />
-        <vers num="2.7" />
-        <vers num="2.7.0.1948" />
-        <vers num="2.7.0.19480" />
-        <vers num="2.7.0.1953" />
-        <vers num="2.7.0.19530" />
-        <vers num="2.7.1" />
-        <vers num="2.7.1.19610" />
-        <vers num="3.0.0.408" />
-        <vers num="3.0.0.4080" />
-        <vers num="3.1.0.485" />
-        <vers num="3.1.0.488" />
-        <vers num="3.1.0.4880" />
-        <vers prev="1" num="3.2.0.207" />
-        <vers num="3.2.0.2070" />
-      </prod>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.2.54" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.106.17" />
-        <vers num="10.1.52.14" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.23" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers num="10.3.183.16" />
-        <vers num="10.3.183.18" />
-        <vers num="10.3.183.19" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="10.3.185.22" />
-        <vers num="10.3.185.24" />
-        <vers num="10.3.186.3" />
-        <vers num="10.3.186.6" />
-        <vers num="10.3.186.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.59" />
-        <vers num="11.1.102.62" />
-        <vers num="11.1.102.63" />
-        <vers prev="1" num="11.1.111.8" />
-        <vers prev="1" num="11.1.115.7" />
-        <vers num="11.2.202.228" />
-        <vers prev="1" num="11.2.202.233" />
-        <vers num="11.2.202.235" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.8.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2036" published="2012-06-08" name="CVE-2012-2036" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Integer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-14.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-14.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="adobe_air">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.4990" />
-        <vers num="1.0.8.4990" />
-        <vers num="1.1" />
-        <vers num="1.1.0.5790" />
-        <vers num="1.5" />
-        <vers num="1.5.0.7220" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.8210" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.9120" />
-        <vers num="1.5.3.9130" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.12610" />
-        <vers num="2.0.3" />
-        <vers num="2.0.3.13070" />
-        <vers num="2.0.4" />
-        <vers num="2.5.0.16600" />
-        <vers num="2.5.1.17730" />
-        <vers num="2.6" />
-        <vers num="2.6.0.19120" />
-        <vers num="2.6.0.19140" />
-        <vers num="2.7" />
-        <vers num="2.7.0.1948" />
-        <vers num="2.7.0.19480" />
-        <vers num="2.7.0.1953" />
-        <vers num="2.7.0.19530" />
-        <vers num="2.7.1" />
-        <vers num="2.7.1.19610" />
-        <vers num="3.0.0.408" />
-        <vers num="3.0.0.4080" />
-        <vers num="3.1.0.485" />
-        <vers num="3.1.0.488" />
-        <vers num="3.1.0.4880" />
-        <vers prev="1" num="3.2.0.207" />
-        <vers num="3.2.0.2070" />
-      </prod>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.2.54" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.106.17" />
-        <vers num="10.1.52.14" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.23" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers num="10.3.183.16" />
-        <vers num="10.3.183.18" />
-        <vers num="10.3.183.19" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="10.3.185.22" />
-        <vers num="10.3.185.24" />
-        <vers num="10.3.186.3" />
-        <vers num="10.3.186.6" />
-        <vers num="10.3.186.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.59" />
-        <vers num="11.1.102.62" />
-        <vers num="11.1.102.63" />
-        <vers prev="1" num="11.1.111.8" />
-        <vers prev="1" num="11.1.115.7" />
-        <vers num="11.2.202.228" />
-        <vers prev="1" num="11.2.202.233" />
-        <vers num="11.2.202.235" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.8.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2037" published="2012-06-08" name="CVE-2012-2037" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2034.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-14.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-14.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="adobe_air">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.4990" />
-        <vers num="1.0.8.4990" />
-        <vers num="1.1" />
-        <vers num="1.1.0.5790" />
-        <vers num="1.5" />
-        <vers num="1.5.0.7220" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.8210" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.9120" />
-        <vers num="1.5.3.9130" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.12610" />
-        <vers num="2.0.3" />
-        <vers num="2.0.3.13070" />
-        <vers num="2.0.4" />
-        <vers num="2.5.0.16600" />
-        <vers num="2.5.1.17730" />
-        <vers num="2.6" />
-        <vers num="2.6.0.19120" />
-        <vers num="2.6.0.19140" />
-        <vers num="2.7" />
-        <vers num="2.7.0.1948" />
-        <vers num="2.7.0.19480" />
-        <vers num="2.7.0.1953" />
-        <vers num="2.7.0.19530" />
-        <vers num="2.7.1" />
-        <vers num="2.7.1.19610" />
-        <vers num="3.0.0.408" />
-        <vers num="3.0.0.4080" />
-        <vers num="3.1.0.485" />
-        <vers num="3.1.0.488" />
-        <vers num="3.1.0.4880" />
-        <vers prev="1" num="3.2.0.207" />
-        <vers num="3.2.0.2070" />
-      </prod>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.2.54" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.106.17" />
-        <vers num="10.1.52.14" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.23" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers num="10.3.183.16" />
-        <vers num="10.3.183.18" />
-        <vers num="10.3.183.19" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="10.3.185.22" />
-        <vers num="10.3.185.24" />
-        <vers num="10.3.186.3" />
-        <vers num="10.3.186.6" />
-        <vers num="10.3.186.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.59" />
-        <vers num="11.1.102.62" />
-        <vers num="11.1.102.63" />
-        <vers prev="1" num="11.1.111.8" />
-        <vers prev="1" num="11.1.115.7" />
-        <vers num="11.2.202.228" />
-        <vers prev="1" num="11.2.202.233" />
-        <vers num="11.2.202.235" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.8.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2038" published="2012-06-08" name="CVE-2012-2038" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-14.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-14.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="adobe_air">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.4990" />
-        <vers num="1.0.8.4990" />
-        <vers num="1.1" />
-        <vers num="1.1.0.5790" />
-        <vers num="1.5" />
-        <vers num="1.5.0.7220" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.8210" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.9120" />
-        <vers num="1.5.3.9130" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.12610" />
-        <vers num="2.0.3" />
-        <vers num="2.0.3.13070" />
-        <vers num="2.0.4" />
-        <vers num="2.5.0.16600" />
-        <vers num="2.5.1.17730" />
-        <vers num="2.6" />
-        <vers num="2.6.0.19120" />
-        <vers num="2.6.0.19140" />
-        <vers num="2.7" />
-        <vers num="2.7.0.1948" />
-        <vers num="2.7.0.19480" />
-        <vers num="2.7.0.1953" />
-        <vers num="2.7.0.19530" />
-        <vers num="2.7.1" />
-        <vers num="2.7.1.19610" />
-        <vers num="3.0.0.408" />
-        <vers num="3.0.0.4080" />
-        <vers num="3.1.0.485" />
-        <vers num="3.1.0.488" />
-        <vers num="3.1.0.4880" />
-        <vers prev="1" num="3.2.0.207" />
-        <vers num="3.2.0.2070" />
-      </prod>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.2.54" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.106.17" />
-        <vers num="10.1.52.14" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.23" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers num="10.3.183.16" />
-        <vers num="10.3.183.18" />
-        <vers num="10.3.183.19" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="10.3.185.22" />
-        <vers num="10.3.185.24" />
-        <vers num="10.3.186.3" />
-        <vers num="10.3.186.6" />
-        <vers num="10.3.186.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.59" />
-        <vers num="11.1.102.62" />
-        <vers num="11.1.102.63" />
-        <vers prev="1" num="11.1.111.8" />
-        <vers prev="1" num="11.1.115.7" />
-        <vers num="11.2.202.228" />
-        <vers prev="1" num="11.2.202.233" />
-        <vers num="11.2.202.235" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.8.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2039" published="2012-06-08" name="CVE-2012-2039" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-14.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-14.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="adobe_air">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.4990" />
-        <vers num="1.0.8.4990" />
-        <vers num="1.1" />
-        <vers num="1.1.0.5790" />
-        <vers num="1.5" />
-        <vers num="1.5.0.7220" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.8210" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.9120" />
-        <vers num="1.5.3.9130" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.12610" />
-        <vers num="2.0.3" />
-        <vers num="2.0.3.13070" />
-        <vers num="2.0.4" />
-        <vers num="2.5.0.16600" />
-        <vers num="2.5.1.17730" />
-        <vers num="2.6" />
-        <vers num="2.6.0.19120" />
-        <vers num="2.6.0.19140" />
-        <vers num="2.7" />
-        <vers num="2.7.0.1948" />
-        <vers num="2.7.0.19480" />
-        <vers num="2.7.0.1953" />
-        <vers num="2.7.0.19530" />
-        <vers num="2.7.1" />
-        <vers num="2.7.1.19610" />
-        <vers num="3.0.0.408" />
-        <vers num="3.0.0.4080" />
-        <vers num="3.1.0.485" />
-        <vers num="3.1.0.488" />
-        <vers num="3.1.0.4880" />
-        <vers prev="1" num="3.2.0.207" />
-        <vers num="3.2.0.2070" />
-      </prod>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.2.54" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.106.17" />
-        <vers num="10.1.52.14" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.23" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers num="10.3.183.16" />
-        <vers num="10.3.183.18" />
-        <vers num="10.3.183.19" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="10.3.185.22" />
-        <vers num="10.3.185.24" />
-        <vers num="10.3.186.3" />
-        <vers num="10.3.186.6" />
-        <vers num="10.3.186.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.59" />
-        <vers num="11.1.102.62" />
-        <vers num="11.1.102.63" />
-        <vers prev="1" num="11.1.111.8" />
-        <vers prev="1" num="11.1.115.7" />
-        <vers num="11.2.202.228" />
-        <vers prev="1" num="11.2.202.233" />
-        <vers num="11.2.202.235" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.8.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2040" published="2012-06-08" name="CVE-2012-2040" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows local users to gain privileges via a Trojan horse executable file in an unspecified directory.</descript>
-      <descript source="nvd">http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-14.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-14.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="adobe_air">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.4990" />
-        <vers num="1.0.8.4990" />
-        <vers num="1.1" />
-        <vers num="1.1.0.5790" />
-        <vers num="1.5" />
-        <vers num="1.5.0.7220" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.8210" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.9120" />
-        <vers num="1.5.3.9130" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.12610" />
-        <vers num="2.0.3" />
-        <vers num="2.0.3.13070" />
-        <vers num="2.0.4" />
-        <vers num="2.5.0.16600" />
-        <vers num="2.5.1.17730" />
-        <vers num="2.6" />
-        <vers num="2.6.0.19120" />
-        <vers num="2.6.0.19140" />
-        <vers num="2.7" />
-        <vers num="2.7.0.1948" />
-        <vers num="2.7.0.19480" />
-        <vers num="2.7.0.1953" />
-        <vers num="2.7.0.19530" />
-        <vers num="2.7.1" />
-        <vers num="2.7.1.19610" />
-        <vers num="3.0.0.408" />
-        <vers num="3.0.0.4080" />
-        <vers num="3.1.0.485" />
-        <vers num="3.1.0.488" />
-        <vers num="3.1.0.4880" />
-        <vers prev="1" num="3.2.0.207" />
-        <vers num="3.2.0.2070" />
-      </prod>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.2.54" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.106.17" />
-        <vers num="10.1.52.14" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.23" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers num="10.3.183.16" />
-        <vers num="10.3.183.18" />
-        <vers num="10.3.183.19" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="10.3.185.22" />
-        <vers num="10.3.185.24" />
-        <vers num="10.3.186.3" />
-        <vers num="10.3.186.6" />
-        <vers num="10.3.186.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.59" />
-        <vers num="11.1.102.62" />
-        <vers num="11.1.102.63" />
-        <vers prev="1" num="11.1.111.8" />
-        <vers prev="1" num="11.1.115.7" />
-        <vers num="11.2.202.228" />
-        <vers prev="1" num="11.2.202.233" />
-        <vers num="11.2.202.235" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.8.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2041" published="2012-06-13" name="CVE-2012-2041" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-15.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-15.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="coldfusion">
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2042" published="2012-05-24" name="CVE-2012-2042" modified="2012-05-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-10.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-10.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="illustrator">
-        <vers num="10.0" />
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="12.0.0" />
-        <vers num="13.0" />
-        <vers num="13.0.1" />
-        <vers num="13.0.2" />
-        <vers num="13.0.3" />
-        <vers num="14.0" />
-        <vers num="15.0" />
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-      </prod>
-      <prod vendor="adobe" name="illustrator_cs5.5">
-        <vers prev="1" num="15" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2043" published="2012-08-15" name="CVE-2012-2043" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2044, CVE-2012-2045, CVE-2012-2046, and CVE-2012-2047.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-17.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-17.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.10.620" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers num="11.6.3.633" />
-        <vers num="11.6.4.634" />
-        <vers prev="1" num="11.6.5.635" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2044" published="2012-08-15" name="CVE-2012-2044" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2045, CVE-2012-2046, and CVE-2012-2047.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-17.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-17.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.10.620" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers num="11.6.3.633" />
-        <vers num="11.6.4.634" />
-        <vers prev="1" num="11.6.5.635" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2045" published="2012-08-15" name="CVE-2012-2045" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2046, and CVE-2012-2047.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-17.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-17.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.10.620" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers num="11.6.3.633" />
-        <vers num="11.6.4.634" />
-        <vers prev="1" num="11.6.5.635" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2046" published="2012-08-15" name="CVE-2012-2046" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2045, and CVE-2012-2047.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-17.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-17.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.10.620" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers num="11.6.3.633" />
-        <vers num="11.6.4.634" />
-        <vers prev="1" num="11.6.5.635" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2047" published="2012-08-15" name="CVE-2012-2047" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2045, and CVE-2012-2046.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-17.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-17.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="shockwave_player">
-        <vers num="1.0" />
-        <vers num="10.0.0.210" />
-        <vers num="10.0.1.004" />
-        <vers num="10.1.0.011" />
-        <vers num="10.1.0.11" />
-        <vers num="10.1.1.016" />
-        <vers num="10.1.4.020" />
-        <vers num="10.2.0.021" />
-        <vers num="10.2.0.022" />
-        <vers num="10.2.0.023" />
-        <vers num="11" />
-        <vers num="11.0.0.456" />
-        <vers num="11.0.3.471" />
-        <vers num="11.5.0.595" />
-        <vers num="11.5.0.596" />
-        <vers num="11.5.1.601" />
-        <vers num="11.5.10.620" />
-        <vers num="11.5.2.602" />
-        <vers num="11.5.6.606" />
-        <vers num="11.5.7.609" />
-        <vers num="11.5.8.612" />
-        <vers num="11.5.9.615" />
-        <vers num="11.5.9.620" />
-        <vers num="11.6.0.626" />
-        <vers num="11.6.1.629" />
-        <vers num="11.6.3.633" />
-        <vers num="11.6.4.634" />
-        <vers prev="1" num="11.6.5.635" />
-        <vers num="2.0" />
-        <vers num="3.0" />
-        <vers num="4.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="8.0" />
-        <vers num="8.0.196" />
-        <vers num="8.0.196a" />
-        <vers num="8.0.204" />
-        <vers num="8.0.205" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.100" />
-        <vers num="8.5.1.103" />
-        <vers num="8.5.1.105" />
-        <vers num="8.5.1.106" />
-        <vers num="8.5.321" />
-        <vers num="8.5.323" />
-        <vers num="8.5.324" />
-        <vers num="8.5.325" />
-        <vers num="9" />
-        <vers num="9.0.383" />
-        <vers num="9.0.432" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2048" published="2012-09-12" name="CVE-2012-2048" modified="2012-09-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Adobe ColdFusion 10 and earlier allows attackers to cause a denial of service via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-21.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-21.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="coldfusion">
-        <vers prev="1" num="10" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2049" published="2012-08-15" name="CVE-2012-2049" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2050" published="2012-08-15" name="CVE-2012-2050" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2051" published="2012-08-15" name="CVE-2012-2051" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150, CVE-2012-4151, CVE-2012-4152, CVE-2012-4153, CVE-2012-4154, CVE-2012-4155, CVE-2012-4156, CVE-2012-4157, CVE-2012-4158, CVE-2012-4159, and CVE-2012-4160.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2053" published="2012-04-05" name="CVE-2012-2053" modified="2012-04-05" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">The sudoers file in the Linux system configuration in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0 does not require a password for executing commands as root, which allows local users to gain privileges via the sudo program, as demonstrated by the user account that executes PHP scripts, a different vulnerability than CVE-2012-1777.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://www.sec-consult.com/files/20120328-0_F5_FirePass_SSL_VPN_unauthenticated_remote_root_v1.0.txt" source="MISC">https://www.sec-consult.com/files/20120328-0_F5_FirePass_SSL_VPN_unauthenticated_remote_root_v1.0.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="f5" name="firepass">
-        <vers num="6.0" />
-        <vers num="6.1.0" />
-        <vers num="7.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2054" published="2012-04-05" name="CVE-2012-2054" modified="2012-04-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set attributes in the (1) Comment, (2) Document, (3) IssueCategory, (4) MembersController, (5) Message, (6) News, (7) TimeEntry, (8) Version, (9) Wiki, (10) UserPreference, or (11) Board model via a modified URL, related to a "mass assignment" vulnerability, a different vulnerability than CVE-2012-0327.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.redmine.org/versions/42" source="CONFIRM">http://www.redmine.org/versions/42</ref>
-      <ref url="http://www.redmine.org/issues/10390" source="CONFIRM">http://www.redmine.org/issues/10390</ref>
-      <ref url="http://www.redmine.org/boards/2/topics/29343" source="CONFIRM">http://www.redmine.org/boards/2/topics/29343</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="redmine" name="redmine">
-        <vers num="0.1.0" />
-        <vers num="0.2.1" />
-        <vers num="0.2.2" />
-        <vers num="0.3.0" />
-        <vers num="0.4.0" />
-        <vers num="0.4.1" />
-        <vers num="0.4.2" />
-        <vers num="0.5.0" />
-        <vers num="0.5.1" />
-        <vers num="0.6.0" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.6.4" />
-        <vers num="0.7.0" edition="rc1" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.8.0" edition="rc1" />
-        <vers num="0.8.1" />
-        <vers num="0.8.2" />
-        <vers num="0.8.3" />
-        <vers num="0.8.4" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.9.0" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="0.9.4" />
-        <vers num="0.9.5" />
-        <vers num="0.9.6" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.3.0" />
-        <vers prev="1" num="1.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2055" published="2012-04-05" name="CVE-2012-2055" modified="2012-04-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the public_key[user_id] value via a modified URL for the public-key update form, related to a "mass assignment" vulnerability.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/blog/1068-public-key-security-vulnerability-and-mitigation" source="CONFIRM">https://github.com/blog/1068-public-key-security-vulnerability-and-mitigation</ref>
-      <ref url="http://lwn.net/Articles/488702/" source="MISC">http://lwn.net/Articles/488702/</ref>
-      <ref url="http://homakov.blogspot.com/2012/03/how-to.html" source="MISC">http://homakov.blogspot.com/2012/03/how-to.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="github" name="github_enterprise">
-        <vers prev="1" num="20120303" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-2056" published="2012-09-17" name="CVE-2012-2056" modified="2012-09-17">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the Content Lock module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.</descript>
-    </desc>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52502" source="BID">52502</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://drupal.org/node/1482126" source="MISC">http://drupal.org/node/1482126</ref>
-    </refs>
-  </entry>
-  <entry type="CVE" seq="2012-2057" published="2012-09-17" name="CVE-2012-2057" modified="2012-09-17">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors related to formAPI.</descript>
-    </desc>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74054" source="XF">ubercart-drupal-csrf(74054)</ref>
-      <ref url="http://www.securityfocus.com/bid/52502" source="BID">52502</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://drupal.org/node/1482126" source="MISC">http://drupal.org/node/1482126</ref>
-    </refs>
-  </entry>
-  <entry type="CVE" seq="2012-2058" published="2012-09-17" name="CVE-2012-2058" modified="2012-09-17">
-    <desc>
-      <descript source="cve">The Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers to forge payments via unspecified vectors.</descript>
-    </desc>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74055" source="XF">ubercart-payflow-drupal-weak-security(74055)</ref>
-      <ref url="http://www.securityfocus.com/bid/52502" source="BID">52502</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://drupal.org/node/1482126" source="MISC">http://drupal.org/node/1482126</ref>
-    </refs>
-  </entry>
-  <entry type="CVE" seq="2012-2059" published="2012-09-17" name="CVE-2012-2059" modified="2012-09-17">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the ticketyboo News Ticker module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74056" source="XF">ticketyboo-drupal-xss(74056)</ref>
-      <ref url="http://www.securityfocus.com/bid/52502" source="BID">52502</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://drupal.org/node/1482126" source="MISC">http://drupal.org/node/1482126</ref>
-    </refs>
-  </entry>
-  <entry type="CVE" seq="2012-2060" published="2012-09-17" name="CVE-2012-2060" modified="2012-09-17">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Admin tools module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74057" source="XF">admintools-drupal-xss(74057)</ref>
-      <ref url="http://www.securityfocus.com/bid/52502" source="BID">52502</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://drupal.org/node/1482126" source="MISC">http://drupal.org/node/1482126</ref>
-    </refs>
-  </entry>
-  <entry type="CVE" seq="2012-2061" published="2012-09-17" name="CVE-2012-2061" modified="2012-09-17">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the Admin tools module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors involving "not checking tokens."</descript>
-    </desc>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74058" source="XF">admintools-drupal-csrf(74058)</ref>
-      <ref url="http://www.securityfocus.com/bid/52502" source="BID">52502</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://drupal.org/node/1482126" source="MISC">http://drupal.org/node/1482126</ref>
-    </refs>
-  </entry>
-  <entry type="CVE" seq="2012-2062" published="2012-09-17" name="CVE-2012-2062" modified="2012-09-17">
-    <desc>
-      <descript source="cve">Open redirect vulnerability in the Redirecting click bouncer module for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.</descript>
-    </desc>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74059" source="XF">redirecting-drupal-open-redirect(74059)</ref>
-      <ref url="http://www.securityfocus.com/bid/52502" source="BID">52502</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://drupal.org/node/1482126" source="MISC">http://drupal.org/node/1482126</ref>
-    </refs>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2063" published="2012-09-04" name="CVE-2012-2063" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Slidebox module before 7.x-1.4 for Drupal does not properly check permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1482166" source="CONFIRM" patch="1">http://drupal.org/node/1482166</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74067" source="XF">slidebox-nodes-security-bypass(74067)</ref>
-      <ref url="http://www.securityfocus.com/bid/52500" source="BID">52500</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48360" source="SECUNIA" adv="1">48360</ref>
-      <ref url="http://drupalcode.org/project/slidebox.git/commit/3dae144" source="CONFIRM">http://drupalcode.org/project/slidebox.git/commit/3dae144</ref>
-      <ref url="http://drupal.org/node/1482342" source="MISC" adv="1">http://drupal.org/node/1482342</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="brian_altenhofel" name="slidebox">
-        <vers num="5.x-1.x" edition="dev" />
-        <vers num="7.x-1.0" />
-        <vers num="7.x-1.1" />
-        <vers num="7.x-1.2" />
-        <vers prev="1" num="7.x-1.3" />
-        <vers num="7.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2064" published="2012-09-04" name="CVE-2012-2064" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in theme/views_lang_switch.theme.inc in the Views Language Switcher module before 7.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via the q parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1482420" source="MISC" patch="1" adv="1">http://drupal.org/node/1482420</ref>
-      <ref url="http://www.securityfocus.com/bid/52497" source="BID">52497</ref>
-      <ref url="http://www.osvdb.org/80071" source="OSVDB">80071</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48355" source="SECUNIA" adv="1">48355</ref>
-      <ref url="http://drupalcode.org/project/views_lang_switch.git/commit/c27c318" source="CONFIRM">http://drupalcode.org/project/views_lang_switch.git/commit/c27c318</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mark_theunissen" name="views_lang_switch">
-        <vers num="7.x-1.0" />
-        <vers prev="1" num="7.x-1.1" />
-        <vers num="7.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2065" published="2012-09-04" name="CVE-2012-2065" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Language Icons module 6.x-2.x before 6.x-2.1 and 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with administer languages permissions to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1482428" source="MISC" patch="1" adv="1">http://drupal.org/node/1482428</ref>
-      <ref url="http://drupal.org/node/1482144" source="CONFIRM" patch="1">http://drupal.org/node/1482144</ref>
-      <ref url="http://drupal.org/node/1482136" source="CONFIRM" patch="1">http://drupal.org/node/1482136</ref>
-      <ref url="http://www.securityfocus.com/bid/52499" source="BID">52499</ref>
-      <ref url="http://www.osvdb.org/80070" source="OSVDB">80070</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48405" source="SECUNIA" adv="1">48405</ref>
-      <ref url="http://drupalcode.org/project/languageicons.git/commit/e3f3f1f" source="CONFIRM">http://drupalcode.org/project/languageicons.git/commit/e3f3f1f</ref>
-      <ref url="http://drupalcode.org/project/languageicons.git/commit/be620bb" source="CONFIRM">http://drupalcode.org/project/languageicons.git/commit/be620bb</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freso" name="languageicons">
-        <vers num="6.x-2.0" edition="alpha1" />
-        <vers num="6.x-2.0" edition="rc1" />
-        <vers num="6.x-2.0" edition="rc2" />
-        <vers num="6.x-2.1" edition="rc1" />
-        <vers num="6.x-2.x" edition="dev" />
-        <vers num="7.x-1.0" edition="alpha1" />
-        <vers num="7.x-1.0" edition="beta1" />
-        <vers num="7.x-1.0" edition="rc1" />
-        <vers num="7.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2066" published="2012-09-04" name="CVE-2012-2066" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the FCKeditor module 6.x-2.x before 6.x-2.3 and the CKEditor module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.7 for Drupal allows remote authenticated users or remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1482528" source="MISC" patch="1" adv="1">http://drupal.org/node/1482528</ref>
-      <ref url="http://drupal.org/node/1482480" source="CONFIRM" patch="1">http://drupal.org/node/1482480</ref>
-      <ref url="http://drupal.org/node/1482466" source="CONFIRM" patch="1">http://drupal.org/node/1482466</ref>
-      <ref url="http://drupal.org/node/1482442" source="CONFIRM" patch="1">http://drupal.org/node/1482442</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74036" source="XF">ckeditor-drupal-unspec-xss(74036)</ref>
-      <ref url="http://www.osvdb.org/80079" source="OSVDB">80079</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48435" source="SECUNIA" adv="1">48435</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ckeditor" name="ckeditor">
-        <vers num="6.x-1.0" edition="beta1" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="6.x-1.5" />
-        <vers num="6.x-1.6" />
-        <vers num="6.x-1.7" />
-        <vers num="6.x-1.x" edition="dev" />
-        <vers num="7.x-1.0" edition="rc1" />
-        <vers num="7.x-1.1" />
-        <vers num="7.x-1.2" />
-        <vers num="7.x-1.3" />
-        <vers num="7.x-1.4" />
-        <vers num="7.x-1.5" />
-        <vers num="7.x-1.6" />
-        <vers num="7.x-1.x" edition="dev" />
-      </prod>
-      <prod vendor="ckeditor" name="fckeditor">
-        <vers num="6.x-1.1" edition="beta" />
-        <vers num="6.x-1.1" edition="beta2" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.2-1" />
-        <vers num="6.x-1.3" edition="beta" />
-        <vers num="6.x-1.3" edition="beta2" />
-        <vers num="6.x-1.3" edition="rc1" />
-        <vers num="6.x-1.3" edition="rc2" />
-        <vers num="6.x-1.3" edition="rc3" />
-        <vers num="6.x-1.3" edition="rc5" />
-        <vers num="6.x-1.3" edition="rc6" />
-        <vers num="6.x-1.3" edition="rc7" />
-        <vers num="6.x-1.4" edition="rc1" />
-        <vers num="6.x-1.4" edition="rc2" />
-        <vers num="6.x-1.x" edition="dev" />
-        <vers num="6.x-2.0" edition="alpha1" />
-        <vers num="6.x-2.0" edition="alpha3" />
-        <vers num="6.x-2.0" edition="alpha4" />
-        <vers num="6.x-2.0" edition="alpha5" />
-        <vers num="6.x-2.0" edition="beta1" />
-        <vers num="6.x-2.0" edition="beta2" />
-        <vers num="6.x-2.0" edition="beta3" />
-        <vers num="6.x-2.0" edition="beta4" />
-        <vers num="6.x-2.0" edition="rc1" />
-        <vers num="6.x-2.0" edition="rc2" />
-        <vers num="6.x-2.1" edition="rc1" />
-        <vers num="6.x-2.2" edition="rc1" />
-        <vers num="6.x-2.3" />
-        <vers num="6.x-2.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2067" published="2012-09-04" name="CVE-2012-2067" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the CKeditor module 6.x-2.x before 6.x-2.3 and the CKEditor module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.7 for Drupal, when the core PHP module is enabled, allows remote authenticated users or remote attackers to execute arbitrary PHP code via the text parameter to a text filter.  NOTE: some of these details are obtained from third party information.</descript>
-      <descript source="nvd">Per http://drupal.org/node/1482528 the versions affected are "FCKeditor 6.x-2.x versions prior to 6.x-2.3, CKEditor 6.x-1.x versions prior to 6.x-1.9, and CKEditor 7.x-1.x versions prior to 7.x-1.7."
-</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1482528" source="MISC" patch="1" adv="1">http://drupal.org/node/1482528</ref>
-      <ref url="http://drupal.org/node/1482480" source="CONFIRM" patch="1">http://drupal.org/node/1482480</ref>
-      <ref url="http://drupal.org/node/1482466" source="CONFIRM" patch="1">http://drupal.org/node/1482466</ref>
-      <ref url="http://drupal.org/node/1482442" source="CONFIRM" patch="1">http://drupal.org/node/1482442</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74037" source="XF">ckeditor-drupal-code-execution(74037)</ref>
-      <ref url="http://www.osvdb.org/80080" source="OSVDB">80080</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48435" source="SECUNIA" adv="1">48435</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ckeditor" name="ckeditor">
-        <vers num="6.x-1.0" edition="beta1" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="6.x-1.5" />
-        <vers num="6.x-1.6" />
-        <vers num="6.x-1.7" />
-        <vers num="6.x-1.x" edition="dev" />
-        <vers num="7.x-1.0" edition="rc1" />
-        <vers num="7.x-1.1" />
-        <vers num="7.x-1.2" />
-        <vers num="7.x-1.3" />
-        <vers num="7.x-1.4" />
-        <vers num="7.x-1.5" />
-        <vers num="7.x-1.6" />
-        <vers num="7.x-1.x" edition="dev" />
-      </prod>
-      <prod vendor="ckeditor" name="fckeditor">
-        <vers num="6.x-1.1" edition="beta" />
-        <vers num="6.x-1.1" edition="beta2" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.2-1" />
-        <vers num="6.x-1.3" edition="beta" />
-        <vers num="6.x-1.3" edition="beta2" />
-        <vers num="6.x-1.3" edition="rc1" />
-        <vers num="6.x-1.3" edition="rc2" />
-        <vers num="6.x-1.3" edition="rc3" />
-        <vers num="6.x-1.3" edition="rc5" />
-        <vers num="6.x-1.3" edition="rc6" />
-        <vers num="6.x-1.3" edition="rc7" />
-        <vers num="6.x-1.4" edition="rc1" />
-        <vers num="6.x-1.4" edition="rc2" />
-        <vers num="6.x-1.x" edition="dev" />
-        <vers num="6.x-2.0" edition="alpha1" />
-        <vers num="6.x-2.0" edition="alpha3" />
-        <vers num="6.x-2.0" edition="alpha4" />
-        <vers num="6.x-2.0" edition="alpha5" />
-        <vers num="6.x-2.0" edition="beta1" />
-        <vers num="6.x-2.0" edition="beta2" />
-        <vers num="6.x-2.0" edition="beta3" />
-        <vers num="6.x-2.0" edition="beta4" />
-        <vers num="6.x-2.0" edition="rc1" />
-        <vers num="6.x-2.0" edition="rc2" />
-        <vers num="6.x-2.1" edition="rc1" />
-        <vers num="6.x-2.2" edition="rc1" />
-        <vers num="6.x-2.3" />
-        <vers num="6.x-2.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2068" published="2012-09-04" name="CVE-2012-2068" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in fancy_slide.module in the Fancy Slide module before 6.x-2.7 for Drupal allow remote authenticated users with the administer fancy_slide permission to inject arbitrary web script or HTML via the (1) node_title or (2) nodequeue_title parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1482744" source="MISC" patch="1" adv="1">http://drupal.org/node/1482744</ref>
-      <ref url="http://drupal.org/node/1417688" source="CONFIRM" patch="1">http://drupal.org/node/1417688</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74070" source="XF">fancyslide-createslideshowblocks-xss(74070)</ref>
-      <ref url="http://www.securityfocus.com/bid/52513" source="BID">52513</ref>
-      <ref url="http://www.osvdb.org/80069" source="OSVDB">80069</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48412" source="SECUNIA" adv="1">48412</ref>
-      <ref url="http://drupalcode.org/project/fancy_slide.git/commit/cd2a424" source="CONFIRM">http://drupalcode.org/project/fancy_slide.git/commit/cd2a424</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tiger-fish" name="fancy_slide">
-        <vers num="6.x-2.2" />
-        <vers num="6.x-2.4" />
-        <vers num="6.x-2.5" />
-        <vers prev="1" num="6.x-2.6" />
-        <vers num="6.x-2.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2069" published="2012-09-06" name="CVE-2012-2069" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the Wishlist module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.6 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences via the (1) wl_reveal or (2) q parameters.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/wishlist.git/commit/73aaf98" source="CONFIRM" patch="1">http://drupalcode.org/project/wishlist.git/commit/73aaf98</ref>
-      <ref url="http://drupalcode.org/project/wishlist.git/commit/6660c33" source="CONFIRM" patch="1">http://drupalcode.org/project/wishlist.git/commit/6660c33</ref>
-      <ref url="http://drupal.org/node/1492624" source="MISC" patch="1" adv="1">http://drupal.org/node/1492624</ref>
-      <ref url="http://drupal.org/node/1483636" source="CONFIRM" patch="1">http://drupal.org/node/1483636</ref>
-      <ref url="http://drupal.org/node/1483634" source="CONFIRM" patch="1">http://drupal.org/node/1483634</ref>
-      <ref url="http://www.securityfocus.com/bid/52660" source="BID">52660</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://www.madirish.net/content/drupal-wishlist-6x-24-xss-vulnerability" source="MISC">http://www.madirish.net/content/drupal-wishlist-6x-24-xss-vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mclewin" name="wishlist">
-        <vers num="6.x-2.1" edition="beta" />
-        <vers num="6.x-2.2" />
-        <vers num="6.x-2.4" />
-        <vers num="7.x-2.5" />
-        <vers num="7.x-2.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2070" published="2012-08-14" name="CVE-2012-2070" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the MultiBlock module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the administer blocks permission to inject arbitrary web script or HTML via the block title.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1506390" source="MISC" patch="1" adv="1">http://drupal.org/node/1506390</ref>
-      <ref url="http://drupal.org/node/1505414" source="CONFIRM" patch="1">http://drupal.org/node/1505414</ref>
-      <ref url="http://drupal.org/node/1505410" source="CONFIRM" patch="1">http://drupal.org/node/1505410</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74466" source="XF">multiblock-blocktitle-xss(74466)</ref>
-      <ref url="http://www.securityfocus.com/bid/52800" source="BID">52800</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://www.madirish.net/content/drupal-multiblock-6x-13-xss-vulnerability" source="MISC">http://www.madirish.net/content/drupal-multiblock-6x-13-xss-vulnerability</ref>
-      <ref url="http://secunia.com/advisories/48588" source="SECUNIA" adv="1">48588</ref>
-      <ref url="http://osvdb.org/80673" source="OSVDB">80673</ref>
-      <ref url="http://drupalcode.org/project/multiblock.git/commit/aee07d3" source="CONFIRM">http://drupalcode.org/project/multiblock.git/commit/aee07d3</ref>
-      <ref url="http://drupalcode.org/project/multiblock.git/commit/2c5177b" source="CONFIRM">http://drupalcode.org/project/multiblock.git/commit/2c5177b</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="andrew_levine" name="multiblock">
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.x" edition="dev" />
-        <vers num="7.x-1.0" edition="beta1" />
-        <vers num="7.x-1.0" edition="beta2" />
-        <vers num="7.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2071" published="2012-08-14" name="CVE-2012-2071" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Contact Forms module 6.x-1.x before 6.x-1.13 for Drupal when the core contact form is enabled, allows remote authenticated users with the administer site-wide contact form permission to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1506404" source="MISC" patch="1" adv="1">http://drupal.org/node/1506404</ref>
-      <ref url="http://drupal.org/node/1506330" source="CONFIRM" patch="1">http://drupal.org/node/1506330</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74467" source="XF">contactforms-pagetitle-xss(74467)</ref>
-      <ref url="http://www.securityfocus.com/bid/52801" source="BID">52801</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48583" source="SECUNIA" adv="1">48583</ref>
-      <ref url="http://osvdb.org/80674" source="OSVDB">80674</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="geoff_davies" name="contact_forms">
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.10" />
-        <vers num="6.x-1.11" />
-        <vers num="6.x-1.12" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="6.x-1.5" />
-        <vers num="6.x-1.6" />
-        <vers num="6.x-1.7" />
-        <vers num="6.x-1.8" />
-        <vers num="6.x-1.9" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2072" published="2012-08-14" name="CVE-2012-2072" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Share Buttons (AddToAny) module 6.x-3.x before 6.x-3.4 for Drupal allows remote authenticated users with the administer addtoany permission to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1506412" source="MISC" patch="1" adv="1">http://drupal.org/node/1506412</ref>
-      <ref url="http://drupal.org/node/1083664" source="CONFIRM" patch="1">http://drupal.org/node/1083664</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74469" source="XF">sharebuttons-unspecified-xss(74469)</ref>
-      <ref url="http://www.securityfocus.com/bid/52777" source="BID">52777</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48615" source="SECUNIA" adv="1">48615</ref>
-      <ref url="http://osvdb.org/80675" source="OSVDB">80675</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="patrick_przybilla" name="addtoany">
-        <vers num="6.x-3.0" />
-        <vers num="6.x-3.1" />
-        <vers num="6.x-3.2" />
-        <vers num="6.x-3.3" />
-        <vers num="6.x-3.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2073" published="2012-08-14" name="CVE-2012-2073" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">The Bundle copy module 7.x-1.x before 7.x-1.1 for Drupal does not check for the "use PHP for settings" permission while importing settings, which allows remote authenticated users with certain permissions to execute arbitrary PHP code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1506420" source="MISC" patch="1" adv="1">http://drupal.org/node/1506420</ref>
-      <ref url="http://drupal.org/node/1506166" source="CONFIRM" patch="1">http://drupal.org/node/1506166</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74439" source="XF">bundlecopy-usephp-code-execution(74439)</ref>
-      <ref url="http://www.securityfocus.com/bid/52811" source="BID">52811</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48626" source="SECUNIA" adv="1">48626</ref>
-      <ref url="http://osvdb.org/80676" source="OSVDB">80676</ref>
-      <ref url="http://drupalcode.org/project/bundle_copy.git/commit/299bdca" source="CONFIRM">http://drupalcode.org/project/bundle_copy.git/commit/299bdca</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kristof_de_jaeger" name="bundle_copy">
-        <vers num="7.x-1.0" />
-        <vers num="7.x-1.x" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2074" published="2012-08-14" name="CVE-2012-2074" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in certain default views in the Ubercart Views module 6.x before 6.x-3.2 for Drupal allows remote attackers to obtain sensitive information via unknown attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1506428" source="MISC" patch="1" adv="1">http://drupal.org/node/1506428</ref>
-      <ref url="http://drupal.org/node/1505210" source="CONFIRM" patch="1">http://drupal.org/node/1505210</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74485" source="XF">drupal-ubercart-defaultviews-info-disclosure(74485)</ref>
-      <ref url="http://www.securityfocus.com/bid/52814" source="BID">52814</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48631" source="SECUNIA" adv="1">48631</ref>
-      <ref url="http://osvdb.org/80677" source="OSVDB">80677</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ubercart_views_project" name="uc_views">
-        <vers num="6.x-1.0" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.x" edition="dev" />
-        <vers num="6.x-2.0" />
-        <vers num="6.x-3.0" />
-        <vers num="6.x-3.1" />
-        <vers num="6.x-3.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2075" published="2012-08-14" name="CVE-2012-2075" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Contact Save module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the access site-wide contact form permission to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/contact_save.git/commit/0654894" source="CONFIRM" patch="1">http://drupalcode.org/project/contact_save.git/commit/0654894</ref>
-      <ref url="http://drupal.org/node/953788" source="CONFIRM" patch="1">http://drupal.org/node/953788</ref>
-      <ref url="http://drupal.org/node/1506438" source="MISC" patch="1" adv="1">http://drupal.org/node/1506438</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74515" source="XF">drupal-contactsave-unspecified-xss(74515)</ref>
-      <ref url="http://www.securityfocus.com/bid/52787" source="BID">52787</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48619" source="SECUNIA" adv="1">48619</ref>
-      <ref url="http://osvdb.org/80669" source="OSVDB">80669</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="steindom" name="contact_save">
-        <vers num="6.x-1.0" />
-        <vers num="6.x-1.1" edition="beta1" />
-        <vers num="6.x-1.2" edition="beta1" />
-        <vers num="6.x-1.2" edition="beta2" />
-        <vers num="6.x-1.2" edition="beta3" />
-        <vers num="6.x-1.3" edition="beta1" />
-        <vers num="6.x-1.3" edition="beta2" />
-        <vers num="6.x-1.3" edition="beta3" />
-        <vers num="6.x-1.4" edition="beta1" />
-        <vers num="6.x-1.4" edition="beta2" />
-        <vers num="6.x-1.5" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2076" published="2012-08-14" name="CVE-2012-2076" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST" patch="1">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://drupal.org/node/1506448" source="MISC" patch="1" adv="1">http://drupal.org/node/1506448</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74516" source="XF">drupal-sharethis-administrationforms-xss(74516)</ref>
-      <ref url="http://www.securityfocus.com/bid/52778" source="BID">52778</ref>
-      <ref url="http://secunia.com/advisories/48598" source="SECUNIA" adv="1">48598</ref>
-      <ref url="http://osvdb.org/80670" source="OSVDB">80670</ref>
-      <ref url="http://drupalcode.org/project/sharethis.git/commit/11f247a" source="CONFIRM">http://drupalcode.org/project/sharethis.git/commit/11f247a</ref>
-      <ref url="http://drupal.org/node/1504746" source="CONFIRM">http://drupal.org/node/1504746</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rob_loach" name="sharethis">
-        <vers num="7.x-2.0" edition="dev" />
-        <vers num="7.x-2.1" />
-        <vers num="7.x-2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2077" published="2012-08-14" name="CVE-2012-2077" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="5.1" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="4.9" CVSS_base_score="5.1">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of users with administer sharethis permissions via unknown vectors "outside of the Form API."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52778" source="BID" patch="1">52778</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74518" source="XF">drupal-sharethis-administrationforms-csrf(74518)</ref>
-      <ref url="http://www.osvdb.org/80681" source="OSVDB">80681</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48598" source="SECUNIA" adv="1">48598</ref>
-      <ref url="http://drupalcode.org/project/sharethis.git/commit/11f247a" source="CONFIRM">http://drupalcode.org/project/sharethis.git/commit/11f247a</ref>
-      <ref url="http://drupal.org/node/1506448" source="MISC">http://drupal.org/node/1506448</ref>
-      <ref url="http://drupal.org/node/1504746" source="CONFIRM">http://drupal.org/node/1504746</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rob_loach" name="sharethis">
-        <vers num="7.x-2.0" edition="dev" />
-        <vers num="7.x-2.1" />
-        <vers num="7.x-2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2080" published="2012-08-14" name="CVE-2012-2080" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the Node Limit Number module before 6.x-1.2 for Drupal allows remote attackers to hijack the authentication of users with the administer node limitnumber permission for requests that delete limits.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/node_limitnumber.git/commit/90f0d3a" source="CONFIRM" patch="1">http://drupalcode.org/project/node_limitnumber.git/commit/90f0d3a</ref>
-      <ref url="http://drupal.org/node/1506728" source="MISC" patch="1" adv="1">http://drupal.org/node/1506728</ref>
-      <ref url="http://drupal.org/node/1506594" source="CONFIRM" patch="1">http://drupal.org/node/1506594</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74525" source="XF">drupal-modelimitnumber-unspecified-csrf(74525)</ref>
-      <ref url="http://www.securityfocus.com/bid/52816" source="BID">52816</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48597" source="SECUNIA" adv="1">48597</ref>
-      <ref url="http://osvdb.org/80684" source="OSVDB">80684</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="node_limit_number_project" name="node_limitnumber">
-        <vers num="5.x-1.0" />
-        <vers num="5.x-1.1-1" />
-        <vers num="5.x-1.1-2" />
-        <vers num="5.x-1.1-3" />
-        <vers num="5.x-1.4" />
-        <vers num="5.x-1.x" edition="dev" />
-        <vers num="6.x-1.0" />
-        <vers prev="1" num="6.x-1.1" />
-        <vers num="6.x-2.0" edition="alpha1" />
-        <vers num="6.x-2.0" edition="alpha2" />
-        <vers num="6.x-2.0" edition="beta1" />
-        <vers num="6.x-2.0" edition="beta2" />
-        <vers num="6.x-2.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2081" published="2012-08-14" name="CVE-2012-2081" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Organic Groups (OG) module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access, which allows remote attackers to obtain sensitive information such as private group titles via a request through the Views module.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1507446" source="MISC" patch="1" adv="1">http://drupal.org/node/1507446</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74526" source="XF">drupal-organic-views-security-bypass(74526)</ref>
-      <ref url="http://www.securityfocus.com/bid/52799" source="BID">52799</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48620" source="SECUNIA" adv="1">48620</ref>
-      <ref url="http://osvdb.org/80678" source="OSVDB">80678</ref>
-      <ref url="http://drupal.org/node/1507328" source="CONFIRM">http://drupal.org/node/1507328</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moshe_weitzman" name="organic_groups">
-        <vers num="6.x-2.0" edition="rc1" />
-        <vers num="6.x-2.0" edition="rc2" />
-        <vers num="6.x-2.0" edition="rc3" />
-        <vers num="6.x-2.1" />
-        <vers num="6.x-2.2" />
-        <vers num="6.x-2.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2082" published="2012-08-14" name="CVE-2012-2082" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Chaos tool suite (aka CTools) module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the post comments permission to inject arbitrary web script or HTML via a user signature.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/ctools.git/commit/755b3c4" source="CONFIRM" patch="1">http://drupalcode.org/project/ctools.git/commit/755b3c4</ref>
-      <ref url="http://drupal.org/node/1507466" source="MISC" patch="1" adv="1">http://drupal.org/node/1507466</ref>
-      <ref url="http://drupal.org/node/1507412" source="CONFIRM" patch="1">http://drupal.org/node/1507412</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74481" source="XF">drupal-chaos-unspecified-xss(74481)</ref>
-      <ref url="http://www.securityfocus.com/bid/52794" source="BID">52794</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48616" source="SECUNIA" adv="1">48616</ref>
-      <ref url="http://osvdb.org/80679" source="OSVDB">80679</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="merlinofchaos" name="chaos_tool_suite">
-        <vers num="7.x-1.0" edition="alpha1" />
-        <vers num="7.x-1.0" edition="alpha2" />
-        <vers num="7.x-1.0" edition="alpha3" />
-        <vers num="7.x-1.0" edition="alpha4" />
-        <vers num="7.x-1.0" edition="beta1" />
-        <vers num="7.x-1.0" edition="rc1" />
-        <vers num="7.x-1.0" edition="rc2" />
-        <vers num="7.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2083" published="2012-08-31" name="CVE-2012-2083" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the fusion_core_preprocess_page function in fusion_core/template.php in the Fusion module before 6.x-1.13 for Drupal allows remote attackers to inject arbitrary web script or HTML via the q parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52798" source="BID">52798</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/07/1" source="MLIST">[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)</ref>
-      <ref url="http://secunia.com/advisories/48606" source="SECUNIA">48606</ref>
-      <ref url="http://osvdb.org/80680" source="OSVDB">80680</ref>
-      <ref url="http://drupalcode.org/project/fusion.git/commit/f7cee3d" source="CONFIRM">http://drupalcode.org/project/fusion.git/commit/f7cee3d</ref>
-      <ref url="http://drupal.org/node/1507510" source="MISC">http://drupal.org/node/1507510</ref>
-      <ref url="http://drupal.org/node/1506600" source="CONFIRM">http://drupal.org/node/1506600</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="fusiondrupalthemes" name="fusion">
-        <vers num="6.x-1.0" edition="beta1" />
-        <vers num="6.x-1.0" edition="beta2" />
-        <vers num="6.x-1.0" edition="beta3" />
-        <vers num="6.x-1.0" edition="beta4" />
-        <vers num="6.x-1.0" edition="dev" />
-        <vers num="6.x-1.0" edition="rc1" />
-        <vers num="6.x-1.1" />
-        <vers prev="1" num="6.x-1.12" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2085" published="2012-08-28" name="CVE-2012-2085" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://trac.gajim.org/changeset/bc296e96ac10" source="CONFIRM" patch="1">https://trac.gajim.org/changeset/bc296e96ac10</ref>
-      <ref url="https://trac.gajim.org/ticket/7031" source="CONFIRM">https://trac.gajim.org/ticket/7031</ref>
-      <ref url="http://www.securityfocus.com/bid/52943" source="BID">52943</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/08/2" source="MLIST">[oss-security] 20120408 Re: CVE request: gajim - code execution and sql injection</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/08/1" source="MLIST">[oss-security] 20120408 CVE request: gajim - code execution and sql injection</ref>
-      <ref url="http://secunia.com/advisories/48708" source="SECUNIA">48708</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gajim" name="gajim">
-        <vers num="0.1" />
-        <vers num="0.10" />
-        <vers num="0.10.1" />
-        <vers num="0.11" />
-        <vers num="0.11.1" />
-        <vers num="0.11.2" />
-        <vers num="0.11.3" />
-        <vers num="0.11.4" />
-        <vers num="0.12" />
-        <vers num="0.12.1" />
-        <vers num="0.12.2" />
-        <vers num="0.12.3" />
-        <vers num="0.12.4" />
-        <vers num="0.12.5" edition="alpha1" />
-        <vers num="0.12.5" edition="beta1" />
-        <vers num="0.13" />
-        <vers num="0.13.1" />
-        <vers num="0.13.2" />
-        <vers num="0.13.3" />
-        <vers num="0.13.4" />
-        <vers num="0.14" />
-        <vers num="0.14.1" />
-        <vers num="0.14.2" />
-        <vers num="0.14.3" />
-        <vers prev="1" num="0.14.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2088" published="2012-07-22" name="CVE-2012-2088" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Integer signedness error in the TIFFReadDirectory function in tif_dirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a negative tile depth in a tiff image, which triggers an improper conversion between signed and unsigned types, leading to a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=832864" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=832864</ref>
-      <ref url="http://www.securityfocus.com/bid/54270" source="BID">54270</ref>
-      <ref url="http://secunia.com/advisories/49686" source="SECUNIA" adv="1">49686</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1054.html" source="REDHAT">RHSA-2012:1054</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="libtiff" name="libtiff">
-        <vers num="3.4" edition="beta18" />
-        <vers num="3.4" edition="beta24" />
-        <vers num="3.4" edition="beta28" />
-        <vers num="3.4" edition="beta29" />
-        <vers num="3.4" edition="beta31" />
-        <vers num="3.4" edition="beta32" />
-        <vers num="3.4" edition="beta34" />
-        <vers num="3.4" edition="beta35" />
-        <vers num="3.4" edition="beta36" />
-        <vers num="3.4" edition="beta37" />
-        <vers num="3.5.1" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" edition="beta" />
-        <vers num="3.5.7" edition="alpha" />
-        <vers num="3.5.7" edition="alpha2" />
-        <vers num="3.5.7" edition="alpha3" />
-        <vers num="3.5.7" edition="alpha4" />
-        <vers num="3.5.7" edition="beta" />
-        <vers num="3.6.0" edition="beta" />
-        <vers num="3.6.0" edition="beta2" />
-        <vers num="3.6.1" />
-        <vers num="3.7.0" edition="alpha" />
-        <vers num="3.7.0" edition="beta" />
-        <vers num="3.7.0" edition="beta2" />
-        <vers num="3.7.1" />
-        <vers num="3.7.2" />
-        <vers num="3.7.3" />
-        <vers num="3.7.4" />
-        <vers num="3.8.0" />
-        <vers num="3.8.1" />
-        <vers num="3.8.2" />
-        <vers num="3.9" />
-        <vers num="3.9.0" edition="beta" />
-        <vers num="3.9.1" />
-        <vers num="3.9.2" />
-        <vers num="3.9.2-5.2.1" />
-        <vers num="3.9.3" />
-        <vers prev="1" num="3.9.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2089" published="2012-04-17" name="CVE-2012-2089" modified="2012-04-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="5.1" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="4.9" CVSS_base_score="5.1">
-    <desc>
-      <descript source="cve">Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://nginx.org/en/security_advisories.html" source="CONFIRM" patch="1" adv="1">http://nginx.org/en/security_advisories.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/12/9" source="MLIST">[oss-security] 20120412 nginx security advisory: mp4 module vulnerability, CVE-2012-2089</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="igor_sysoev" name="nginx">
-        <vers num="1.0.10" />
-        <vers num="1.0.11" />
-        <vers num="1.0.12" />
-        <vers num="1.0.13" />
-        <vers num="1.0.14" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2090" published="2012-06-16" name="CVE-2012-2090" modified="2012-06-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple format string vulnerabilities in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in certain data chunk values in an aircraft xml model to (1) fgfs/flightgear/src/Cockpit/panel.cxx or (2) fgfs/flightgear/src/Network/generic.cxx, or (3) a scene graph model to simgear/simgear/scene/model/SGText.cxx.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=811617" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=811617</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74791" source="XF">flightgear-xml-format-string(74791)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/10/13" source="MLIST">[oss-security] 20120410 Re: CVE Request: FlightGear and Simgear Multiple vulnerabilities</ref>
-      <ref url="http://sourceforge.net/mailarchive/message.php?msg_id=29012174" source="MLIST">[Flightgear-devel] 20120320 Re: Flightgear and Simgear multiple format string vulnerabilities</ref>
-      <ref url="http://sourceforge.net/mailarchive/message.php?msg_id=28957051" source="MLIST">[Flightgear-devel] 20120309 Flightgear and Simgear multiple format string vulnerabilities</ref>
-      <ref url="http://secunia.com/advisories/48780" source="SECUNIA" adv="1">48780</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082017.html" source="FEDORA">FEDORA-2012-8615</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082002.html" source="FEDORA">FEDORA-2012-8650</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081997.html" source="FEDORA">FEDORA-2012-8647</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="flightgear" name="flightgear">
-        <vers num="1.9.1" />
-        <vers num="2.0.0" />
-        <vers prev="1" num="2.6.0" />
-      </prod>
-      <prod vendor="simgear" name="simgear">
-        <vers num="1.9.1" />
-        <vers num="2.0.0" />
-        <vers prev="1" num="2.6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2091" published="2012-06-16" name="CVE-2012-2091" modified="2012-06-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long string in a rotor tag of an aircraft xml model to the Rotor::getValueforFGSet function in src/FDM/YASim/Rotor.cpp or (2) a crafted UDP packet to the SGSocketUDP::read function in simgear/simgear/simgear/io/sg_socket_udp.cxx.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=811617" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=811617</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/10/13" source="MLIST">[oss-security] 20120410 Re: CVE Request: FlightGear and Simgear Multiple vulnerabilities</ref>
-      <ref url="http://sourceforge.net/mailarchive/message.php?msg_id=29012174" source="MLIST">[Flightgear-devel] 20120320 Re: Flightgear and Simgear multiple format string vulnerabilities</ref>
-      <ref url="http://sourceforge.net/mailarchive/message.php?msg_id=28957051" source="MLIST">[Flightgear-devel] 20120309 Flightgear and Simgear multiple format string vulnerabilities</ref>
-      <ref url="http://secunia.com/advisories/48780" source="SECUNIA" adv="1">48780</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082017.html" source="FEDORA">FEDORA-2012-8615</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082002.html" source="FEDORA">FEDORA-2012-8650</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081997.html" source="FEDORA">FEDORA-2012-8647</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="flightgear" name="flightgear">
-        <vers num="1.9.1" />
-        <vers num="2.0.0" />
-        <vers prev="1" num="2.6.0" />
-      </prod>
-      <prod vendor="simgear" name="simgear">
-        <vers num="1.9.1" />
-        <vers num="2.0.0" />
-        <vers prev="1" num="2.6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2093" published="2012-05-18" name="CVE-2012-2093" modified="2012-06-14" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:N/I:P/A:P)" CVSS_score="3.3" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.4" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to the get_tmpfile_name function.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://trac.gajim.org/changeset/13759/src/common/latex.py" source="CONFIRM">https://trac.gajim.org/changeset/13759/src/common/latex.py</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74869" source="XF">gajim-gettmpfilename-symlink(74869)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/10/6" source="MLIST">[oss-security] 20120410 gajim insecure file creation when using latex</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/10/15" source="MLIST">[oss-security] 20120410 RE: gajim insecure file creation when using latex</ref>
-      <ref url="http://secunia.com/advisories/48695" source="SECUNIA" adv="1">48695</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079241.html" source="FEDORA">FEDORA-2012-6061</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079237.html" source="FEDORA">FEDORA-2012-6001</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079169.html" source="FEDORA">FEDORA-2012-6161</ref>
-      <ref url="http://hg.gajim.org/gajim/rev/f046e4aaf7d4" source="CONFIRM">http://hg.gajim.org/gajim/rev/f046e4aaf7d4</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gajim" name="gajim">
-        <vers num="0.15" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2094" published="2012-06-05" name="CVE-2012-2094" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the guest console.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://lists.launchpad.net/openstack/msg10211.html" source="MLIST">[openstack] 20120417 [OSSA 2012-004] XSS vulnerability in Horizon log viewer</ref>
-      <ref url="https://github.com/openstack/horizon/commit/7f8c788aa70db98ac904f37fa4197fcabb802942" source="CONFIRM">https://github.com/openstack/horizon/commit/7f8c788aa70db98ac904f37fa4197fcabb802942</ref>
-      <ref url="https://bugs.launchpad.net/horizon/+bug/977944" source="MISC">https://bugs.launchpad.net/horizon/+bug/977944</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76136" source="XF">openstack-horizon-xss(76136)</ref>
-      <ref url="http://www.osvdb.org/81742" source="OSVDB">81742</ref>
-      <ref url="http://ubuntu.com/usn/usn-1439-1" source="UBUNTU">USN-1439-1</ref>
-      <ref url="http://secunia.com/advisories/49071" source="SECUNIA" adv="1">49071</ref>
-      <ref url="http://secunia.com/advisories/49024" source="SECUNIA" adv="1">49024</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079160.html" source="FEDORA">FEDORA-2012-6108</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openstack" name="horizon">
-        <vers num="2012.1" />
-        <vers num="folsom-1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2096" published="2012-08-14" name="CVE-2012-2096" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52984" source="BID" patch="1">52984</ref>
-      <ref url="http://drupalcode.org/project/fivestar.git/commitdiff/75dba2c" source="CONFIRM" patch="1">http://drupalcode.org/project/fivestar.git/commitdiff/75dba2c</ref>
-      <ref url="http://drupal.org/node/1528614" source="MISC" patch="1" adv="1">http://drupal.org/node/1528614</ref>
-      <ref url="http://drupal.org/node/1528600" source="CONFIRM" patch="1">http://drupal.org/node/1528600</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/12/2" source="MLIST">[oss-security] 20120411 Re: CVE Request for Drupal Contributed Advisories on 2012-04-11</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/11/4" source="MLIST">[oss-security] 20120411 CVE Request for Drupal Contributed Advisories on 2012-04-11</ref>
-      <ref url="http://secunia.com/advisories/48788" source="SECUNIA" adv="1">48788</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="lullabot" name="fivestar_module_for_drupal">
-        <vers num="6.x-1.20" />
-        <vers num="6.x-1.x" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2097" published="2012-08-14" name="CVE-2012-2097" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/autosave.git/commitdiff/f7bfd2d" source="CONFIRM" patch="1">http://drupalcode.org/project/autosave.git/commitdiff/f7bfd2d</ref>
-      <ref url="http://drupalcode.org/project/autosave.git/commitdiff/39f7fb0" source="CONFIRM" patch="1">http://drupalcode.org/project/autosave.git/commitdiff/39f7fb0</ref>
-      <ref url="http://drupal.org/node/1528906" source="CONFIRM" patch="1">http://drupal.org/node/1528906</ref>
-      <ref url="http://drupal.org/node/1528864" source="MISC" patch="1" adv="1">http://drupal.org/node/1528864</ref>
-      <ref url="http://drupal.org/node/1525998" source="CONFIRM" patch="1">http://drupal.org/node/1525998</ref>
-      <ref url="http://www.securityfocus.com/bid/52985" source="BID">52985</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/12/2" source="MLIST">[oss-security] 20120411 Re: CVE Request for Drupal Contributed Advisories on 2012-04-11</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/11/4" source="MLIST">[oss-security] 20120411 CVE Request for Drupal Contributed Advisories on 2012-04-11</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="larry_garfield" name="autosave">
-        <vers num="6.x-2.0" />
-        <vers num="6.x-2.1" />
-        <vers num="6.x-2.2" />
-        <vers num="6.x-2.3" />
-        <vers num="6.x-2.4" />
-        <vers num="6.x-2.5" />
-        <vers num="6.x-2.6" />
-        <vers num="6.x-2.7" />
-        <vers num="6.x-2.8" />
-        <vers prev="1" num="6.x-2.9" />
-        <vers num="6.x-2.x" edition="dev" />
-        <vers num="7.x-2.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2098" published="2012-06-29" name="CVE-2012-2098" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027096" source="SECTRACK">1027096</ref>
-      <ref url="http://www.securityfocus.com/bid/53676" source="BID">53676</ref>
-      <ref url="http://secunia.com/advisories/49255" source="SECUNIA" adv="1">49255</ref>
-      <ref url="http://packetstormsecurity.org/files/113014/Apache-Commons-Compress-Apache-Ant-Denial-Of-Service.html" source="MISC">http://packetstormsecurity.org/files/113014/Apache-Commons-Compress-Apache-Ant-Denial-Of-Service.html</ref>
-      <ref url="http://osvdb.org/82161" source="OSVDB">82161</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081746.html" source="FEDORA">FEDORA-2012-8465</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081697.html" source="FEDORA">FEDORA-2012-8428</ref>
-      <ref url="http://commons.apache.org/compress/security.html" source="CONFIRM">http://commons.apache.org/compress/security.html</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-05/0130.html" source="BUGTRAQ">20120523 [CVE-2012-2098] Apache Commons Compress and Apache Ant denial of service vulnerability</ref>
-      <ref url="http://ant.apache.org/security.html" source="CONFIRM">http://ant.apache.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="commons-compress">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers prev="1" num="1.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2100" published="2012-07-03" name="CVE-2012-2100" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:C)" CVSS_score="7.1" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="8.6" CVSS_base_score="7.1">
-    <desc>
-      <descript source="cve">The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value).  NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d50f2ab6f050311dbf7b8f5501b25f0bf64a439b" source="CONFIRM" patch="1">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d50f2ab6f050311dbf7b8f5501b25f0bf64a439b</ref>
-      <ref url="https://github.com/torvalds/linux/commit/d50f2ab6f050311dbf7b8f5501b25f0bf64a439b" source="CONFIRM">https://github.com/torvalds/linux/commit/d50f2ab6f050311dbf7b8f5501b25f0bf64a439b</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=809687" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=809687</ref>
-      <ref url="http://www.securityfocus.com/bid/53414" source="BID">53414</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/12/11" source="MLIST">[oss-security] 20120412 Re: fix to CVE-2009-4307</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="3.2" edition="" />
-        <vers num="3.2" edition=":~~~~x86~" />
-        <vers prev="1" num="3.2.1" edition="" />
-        <vers prev="1" num="3.2.1" edition=":~~~~x86~" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2101" published="2012-06-07" name="CVE-2012-2101" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:P)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://lists.launchpad.net/openstack/msg10268.html" source="MLIST">[openstack] 20120419 [OSSA 2012-005] No quota enforced on security group rules</ref>
-      <ref url="https://github.com/openstack/nova/commit/a67db4586f70ed881d65e80035b2a25be195ce64" source="CONFIRM">https://github.com/openstack/nova/commit/a67db4586f70ed881d65e80035b2a25be195ce64</ref>
-      <ref url="https://github.com/openstack/nova/commit/8c8735a73afb16d5856f0aa6088e9ae406c52beb" source="CONFIRM">https://github.com/openstack/nova/commit/8c8735a73afb16d5856f0aa6088e9ae406c52beb</ref>
-      <ref url="https://github.com/openstack/nova/commit/1f644d210557b1254f7c7b39424b09a45329ade7" source="CONFIRM">https://github.com/openstack/nova/commit/1f644d210557b1254f7c7b39424b09a45329ade7</ref>
-      <ref url="https://bugs.launchpad.net/nova/+bug/969545" source="CONFIRM">https://bugs.launchpad.net/nova/+bug/969545</ref>
-      <ref url="http://www.osvdb.org/81641" source="OSVDB">81641</ref>
-      <ref url="http://ubuntu.com/usn/usn-1438-1" source="UBUNTU">USN-1438-1</ref>
-      <ref url="http://secunia.com/advisories/49048" source="SECUNIA" adv="1">49048</ref>
-      <ref url="http://secunia.com/advisories/49034" source="SECUNIA" adv="1">49034</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079551.html" source="FEDORA">FEDORA-2012-6273</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079434.html" source="FEDORA">FEDORA-2012-6365</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openstack" name="nova">
-        <vers num="2011.3" />
-        <vers num="2012.1" />
-        <vers num="folsom" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2102" published="2012-08-16" name="CVE-2012-2102" modified="2012-08-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:P)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service (assertion failure and mysqld abort) by deleting a record and using HANDLER READ NEXT.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/13/7" source="MLIST">[oss-security] 20120413 Re: CVE request: mysql: Server crash on HANDLER READ  NEXT after DELETE</ref>
-      <ref url="http://eromang.zataz.com/2012/04/10/oracle-mysql-innodb-bugs-13510739-and-63775-dos-demo/" source="MISC">http://eromang.zataz.com/2012/04/10/oracle-mysql-innodb-bugs-13510739-and-63775-dos-demo/</ref>
-      <ref url="http://dev.mysql.com/doc/refman/5.5/en/news-5-5-22.html" source="CONFIRM">http://dev.mysql.com/doc/refman/5.5/en/news-5-5-22.html</ref>
-      <ref url="http://dev.mysql.com/doc/refman/5.1/en/news-5-1-62.html" source="CONFIRM">http://dev.mysql.com/doc/refman/5.1/en/news-5-1-62.html</ref>
-      <ref url="http://bazaar.launchpad.net/~mysql/mysql-server/5.5/revision/3097.15.15" source="MISC">http://bazaar.launchpad.net/~mysql/mysql-server/5.5/revision/3097.15.15</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-        <vers num="5.5.1" />
-        <vers num="5.5.2" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2103" published="2012-08-26" name="CVE-2012-2103" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="1.2" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="1.9" CVSS_base_score="1.2">
-    <desc>
-      <descript source="cve">The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=812889" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=812889</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74884" source="XF">munin-unspec-symlink(74884)</ref>
-      <ref url="http://www.securityfocus.com/bid/53031" source="BID">53031</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/16/6" source="MLIST">[oss-security] 20120416 Re: CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/16/5" source="MLIST">[oss-security] 20120416 CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://secunia.com/advisories/48859" source="SECUNIA">48859</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668778" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668778</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="munin-monitoring" name="munin">
-        <vers num="1.4.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2104" published="2012-08-26" name="CVE-2012-2104" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted HTTP request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74885" source="XF">munin-munincgigraphlog-command-execution(74885)</ref>
-      <ref url="http://www.securityfocus.com/bid/53032" source="BID">53032</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/16/6" source="MLIST">[oss-security] 20120416 Re: CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/16/5" source="MLIST">[oss-security] 20120416 CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668666" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668666</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="munin-monitoring" name="munin">
-        <vers num="2.0" />
-        <vers num="2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2109" published="2012-09-04" name="CVE-2012-2109" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbitrary SQL commands via the page parameter in an activity_widget_filter action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://buddypress.org/2012/03/buddypress-1-5-5/" source="CONFIRM" patch="1" adv="1">http://buddypress.org/2012/03/buddypress-1-5-5/</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/16/10" source="MLIST">[oss-security] 20120416 Re: CVE-request: WordPress BuddyPress-plugin SQL-injection  1.5.4</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/15/2" source="MLIST">[oss-security] 20120415 CVE-request: WordPress BuddyPress-plugin SQL-injection  1.5.4</ref>
-      <ref url="http://www.exploit-db.com/exploits/18690" source="EXPLOIT-DB">18690</ref>
-      <ref url="http://seclists.org/bugtraq/2012/Apr/4" source="BUGTRAQ">20120331 SQL injection in Wordpress plugin Buddypress</ref>
-      <ref url="http://osvdb.org/80763" source="OSVDB">80763</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="buddypress" name="buddypress_plugin">
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.1" />
-        <vers num="1.5.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2110" published="2012-04-19" name="CVE-2012-2110" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.ubuntu.com/usn/USN-1424-1" source="UBUNTU">USN-1424-1</ref>
-      <ref url="http://www.securitytracker.com/id?1026957" source="SECTRACK">1026957</ref>
-      <ref url="http://www.openssl.org/news/secadv_20120419.txt" source="CONFIRM" adv="1">http://www.openssl.org/news/secadv_20120419.txt</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2454" source="DEBIAN">DSA-2454</ref>
-      <ref url="http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578" source="CONFIRM">http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578</ref>
-      <ref url="http://secunia.com/advisories/48999" source="SECUNIA">48999</ref>
-      <ref url="http://secunia.com/advisories/48895" source="SECUNIA">48895</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0522.html" source="REDHAT">RHSA-2012:0522</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0518.html" source="REDHAT">RHSA-2012:0518</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134039053214295&amp;w=2" source="HP">HPSBOV02793</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134039053214295&amp;w=2" source="HP">SSRT100891</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080176.html" source="FEDORA">FEDORA-2012-6395</ref>
-      <ref url="http://cvs.openssl.org/chngview?cn=22439" source="CONFIRM">http://cvs.openssl.org/chngview?cn=22439</ref>
-      <ref url="http://cvs.openssl.org/chngview?cn=22434" source="CONFIRM">http://cvs.openssl.org/chngview?cn=22434</ref>
-      <ref url="http://cvs.openssl.org/chngview?cn=22431" source="CONFIRM">http://cvs.openssl.org/chngview?cn=22431</ref>
-      <ref url="http://archives.neohapsis.com/archives/fulldisclosure/2012-04/0209.html" source="FULLDISC">20120419 incorrect integer conversions in OpenSSL can result in memory corruption.</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openssl" name="openssl">
-        <vers num="0.9.1c" />
-        <vers num="0.9.2b" />
-        <vers num="0.9.3" />
-        <vers num="0.9.3a" />
-        <vers num="0.9.4" />
-        <vers num="0.9.5" edition="beta1" />
-        <vers num="0.9.5" edition="beta2" />
-        <vers num="0.9.5a" edition="beta1" />
-        <vers num="0.9.5a" edition="beta2" />
-        <vers num="0.9.6" edition="beta1" />
-        <vers num="0.9.6" edition="beta2" />
-        <vers num="0.9.6" edition="beta3" />
-        <vers num="0.9.6a" edition="beta1" />
-        <vers num="0.9.6a" edition="beta2" />
-        <vers num="0.9.6a" edition="beta3" />
-        <vers num="0.9.6b" />
-        <vers num="0.9.6c" />
-        <vers num="0.9.6d" />
-        <vers num="0.9.6e" />
-        <vers num="0.9.6f" />
-        <vers num="0.9.6g" />
-        <vers num="0.9.6h" />
-        <vers num="0.9.6i" />
-        <vers num="0.9.6j" />
-        <vers num="0.9.6k" />
-        <vers num="0.9.6l" />
-        <vers num="0.9.6m" />
-        <vers num="0.9.7" edition="beta1" />
-        <vers num="0.9.7" edition="beta2" />
-        <vers num="0.9.7" edition="beta3" />
-        <vers num="0.9.7" edition="beta4" />
-        <vers num="0.9.7" edition="beta5" />
-        <vers num="0.9.7" edition="beta6" />
-        <vers num="0.9.7a" />
-        <vers num="0.9.7b" />
-        <vers num="0.9.7c" />
-        <vers num="0.9.7d" />
-        <vers num="0.9.7e" />
-        <vers num="0.9.7f" />
-        <vers num="0.9.7g" />
-        <vers num="0.9.7h" />
-        <vers num="0.9.7i" />
-        <vers num="0.9.7j" />
-        <vers num="0.9.7k" />
-        <vers num="0.9.7l" />
-        <vers num="0.9.7m" />
-        <vers num="0.9.8" />
-        <vers num="0.9.8a" />
-        <vers num="0.9.8b" />
-        <vers num="0.9.8c" />
-        <vers num="0.9.8d" />
-        <vers num="0.9.8e" />
-        <vers num="0.9.8f" />
-        <vers num="0.9.8g" />
-        <vers num="0.9.8h" />
-        <vers num="0.9.8i" />
-        <vers num="0.9.8j" />
-        <vers num="0.9.8k" />
-        <vers num="0.9.8l" />
-        <vers num="0.9.8m" edition="beta1" />
-        <vers num="0.9.8n" />
-        <vers num="0.9.8o" />
-        <vers num="0.9.8p" />
-        <vers num="0.9.8q" />
-        <vers num="0.9.8r" />
-        <vers num="0.9.8s" />
-        <vers num="0.9.8t" />
-        <vers prev="1" num="0.9.8u" />
-        <vers num="1.0.0" edition="beta1" />
-        <vers num="1.0.0" edition="beta2" />
-        <vers num="1.0.0" edition="beta3" />
-        <vers num="1.0.0" edition="beta4" />
-        <vers num="1.0.0" edition="beta5" />
-        <vers num="1.0.0a" />
-        <vers num="1.0.0b" />
-        <vers num="1.0.0c" />
-        <vers num="1.0.0d" />
-        <vers num="1.0.0e" />
-        <vers num="1.0.0g" />
-        <vers num="1.0.1" edition="beta1" />
-        <vers num="1.0.1" edition="beta2" />
-      </prod>
-      <prod vendor="redhat" name="openssl">
-        <vers num="0.9.6-15" />
-        <vers num="0.9.6b-3" />
-        <vers num="0.9.7a-2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2111" published="2012-04-30" name="CVE-2012-2111" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.samba.org/samba/security/CVE-2012-2111" source="CONFIRM" patch="1" adv="1">http://www.samba.org/samba/security/CVE-2012-2111</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1434-1" source="UBUNTU">USN-1434-1</ref>
-      <ref url="http://www.securitytracker.com/id?1026988" source="SECTRACK">1026988</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2463" source="DEBIAN">DSA-2463</ref>
-      <ref url="http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578" source="CONFIRM">http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578</ref>
-      <ref url="http://secunia.com/advisories/49030" source="SECUNIA">49030</ref>
-      <ref url="http://secunia.com/advisories/49017" source="SECUNIA">49017</ref>
-      <ref url="http://secunia.com/advisories/48999" source="SECUNIA">48999</ref>
-      <ref url="http://secunia.com/advisories/48996" source="SECUNIA">48996</ref>
-      <ref url="http://secunia.com/advisories/48984" source="SECUNIA">48984</ref>
-      <ref url="http://secunia.com/advisories/48976" source="SECUNIA">48976</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0533.html" source="REDHAT">RHSA-2012:0533</ref>
-      <ref url="http://osvdb.org/81648" source="OSVDB">81648</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00003.html" source="SUSE">SUSE-SU-2012:0591</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00001.html" source="SUSE">openSUSE-SU-2012:0583</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00023.html" source="SUSE">SUSE-SU-2012:0573</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079677.html" source="FEDORA">FEDORA-2012-7006</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079670.html" source="FEDORA">FEDORA-2012-6999</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079662.html" source="FEDORA">FEDORA-2012-6981</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="samba" name="samba">
-        <vers num="3.4.0" />
-        <vers num="3.4.1" />
-        <vers num="3.4.10" />
-        <vers num="3.4.11" />
-        <vers num="3.4.12" />
-        <vers num="3.4.13" />
-        <vers num="3.4.14" />
-        <vers num="3.4.15" />
-        <vers num="3.4.16" />
-        <vers num="3.4.2" />
-        <vers num="3.4.3" />
-        <vers num="3.4.4" />
-        <vers num="3.4.5" />
-        <vers num="3.4.6" />
-        <vers num="3.4.7" />
-        <vers num="3.4.8" />
-        <vers num="3.4.9" />
-        <vers num="3.5.0" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6.0" />
-        <vers num="3.6.1" />
-        <vers num="3.6.2" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2112" published="2012-08-27" name="CVE-2012-2112" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script or HTML via exception messages.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74920" source="XF">exceptionhandler-exceptionmessages-xss(74920)</ref>
-      <ref url="http://www.securityfocus.com/bid/53047" source="BID">53047</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/18/1" source="MLIST">[oss-security] 20120417 Re: CVE-request: TYPO3-CORE-SA-2012-002 XSS in TYPO3 Core</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/17/5" source="MLIST">[oss-security] 20120417 CVE-request: TYPO3-CORE-SA-2012-002 XSS in TYPO3 Core</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2455" source="DEBIAN">DSA-2455</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-002/" source="CONFIRM" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-002/</ref>
-      <ref url="http://lists.typo3.org/pipermail/typo3-announce/2012/000242.html" source="MLIST">[TYPO3-announce] 20120417 Announcing TYPO3 4.4.15, 4.5.15 and 4.6.8</ref>
-      <ref url="http://lists.typo3.org/pipermail/typo3-announce/2012/000241.html" source="MLIST">[TYPO3-announce] 20120417 Cross-Site Scripting Vulnerability in TYPO3 Core</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="typo3">
-        <vers num="4.4.0" />
-        <vers num="4.4.1" />
-        <vers num="4.4.10" />
-        <vers num="4.4.11" />
-        <vers num="4.4.12" />
-        <vers num="4.4.13" />
-        <vers num="4.4.14" />
-        <vers num="4.4.2" />
-        <vers num="4.4.3" />
-        <vers num="4.4.4" />
-        <vers num="4.4.5" />
-        <vers num="4.4.6" />
-        <vers num="4.4.7" />
-        <vers num="4.4.8" />
-        <vers num="4.4.9" />
-        <vers num="4.5.0" />
-        <vers num="4.5.1" />
-        <vers num="4.5.10" />
-        <vers num="4.5.11" />
-        <vers num="4.5.12" />
-        <vers num="4.5.13" />
-        <vers num="4.5.14" />
-        <vers num="4.5.2" />
-        <vers num="4.5.3" />
-        <vers num="4.5.4" />
-        <vers num="4.5.5" />
-        <vers num="4.5.6" />
-        <vers num="4.5.7" />
-        <vers num="4.5.8" />
-        <vers num="4.5.9" />
-        <vers num="4.6.0" />
-        <vers num="4.6.1" />
-        <vers num="4.6.2" />
-        <vers num="4.6.3" />
-        <vers num="4.6.4" />
-        <vers num="4.6.5" />
-        <vers num="4.6.6" />
-        <vers num="4.6.7" />
-        <vers num="4.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2113" published="2012-07-22" name="CVE-2012-2113" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=810551" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=810551</ref>
-      <ref url="http://www.securityfocus.com/bid/54076" source="BID">54076</ref>
-      <ref url="http://www.remotesensing.org/libtiff/v4.0.2.html" source="CONFIRM">http://www.remotesensing.org/libtiff/v4.0.2.html</ref>
-      <ref url="http://secunia.com/advisories/49686" source="SECUNIA" adv="1">49686</ref>
-      <ref url="http://secunia.com/advisories/49493" source="SECUNIA" adv="1">49493</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1054.html" source="REDHAT">RHSA-2012:1054</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="libtiff" name="libtiff">
-        <vers num="3.4" edition="beta18" />
-        <vers num="3.4" edition="beta24" />
-        <vers num="3.4" edition="beta28" />
-        <vers num="3.4" edition="beta29" />
-        <vers num="3.4" edition="beta31" />
-        <vers num="3.4" edition="beta32" />
-        <vers num="3.4" edition="beta34" />
-        <vers num="3.4" edition="beta35" />
-        <vers num="3.4" edition="beta36" />
-        <vers num="3.4" edition="beta37" />
-        <vers num="3.5.1" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" edition="beta" />
-        <vers num="3.5.7" edition="alpha" />
-        <vers num="3.5.7" edition="alpha2" />
-        <vers num="3.5.7" edition="alpha3" />
-        <vers num="3.5.7" edition="alpha4" />
-        <vers num="3.5.7" edition="beta" />
-        <vers num="3.6.0" edition="beta" />
-        <vers num="3.6.0" edition="beta2" />
-        <vers num="3.6.1" />
-        <vers num="3.7.0" edition="alpha" />
-        <vers num="3.7.0" edition="beta" />
-        <vers num="3.7.0" edition="beta2" />
-        <vers num="3.7.1" />
-        <vers num="3.7.2" />
-        <vers num="3.7.3" />
-        <vers num="3.7.4" />
-        <vers num="3.8.0" />
-        <vers num="3.8.1" />
-        <vers num="3.8.2" />
-        <vers num="3.9" />
-        <vers num="3.9.0" edition="beta" />
-        <vers num="3.9.1" />
-        <vers num="3.9.2" />
-        <vers num="3.9.2-5.2.1" />
-        <vers num="3.9.3" />
-        <vers num="3.9.4" />
-        <vers num="3.9.5" />
-        <vers num="4.0" edition="alpha" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers prev="1" num="4.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2114" published="2012-08-31" name="CVE-2012-2114" modified="2012-09-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in fprintf in musl before 0.8.8 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string to an unbuffered stream such as stderr.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/18/6" source="MLIST">[oss-security] 20120418 Re: Stack-based buffer overflow in musl libc 0.8.7 and earlier</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/18/5" source="MLIST">[oss-security] 20120418 Stack-based buffer overflow in musl libc 0.8.7 and earlier</ref>
-      <ref url="http://www.openwall.com/lists/musl/2012/04/17/1" source="MLIST">[musl] 20120417 musl security advisory #001: stack buffer overflow in vfprintf with  long output</ref>
-      <ref url="http://www.etalabs.net/musl/download.html" source="CONFIRM">http://www.etalabs.net/musl/download.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="etalabs" name="musl">
-        <vers prev="1" num="0.8.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2115" published="2012-09-09" name="CVE-2012-2115" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in interface/login/validateUser.php in OpenEMR 4.1.0 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the u parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/71983" source="XF">openemr-validateuser-sql-injection(71983)</ref>
-      <ref url="http://www.securityfocus.com/bid/51247" source="BID">51247</ref>
-      <ref url="http://www.osvdb.org/78132" source="OSVDB">78132</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/18/7" source="MLIST">[oss-security] 20120418 Re: CVE-request: OpenEMR 4.1.0 SQL-injection</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/17/1" source="MLIST">[oss-security] 20120417 CVE-request: OpenEMR 4.1.0 SQL-injection</ref>
-      <ref url="http://www.open-emr.org/wiki/index.php/OpenEMR_Patches" source="CONFIRM">http://www.open-emr.org/wiki/index.php/OpenEMR_Patches</ref>
-      <ref url="http://www.mavitunasecurity.com/sql-injection-vulnerability-in-openemr/" source="MISC">http://www.mavitunasecurity.com/sql-injection-vulnerability-in-openemr/</ref>
-      <ref url="http://www.exploit-db.com/exploits/18274" source="EXPLOIT-DB">18274</ref>
-      <ref url="http://seclists.org/fulldisclosure/2012/Jan/27" source="FULLDISC">20120103 SQL Injection Vulnerability in OpenEMR 4.1.0</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0013.html" source="BUGTRAQ">20120103 SQL Injection Vulnerability in OpenEMR 4.1.0</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="open-emr" name="openemr">
-        <vers num="3.1.0" />
-        <vers num="3.2.0" />
-        <vers num="4.0.0" />
-        <vers prev="1" num="4.1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2116" published="2012-08-31" name="CVE-2012-2116" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/commerce_reorder.git/commit/bf060ab" source="CONFIRM" patch="1">http://drupalcode.org/project/commerce_reorder.git/commit/bf060ab</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/19/1" source="MLIST">[oss-security] 20120418 Re: CVE Request for Drupal Contributed Advisories on 2012-04-18</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/18/11" source="MLIST">[oss-security] 20120418 CVE Request for Drupal Contributed Advisories on 2012-04-18</ref>
-      <ref url="http://secunia.com/advisories/48912" source="SECUNIA" adv="1">48912</ref>
-      <ref url="http://drupal.org/node/1538198" source="CONFIRM">http://drupal.org/node/1538198</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="commerceguys" name="commerce_reorder">
-        <vers prev="1" num="7.x-1.0" />
-        <vers num="7.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2117" published="2012-08-31" name="CVE-2012-2117" modified="2012-09-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Gigya - Social optimization module 6.x before 6.x-3.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1538704" source="MISC" patch="1" adv="1">http://drupal.org/node/1538704</ref>
-      <ref url="http://drupal.org/node/1515084" source="CONFIRM" patch="1">http://drupal.org/node/1515084</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/19/1" source="MLIST">[oss-security] 20120418 Re: CVE Request for Drupal Contributed Advisories on 2012-04-18</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/18/11" source="MLIST">[oss-security] 20120418 CVE Request for Drupal Contributed Advisories on 2012-04-18</ref>
-      <ref url="http://secunia.com/advisories/48832" source="SECUNIA" adv="1">48832</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="yaniv_aran-shamir" name="gigya">
-        <vers num=".x-3.0" edition="beta1" />
-        <vers num="6.x-3.0" edition="beta2" />
-        <vers num="6.x-3.0" edition="beta3" />
-        <vers num="6.x-3.1" />
-        <vers num="6.x-3.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2118" published="2012-05-18" name="CVE-2012-2118" modified="2012-05-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://patchwork.freedesktop.org/patch/10001/" source="MISC" patch="1">http://patchwork.freedesktop.org/patch/10001/</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74930" source="XF">xorg-input-device-format-string(74930)</ref>
-      <ref url="http://www.securityfocus.com/bid/53150" source="BID">53150</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/19/2" source="MLIST">[oss-security] 20120418 Re: CVE request: Xorg input device format string flaw</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/18/8" source="MLIST">[oss-security] 20120418 CVE request: Xorg input device format string flaw</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="x.org" name="x11">
-        <vers num="1.11" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2120" published="2012-05-18" name="CVE-2012-2120" modified="2012-05-21" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:N/I:P/A:P)" CVSS_score="3.3" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.4" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">latex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when used with the H or T option, allows local users to overwrite arbitrary files via a symlink attack on a temporary file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/19/15" source="MLIST">[oss-security] 20120419 Re: CVE request: latex2man / texlive</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/19/12" source="MLIST">[oss-security] 20120419 CVE request: latex2man / texlive</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668779" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668779</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="debian" name="texlive-extra-utils">
-        <vers num="2011.20120322" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2121" published="2012-05-17" name="CVE-2012-2121" modified="2012-05-17" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/09ca8e1173bcb12e2a449698c9ae3b86a8a10195" source="CONFIRM">https://github.com/torvalds/linux/commit/09ca8e1173bcb12e2a449698c9ae3b86a8a10195</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=814149" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=814149</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/19/16" source="MLIST">[oss-security] 20120419 Re: CVE request -- kernel: kvm: device assignment page leak</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.4" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.4</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers prev="1" num="3.3.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2122" published="2012-06-26" name="CVE-2012-2122" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="5.1" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="4.9" CVSS_base_score="5.1">
-    <desc>
-      <descript source="cve">sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://seclists.org/oss-sec/2012/q2/493" source="MLIST" patch="1">[oss-security] 20120609 Security vulnerability in MySQL/MariaDB sql/password.c</ref>
-      <ref url="https://community.rapid7.com/community/metasploit/blog/2012/06/11/cve-2012-2122-a-tragically-comedic-security-flaw-in-mysql" source="MISC">https://community.rapid7.com/community/metasploit/blog/2012/06/11/cve-2012-2122-a-tragically-comedic-security-flaw-in-mysql</ref>
-      <ref url="http://www.securityfocus.com/bid/53911" source="BID">53911</ref>
-      <ref url="http://www.exploit-db.com/exploits/19092" source="EXPLOIT-DB">19092</ref>
-      <ref url="http://securitytracker.com/id?1027143" source="SECTRACK">1027143</ref>
-      <ref url="http://secunia.com/advisories/49417" source="SECUNIA" adv="1">49417</ref>
-      <ref url="http://kb.askmonty.org/en/mariadb-5162-release-notes/" source="CONFIRM">http://kb.askmonty.org/en/mariadb-5162-release-notes/</ref>
-      <ref url="http://bugs.mysql.com/bug.php?id=64884" source="MISC">http://bugs.mysql.com/bug.php?id=64884</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mariadb" name="mariadb">
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.44" />
-        <vers num="5.1.47" />
-        <vers num="5.1.49" />
-        <vers num="5.1.50" />
-        <vers num="5.1.51" />
-        <vers num="5.1.53" />
-        <vers num="5.1.55" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.2.0" />
-        <vers num="5.2.1" />
-        <vers num="5.2.10" />
-        <vers num="5.2.11" />
-        <vers num="5.2.2" />
-        <vers num="5.2.3" />
-        <vers num="5.2.4" />
-        <vers num="5.2.5" />
-        <vers num="5.2.6" />
-        <vers num="5.2.7" />
-        <vers num="5.2.8" />
-        <vers num="5.2.9" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.22" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.6.2" />
-        <vers num="5.6.3" />
-        <vers num="5.6.4" />
-        <vers num="5.6.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2123" published="2012-05-17" name="CVE-2012-2123" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/d52fc5dde171f030170a6cb78034d166b13c9445" source="CONFIRM">https://github.com/torvalds/linux/commit/d52fc5dde171f030170a6cb78034d166b13c9445</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=806722" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=806722</ref>
-      <ref url="http://www.securityfocus.com/bid/53166" source="BID">53166</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/20/6" source="MLIST">[oss-security] 20120419 Re: CVE request: kernel: fcaps: clear the same personality flags as suid when fcaps are used</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.3" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.3</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d52fc5dde171f030170a6cb78034d166b13c9445" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d52fc5dde171f030170a6cb78034d166b13c9445</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers prev="1" num="3.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2127" published="2012-06-21" name="CVE-2012-2127" modified="2012-06-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID clone system calls, which allows remote attackers to cause a denial of service (reference leak and memory consumption) by making many connections to a daemon that uses PID namespaces to isolate clients, as demonstrated by vsftpd.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/905ad269c55fc62bee3da29f7b1d1efeba8aa1e1" source="CONFIRM" patch="1">https://github.com/torvalds/linux/commit/905ad269c55fc62bee3da29f7b1d1efeba8aa1e1</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.2.bz2" source="CONFIRM" patch="1">http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.2.bz2</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=815188" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=815188</ref>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=757783" source="CONFIRM">https://bugzilla.novell.com/show_bug.cgi?id=757783</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/22/1" source="MLIST">[oss-security] 20120422 Re: Re: CVE request: pid namespace leak in kernel 3.0 and 3.1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/20/25" source="MLIST">[oss-security] 20120420 Re: CVE request: pid namespace leak in kernel 3.0 and 3.1</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=905ad269c55fc62bee3da29f7b1d1efeba8aa1e1" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=905ad269c55fc62bee3da29f7b1d1efeba8aa1e1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="3.1.1" />
-        <vers prev="1" num="3.1.10" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2128" published="2012-08-27" name="CVE-2012-2128" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">** DISPUTED **  Cross-site request forgery (CSRF) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to hijack the authentication of administrators for requests that add arbitrary users.  NOTE: this issue has been disputed by the vendor, who states that it is resultant from CVE-2012-2129: "the exploit code simply uses the XSS hole to extract a valid CSRF token."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=815122" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=815122</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74907" source="XF">dokuwiki-doku-xss(74907)</ref>
-      <ref url="http://www.securityfocus.com/bid/53041" source="BID">53041</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/23/1" source="MLIST">[oss-security] 20120422 Re: CVE Request -- DokuWiki: XSS and CSRF due improper escaping of 'target' parameter in preprocessing edit form data</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/22/4" source="MLIST">[oss-security] 20120422 CVE Request -- DokuWiki: XSS and CSRF due improper escaping of 'target' parameter in preprocessing edit form data</ref>
-      <ref url="http://secunia.com/advisories/48848" source="SECUNIA" adv="1">48848</ref>
-      <ref url="http://seclists.org/bugtraq/2012/Apr/121" source="BUGTRAQ">20120417 DokuWiki Ver.2012/01/25 CSRF Add User Exploit</ref>
-      <ref url="http://ircrash.com/uploads/dokuwiki.txt" source="MISC">http://ircrash.com/uploads/dokuwiki.txt</ref>
-      <ref url="http://bugs.dokuwiki.org/index.php?do=details&amp;task_id=2488" source="MISC">http://bugs.dokuwiki.org/index.php?do=details&amp;task_id=2488</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="andreas_gohr" name="dokuwiki">
-        <vers num="2012-01-25" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2129" published="2012-08-27" name="CVE-2012-2129" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/splitbrain/dokuwiki/commit/ff71173477e54774b5571015d49d944f51cb8a26" source="CONFIRM" patch="1">https://github.com/splitbrain/dokuwiki/commit/ff71173477e54774b5571015d49d944f51cb8a26</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=815122" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=815122</ref>
-      <ref url="https://bugs.gentoo.org/show_bug.cgi?id=412891" source="MISC">https://bugs.gentoo.org/show_bug.cgi?id=412891</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74907" source="XF">dokuwiki-doku-xss(74907)</ref>
-      <ref url="http://www.securityfocus.com/bid/53041" source="BID">53041</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/23/1" source="MLIST">[oss-security] 20120422 Re: CVE Request -- DokuWiki: XSS and CSRF due improper escaping of 'target' parameter in preprocessing edit form data</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/22/4" source="MLIST">[oss-security] 20120422 CVE Request -- DokuWiki: XSS and CSRF due improper escaping of 'target' parameter in preprocessing edit form data</ref>
-      <ref url="http://secunia.com/advisories/48848" source="SECUNIA">48848</ref>
-      <ref url="http://seclists.org/bugtraq/2012/Apr/121" source="BUGTRAQ">20120417 DokuWiki Ver.2012/01/25 CSRF Add User Exploit</ref>
-      <ref url="http://ircrash.com/uploads/dokuwiki.txt" source="MISC">http://ircrash.com/uploads/dokuwiki.txt</ref>
-      <ref url="http://bugs.dokuwiki.org/index.php?do=details&amp;task_id=2487" source="CONFIRM">http://bugs.dokuwiki.org/index.php?do=details&amp;task_id=2487</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="andreas_gohr" name="dokuwiki">
-        <vers num="2012-01-25" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2131" published="2012-04-24" name="CVE-2012-2131" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2110.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.ubuntu.com/usn/USN-1428-1" source="UBUNTU">USN-1428-1</ref>
-      <ref url="http://www.securitytracker.com/id?1026957" source="SECTRACK">1026957</ref>
-      <ref url="http://www.securityfocus.com/bid/53212" source="BID">53212</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/24/1" source="MLIST">[oss-security] 20120424 Re: OpenSSL ASN1 BIO vulnerability (CVE-2012-2110)</ref>
-      <ref url="http://www.openssl.org/news/secadv_20120424.txt" source="CONFIRM" adv="1">http://www.openssl.org/news/secadv_20120424.txt</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2454" source="DEBIAN">DSA-2454</ref>
-      <ref url="http://secunia.com/advisories/48895" source="SECUNIA">48895</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134039053214295&amp;w=2" source="HP">HPSBOV02793</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134039053214295&amp;w=2" source="HP">SSRT100891</ref>
-      <ref url="http://cvs.openssl.org/chngview?cn=22479" source="CONFIRM">http://cvs.openssl.org/chngview?cn=22479</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openssl" name="openssl">
-        <vers num="0.9.8v" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2132" published="2012-08-20" name="CVE-2012-2132" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.gnome.org/show_bug.cgi?id=666280" source="CONFIRM">https://bugzilla.gnome.org/show_bug.cgi?id=666280</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/02/8" source="MLIST">[oss-security] 20120502 Re: CVE Request: libsoup 2.32.2 sets ssl trusted flag despite no verification</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/30/7" source="MLIST">[oss-security] 20120430 Re: CVE Request: libsoup 2.32.2 sets ssl trusted flag despite no verification</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/24/3" source="MLIST">[oss-security] 20120424 CVE Request: libsoup 2.32.2 sets ssl trusted flag despite no verification</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/24/13" source="MLIST">[oss-security] 20120424 Re: CVE Request: libsoup 2.32.2 sets ssl trusted flag despite no verification</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnome" name="libsoup">
-        <vers num="2.32.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2133" published="2012-07-03" name="CVE-2012-2133" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:N/I:N/A:C)" CVSS_score="4.0" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="1.9" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the Linux kernel before 3.3.6, when huge pages are enabled, allows local users to cause a denial of service (system crash) or possibly gain privileges by interacting with a hugetlbfs filesystem, as demonstrated by a umount operation that triggers improper handling of quota data.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/90481622d75715bfcb68501280a917dbfe516029" source="CONFIRM">https://github.com/torvalds/linux/commit/90481622d75715bfcb68501280a917dbfe516029</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=817430" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=817430</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75168" source="XF">linux-kernel-hugepages-dos(75168)</ref>
-      <ref url="http://www.securityfocus.com/bid/53233" source="BID">53233</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/24/12" source="MLIST">[oss-security] 20120424 Re: CVE Request: use after free bug in </ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.6" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.6</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=90481622d75715bfcb68501280a917dbfe516029" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=90481622d75715bfcb68501280a917dbfe516029</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="3.3" />
-        <vers num="3.3.1" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers num="3.3.4" />
-        <vers prev="1" num="3.3.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2135" published="2012-08-14" name="CVE-2012-2135" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The utf-16 decoder in Python 3.1 through 3.3 does not update the aligned_end variable after calling the unicode_decode_call_errorhandler function, which allows remote attackers to obtain sensitive information (process memory) or cause a denial of service (memory corruption and crash) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/25/4" source="MLIST">[oss-security] 20120425 Re: CVE Request: Python 3.2/3.3 utf-16 decoder unicode_decode_call_errorhandler aligned_end is not updated</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/25/2" source="MLIST">[oss-security] 20120425 CVE Request: Python 3.2/3.3 utf-16 decoder unicode_decode_call_errorhandler aligned_end is not updated</ref>
-      <ref url="http://bugs.python.org/issue14579" source="MISC" adv="1">http://bugs.python.org/issue14579</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=670389" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=670389</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="python" name="python">
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.5" />
-        <vers num="3.2" edition="alpha" />
-        <vers num="3.2.2150" />
-        <vers num="3.2.3" />
-        <vers num="3.3" edition="beta2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2136" published="2012-08-09" name="CVE-2012-2136" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">The sock_alloc_send_pskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service (heap-based buffer overflow and system crash) or possibly gain privileges by leveraging access to a TUN/TAP device.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/cc9b17ad29ecaa20bfe426a8d4dbfb94b13ff1cc" source="CONFIRM" patch="1">https://github.com/torvalds/linux/commit/cc9b17ad29ecaa20bfe426a8d4dbfb94b13ff1cc</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=816289" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=816289</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=cc9b17ad29ecaa20bfe426a8d4dbfb94b13ff1cc" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=cc9b17ad29ecaa20bfe426a8d4dbfb94b13ff1cc</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="3.4" edition="rc1" />
-        <vers num="3.4" edition="rc2" />
-        <vers num="3.4" edition="rc3" />
-        <vers num="3.4" edition="rc4" />
-        <vers num="3.4" edition="rc5" />
-        <vers num="3.4" edition="rc6" />
-        <vers num="3.4" edition="rc7" />
-        <vers num="3.4.1" />
-        <vers num="3.4.2" />
-        <vers num="3.4.3" />
-        <vers prev="1" num="3.4.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2138" published="2012-07-09" name="CVE-2012-2138" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://issues.apache.org/jira/browse/SLING-2517" source="CONFIRM">https://issues.apache.org/jira/browse/SLING-2517</ref>
-      <ref url="http://svn.apache.org/viewvc?view=revision&amp;revision=1352865" source="CONFIRM">http://svn.apache.org/viewvc?view=revision&amp;revision=1352865</ref>
-      <ref url="http://mail-archives.apache.org/mod_mbox/www-announce/201207.mbox/%3CCAEWfVJ=PwoQmwJg0KmbrC17Gw51kgfKRsqgy=4RpMQsdGh0bVg@mail.gmail.com%3E" source="MLIST">[www-announce] 20120706 [SECURITY] CVE-2012-2138 Apache Sling denial of service vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="org.apache.sling.servlets.post">
-        <vers prev="1" num="2.1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2139" published="2012-07-18" name="CVE-2012-2139" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.3 for Ruby allows remote attackers to read arbitrary files via a .. (dot dot) in the to parameter.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/mikel/mail/commit/29aca25218e4c82991400eb9b0c933626aefc98f" source="CONFIRM" patch="1">https://github.com/mikel/mail/commit/29aca25218e4c82991400eb9b0c933626aefc98f</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=816352" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=816352</ref>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=759092" source="MISC">https://bugzilla.novell.com/show_bug.cgi?id=759092</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/26/1" source="MLIST">[oss-security] 20120425 Re: CVE request: two flaws fixed in rubygem-mail 2.4.4</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/25/8" source="MLIST">[oss-security] 20120425 CVE request: two flaws fixed in rubygem-mail 2.4.4</ref>
-      <ref url="http://secunia.com/advisories/48970" source="SECUNIA" adv="1">48970</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rubygems" name="mail_gem">
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers prev="1" num="2.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2140" published="2012-07-18" name="CVE-2012-2140" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/mikel/mail/commit/ac56f03bdfc30b379aeecd4ff317d08fdaa328c2" source="CONFIRM" patch="1">https://github.com/mikel/mail/commit/ac56f03bdfc30b379aeecd4ff317d08fdaa328c2</ref>
-      <ref url="https://github.com/mikel/mail/commit/39b590ddb08f90ddbe445837359a2c8843e533d0" source="CONFIRM" patch="1">https://github.com/mikel/mail/commit/39b590ddb08f90ddbe445837359a2c8843e533d0</ref>
-      <ref url="https://github.com/mikel/mail/blob/9beb079c70d236a5ad2e1ba95b2c977e55deb7af/CHANGELOG.rdoc" source="CONFIRM">https://github.com/mikel/mail/blob/9beb079c70d236a5ad2e1ba95b2c977e55deb7af/CHANGELOG.rdoc</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=816352" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=816352</ref>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=759092" source="MISC">https://bugzilla.novell.com/show_bug.cgi?id=759092</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/26/1" source="MLIST">[oss-security] 20120425 Re: CVE request: two flaws fixed in rubygem-mail 2.4.4</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/25/8" source="MLIST">[oss-security] 20120425 CVE request: two flaws fixed in rubygem-mail 2.4.4</ref>
-      <ref url="http://secunia.com/advisories/48970" source="SECUNIA" adv="1">48970</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rubygems" name="mail_gem">
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers prev="1" num="2.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2141" published="2012-08-14" name="CVE-2012-2141" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:P)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=815813" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=815813</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75169" source="XF">netsnmp-snmpget-dos(75169)</ref>
-      <ref url="http://www.securitytracker.com/id?1026984" source="SECTRACK">1026984</ref>
-      <ref url="http://www.securityfocus.com/bid/53258" source="BID">53258</ref>
-      <ref url="http://www.securityfocus.com/bid/53255" source="BID">53255</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/26/3" source="MLIST">[oss-security] 20120426 Re: CVE Request -- net-snmp: Array index error, leading to out-of heap-based buffer read (snmpd crash)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/26/2" source="MLIST">[oss-security] 20120426 CVE Request -- net-snmp: Array index error, leading to out-of heap-based buffer read (snmpd crash)</ref>
-      <ref url="http://secunia.com/advisories/48938" source="SECUNIA" adv="1">48938</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="net-snmp" name="net-snmp">
-        <vers num="5.7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2143" published="2012-07-05" name="CVE-2012-2143" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=816956" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=816956</ref>
-      <ref url="http://www.securitytracker.com/id?1026995" source="SECTRACK">1026995</ref>
-      <ref url="http://www.postgresql.org/support/security/" source="CONFIRM" adv="1">http://www.postgresql.org/support/security/</ref>
-      <ref url="http://www.postgresql.org/docs/9.1/static/release-9-1-4.html" source="CONFIRM" adv="1">http://www.postgresql.org/docs/9.1/static/release-9-1-4.html</ref>
-      <ref url="http://www.postgresql.org/docs/9.0/static/release-9-0-8.html" source="CONFIRM" adv="1">http://www.postgresql.org/docs/9.0/static/release-9-0-8.html</ref>
-      <ref url="http://www.postgresql.org/docs/8.4/static/release-8-4-12.html" source="CONFIRM" adv="1">http://www.postgresql.org/docs/8.4/static/release-8-4-12.html</ref>
-      <ref url="http://www.postgresql.org/docs/8.3/static/release-8-3-19.html" source="CONFIRM" adv="1">http://www.postgresql.org/docs/8.3/static/release-8-3-19.html</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:092" source="MANDRIVA">MDVSA-2012:092</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2491" source="DEBIAN">DSA-2491</ref>
-      <ref url="http://security.freebsd.org/advisories/FreeBSD-SA-12:02.crypt.asc" source="FREEBSD" adv="1">FreeBSD-SA-12:02</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1037.html" source="REDHAT">RHSA-2012:1037</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html" source="SUSE">SUSE-SU-2012:0840</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082294.html" source="FEDORA">FEDORA-2012-8915</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082292.html" source="FEDORA">FEDORA-2012-8924</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082258.html" source="FEDORA">FEDORA-2012-8893</ref>
-      <ref url="http://git.postgresql.org/gitweb/?p=postgresql.git&amp;a=commit&amp;h=932ded2ed51e8333852e370c7a6dad75d9f236f9" source="CONFIRM" adv="1">http://git.postgresql.org/gitweb/?p=postgresql.git&amp;a=commit&amp;h=932ded2ed51e8333852e370c7a6dad75d9f236f9</ref>
-      <ref url="http://git.php.net/?p=php-src.git;a=commit;h=aab49e934de1fff046e659cbec46e3d053b41c34" source="CONFIRM">http://git.php.net/?p=php-src.git;a=commit;h=aab49e934de1fff046e659cbec46e3d053b41c34</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="" />
-      </prod>
-      <prod vendor="postgresql" name="postgresql">
-        <vers num="8.3" />
-        <vers num="8.4" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-      </prod>
-      <prod vendor="freebsd" name="freebsd">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.1.5" />
-        <vers num="1.1.5.1" />
-        <vers num="2.0" />
-        <vers num="2.0.5" />
-        <vers num="2.1" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2.8" />
-        <vers num="3.0" />
-        <vers num="3.1" />
-        <vers num="3.2" />
-        <vers num="3.3" />
-        <vers num="3.4" />
-        <vers num="3.5" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.10" />
-        <vers num="4.11" />
-        <vers num="4.2" />
-        <vers num="4.3" />
-        <vers num="4.4" />
-        <vers num="4.5" />
-        <vers num="4.6" />
-        <vers num="4.6.2" />
-        <vers num="4.7" />
-        <vers num="4.8" />
-        <vers num="4.9" />
-        <vers num="5.0" />
-        <vers num="5.1" />
-        <vers num="5.2" />
-        <vers num="5.2.1" />
-        <vers num="5.3" />
-        <vers num="5.4" />
-        <vers num="5.5" />
-        <vers num="6.0" />
-        <vers num="6.1" />
-        <vers num="6.2" />
-        <vers num="6.3" />
-        <vers num="6.4" />
-        <vers num="7.0" />
-        <vers num="7.1" />
-        <vers num="7.2" />
-        <vers num="7.3" />
-        <vers num="7.4" />
-        <vers num="8.0" />
-        <vers num="8.1" />
-        <vers num="8.2" />
-        <vers num="8.3" />
-        <vers prev="1" num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2144" published="2012-06-05" name="CVE-2012-2144" modified="2012-06-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/openstack/horizon/commit/041b1c44c7d6cf5429505067c32f8f35166a8bab" source="CONFIRM" patch="1">https://github.com/openstack/horizon/commit/041b1c44c7d6cf5429505067c32f8f35166a8bab</ref>
-      <ref url="https://bugs.launchpad.net/horizon/+bug/978896" source="MISC">https://bugs.launchpad.net/horizon/+bug/978896</ref>
-      <ref url="http://www.securityfocus.com/bid/53399" source="BID">53399</ref>
-      <ref url="http://www.osvdb.org/81741" source="OSVDB">81741</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/05/1" source="MLIST">[oss-security] 20120505 [OSSA 2012-006] Horizon session fixation and reuse</ref>
-      <ref url="http://ubuntu.com/usn/usn-1439-1" source="UBUNTU">USN-1439-1</ref>
-      <ref url="http://secunia.com/advisories/49071" source="SECUNIA" adv="1">49071</ref>
-      <ref url="http://secunia.com/advisories/49024" source="SECUNIA" adv="1">49024</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081173.html" source="FEDORA">FEDORA-2012-7369</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openstack" name="horizon">
-        <vers num="2012.1" />
-        <vers num="folsom-1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2146" published="2012-08-26" name="CVE-2012-2146" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector (IV), which makes it easier for context-dependent users to obtain sensitive information and decrypt the database.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=810013" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=810013</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/29/1" source="MLIST">[oss-security] 20120429 Re: weak use of crypto in python-elixir can lead to information disclosure (CVE and peer review request)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/28/2" source="MLIST">[oss-security] 20120428 Re: weak use of crypto in python-elixir can lead to information disclosure (CVE and peer review request)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/27/8" source="MLIST">[oss-security] 20120427 weak use of crypto in python-elixir can lead to information disclosure (CVE and peer review request)</ref>
-      <ref url="http://groups.google.com/group/sqlelixir/browse_thread/thread/efc16227514cffa?pli=1" source="MISC">http://groups.google.com/group/sqlelixir/browse_thread/thread/efc16227514cffa?pli=1</ref>
-      <ref url="http://elixir.ematia.de/trac/ticket/119" source="MISC" adv="1">http://elixir.ematia.de/trac/ticket/119</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ematia" name="elixir">
-        <vers num="0.8.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2147" published="2012-08-26" name="CVE-2012-2147" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests with large values in the (1) size_x or (2) size_y parameters.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/29/2" source="MLIST">[oss-security] 20120429 Re: Bug#668667: CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/27/7" source="MLIST">[oss-security] 20120427 Re: Bug#668667: CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/19/5" source="MLIST">[oss-security] 20120419 Re: [Packaging] Bug#668667: CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/19/4" source="MLIST">[oss-security] 20120418 Re: Bug#668667: CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/19/3" source="MLIST">[oss-security] 20120418 Re: CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/18/2" source="MLIST">[oss-security] 20120417  RE: CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/17/2" source="MLIST">[oss-security] 20120417  Re: CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="munin-monitoring" name="munin">
-        <vers num="2.0_rc4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2149" published="2012-06-21" name="CVE-2012-2149" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used.  NOTE: some sources report this issue as an integer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.sec-consult.com/files/20120518-0_openoffice_memory_overwrite.txt" source="MISC">https://www.sec-consult.com/files/20120518-0_openoffice_memory_overwrite.txt</ref>
-      <ref url="http://www.securityfocus.com/bid/53570" source="BID">53570</ref>
-      <ref url="http://www.openoffice.org/security/cves/CVE-2012-2149.html" source="CONFIRM" adv="1">http://www.openoffice.org/security/cves/CVE-2012-2149.html</ref>
-      <ref url="http://secunia.com/advisories/46992" source="SECUNIA" adv="1">46992</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1043.html" source="REDHAT">RHSA-2012:1043</ref>
-      <ref url="http://packetstormsecurity.org/files/112862/libwpd-WPXContentListener-_closeTableRow-Memory-Overwrite.html" source="MISC">http://packetstormsecurity.org/files/112862/libwpd-WPXContentListener-_closeTableRow-Memory-Overwrite.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="openoffice.org">
-        <vers num="3.3" />
-        <vers prev="1" num="3.4" edition="beta_1" />
-      </prod>
-      <prod vendor="fridrich_strba" name="libwpd">
-        <vers num="0.8.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2151" published="2012-08-14" name="CVE-2012-2151" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in SPIP 1.9.x before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x before 2.1.13 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026970" source="SECTRACK">1026970</ref>
-      <ref url="http://www.securityfocus.com/bid/53216" source="BID">53216</ref>
-      <ref url="http://www.osvdb.org/81473" source="OSVDB">81473</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/01/4" source="MLIST">[oss-security] 20120501 Re: CVE request: spip before 1.9.2.o, 2.0.18 and 2.1.13 multiple XSS</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/30/4" source="MLIST">[oss-security] 20120430 CVE request: spip before 1.9.2.o, 2.0.18 and 2.1.13 multiple XSS</ref>
-      <ref url="http://secunia.com/advisories/48939" source="SECUNIA" adv="1">48939</ref>
-      <ref url="http://archives.rezo.net/archives/spip-en.mbox/U5QUZ6WJRAJC7H5BR7W5SQG6WCD3PXL7/" source="MLIST">[Spip-en] 20120423 New stable releases SPIP 1.9.2o, 2.0.18 et 2.1.13 are availables</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="spip" name="spip">
-        <vers num="1.9" />
-        <vers num="1.9.1" />
-        <vers num="1.9.2" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2152" published="2012-07-25" name="CVE-2012-2152" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in the get_packet method in socket.c in dhcpcd 3.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=760334" source="MISC">https://bugzilla.novell.com/show_bug.cgi?id=760334</ref>
-      <ref url="http://www.securityfocus.com/bid/53354" source="BID">53354</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/02/5" source="MLIST">[oss-security] 20120502 Re: CVE Request: dhcpcd 3.2.3 remote stack overflow / denial of service</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/02/4" source="MLIST">[oss-security] 20120502 CVE Request: dhcpcd 3.2.3 remote stack overflow / denial of service</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="roy_marples" name="dhcpcd">
-        <vers num="3.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2154" published="2012-08-14" name="CVE-2012-2154" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the CDN2 Video module 6.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1506542" source="MISC" patch="1" adv="1">http://drupal.org/node/1506542</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74520" source="XF">drupal-cdn2video-unspecified-xss(74520)</ref>
-      <ref url="http://www.securityfocus.com/bid/52812" source="BID">52812</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/2" source="MLIST">[oss-security] 20120502 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/1" source="MLIST">[oss-security] 20120502 CVE Request for Drupal contributed modules</ref>
-      <ref url="http://osvdb.org/80685" source="OSVDB">80685</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kyle_browning" name="cdn2_video">
-        <vers num="6.x-1.x" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2155" published="2012-08-14" name="CVE-2012-2155" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the CDN2 Video module 6.x for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1506542" source="MISC" patch="1" adv="1">http://drupal.org/node/1506542</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74522" source="XF">drupal-cdn2video-unspecified-csrf(74522)</ref>
-      <ref url="http://www.securityfocus.com/bid/52812" source="BID">52812</ref>
-      <ref url="http://www.osvdb.org/80686" source="OSVDB">80686</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/2" source="MLIST">[oss-security] 20120502 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/1" source="MLIST">[oss-security] 20120502 CVE Request for Drupal contributed modules</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kyle_browning" name="cdn2_video">
-        <vers num="6.x-1.x" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2156" published="2012-04-11" name="CVE-2012-2156" modified="2012-04-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Plume CMS 1.2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the u_email parameter (aka Authors Email field) to manager/users.php, (2) the u_realname parameter (aka Authors Name field) to manager/users.php, or (3) the c_author parameter (aka Author field) in an ADD A COMMENT section.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.webapp-security.com/wp-content/uploads/2012/04/PlumeCMS-1.2.4-Multiple-Permanent-XSS.txt" source="MISC">http://www.webapp-security.com/wp-content/uploads/2012/04/PlumeCMS-1.2.4-Multiple-Permanent-XSS.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="plume-cms" name="plume_cms">
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.1.3" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers prev="1" num="1.2.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2159" published="2012-06-20" name="CVE-2012-2159" modified="2012-06-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Open redirect vulnerability in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74832" source="XF">iehs-multiple-open-redirect(74832)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21598423" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21598423</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21596690" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21596690</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="security_appscan_source">
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="8.0.0.1" />
-        <vers num="8.0.0.2" />
-        <vers num="8.5" />
-        <vers num="8.5.0.1" />
-      </prod>
-      <prod vendor="ibm" name="spss_data_collection">
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2161" published="2012-06-20" name="CVE-2012-2161" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in deferredView.jsp in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74833" source="XF">iehs-multiple-xss(74833)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21598423" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21598423</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21596690" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21596690</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="security_appscan_source">
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="8.0.0.1" />
-        <vers num="8.0.0.2" />
-        <vers num="8.5" />
-        <vers num="8.5.0.1" />
-      </prod>
-      <prod vendor="ibm" name="spss_data_collection">
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2162" published="2012-05-01" name="CVE-2012-2162" modified="2012-05-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The Web Server Plug-in in IBM WebSphere Application Server (WAS) 8.0 and earlier uses unencrypted HTTP communication after expiration of the plugin-key.kdb password, which allows remote attackers to obtain sensitive information by sniffing the network, or spoof arbitrary servers via a man-in-the-middle attack.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74900" source="XF">was-pluginkey-spoofing(74900)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21591172" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg21591172</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21588312" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21588312</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="websphere_application_server">
-        <vers num="5.0" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.2.1" />
-        <vers num="5.0.2.10" />
-        <vers num="5.0.2.11" />
-        <vers num="5.0.2.12" />
-        <vers num="5.0.2.13" />
-        <vers num="5.0.2.14" />
-        <vers num="5.0.2.15" />
-        <vers num="5.0.2.16" />
-        <vers num="5.0.2.2" />
-        <vers num="5.0.2.3" />
-        <vers num="5.0.2.4" />
-        <vers num="5.0.2.5" />
-        <vers num="5.0.2.6" />
-        <vers num="5.0.2.7" />
-        <vers num="5.0.2.8" />
-        <vers num="5.0.2.9" />
-        <vers num="5.1.0" />
-        <vers num="5.1.0.2" />
-        <vers num="5.1.0.3" />
-        <vers num="5.1.0.4" />
-        <vers num="5.1.0.5" />
-        <vers num="5.1.1" />
-        <vers num="5.1.1.1" />
-        <vers num="5.1.1.10" />
-        <vers num="5.1.1.11" />
-        <vers num="5.1.1.12" />
-        <vers num="5.1.1.13" />
-        <vers num="5.1.1.14" />
-        <vers num="5.1.1.15" />
-        <vers num="5.1.1.16" />
-        <vers num="5.1.1.17" />
-        <vers num="5.1.1.2" />
-        <vers num="5.1.1.3" />
-        <vers num="5.1.1.4" />
-        <vers num="5.1.1.5" />
-        <vers num="5.1.1.6" />
-        <vers num="5.1.1.7" />
-        <vers num="5.1.1.8" />
-        <vers num="5.1.1.9" />
-        <vers num="6.0" />
-        <vers num="6.0.0.1" />
-        <vers num="6.0.0.2" />
-        <vers num="6.0.0.3" />
-        <vers num="6.0.1" />
-        <vers num="6.0.1.1" />
-        <vers num="6.0.1.11" />
-        <vers num="6.0.1.13" />
-        <vers num="6.0.1.15" />
-        <vers num="6.0.1.17" />
-        <vers num="6.0.1.2" />
-        <vers num="6.0.1.3" />
-        <vers num="6.0.1.5" />
-        <vers num="6.0.1.7" />
-        <vers num="6.0.1.9" />
-        <vers num="6.0.2" />
-        <vers num="6.0.2.1" />
-        <vers num="6.0.2.11" />
-        <vers num="6.0.2.13" />
-        <vers num="6.0.2.15" />
-        <vers num="6.0.2.17" />
-        <vers num="6.0.2.19" />
-        <vers num="6.0.2.2" />
-        <vers num="6.0.2.22" />
-        <vers num="6.0.2.23" />
-        <vers num="6.0.2.24" />
-        <vers num="6.0.2.25" />
-        <vers num="6.0.2.27" />
-        <vers num="6.0.2.28" />
-        <vers num="6.0.2.29" />
-        <vers num="6.0.2.3" />
-        <vers num="6.0.2.30" />
-        <vers num="6.0.2.31" />
-        <vers num="6.0.2.32" />
-        <vers num="6.0.2.33" />
-        <vers num="6.0.2.35" />
-        <vers num="6.0.2.37" />
-        <vers num="6.0.2.4" />
-        <vers num="6.0.2.5" />
-        <vers num="6.0.2.6" />
-        <vers num="6.0.2.7" />
-        <vers num="6.0.2.9" />
-        <vers num="6.1" />
-        <vers num="6.1.0" />
-        <vers num="6.1.0.0" />
-        <vers num="6.1.0.1" />
-        <vers num="6.1.0.11" />
-        <vers num="6.1.0.12" />
-        <vers num="6.1.0.15" />
-        <vers num="6.1.0.17" />
-        <vers num="6.1.0.19" />
-        <vers num="6.1.0.2" />
-        <vers num="6.1.0.21" />
-        <vers num="6.1.0.23" />
-        <vers num="6.1.0.25" />
-        <vers num="6.1.0.27" />
-        <vers num="6.1.0.29" />
-        <vers num="6.1.0.3" />
-        <vers num="6.1.0.31" />
-        <vers num="6.1.0.33" />
-        <vers num="6.1.0.35" />
-        <vers num="6.1.0.37" />
-        <vers num="6.1.0.39" />
-        <vers num="6.1.0.41" />
-        <vers num="6.1.0.43" />
-        <vers num="6.1.0.5" />
-        <vers num="6.1.0.7" />
-        <vers num="6.1.0.9" />
-        <vers num="6.1.1" />
-        <vers num="6.1.13" />
-        <vers num="6.1.14" />
-        <vers num="6.1.3" />
-        <vers num="6.1.5" />
-        <vers num="6.1.6" />
-        <vers num="6.1.7" />
-        <vers num="7.0" />
-        <vers num="7.0.0.1" />
-        <vers num="7.0.0.11" />
-        <vers num="7.0.0.13" />
-        <vers num="7.0.0.15" />
-        <vers num="7.0.0.17" />
-        <vers num="7.0.0.19" />
-        <vers num="7.0.0.2" />
-        <vers num="7.0.0.21" />
-        <vers num="7.0.0.3" />
-        <vers num="7.0.0.4" />
-        <vers num="7.0.0.5" />
-        <vers num="7.0.0.6" />
-        <vers num="7.0.0.7" />
-        <vers num="7.0.0.8" />
-        <vers num="7.0.0.9" />
-        <vers prev="1" num="8.0.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2163" published="2012-07-30" name="CVE-2012-2163" modified="2012-07-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">IBM Scale Out Network Attached Storage (SONAS) 1.1 through 1.3.1 allows remote authenticated administrators to execute arbitrary Linux commands via the (1) Command Line Interface or (2) Graphical User Interface, related to a "code injection" issue.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75037" source="XF">sonas-command-execution(75037)</ref>
-      <ref url="http://http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004170" source="CONFIRM">http://http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004170</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="scale_out_network_attached_storage">
-        <vers num="1.1" />
-        <vers num="1.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2164" published="2012-08-17" name="CVE-2012-2164" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:N)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">The Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to bypass intended access restrictions, and use the Site Administration menu to modify system settings, via a parameter-tampering attack.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75039" source="XF">rcq-parameter-tampering(75039)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21606318" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21606318</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1PM62735" source="AIXAPAR" adv="1">PM62735</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="rational_clearquest">
-        <vers num="7.1.1.1" />
-        <vers num="7.1.1.2" />
-        <vers num="7.1.1.3" />
-        <vers num="7.1.1.4" />
-        <vers num="7.1.1.5" />
-        <vers num="7.1.1.6" />
-        <vers num="7.1.1.7" />
-        <vers num="7.1.1.8" />
-        <vers num="7.1.2" />
-        <vers num="7.1.2.1" />
-        <vers num="7.1.2.2" />
-        <vers num="7.1.2.3" />
-        <vers num="7.1.2.4" />
-        <vers num="7.1.2.5" />
-        <vers num="7.1.2.6" />
-        <vers num="8.0" />
-        <vers num="8.0.0.1" />
-        <vers num="8.0.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2165" published="2012-08-17" name="CVE-2012-2165" modified="2012-08-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:N/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3, when ClearQuest Authentication is enabled, allows remote authenticated users to read password hashes via a user query.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75040" source="XF">rcq-query-info-disclosure(75040)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21606385" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21606385</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1PM62740" source="AIXAPAR" adv="1">PM62740</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="rational_clearquest">
-        <vers num="7.1.1.1" />
-        <vers num="7.1.1.2" />
-        <vers num="7.1.1.3" />
-        <vers num="7.1.1.4" />
-        <vers num="7.1.1.5" />
-        <vers num="7.1.1.6" />
-        <vers num="7.1.1.7" />
-        <vers num="7.1.1.8" />
-        <vers num="7.1.2" />
-        <vers num="7.1.2.1" />
-        <vers num="7.1.2.2" />
-        <vers num="7.1.2.3" />
-        <vers num="7.1.2.4" />
-        <vers num="7.1.2.5" />
-        <vers num="7.1.2.6" />
-        <vers num="8.0.0" />
-        <vers num="8.0.0.1" />
-        <vers num="8.0.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2168" published="2012-08-17" name="CVE-2012-2168" modified="2012-08-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace information from CM server error messages via an invalid parameter.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75048" source="XF">rcq-stacktrace-info-disc(75048)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21606319" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21606319</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1PM61822" source="AIXAPAR" adv="1">PM61822</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="rational_clearquest">
-        <vers num="7.1.1.1" />
-        <vers num="7.1.1.2" />
-        <vers num="7.1.1.3" />
-        <vers num="7.1.1.4" />
-        <vers num="7.1.1.5" />
-        <vers num="7.1.1.6" />
-        <vers num="7.1.1.7" />
-        <vers num="7.1.1.8" />
-        <vers num="7.1.2" />
-        <vers num="7.1.2.1" />
-        <vers num="7.1.2.2" />
-        <vers num="7.1.2.3" />
-        <vers num="7.1.2.4" />
-        <vers num="7.1.2.5" />
-        <vers num="7.1.2.6" />
-        <vers num="8.0.0" />
-        <vers num="8.0.0.1" />
-        <vers num="8.0.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2169" published="2012-08-17" name="CVE-2012-2169" modified="2012-08-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the file-upload functionality in the Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 allows remote authenticated users to inject arbitrary web script or HTML via the File Description field.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75049" source="XF">rcq-filedesc-xss(75049)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21607783" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21607783</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1PM62762" source="AIXAPAR" adv="1">PM62762</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="rational_clearquest">
-        <vers num="7.1.1.1" />
-        <vers num="7.1.1.2" />
-        <vers num="7.1.1.3" />
-        <vers num="7.1.1.4" />
-        <vers num="7.1.1.5" />
-        <vers num="7.1.1.6" />
-        <vers num="7.1.1.7" />
-        <vers num="7.1.1.8" />
-        <vers num="7.1.2" />
-        <vers num="7.1.2.1" />
-        <vers num="7.1.2.2" />
-        <vers num="7.1.2.3" />
-        <vers num="7.1.2.4" />
-        <vers num="7.1.2.5" />
-        <vers num="7.1.2.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2170" published="2012-06-20" name="CVE-2012-2170" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Application Snoop Servlet in IBM WebSphere Application Server 7.0 before 7.0.0.23 does not properly restrict access, which allows remote attackers to obtain sensitive client and request information via a direct request.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75234" source="XF">was-snoop-info-disclosure(75234)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21595172" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21595172</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="websphere_application_server">
-        <vers num="7.0" />
-        <vers num="7.0.0.1" />
-        <vers num="7.0.0.11" />
-        <vers num="7.0.0.13" />
-        <vers num="7.0.0.15" />
-        <vers num="7.0.0.17" />
-        <vers num="7.0.0.19" />
-        <vers num="7.0.0.2" />
-        <vers num="7.0.0.21" />
-        <vers num="7.0.0.3" />
-        <vers num="7.0.0.4" />
-        <vers num="7.0.0.5" />
-        <vers num="7.0.0.6" />
-        <vers num="7.0.0.7" />
-        <vers num="7.0.0.8" />
-        <vers num="7.0.0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2171" published="2012-06-22" name="CVE-2012-2171" modified="2012-06-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote authenticated users to execute arbitrary SQL commands via the selectedModuleOnly parameter in a state_viewmodulelog action to the ModuleServlet URI.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75236" source="XF">ssds-smp-sql-injection(75236)</ref>
-      <ref url="http://www.zeroscience.mk/codes/ibmssdssmp_sqlixss.txt" source="MISC">http://www.zeroscience.mk/codes/ibmssdssmp_sqlixss.txt</ref>
-      <ref url="http://www.ibm.com/connections/blogs/PSIRT/entry/secbulletin_stg-storage_cve-2012-2171_cve-2012-2172" source="CONFIRM" adv="1">http://www.ibm.com/connections/blogs/PSIRT/entry/secbulletin_stg-storage_cve-2012-2171_cve-2012-2172</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="ds_storage_manager_host_software">
-        <vers num="10.60.x5.14" />
-        <vers num="10.8" />
-        <vers prev="1" num="10.83" />
-      </prod>
-      <prod vendor="ibm" name="ds4100">
-        <vers num="1724" />
-      </prod>
-      <prod vendor="ibm" name="ds4200">
-        <vers num="1814" />
-      </prod>
-      <prod vendor="ibm" name="ds4300">
-        <vers num="1722" />
-      </prod>
-      <prod vendor="ibm" name="ds4400">
-        <vers num="1742" />
-      </prod>
-      <prod vendor="ibm" name="ds4500">
-        <vers num="1742" />
-      </prod>
-      <prod vendor="ibm" name="ds4700">
-        <vers num="1814" />
-      </prod>
-      <prod vendor="ibm" name="ds4800">
-        <vers num="1815" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_dcs3700_storage_subsystem">
-        <vers num="1818" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds3200">
-        <vers num="1726" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds3300">
-        <vers num="1726" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds3400">
-        <vers num="1726" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds3512">
-        <vers num="1746" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds3524">
-        <vers num="1746" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds3950_express">
-        <vers num="1814" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds5020_disk_controller">
-        <vers num="1814-20a" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds5100_storage_controller">
-        <vers num="1818" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds5300_storage_controller">
-        <vers num="1818" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2172" published="2012-06-22" name="CVE-2012-2172" modified="2012-06-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote attackers to inject arbitrary web script or HTML via the updateRegn parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75239" source="XF">ssds-multiple-mp-xss(75239)</ref>
-      <ref url="http://www.zeroscience.mk/codes/ibmssdssmp_sqlixss.txt" source="MISC">http://www.zeroscience.mk/codes/ibmssdssmp_sqlixss.txt</ref>
-      <ref url="http://www.ibm.com/connections/blogs/PSIRT/entry/secbulletin_stg-storage_cve-2012-2171_cve-2012-2172" source="CONFIRM" adv="1">http://www.ibm.com/connections/blogs/PSIRT/entry/secbulletin_stg-storage_cve-2012-2171_cve-2012-2172</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="ds_storage_manager_host_software">
-        <vers num="10.60.x5.14" />
-        <vers num="10.8" />
-        <vers prev="1" num="10.83" />
-      </prod>
-      <prod vendor="ibm" name="ds4100">
-        <vers num="1724" />
-      </prod>
-      <prod vendor="ibm" name="ds4200">
-        <vers num="1814" />
-      </prod>
-      <prod vendor="ibm" name="ds4300">
-        <vers num="1722" />
-      </prod>
-      <prod vendor="ibm" name="ds4400">
-        <vers num="1742" />
-      </prod>
-      <prod vendor="ibm" name="ds4500">
-        <vers num="1742" />
-      </prod>
-      <prod vendor="ibm" name="ds4700">
-        <vers num="1814" />
-      </prod>
-      <prod vendor="ibm" name="ds4800">
-        <vers num="1815" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_dcs3700_storage_subsystem">
-        <vers num="1818" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds3200">
-        <vers num="1726" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds3300">
-        <vers num="1726" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds3400">
-        <vers num="1726" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds3512">
-        <vers num="1746" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds3524">
-        <vers num="1746" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds3950_express">
-        <vers num="1814" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds5020_disk_controller">
-        <vers num="1814-20a" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds5100_storage_controller">
-        <vers num="1818" />
-      </prod>
-      <prod vendor="ibm" name="system_storage_ds5300_storage_controller">
-        <vers num="1818" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2173" published="2012-06-20" name="CVE-2012-2173" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The ODBC driver in IBM Security AppScan Source 7.x and 8.x before 8.6 sends an SHA-1 hash of the connection password during connections to a solidDB database, which allows remote attackers to obtain sensitive information by sniffing the network.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75242" source="XF">appscansource-soliddbpass-weak-security(75242)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21598423" source="CONFIRM">http://www.ibm.com/support/docview.wss?uid=swg21598423</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="security_appscan_source">
-        <vers num="7.0" />
-        <vers num="8.0" />
-        <vers num="8.0.0.1" />
-        <vers num="8.0.0.2" />
-        <vers num="8.5" />
-        <vers num="8.5.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2174" published="2012-06-20" name="CVE-2012-2174" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75320" source="XF">lotusnotes-notes-command-execution(75320)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21598348" source="CONFIRM">http://www.ibm.com/support/docview.wss?uid=swg21598348</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="lotus_notes">
-        <vers num="8.0" />
-        <vers num="8.0.0" />
-        <vers num="8.0.1" />
-        <vers num="8.0.2" />
-        <vers num="8.0.2.0" />
-        <vers num="8.0.2.1" />
-        <vers num="8.0.2.2" />
-        <vers num="8.0.2.3" />
-        <vers num="8.0.2.4" />
-        <vers num="8.0.2.5" />
-        <vers num="8.0.2.6" />
-        <vers num="8.5" />
-        <vers num="8.5.0.0" />
-        <vers num="8.5.0.1" />
-        <vers num="8.5.1" />
-        <vers num="8.5.1.0" />
-        <vers num="8.5.1.1" />
-        <vers num="8.5.1.2" />
-        <vers num="8.5.1.3" />
-        <vers num="8.5.1.4" />
-        <vers num="8.5.1.5" />
-        <vers num="8.5.2.0" />
-        <vers num="8.5.2.1" />
-        <vers num="8.5.2.2" />
-        <vers num="8.5.2.3" />
-        <vers num="8.5.3" />
-        <vers num="8.5.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2175" published="2012-06-20" name="CVE-2012-2175" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a long argument.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75321" source="XF">lotusinotes-dwa85w-bo(75321)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21596862" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21596862</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="lotus_inotes">
-        <vers num="8.5.0.0" />
-        <vers num="8.5.0.1" />
-        <vers num="8.5.1.0" />
-        <vers num="8.5.1.1" />
-        <vers num="8.5.1.2" />
-        <vers num="8.5.1.3" />
-        <vers num="8.5.1.4" />
-        <vers num="8.5.1.5" />
-        <vers num="8.5.2.0" />
-        <vers num="8.5.2.1" />
-        <vers num="8.5.2.2" />
-        <vers num="8.5.2.3" />
-        <vers num="8.5.3.0" />
-        <vers num="8.5.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2176" published="2012-05-25" name="CVE-2012-2176" modified="2012-05-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to execute arbitrary code via a long argument to the (1) Attachment_Times or (2) Import_Times method.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75322" source="XF">lotusquickr-activex-bo(75322)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21596191" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21596191</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="lotus_quickr">
-        <vers num="8.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2179" published="2012-06-22" name="CVE-2012-2179" modified="2012-06-22" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://aix.software.ibm.com/aix/efixes/security/libodm_advisory.asc" source="CONFIRM" patch="1" adv="1">http://aix.software.ibm.com/aix/efixes/security/libodm_advisory.asc</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75510" source="XF">aix-libodm-symlink(75510)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV22019" source="AIXAPAR" adv="1">IV22019</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV21383" source="AIXAPAR" adv="1">IV21383</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV21382" source="AIXAPAR" adv="1">IV21382</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV21381" source="AIXAPAR" adv="1">IV21381</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV21379" source="AIXAPAR" adv="1">IV21379</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="aix">
-        <vers num="5.3" />
-        <vers num="6.1" />
-        <vers num="7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2180" published="2012-06-20" name="CVE-2012-2180" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service (NULL pointer dereference, and resource consumption or daemon crash) via a crafted request.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/476.html
-
-'CWE-476: NULL Pointer Dereference'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75418" source="XF">db2-drdaconnection-dos(75418)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21597090" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21597090</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg1IC82234" source="AIXAPAR" adv="1">IC82234</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="db2">
-        <vers num="9.7" />
-        <vers num="9.7.0.1" />
-        <vers num="9.7.0.2" />
-        <vers num="9.7.0.3" />
-        <vers num="9.7.0.4" />
-        <vers num="9.7.0.5" />
-        <vers num="9.8" />
-        <vers num="9.8.0.3" />
-        <vers num="9.8.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2181" published="2012-07-03" name="CVE-2012-2181" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in the Dojo module in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF14, and 8.0, allows remote attackers to read arbitrary files via a crafted URL.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75584" source="XF">websphere-portal-dojo-dir-traversal(75584)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21598363" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21598363</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg1PM64172" source="AIXAPAR">PM64172</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="websphere_portal">
-        <vers num="7.0.0.1" />
-        <vers num="7.0.0.2" />
-        <vers num="8.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2183" published="2012-09-10" name="CVE-2012-2183" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Session fixation vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack web sessions via unspecified vectors.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/384.html
-
-'CWE-384: Session Fixation'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75776" source="XF">ibm-maximo-session-fixation-iv09212(75776)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21610081" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21610081</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IV09212" source="AIXAPAR">IV09212</ref>
-      <ref url="http://secunia.com/advisories/50551" source="SECUNIA" adv="1">50551</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="change_and_configuration_management_database">
-        <vers num="6.0" />
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_asset_management">
-        <vers num="6.2.0.0" />
-        <vers num="7.1.0.0" />
-        <vers num="7.5.0.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_service_desk">
-        <vers num="6.2" />
-      </prod>
-      <prod vendor="ibm" name="smartcloud_control_desk">
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_asset_management_for_it">
-        <vers num="6.0" />
-        <vers num="6.2" />
-        <vers num="7.0" />
-        <vers num="7.1" />
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_service_request_manager">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2184" published="2012-09-10" name="CVE-2012-2184" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Session fixation vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack web sessions via unspecified vectors.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/384.html 'CWE-384: Session Fixation'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75780" source="XF">ibm-maximo-session-fixation-iv19887(75780)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21610081" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21610081</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IV19887" source="AIXAPAR">IV19887</ref>
-      <ref url="http://secunia.com/advisories/50551" source="SECUNIA" adv="1">50551</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="change_and_configuration_management_database">
-        <vers num="6.0" />
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_asset_management">
-        <vers num="7.1.0.0" />
-        <vers num="7.5.0.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_service_desk">
-        <vers num="6.2" />
-      </prod>
-      <prod vendor="ibm" name="smartcloud_control_desk">
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_asset_management_for_it">
-        <vers num="6.0" />
-        <vers num="6.2" />
-        <vers num="7.0" />
-        <vers num="7.1" />
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_service_request_manager">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2185" published="2012-09-10" name="CVE-2012-2185" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to obtain sensitive information via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75784" source="XF">ibm-maximo-info-disclosure(75784)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21610081" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21610081</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IV17942" source="AIXAPAR">IV17942</ref>
-      <ref url="http://secunia.com/advisories/50551" source="SECUNIA" adv="1">50551</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="change_and_configuration_management_database">
-        <vers num="6.0" />
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_asset_management">
-        <vers num="6.2.0.0" />
-        <vers num="7.1.0.0" />
-        <vers num="7.5.0.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_service_desk">
-        <vers num="6.2" />
-      </prod>
-      <prod vendor="ibm" name="smartcloud_control_desk">
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_asset_management_for_it">
-        <vers num="6.0" />
-        <vers num="6.2" />
-        <vers num="7.0" />
-        <vers num="7.1" />
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_service_request_manager">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2186" published="2012-08-31" name="CVE-2012-2186" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 allows remote authenticated users to execute arbitrary commands by leveraging originate privileges and providing an ExternalIVR value in an AMI Originate action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://downloads.asterisk.org/pub/security/AST-2012-012.html" source="CONFIRM" patch="1" adv="1">http://downloads.asterisk.org/pub/security/AST-2012-012.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="asterisk" name="business_edition">
-        <vers num="c.3.0" />
-        <vers prev="1" num="c.3.7.5" />
-      </prod>
-      <prod vendor="asterisk" name="certified_asterisk">
-        <vers prev="1" num="1.8.11" edition="cert" />
-        <vers prev="1" num="1.8.11" edition="cert1" />
-        <vers prev="1" num="1.8.11" edition="cert2" />
-        <vers prev="1" num="1.8.11" edition="cert3" />
-        <vers prev="1" num="1.8.11" edition="cert4" />
-        <vers prev="1" num="1.8.11" edition="cert5" />
-      </prod>
-      <prod vendor="asterisk" name="digiumphones">
-        <vers prev="1" num="10.7.0" />
-      </prod>
-      <prod vendor="asterisk" name="open_source">
-        <vers num="1.8.0" edition="beta1" />
-        <vers num="1.8.0" edition="beta2" />
-        <vers num="1.8.0" edition="beta3" />
-        <vers num="1.8.0" edition="beta4" />
-        <vers num="1.8.0" edition="beta5" />
-        <vers num="1.8.0" edition="rc1" />
-        <vers num="1.8.0" edition="rc2" />
-        <vers num="1.8.0" edition="rc3" />
-        <vers num="1.8.0" edition="rc4" />
-        <vers num="1.8.0" edition="rc5" />
-        <vers num="1.8.1" edition="rc1" />
-        <vers num="1.8.1.1" />
-        <vers num="1.8.1.2" />
-        <vers num="1.8.10.0" edition="rc1" />
-        <vers num="1.8.10.0" edition="rc2" />
-        <vers num="1.8.10.0" edition="rc3" />
-        <vers num="1.8.10.0" edition="rc4" />
-        <vers num="1.8.10.1" />
-        <vers num="1.8.11.0" edition="rc2" />
-        <vers num="1.8.11.0" edition="rc3" />
-        <vers num="1.8.11.1" />
-        <vers num="1.8.12" />
-        <vers num="1.8.12.0" edition="rc1" />
-        <vers num="1.8.12.0" edition="rc2" />
-        <vers num="1.8.12.0" edition="rc3" />
-        <vers prev="1" num="1.8.15.0" />
-        <vers num="1.8.2" edition="rc1" />
-        <vers num="1.8.2.1" />
-        <vers num="1.8.2.2" />
-        <vers num="1.8.2.3" />
-        <vers num="1.8.2.4" />
-        <vers num="1.8.3" edition="rc1" />
-        <vers num="1.8.3" edition="rc2" />
-        <vers num="1.8.3" edition="rc3" />
-        <vers num="1.8.3.1" />
-        <vers num="1.8.3.2" />
-        <vers num="1.8.3.3" />
-        <vers num="1.8.4" edition="rc1" />
-        <vers num="1.8.4" edition="rc2" />
-        <vers num="1.8.4" edition="rc3" />
-        <vers num="1.8.4.1" />
-        <vers num="1.8.4.2" />
-        <vers num="1.8.4.3" />
-        <vers num="1.8.4.4" />
-        <vers num="1.8.5" edition="rc1" />
-        <vers num="1.8.5.0" />
-        <vers num="1.8.6.0" edition="rc1" />
-        <vers num="1.8.6.0" edition="rc2" />
-        <vers num="1.8.6.0" edition="rc3" />
-        <vers num="1.8.7" />
-        <vers num="1.8.7.0" edition="rc1" />
-        <vers num="1.8.7.0" edition="rc2" />
-        <vers num="1.8.7.1" />
-        <vers num="1.8.7.2" />
-        <vers num="1.8.8.0" edition="rc1" />
-        <vers num="1.8.8.0" edition="rc2" />
-        <vers num="1.8.8.0" edition="rc3" />
-        <vers num="1.8.8.0" edition="rc4" />
-        <vers num="1.8.8.0" edition="rc5" />
-        <vers num="1.8.8.1" />
-        <vers num="1.8.8.2" />
-        <vers num="1.8.9.0" edition="rc1" />
-        <vers num="1.8.9.0" edition="rc2" />
-        <vers num="1.8.9.0" edition="rc3" />
-        <vers num="1.8.9.1" />
-        <vers num="1.8.9.2" />
-        <vers num="1.8.9.3" />
-        <vers num="10.0.0" edition="beta1" />
-        <vers num="10.0.0" edition="beta2" />
-        <vers num="10.0.0" edition="rc1" />
-        <vers num="10.0.0" edition="rc2" />
-        <vers num="10.0.0" edition="rc3" />
-        <vers num="10.0.1" />
-        <vers num="10.1.0" edition="rc1" />
-        <vers num="10.1.0" edition="rc2" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.2.0" edition="rc1" />
-        <vers num="10.2.0" edition="rc2" />
-        <vers num="10.2.0" edition="rc3" />
-        <vers num="10.2.0" edition="rc4" />
-        <vers num="10.2.1" />
-        <vers num="10.3" />
-        <vers num="10.3.0" edition="rc2" />
-        <vers num="10.3.0" edition="rc3" />
-        <vers num="10.3.1" />
-        <vers num="10.4.0" edition="rc1" />
-        <vers num="10.4.0" edition="rc2" />
-        <vers num="10.4.0" edition="rc3" />
-        <vers prev="1" num="10.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2188" published="2012-08-06" name="CVE-2012-2188" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">IBM Power Hardware Management Console (HMC) 7R3.5.0 before SP4, 7R7.1.0 and 7R7.2.0 before 7R7.2.0 SP3, and 7R7.3.0 before SP2, and Systems Director Management Console (SDMC) 6R7.3.0 before SP2, does not properly restrict the VIOS viosrvcmd command, which allows local users to gain privileges via vectors involving a (1) $ (dollar sign) or (2) &amp; (ampersand) character.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75906" source="XF">ibm-hmc-viosvrcmd-priv-escalation(75906)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1MB03580" source="AIXAPAR">MB03580</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1MB03554" source="AIXAPAR">MB03554</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1MB03550" source="AIXAPAR">MB03550</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1MB03548" source="AIXAPAR">MB03548</ref>
-      <ref url="http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_power_hmc_viosrvcmd_command_allows_elevated_privilege_on_vios_cve_2012_218825" source="CONFIRM" adv="1">http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_power_hmc_viosrvcmd_command_allows_elevated_privilege_on_vios_cve_2012_218825</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="power_hardware_management_console_firmware">
-        <vers num="7r3.5.0" />
-        <vers num="7r7.1.0" />
-        <vers num="7r7.2.0" />
-        <vers num="7r7.3.0" />
-      </prod>
-      <prod vendor="ibm" name="systems_director_management__console_firmware">
-        <vers num="6r7.3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2190" published="2012-08-21" name="CVE-2012-2190" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">IBM Global Security Kit (aka GSKit), as used in IBM HTTP Server in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1, allows remote attackers to cause a denial of service (daemon crash) via a crafted ClientHello message in the TLS Handshake Protocol.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75994" source="XF">ibm-multiple-gskit-hello-dos(75994)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21606096" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg21606096</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1PM66218" source="AIXAPAR">PM66218</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="websphere_application_server">
-        <vers num="6.1.0" />
-        <vers num="6.1.0.0" />
-        <vers num="6.1.0.1" />
-        <vers num="6.1.0.11" />
-        <vers num="6.1.0.12" />
-        <vers num="6.1.0.15" />
-        <vers num="6.1.0.17" />
-        <vers num="6.1.0.19" />
-        <vers num="6.1.0.2" />
-        <vers num="6.1.0.21" />
-        <vers num="6.1.0.23" />
-        <vers num="6.1.0.25" />
-        <vers num="6.1.0.27" />
-        <vers num="6.1.0.29" />
-        <vers num="6.1.0.3" />
-        <vers num="6.1.0.31" />
-        <vers num="6.1.0.33" />
-        <vers num="6.1.0.35" />
-        <vers num="6.1.0.37" />
-        <vers num="6.1.0.39" />
-        <vers num="6.1.0.41" />
-        <vers num="6.1.0.43" />
-        <vers num="6.1.0.5" />
-        <vers num="6.1.0.7" />
-        <vers num="6.1.0.9" />
-        <vers num="7.0" />
-        <vers num="7.0.0.1" />
-        <vers num="7.0.0.11" />
-        <vers num="7.0.0.13" />
-        <vers num="7.0.0.15" />
-        <vers num="7.0.0.17" />
-        <vers num="7.0.0.19" />
-        <vers num="7.0.0.2" />
-        <vers num="7.0.0.21" />
-        <vers num="7.0.0.23" />
-        <vers num="7.0.0.3" />
-        <vers num="7.0.0.4" />
-        <vers num="7.0.0.5" />
-        <vers num="7.0.0.6" />
-        <vers num="7.0.0.7" />
-        <vers num="7.0.0.8" />
-        <vers num="7.0.0.9" />
-        <vers num="8.0.0.0" />
-        <vers num="8.0.0.1" />
-        <vers num="8.0.0.2" />
-        <vers num="8.0.0.3" />
-        <vers num="8.5.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2191" published="2012-08-08" name="CVE-2012-2191" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a protection mechanism against the Vaudenay SSL CBC timing attack, which allows remote attackers to cause a denial of service (application crash) via crafted values in the TLS Record Layer, a different vulnerability than CVE-2012-2333.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21606145" source="CONFIRM" patch="1" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg21606145</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75996" source="XF">rds-recordlayer-dos(75996)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="global_security_kit">
-        <vers num="7.0.4.28" />
-        <vers num="7.0.4.29" />
-        <vers prev="1" num="8.0.13" />
-      </prod>
-      <prod vendor="ibm" name="rational_directory_server">
-        <vers num="" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_directory_server">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2192" published="2012-06-20" name="CVE-2012-2192" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service (system crash) via a crafted application that leverages the presence of a socket on the free list.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76032" source="XF">aix-socketpair-dos(76032)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV21235" source="AIXAPAR">IV21235</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV21131" source="AIXAPAR">IV21131</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV21128" source="AIXAPAR">IV21128</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV19178" source="AIXAPAR">IV19178</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV16603" source="AIXAPAR">IV16603</ref>
-      <ref url="http://aix.software.ibm.com/aix/efixes/security/socket_advisory.asc" source="CONFIRM" adv="1">http://aix.software.ibm.com/aix/efixes/security/socket_advisory.asc</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="aix">
-        <vers num="5.3" />
-        <vers num="6.1" />
-        <vers num="7.1" />
-      </prod>
-      <prod vendor="ibm" name="vios">
-        <vers num="2.2.1.4" edition="fp-25_sp-02" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2194" published="2012-07-25" name="CVE-2012-2194" modified="2012-07-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in the SQLJ.DB2_INSTALL_JAR stored procedure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to replace JAR files via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21600837" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21600837</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC84716" source="AIXAPAR">IC84716</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC84715" source="AIXAPAR">IC84715</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC84714" source="AIXAPAR">IC84714</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC84711" source="AIXAPAR">IC84711</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC84019" source="AIXAPAR" adv="1">IC84019</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="db2">
-        <vers num="10.1" />
-        <vers num="9.1" />
-        <vers num="9.1.0.1" />
-        <vers num="9.1.0.10" />
-        <vers num="9.1.0.11" />
-        <vers num="9.1.0.2" edition="a" />
-        <vers num="9.1.0.3" edition="a" />
-        <vers num="9.1.0.4" edition="a" />
-        <vers num="9.1.0.5" />
-        <vers num="9.1.0.6" edition="a" />
-        <vers num="9.1.0.7" edition="a" />
-        <vers num="9.1.0.8" />
-        <vers num="9.1.0.9" />
-        <vers num="9.5" />
-        <vers num="9.5.0.1" />
-        <vers num="9.5.0.2" edition="a" />
-        <vers num="9.5.0.3" edition="a" />
-        <vers num="9.5.0.3" edition="b" />
-        <vers num="9.5.0.4" edition="a" />
-        <vers num="9.5.0.5" />
-        <vers num="9.5.0.6" edition="a" />
-        <vers num="9.5.0.7" />
-        <vers num="9.5.0.8" />
-        <vers num="9.5.0.9" />
-        <vers num="9.7" />
-        <vers num="9.7.0.1" />
-        <vers num="9.7.0.2" />
-        <vers num="9.7.0.3" />
-        <vers num="9.7.0.4" />
-        <vers num="9.7.0.5" />
-        <vers num="9.7.0.6" />
-        <vers num="9.8" />
-        <vers num="9.8.0.3" />
-        <vers num="9.8.0.4" />
-        <vers num="9.8.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2196" published="2012-07-25" name="CVE-2012-2196" modified="2012-08-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to read arbitrary XML files via the (1) GET_WRAP_CFG_C or (2) GET_WRAP_CFG_C2 stored procedure.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21600837" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21600837</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC84751" source="AIXAPAR" adv="1">IC84751</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC84750" source="AIXAPAR">IC84750</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC84748" source="AIXAPAR">IC84748</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC84712" source="AIXAPAR" adv="1">IC84712</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC84614" source="AIXAPAR">IC84614</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="db2">
-        <vers num="10.1" />
-        <vers num="9.1" />
-        <vers num="9.1.0.1" />
-        <vers num="9.1.0.10" />
-        <vers num="9.1.0.11" />
-        <vers num="9.1.0.2" edition="a" />
-        <vers num="9.1.0.3" edition="a" />
-        <vers num="9.1.0.4" edition="a" />
-        <vers num="9.1.0.5" />
-        <vers num="9.1.0.6" edition="a" />
-        <vers num="9.1.0.7" edition="a" />
-        <vers num="9.1.0.8" />
-        <vers num="9.1.0.9" />
-        <vers num="9.5" />
-        <vers num="9.5.0.1" />
-        <vers num="9.5.0.2" edition="a" />
-        <vers num="9.5.0.3" edition="a" />
-        <vers num="9.5.0.3" edition="b" />
-        <vers num="9.5.0.4" edition="a" />
-        <vers num="9.5.0.5" />
-        <vers num="9.5.0.6" edition="a" />
-        <vers num="9.5.0.7" />
-        <vers num="9.5.0.8" />
-        <vers num="9.5.0.9" />
-        <vers num="9.7" />
-        <vers num="9.7.0.1" />
-        <vers num="9.7.0.2" />
-        <vers num="9.7.0.3" />
-        <vers num="9.7.0.4" />
-        <vers num="9.7.0.5" />
-        <vers num="9.7.0.6" />
-        <vers num="9.8" />
-        <vers num="9.8.0.3" />
-        <vers num="9.8.0.4" />
-        <vers num="9.8.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2197" published="2012-07-25" name="CVE-2012-2197" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:C/I:C/A:C)" CVSS_score="7.1" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.1">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in the Java Stored Procedure infrastructure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote authenticated users to execute arbitrary code by leveraging certain CONNECT and EXECUTE privileges.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21600837" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21600837</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC84755" source="AIXAPAR">IC84755</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC84754" source="AIXAPAR">IC84754</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC84753" source="AIXAPAR">IC84753</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC84752" source="AIXAPAR">IC84752</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC84555" source="AIXAPAR" adv="1">IC84555</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="db2">
-        <vers num="10.1" />
-        <vers num="9.1" />
-        <vers num="9.1.0.1" />
-        <vers num="9.1.0.10" />
-        <vers num="9.1.0.11" />
-        <vers num="9.1.0.2" edition="a" />
-        <vers num="9.1.0.3" edition="a" />
-        <vers num="9.1.0.4" edition="a" />
-        <vers num="9.1.0.5" />
-        <vers num="9.1.0.6" edition="a" />
-        <vers num="9.1.0.7" edition="a" />
-        <vers num="9.1.0.8" />
-        <vers num="9.1.0.9" />
-        <vers num="9.5" />
-        <vers num="9.5.0.1" />
-        <vers num="9.5.0.2" edition="a" />
-        <vers num="9.5.0.3" edition="a" />
-        <vers num="9.5.0.3" edition="b" />
-        <vers num="9.5.0.4" edition="a" />
-        <vers num="9.5.0.5" />
-        <vers num="9.5.0.6" edition="a" />
-        <vers num="9.5.0.7" />
-        <vers num="9.5.0.8" />
-        <vers num="9.5.0.9" />
-        <vers num="9.7" />
-        <vers num="9.7.0.1" />
-        <vers num="9.7.0.2" />
-        <vers num="9.7.0.3" />
-        <vers num="9.7.0.4" />
-        <vers num="9.7.0.5" />
-        <vers num="9.7.0.6" />
-        <vers num="9.8" />
-        <vers num="9.8.0.3" />
-        <vers num="9.8.0.4" />
-        <vers num="9.8.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2200" published="2012-06-27" name="CVE-2012-2200" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76466" source="XF">aix-sendmail-command-execution(76466)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV22966" source="AIXAPAR">IV22966</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV22965" source="AIXAPAR">IV22965</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV22964" source="AIXAPAR">IV22964</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV22963" source="AIXAPAR">IV22963</ref>
-      <ref url="http://aix.software.ibm.com/aix/efixes/security/sendmail1_advisory.asc" source="CONFIRM" adv="1">http://aix.software.ibm.com/aix/efixes/security/sendmail1_advisory.asc</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="aix">
-        <vers num="6.1" />
-        <vers num="7.1" />
-      </prod>
-      <prod vendor="ibm" name="vios">
-        <vers num="2.2.1.4" edition="fp-25_sp-02" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2202" published="2012-07-27" name="CVE-2012-2202" modified="2012-08-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:N/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in javatester_init.php in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the template parameter.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76801" source="XF">pnm-javatesterinit-dir-traversal(76801)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21605630" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21605630</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="lotus_protector_for_mail_security">
-        <vers num="2.1" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.8" />
-      </prod>
-      <prod vendor="ibm" name="proventia_network_mail_security_system_firmware">
-        <vers num="2.5" />
-        <vers num="2.5.0.2" />
-        <vers num="2.5.1" />
-        <vers num="2.6" />
-        <vers num="2.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2203" published="2012-08-08" name="CVE-2012-2203" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for certificate objects without enforcing file integrity, which makes it easier for remote attackers to spoof SSL servers via vectors involving insertion of an arbitrary root Certification Authority (CA) certificate.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77280" source="XF">rds-gskit-pkcs-spoofing(77280)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21606145" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg21606145</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="global_security_kit">
-        <vers num="7.0.4.28" />
-        <vers num="7.0.4.29" />
-        <vers prev="1" num="8.0.13" />
-      </prod>
-      <prod vendor="ibm" name="rational_directory_server">
-        <vers num="" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_directory_server">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2205" published="2012-08-17" name="CVE-2012-2205" modified="2012-08-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via a workspace query.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77094" source="XF">rcq-workspace-xss(77094)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21605838" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21605838</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1PM61670" source="AIXAPAR" adv="1">PM61670</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="rational_clearquest">
-        <vers num="7.1.1.1" />
-        <vers num="7.1.1.2" />
-        <vers num="7.1.1.3" />
-        <vers num="7.1.1.4" />
-        <vers num="7.1.1.5" />
-        <vers num="7.1.1.6" />
-        <vers num="7.1.1.7" />
-        <vers num="7.1.1.8" />
-        <vers num="7.1.2" />
-        <vers num="7.1.2.1" />
-        <vers num="7.1.2.2" />
-        <vers num="7.1.2.3" />
-        <vers num="7.1.2.4" />
-        <vers num="7.1.2.5" />
-        <vers num="7.1.2.6" />
-        <vers num="8.0.0" />
-        <vers num="8.0.0.1" />
-        <vers num="8.0.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2206" published="2012-08-17" name="CVE-2012-2206" modified="2012-08-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:N/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77095" source="XF">wmq-ftewg-security-bypass(77095)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21607481" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21607481</ref>
-      <ref url="http://www.exploit-db.com/exploits/20478/" source="EXPLOIT-DB">20478</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC82761" source="AIXAPAR">IC82761</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="websphere_mq">
-        <vers num="7.0" edition="" />
-        <vers num="7.0" edition=":file_transfer" />
-        <vers num="7.0.0.1" edition="" />
-        <vers num="7.0.0.1" edition=":file_transfer" />
-        <vers num="7.0.1.0" edition="" />
-        <vers num="7.0.1.0" edition=":file_transfer" />
-        <vers num="7.0.2.0" edition="" />
-        <vers num="7.0.2.0" edition=":file_transfer" />
-        <vers num="7.0.2.2" edition="" />
-        <vers num="7.0.2.2" edition=":file_transfer" />
-        <vers num="7.0.4" edition="" />
-        <vers num="7.0.4" edition=":file_transfer" />
-        <vers num="7.0.4.0" edition="" />
-        <vers num="7.0.4.0" edition=":file_transfer" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2208" published="2012-08-14" name="CVE-2012-2208" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in upgrade.php in Piwigo before 2.3.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23085" source="MISC">https://www.htbridge.com/advisory/HTB23085</ref>
-      <ref url="http://www.securityfocus.com/bid/53245" source="BID">53245</ref>
-      <ref url="http://www.exploit-db.com/exploits/18782" source="EXPLOIT-DB">18782</ref>
-      <ref url="http://secunia.com/advisories/48903" source="SECUNIA" adv="1">48903</ref>
-      <ref url="http://piwigo.org/releases/2.3.4" source="CONFIRM">http://piwigo.org/releases/2.3.4</ref>
-      <ref url="http://piwigo.org/forum/viewtopic.php?id=19173" source="CONFIRM">http://piwigo.org/forum/viewtopic.php?id=19173</ref>
-      <ref url="http://piwigo.org/bugs/view.php?id=2607" source="CONFIRM">http://piwigo.org/bugs/view.php?id=2607</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0196.html" source="BUGTRAQ">20120425 Multiple vulnerabilities in Piwigo</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="piwigo" name="piwigo">
-        <vers prev="1" num="2.3.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2209" published="2012-08-14" name="CVE-2012-2209" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Piwigo before 2.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) section parameter in the configuration module, (2) installstatus parameter in the languages_new module, or (3) theme parameter in the theme module.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23085" source="MISC">https://www.htbridge.com/advisory/HTB23085</ref>
-      <ref url="http://www.securityfocus.com/bid/53245" source="BID">53245</ref>
-      <ref url="http://www.exploit-db.com/exploits/18782" source="EXPLOIT-DB">18782</ref>
-      <ref url="http://secunia.com/advisories/48903" source="SECUNIA" adv="1">48903</ref>
-      <ref url="http://piwigo.org/releases/2.3.4" source="CONFIRM">http://piwigo.org/releases/2.3.4</ref>
-      <ref url="http://piwigo.org/forum/viewtopic.php?id=19173" source="CONFIRM">http://piwigo.org/forum/viewtopic.php?id=19173</ref>
-      <ref url="http://piwigo.org/bugs/view.php?id=2607" source="CONFIRM">http://piwigo.org/bugs/view.php?id=2607</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0196.html" source="BUGTRAQ">20120425 Multiple vulnerabilities in Piwigo</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="piwigo" name="piwigo">
-        <vers prev="1" num="2.3.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2210" published="2012-04-11" name="CVE-2012-2210" modified="2012-04-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The Sony Bravia TV KDL-32CX525 allows remote attackers to cause a denial of service (configuration outage or device crash) via a flood of TCP SYN packets, as demonstrated by hping, a related issue to CVE-1999-0116.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/18705/" source="EXPLOIT-DB">18705</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sony" name="bravia_tv">
-        <vers num="kdl-32cx525" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2212" published="2012-04-28" name="CVE-2012-2212" modified="2012-04-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">** DISPUTED ** McAfee Web Gateway 7.0 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header.  NOTE: this issue might not be reproducible, because the researcher did not provide configuration details for the vulnerable system, and the observed behavior might be consistent with a configuration that was (perhaps inadvertently) designed to allow access based on Host HTTP headers.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0189.html" source="BUGTRAQ">20120424 RE: McAfee Web Gateway URL Filtering Bypass</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0164.html" source="BUGTRAQ">20120421 Re: McAfee Web Gateway URL Filtering Bypass</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0118.html" source="BUGTRAQ">20120416 McAfee Web Gateway URL Filtering Bypass</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="web_gateway">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2213" published="2012-04-28" name="CVE-2012-2213" modified="2012-04-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">** DISPUTED ** Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header.  NOTE: this issue might not be reproducible, because the researcher is unable to provide a squid.conf file for a vulnerable system, and the observed behavior is consistent with a squid.conf file that was (perhaps inadvertently) designed to allow access based on a "req_header Host" acl regex that matches www.uol.com.br.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0165.html" source="BUGTRAQ">20120421 Re: Squid URL Filtering Bypass</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0163.html" source="BUGTRAQ">20120420 Re: Squid URL Filtering Bypass</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0146.html" source="BUGTRAQ">20120419 RE: Squid URL Filtering Bypass</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0140.html" source="BUGTRAQ">20120419 Re: Squid URL Filtering Bypass</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0131.html" source="BUGTRAQ">20120418 Re: Squid URL Filtering Bypass</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0117.html" source="BUGTRAQ">20120416 Squid URL Filtering Bypass</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="squid-cache" name="squid">
-        <vers num="3.1.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2214" published="2012-07-03" name="CVE-2012-2214" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:P)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service (application crash) via a sequence of XMPP file-transfer requests.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://pidgin.im/news/security/?id=62" source="CONFIRM" patch="1" adv="1">http://pidgin.im/news/security/?id=62</ref>
-      <ref url="http://hg.pidgin.im/pidgin/main/rev/5f9d676cefdb" source="CONFIRM" patch="1">http://hg.pidgin.im/pidgin/main/rev/5f9d676cefdb</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pidgin" name="pidgin">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.10.0" />
-        <vers num="2.10.1" />
-        <vers num="2.10.2" />
-        <vers prev="1" num="2.10.3" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-        <vers num="2.5.4" />
-        <vers num="2.5.5" />
-        <vers num="2.5.6" />
-        <vers num="2.5.7" />
-        <vers num="2.5.8" />
-        <vers num="2.5.9" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.11" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-        <vers num="2.8.0" />
-        <vers num="2.9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2215" published="2012-04-09" name="CVE-2012-2215" modified="2012-04-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to read arbitrary files via an opcode 0x21 request.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5127930.html" source="CONFIRM" patch="1">http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5127930.html</ref>
-      <ref url="http://download.novell.com/Download?buildid=rs4B5jhWKf8~" source="CONFIRM" patch="1">http://download.novell.com/Download?buildid=rs4B5jhWKf8~</ref>
-      <ref url="http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=975" source="IDEFENSE">20120314 Novell ZENworks Configuration Management PreBoot Service Opcode 0x21 Arbitrary File Download Vulnerability</ref>
-      <ref url="http://www.novell.com/support/viewContent.do?externalId=7010044" source="CONFIRM">http://www.novell.com/support/viewContent.do?externalId=7010044</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="novell" name="zenworks_configuration_management">
-        <vers num="11.1" />
-        <vers num="11.1a" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2217" published="2012-05-01" name="CVE-2012-2217" modified="2012-05-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote attackers to (1) send SMS messages, (2) obtain the Network Access Identifier (NAI) and its password, or trigger (3) popup messages or (4) tones via a crafted application that leverages the android.permission.INTERNET permission.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.vsecurity.com/resources/advisory/20120420-1/" source="MISC">http://www.vsecurity.com/resources/advisory/20120420-1/</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0176.html" source="BUGTRAQ">20120421 HTC IQRD Android Permission Leakage (CVE-2012-2217)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="htc" name="evo_3d_software">
-        <vers num="1.11.651.3" />
-        <vers num="1.13.651.7" />
-        <vers num="2.08.651.2" />
-        <vers prev="1" num="2.08.651.3" />
-      </prod>
-      <prod vendor="htc" name="evo_4g_software">
-        <vers num="1.32.651.1" />
-        <vers num="1.47.651.1" />
-        <vers num="3.26.651.6" />
-        <vers num="3.29.651.5" />
-        <vers num="3.30.651.2" />
-        <vers num="3.30.651.3" />
-        <vers num="3.70.651.1" />
-        <vers num="4.22.651.2" />
-        <vers num="4.24.651.1" />
-        <vers num="4.53.651.1" />
-        <vers prev="1" num="4.54.651.1" />
-      </prod>
-      <prod vendor="htc" name="evo_design_4g_software">
-        <vers num="1.19.651.0" />
-        <vers prev="1" num="1.19.651.1" />
-      </prod>
-      <prod vendor="htc" name="evo_view_4g_software">
-        <vers num="1.22.651.1" />
-        <vers prev="1" num="1.22.651.2" />
-      </prod>
-      <prod vendor="htc" name="hero_software">
-        <vers num="1.29.651.1" />
-        <vers num="1.56.651.2" />
-        <vers num="2.27.651.5" />
-        <vers num="2.27.651.6" />
-        <vers num="2.31.651.7" />
-        <vers num="2.32.651.2" />
-      </prod>
-      <prod vendor="htc" name="shift_4g_software">
-        <vers num="1.17.651.1" />
-        <vers num="2.75.651.4" />
-        <vers num="2.75.651.5" />
-        <vers prev="1" num="2.76.651.6" />
-      </prod>
-      <prod vendor="htc" name="vivid_software">
-        <vers prev="1" num="3.26.502" />
-      </prod>
-      <prod vendor="htc" name="evo_3d">
-        <vers num="gri40" />
-      </prod>
-      <prod vendor="htc" name="evo_4g">
-        <vers num="-" />
-        <vers num="gri40" />
-      </prod>
-      <prod vendor="htc" name="evo_design_4g">
-        <vers num="-" />
-      </prod>
-      <prod vendor="htc" name="evo_view_4g">
-        <vers num="-" />
-      </prod>
-      <prod vendor="htc" name="hero">
-        <vers num="-" />
-      </prod>
-      <prod vendor="htc" name="shift_4g">
-        <vers num="-" />
-      </prod>
-      <prod vendor="htc" name="vivid">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2223" published="2012-04-11" name="CVE-2012-2223" modified="2012-04-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The xplat agent in Novell ZENworks Configuration Management (ZCM) 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote attackers to conduct cross-site tracing (XST) attacks via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.novell.com/support/viewContent.do?externalId=7010137" source="CONFIRM" adv="1">http://www.novell.com/support/viewContent.do?externalId=7010137</ref>
-      <ref url="http://www.novell.com/support/viewContent.do?externalId=7010044" source="CONFIRM">http://www.novell.com/support/viewContent.do?externalId=7010044</ref>
-      <ref url="http://www.novell.com/support/viewContent.do?externalId=7008244" source="CONFIRM">http://www.novell.com/support/viewContent.do?externalId=7008244</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="novell" name="zenworks_configuration_management">
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.3.2" />
-        <vers num="10.3.3" />
-        <vers num="11" />
-        <vers num="11.1" />
-        <vers num="11.1a" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2224" published="2012-04-11" name="CVE-2012-2224" modified="2012-04-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Xunlei Thunder before 7.2.6 allows remote attackers to execute arbitrary code via a crafted file, related to a "DLL injection vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://safe.xunlei.com/announce/xl20120306.html" source="CONFIRM" adv="1">http://safe.xunlei.com/announce/xl20120306.html</ref>
-      <ref url="http://blog.vulnhunt.com/index.php/2012/03/06/cal-2012-0006xunlei-dll-injection-vulnerability/" source="MISC">http://blog.vulnhunt.com/index.php/2012/03/06/cal-2012-0006xunlei-dll-injection-vulnerability/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="xunlei" name="thunder">
-        <vers num="7.2.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2225" published="2012-04-11" name="CVE-2012-2225" modified="2012-04-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">360zip 1.93beta allows remote attackers to execute arbitrary code via vectors related to file browsing and file extraction.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://blog.vulnhunt.com/index.php/2012/01/01/cal-2011-0080/" source="MISC">http://blog.vulnhunt.com/index.php/2012/01/01/cal-2011-0080/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="360zip" name="360zip">
-        <vers num="1.93" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2227" published="2012-08-26" name="CVE-2012-2227" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and execute arbitrary local files via a ..%2F (encoded dot dot slash) in the default_lang parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23086" source="MISC">https://www.htbridge.com/advisory/HTB23086</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75330" source="XF">pluxml-index-file-include(75330)</ref>
-      <ref url="http://www.securityfocus.com/bid/53348" source="BID">53348</ref>
-      <ref url="http://www.pluxml.org/article59/sortie-de-pluxml-5-1-6" source="CONFIRM">http://www.pluxml.org/article59/sortie-de-pluxml-5-1-6</ref>
-      <ref url="http://www.exploit-db.com/exploits/18828" source="EXPLOIT-DB">18828</ref>
-      <ref url="http://telechargements.pluxml.org/changelog" source="CONFIRM">http://telechargements.pluxml.org/changelog</ref>
-      <ref url="http://secunia.com/advisories/49026" source="SECUNIA" adv="1">49026</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-05/0011.html" source="BUGTRAQ">20120502 Local File Inclusion in PluXml</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pluxml" name="pluxml">
-        <vers prev="1" num="5.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2230" published="2012-04-12" name="CVE-2012-2230" modified="2012-04-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than CVE-2012-1574.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://ccp.cloudera.com/display/DOC/Cloudera+Security+Bulletin" source="CONFIRM">https://ccp.cloudera.com/display/DOC/Cloudera+Security+Bulletin</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cloudera" name="cloudera_manager">
-        <vers num="3.7.0" edition="" />
-        <vers num="3.7.0" edition=":free" />
-        <vers num="3.7.0" edition=":enterprise" />
-        <vers num="3.7.1" edition="" />
-        <vers num="3.7.1" edition=":free" />
-        <vers num="3.7.1" edition=":enterprise" />
-        <vers num="3.7.2" edition="" />
-        <vers num="3.7.2" edition=":enterprise" />
-        <vers num="3.7.2" edition=":free" />
-        <vers num="3.7.3" edition="" />
-        <vers num="3.7.3" edition=":enterprise" />
-        <vers num="3.7.3" edition=":free" />
-        <vers num="3.7.4" edition="" />
-        <vers num="3.7.4" edition=":free" />
-        <vers num="3.7.4" edition=":enterprise" />
-      </prod>
-      <prod vendor="cloudera" name="cloudera_service_and_configuration_manager">
-        <vers num="3.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2234" published="2012-04-21" name="CVE-2012-2234" modified="2012-04-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in sources/users.queries.php in TeamPass before 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the login parameter in an add_new_user action.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/nilsteampassnet/TeamPass/blob/master/readme.txt" source="MISC">https://github.com/nilsteampassnet/TeamPass/blob/master/readme.txt</ref>
-      <ref url="http://packetstormsecurity.org/files/111905/" source="MISC">http://packetstormsecurity.org/files/111905/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="teampass" name="teampass">
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers prev="1" num="2.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2235" published="2012-05-27" name="CVE-2012-2235" modified="2012-05-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Support Incident Tracker (SiT!) 3.65 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to index.php, which is not properly handled in an error message.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.trustwave.com/spiderlabs/advisories/TWSL2012-012.txt" source="MISC">https://www.trustwave.com/spiderlabs/advisories/TWSL2012-012.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sitracker" name="support_incident_tracker">
-        <vers num="1.8.00" />
-        <vers num="10.8.00" />
-        <vers num="11.8.00" />
-        <vers num="14.8.00" />
-        <vers num="16.8.00" />
-        <vers num="17.8.00" />
-        <vers num="18.8.00" />
-        <vers num="2.8.00" />
-        <vers num="21.8.00" />
-        <vers num="3.00" edition="beta1" />
-        <vers num="3.00" edition="beta2" />
-        <vers num="3.00" edition="beta3" />
-        <vers num="3.01" />
-        <vers num="3.02" />
-        <vers num="3.03" />
-        <vers num="3.03a" />
-        <vers num="3.04a" />
-        <vers num="3.05" />
-        <vers num="3.06" />
-        <vers num="3.07" />
-        <vers num="3.45" edition="beta1" />
-        <vers num="3.50" edition="beta1" />
-        <vers num="3.51" />
-        <vers num="3.6" />
-        <vers num="3.60" />
-        <vers num="3.61" />
-        <vers num="3.62" />
-        <vers num="3.63" edition="beta1" />
-        <vers num="3.64" />
-        <vers prev="1" num="3.65" />
-        <vers num="31.07.00" />
-        <vers num="4.8.00" />
-        <vers num="7.8.00" />
-        <vers num="8.8.00" />
-        <vers num="9.8.00" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2236" published="2012-04-20" name="CVE-2012-2236" modified="2012-04-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in users.php in PHP Gift Registry 1.5.5 allows remote authenticated users to execute arbitrary SQL commands via the userid parameter in an edit action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0110.html" source="BUGTRAQ">20120416 Fwd: PHP Gift Registry 1.5.5 SQL Injection</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ryan_walberg" name="php_gift_registry">
-        <vers num="1.5.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2267" published="2012-04-17" name="CVE-2012-2267" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (daemon crash) by establishing and closing a port-705 TCP connection, a different vulnerability than CVE-2012-1923.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52929" source="BID">52929</ref>
-      <ref url="http://secunia.com/secunia_research/2012-9/" source="MISC" adv="1">http://secunia.com/secunia_research/2012-9/</ref>
-      <ref url="http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf" source="CONFIRM" adv="1">http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="helix_mobile_server">
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-      </prod>
-      <prod vendor="realnetworks" name="helix_server">
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.2" />
-        <vers num="14.2.0.212" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2268" published="2012-04-17" name="CVE-2012-2268" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (unhandled exception and daemon crash) via a crafted Open-PDU request that triggers incorrect DisplayString processing, a different vulnerability than CVE-2012-1923.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52929" source="BID">52929</ref>
-      <ref url="http://secunia.com/secunia_research/2012-9/" source="MISC" adv="1">http://secunia.com/secunia_research/2012-9/</ref>
-      <ref url="http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf" source="CONFIRM" adv="1">http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="helix_mobile_server">
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-      </prod>
-      <prod vendor="realnetworks" name="helix_server">
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.2" />
-        <vers num="14.2.0.212" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2269" published="2012-04-20" name="CVE-2012-2269" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary field to apps/contacts/ajax/addcard.php, (2) the parameter parameter to apps/contacts/ajax/addproperty.php, (3) the name parameter to apps/contacts/ajax/createaddressbook, (4) the file parameter to files/download.php, or the (5) name, (6) user, or (7) redirect_url parameter to files/index.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.tele-consulting.com/advisories/TC-SA-2012-01.txt" source="MISC">http://www.tele-consulting.com/advisories/TC-SA-2012-01.txt</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/2" source="MLIST">[oss-security] 20120901 Re: CVE - ownCloud</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/11/1" source="MLIST">[oss-security] 20120810 ownCloud - matching CVEs to fix information and vice versa</ref>
-      <ref url="http://secunia.com/advisories/48850" source="SECUNIA" adv="1">48850</ref>
-      <ref url="http://owncloud.org/security/advisories/CVE-2012-2269/" source="CONFIRM">http://owncloud.org/security/advisories/CVE-2012-2269/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="owncloud" name="owncloud">
-        <vers num="3.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2270" published="2012-04-20" name="CVE-2012-2270" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.tele-consulting.com/advisories/TC-SA-2012-01.txt" source="MISC">http://www.tele-consulting.com/advisories/TC-SA-2012-01.txt</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/2" source="MLIST">[oss-security] 20120901 Re: CVE - ownCloud</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/11/1" source="MLIST">[oss-security] 20120810 ownCloud - matching CVEs to fix information and vice versa</ref>
-      <ref url="http://secunia.com/advisories/48850" source="SECUNIA" adv="1">48850</ref>
-      <ref url="http://owncloud.org/security/advisories/CVE-2012-2270/" source="CONFIRM">http://owncloud.org/security/advisories/CVE-2012-2270/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="owncloud" name="owncloud">
-        <vers num="3.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2271" published="2012-05-21" name="CVE-2012-2271" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Buffer overflow in the InitLicenKeys function in a certain ActiveX control in SkinCrafter3_vs2005.dll in SkinCrafter 3.0 allows remote attackers to execute arbitrary code via a long string in the first argument (aka the reg_name argument).</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/18892/" source="EXPLOIT-DB">18892</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="skincrafter" name="skincrafter">
-        <vers num="3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2273" published="2012-04-20" name="CVE-2012-2273" modified="2012-04-20" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Comodo Internet Security before 5.10.228257.2253 on Windows 7 x64 allows local users to cause a denial of service (system crash) via a crafted 32-bit Portable Executable (PE) file with a kernel ImageBase value.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.comodo.com/home/download/release-notes.php?p=anti-malware" source="CONFIRM">http://www.comodo.com/home/download/release-notes.php?p=anti-malware</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0139.html" source="BUGTRAQ">20120419 [CVE-2012-2273] Comodo Internet Security &lt;5.10 BSOD (Win7 x64)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="comodo" name="comodo_internet_security">
-        <vers num="3.0.14.276" />
-        <vers num="3.0.15.277" />
-        <vers num="3.0.16.295" />
-        <vers num="3.0.17.304" />
-        <vers num="3.0.18.309" />
-        <vers num="3.0.19.318" />
-        <vers num="3.0.20.320" />
-        <vers num="3.0.22.349" />
-        <vers num="3.0.23.364" />
-        <vers num="3.0.24.368" />
-        <vers num="3.0.25.378" />
-        <vers num="3.10.102363.531" />
-        <vers num="3.11.108364.552" />
-        <vers num="3.12.111745.560" />
-        <vers num="3.13.121240.574" />
-        <vers num="3.13.125662.579" />
-        <vers num="3.14.130099.587" />
-        <vers num="3.5.53896.424" />
-        <vers num="3.5.54375.427" />
-        <vers num="3.5.55810.432" />
-        <vers num="3.5.57173.439" />
-        <vers num="3.8.64263.468" />
-        <vers num="3.8.64739.471" />
-        <vers num="3.8.65951.477" />
-        <vers num="3.9.95478.509" />
-        <vers num="4.0.138377.779" />
-        <vers num="4.0.141842.828" />
-        <vers num="4.1.150349.920" />
-        <vers num="5.0.163652.1142" />
-        <vers num="5.3.174622.1216" />
-        <vers num="5.3.175888.1227" />
-        <vers num="5.3.176757.1236" />
-        <vers num="5.3.181415.1237" />
-        <vers num="5.4.189822.1355" />
-        <vers num="5.5.195786.1383" />
-        <vers num="5.8.211697.2124" />
-        <vers num="5.8.213334.2131" />
-        <vers num="5.9.219863.2196" />
-        <vers prev="1" num="5.9.221665.2197" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2274" published="2012-08-13" name="CVE-2012-2274" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in pivotx/ajaxhelper.php in PivotX 2.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the file parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23087" source="MISC">https://www.htbridge.com/advisory/HTB23087</ref>
-      <ref url="http://pivotx.net/page/security" source="CONFIRM">http://pivotx.net/page/security</ref>
-      <ref url="http://pivot-weblog.svn.sourceforge.net/viewvc/pivot-weblog?view=revision&amp;revision=4147" source="CONFIRM">http://pivot-weblog.svn.sourceforge.net/viewvc/pivot-weblog?view=revision&amp;revision=4147</ref>
-      <ref url="http://pivot-weblog.svn.sourceforge.net/viewvc/pivot-weblog?view=revision&amp;revision=4145" source="CONFIRM">http://pivot-weblog.svn.sourceforge.net/viewvc/pivot-weblog?view=revision&amp;revision=4145</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pivotx" name="pivotx">
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.2.0" edition="b1" />
-        <vers num="2.2.0" edition="b2" />
-        <vers num="2.2.0" edition="rc" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers prev="1" num="2.3.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2275" published="2012-09-15" name="CVE-2012-2275" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hijack the authentication of users for requests that add, delete, or modify sensitive information, as demonstrated by changing the administrator's email via an editUser action to lib/usermanagement/userInfo.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://gitorious.org/testlink-ga/testlink-code/commit/c8751a3c9ad8970b49d1bf882203efacd10af087" source="CONFIRM" patch="1">http://gitorious.org/testlink-ga/testlink-code/commit/c8751a3c9ad8970b49d1bf882203efacd10af087</ref>
-      <ref url="http://gitorious.org/testlink-ga/testlink-code/commit/2d4ac941314f8bda80e265c9de8bacf17d1cd3e6" source="CONFIRM" patch="1">http://gitorious.org/testlink-ga/testlink-code/commit/2d4ac941314f8bda80e265c9de8bacf17d1cd3e6</ref>
-      <ref url="http://gitorious.org/testlink-ga/testlink-code/commit/252788c2373e73173172ada9af661e0721599891" source="CONFIRM" patch="1">http://gitorious.org/testlink-ga/testlink-code/commit/252788c2373e73173172ada9af661e0721599891</ref>
-      <ref url="https://www.htbridge.com/advisory/HTB23088" source="MISC">https://www.htbridge.com/advisory/HTB23088</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/78306" source="XF">testlink-userinfo-csrf(78306)</ref>
-      <ref url="http://www.exploit-db.com/exploits/21135" source="EXPLOIT-DB">21135</ref>
-      <ref url="http://packetstormsecurity.org/files/116275/TestLink-1.9.3-Cross-Site-Request-Forgery.html" source="MISC">http://packetstormsecurity.org/files/116275/TestLink-1.9.3-Cross-Site-Request-Forgery.html</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-09/0023.html" source="BUGTRAQ">20120905 Cross-Site Request Forgery (CSRF) in TestLink</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="teamst" name="testlink">
-        <vers num="1.7" />
-        <vers num="1.7.0" />
-        <vers num="1.7.1" />
-        <vers num="1.7.2" />
-        <vers num="1.7.3" />
-        <vers num="1.7.4" />
-        <vers num="1.8" edition="beta1" />
-        <vers num="1.8" edition="beta2" />
-        <vers num="1.8" edition="beta3" />
-        <vers num="1.8" edition="rc1" />
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-        <vers num="1.8.2" />
-        <vers num="1.8.3" />
-        <vers num="1.8.4" />
-        <vers prev="1" num="1.9.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2276" published="2012-05-14" name="CVE-2012-2276" modified="2012-06-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via input data that (1) lacks FIPS fields or (2) has an invalid version number.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75553" source="XF">emc-documentum-irm-dos(75553)</ref>
-      <ref url="http://www.securityfocus.com/bid/53475" source="BID">53475</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522682" source="BUGTRAQ">20120510 ESA-2012-019: EMC Documentum Information Rights Management Multiple Vulnerabilities</ref>
-      <ref url="http://www.exploit-db.com/exploits/18734" source="EXPLOIT-DB">18734</ref>
-      <ref url="http://secunia.com/advisories/48690" source="SECUNIA">48690</ref>
-      <ref url="http://aluigi.org/adv/irm_1-adv.txt" source="MISC">http://aluigi.org/adv/irm_1-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emc" name="documentum_information_rights_management">
-        <vers num="4" />
-        <vers num="5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2277" published="2012-05-14" name="CVE-2012-2277" modified="2012-06-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service (pvcontrol.exe process hang) via \n (line feed) characters in the Id fields of many "batch begin untethered" commands.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75554" source="XF">emc-documentum-dos(75554)</ref>
-      <ref url="http://www.securityfocus.com/bid/53475" source="BID">53475</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522682" source="BUGTRAQ">20120510 ESA-2012-019: EMC Documentum Information Rights Management Multiple Vulnerabilities</ref>
-      <ref url="http://www.exploit-db.com/exploits/18734" source="EXPLOIT-DB">18734</ref>
-      <ref url="http://secunia.com/advisories/48690" source="SECUNIA">48690</ref>
-      <ref url="http://aluigi.org/adv/irm_1-adv.txt" source="MISC">http://aluigi.org/adv/irm_1-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emc" name="documentum_information_rights_management">
-        <vers num="4" />
-        <vers num="5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2278" published="2012-07-13" name="CVE-2012-2278" modified="2012-07-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the (1) Self-Service Console and (2) Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0064.html" source="BUGTRAQ">20120711 ESA-2012-023: RSA Authentication Manager Multiple Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rsa" name="authentication_manager">
-        <vers num="6.0" />
-        <vers num="6.1" />
-        <vers num="7.0" />
-        <vers prev="1" num="7.1" edition="sp3" />
-        <vers prev="1" num="7.1" edition="sp4" />
-        <vers prev="1" num="7.1" edition="sp42" />
-      </prod>
-      <prod vendor="rsa" name="securid_appliance">
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="3.0" edition="sp2" />
-        <vers num="3.0" edition="sp3" />
-        <vers num="3.0" edition="sp4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2279" published="2012-07-13" name="CVE-2012-2279" modified="2012-07-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Open redirect vulnerability in the Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0064.html" source="BUGTRAQ">20120711 ESA-2012-023: RSA Authentication Manager Multiple Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rsa" name="authentication_manager">
-        <vers num="6.0" />
-        <vers num="6.1" />
-        <vers num="7.0" />
-        <vers prev="1" num="7.1" edition="sp3" />
-        <vers prev="1" num="7.1" edition="sp4" />
-        <vers prev="1" num="7.1" edition="sp42" />
-      </prod>
-      <prod vendor="rsa" name="securid_appliance">
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="3.0" edition="sp2" />
-        <vers num="3.0" edition="sp3" />
-        <vers num="3.0" edition="sp4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2280" published="2012-07-13" name="CVE-2012-2280" modified="2012-07-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 do not properly use frames, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "Cross frame scripting vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0064.html" source="BUGTRAQ">20120711 ESA-2012-023: RSA Authentication Manager Multiple Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rsa" name="authentication_manager">
-        <vers num="6.0" />
-        <vers num="6.1" />
-        <vers num="7.0" />
-        <vers prev="1" num="7.1" edition="sp3" />
-        <vers prev="1" num="7.1" edition="sp4" />
-        <vers prev="1" num="7.1" edition="sp42" />
-      </prod>
-      <prod vendor="rsa" name="securid_appliance">
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="3.0" edition="sp2" />
-        <vers num="3.0" edition="sp3" />
-        <vers num="3.0" edition="sp4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2281" published="2012-07-05" name="CVE-2012-2281" modified="2012-07-06" CVSS_version="2.0" CVSS_vector="(AV:A/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="6.8" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.2" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens after a logout, which might allow remote attackers to conduct replay attacks via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0037.html" source="BUGTRAQ">20120702 ESA-2012-026: RSA Access Manager Session Replay Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rsa" name="access_manager_agent">
-        <vers num="" />
-      </prod>
-      <prod vendor="rsa" name="access_manager_server">
-        <vers num="6.0" />
-        <vers num="6.1" edition="sp1" />
-        <vers num="6.1" edition="sp2" />
-        <vers num="6.1" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2282" published="2012-07-16" name="CVE-2012-2282" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and 2.1 before 2.1.3.19077 (aka MR1 SP3.2) and 2.2 before 2.2.0.19078 (aka MR2 SP0.2) do not properly implement NFS access control, which allows remote authenticated users to read or modify files via a (1) NFSv2, (2) NFSv3, or (3) NFSv4 request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0063.html" source="BUGTRAQ">20120711 ESA-2012-027: EMC Celerra/VNX/VNXe Improper Access Control Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emc" name="celerra_network_server">
-        <vers num="6.0.36.4" />
-        <vers num="6.0.60.2" />
-      </prod>
-      <prod vendor="emc" name="vnx">
-        <vers num="7.0.12.0" />
-        <vers num="7.0.53.1" />
-      </prod>
-      <prod vendor="emc" name="vnxe">
-        <vers num="2.0" edition="sp1" />
-        <vers num="2.0" edition="sp2" />
-        <vers num="2.0" edition="sp3" />
-        <vers num="mr1" edition="sp1" />
-        <vers num="mr1" edition="sp2" />
-        <vers num="mr1" edition="sp3" />
-        <vers num="mr1" edition="sp3.1" />
-        <vers num="mr2" edition="sp0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2283" published="2012-08-16" name="CVE-2012-2283" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:N)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">The Iomega Home Media Network Hard Drive with EMC Lifeline firmware before 2.104, Home Media Network Hard Drive Cloud Edition with EMC Lifeline firmware before 3.2.3.15290, iConnect with EMC Lifeline firmware before 2.5.26.18966, and StorCenter with EMC Lifeline firmware before 2.0.18.23122, 2.1.x before 2.1.42.18967, and 3.x before 3.2.3.15290 allow remote authenticated users to read or modify data on arbitrary remote shares via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-08/0056.html" source="BUGTRAQ">20120808 ESA-2012-031: Iomega StorCenter/EMC Lifeline Remote Access Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="iomega" name="home_media_network_hard_drive">
-        <vers num="" edition=":cloud" />
-      </prod>
-      <prod vendor="iomega" name="iconnect">
-        <vers num="" />
-      </prod>
-      <prod vendor="iomega" name="storcenter">
-        <vers num="" />
-      </prod>
-      <prod vendor="emc" name="lifeline">
-        <vers prev="1" num="2.0.18.23121" />
-        <vers num="2.1.42.18966" />
-        <vers prev="1" num="2.103" />
-        <vers num="2.104" />
-        <vers prev="1" num="2.5.26.18965" />
-        <vers num="23.2.3.15289" />
-        <vers prev="1" num="3.2.3.15289" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2285" published="2012-08-29" name="CVE-2012-2285" modified="2012-08-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">EMC Cloud Tiering Appliance (aka CTA, formerly FMA) 9.0 and earlier, and Cloud Tiering Appliance Virtual Edition (CTA/VE) 9.0 and earlier, allows remote attackers to obtain GUI administrative access by sending a crafted file during the authentication phase.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-08/0184.html" source="BUGTRAQ">20120828 ESA-2012-034: EMC Cloud Tiering Appliance (CTA) Authentication Bypass Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emc" name="cloud_tiering_appliance_virtual_edition">
-        <vers prev="1" num="9.0" />
-      </prod>
-      <prod vendor="emc" name="cloud_tiering_appliance">
-        <vers prev="1" num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2288" published="2012-09-04" name="CVE-2012-2288" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-08/0219.html" source="BUGTRAQ">20120830 ESA-2012-038: EMC NetWorker Format String Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emc" name="networker">
-        <vers num="7.6.3" />
-        <vers num="7.6.4" />
-        <vers num="8.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2289" published="2012-08-25" name="CVE-2012-2289" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">EMC ApplicationXtender Desktop before 6.5 SP2 and ApplicationXtender Web Access .NET before 6.5 SP2 allow remote attackers to upload files to any location, and possibly execute arbitrary code, via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-08/0168.html" source="BUGTRAQ">20120823 ESA-2012-039: EMC ApplicationXtender Arbitrary File Upload Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emc" name="applicationxtender_desktop">
-        <vers prev="1" num="6.5" />
-      </prod>
-      <prod vendor="emc" name="applicationxtender_web_access_.net">
-        <vers prev="1" num="6.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2296" published="2012-07-25" name="CVE-2012-2296" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Janrain Engage (formerly RPX) module for Drupal 6.x-1.x. 6.x-2.x before 6.x-2.2, and 7.x-2.x before 7.x-2.2 stores user profile data from Engage in session tables, which might allow remote attackers to obtain sensitive information by leveraging a separate vulnerability.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://drupal.org/node/1515282" source="CONFIRM" patch="1">https://drupal.org/node/1515282</ref>
-      <ref url="http://drupal.org/node/1515282" source="MISC" patch="1" adv="1">http://drupal.org/node/1515282</ref>
-      <ref url="http://drupal.org/node/1515120" source="CONFIRM" patch="1">http://drupal.org/node/1515120</ref>
-      <ref url="http://drupal.org/node/1515114" source="CONFIRM" patch="1">http://drupal.org/node/1515114</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/2" source="MLIST">[oss-security] 20120502 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/1" source="MLIST">[oss-security] 20120502 CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/10/12" source="MLIST">[oss-security] 20120410 Re: CVE's for Drupal Contrib 2012 001 through 057  (67 new CVE assignments)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="janrain" name="rpx">
-        <vers num="6.x-1.0" edition="beta1" />
-        <vers num="6.x-1.0" edition="dev" />
-        <vers num="6.x-1.0" edition="rc1" />
-        <vers num="6.x-1.0" edition="rc2" />
-        <vers num="6.x-1.1" edition="rc2" />
-        <vers num="6.x-1.2" edition="rc2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="6.x-2.1" edition="beta1" />
-        <vers num="6.x-2.1" edition="beta2" />
-        <vers num="6.x-2.1" edition="beta3" />
-        <vers num="6.x-2.1" edition="dev" />
-        <vers num="6.x-2.1" edition="rc1" />
-        <vers num="7.x-2.0" />
-        <vers num="7.x-2.1" edition="beta1" />
-        <vers num="7.x-2.1" edition="beta2" />
-        <vers num="7.x-2.1" edition="beta3" />
-        <vers num="7.x-2.1" edition="rc1" />
-        <vers num="7.x-2.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2297" published="2012-08-26" name="CVE-2012-2297" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the Creative Commons module 6.x-1.x before 6.x-1.1 for Drupal allow remote authenticated users with the administer creative commons permission to inject arbitrary web script or HTML via the (1) creativecommons_user_message or (2) creativecommons_site_license_additional_text parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75180" source="XF">creativecommons-licensedescription-xss(75180)</ref>
-      <ref url="http://www.securityfocus.com/bid/53248" source="BID">53248</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/2" source="MLIST">[oss-security] 20120502 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/1" source="MLIST">[oss-security] 20120502 CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.madirish.net/content/drupal-creative-commons-6x-10-xss-vulnerability" source="MISC">http://www.madirish.net/content/drupal-creative-commons-6x-10-xss-vulnerability</ref>
-      <ref url="http://secunia.com/advisories/48937" source="SECUNIA" adv="1">48937</ref>
-      <ref url="http://drupal.org/node/1547520" source="MISC">http://drupal.org/node/1547520</ref>
-      <ref url="http://drupal.org/node/1547478" source="CONFIRM">http://drupal.org/node/1547478</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="creative_commons_module_project" name="creativecommons">
-        <vers num="6.x-1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2298" published="2012-08-14" name="CVE-2012-2298" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) "user names in page titles" and (2) "autocomplete callbacks."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/realname.git/commitdiff/b920794" source="CONFIRM" patch="1">http://drupalcode.org/project/realname.git/commitdiff/b920794</ref>
-      <ref url="http://drupalcode.org/project/realname.git/commitdiff/41786d0" source="CONFIRM" patch="1">http://drupalcode.org/project/realname.git/commitdiff/41786d0</ref>
-      <ref url="http://drupal.org/node/1547660" source="MISC" patch="1" adv="1">http://drupal.org/node/1547660</ref>
-      <ref url="http://drupal.org/node/1547352" source="CONFIRM" patch="1">http://drupal.org/node/1547352</ref>
-      <ref url="http://www.securityfocus.com/bid/53250" source="BID">53250</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/2" source="MLIST">[oss-security] 20120502 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/1" source="MLIST">[oss-security] 20120502 CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/48936" source="SECUNIA" adv="1">48936</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="drupal" name="realname">
-        <vers num="6.x-1.2" />
-      </prod>
-      <prod vendor="nancy_wichmann" name="realname">
-        <vers num="6.x-1.0" edition="alpha1" />
-        <vers num="6.x-1.0" edition="beta" />
-        <vers num="6.x-1.1" edition="rc1" />
-        <vers num="6.x-1.1" edition="rc2" />
-        <vers num="6.x-1.1" edition="rc3" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2299" published="2012-08-14" name="CVE-2012-2299" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">The Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal stores passwords for new customers in plaintext during checkout, which allows local users to obtain sensitive information by reading from the database.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/ubercart.git/commitdiff/8c61e84" source="CONFIRM" patch="1">http://drupalcode.org/project/ubercart.git/commitdiff/8c61e84</ref>
-      <ref url="http://drupalcode.org/project/ubercart.git/commitdiff/035d2cb" source="CONFIRM" patch="1">http://drupalcode.org/project/ubercart.git/commitdiff/035d2cb</ref>
-      <ref url="http://drupal.org/node/1547674" source="MISC" patch="1" adv="1">http://drupal.org/node/1547674</ref>
-      <ref url="http://drupal.org/node/1547508" source="CONFIRM" patch="1">http://drupal.org/node/1547508</ref>
-      <ref url="http://drupal.org/node/1547506" source="CONFIRM" patch="1">http://drupal.org/node/1547506</ref>
-      <ref url="http://www.securityfocus.com/bid/53251" source="BID">53251</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/2" source="MLIST">[oss-security] 20120502 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/1" source="MLIST">[oss-security] 20120502 CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/48935" source="SECUNIA" adv="1">48935</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ubercart" name="ubercart">
-        <vers num="6.x-2.0" edition="beta1" />
-        <vers num="6.x-2.0" edition="beta2" />
-        <vers num="6.x-2.0" edition="beta3" />
-        <vers num="6.x-2.0" edition="beta4" />
-        <vers num="6.x-2.0" edition="beta5" />
-        <vers num="6.x-2.0" edition="beta6" />
-        <vers num="6.x-2.0" edition="dev" />
-        <vers num="6.x-2.0" edition="rc1" />
-        <vers num="6.x-2.0" edition="rc2" />
-        <vers num="6.x-2.0" edition="rc3" />
-        <vers num="6.x-2.0" edition="rc4" />
-        <vers num="6.x-2.0" edition="rc5" />
-        <vers num="6.x-2.0" edition="rc6" />
-        <vers num="6.x-2.0" edition="rc7" />
-        <vers num="6.x-2.1" />
-        <vers num="6.x-2.2" />
-        <vers num="6.x-2.3" />
-        <vers num="6.x-2.4" />
-        <vers num="6.x-2.6" />
-        <vers num="6.x-2.7" />
-        <vers num="7.x-3.0" edition="alpha1" />
-        <vers num="7.x-3.0" edition="alpha2" />
-        <vers num="7.x-3.0" edition="alpha3" />
-        <vers num="7.x-3.0" edition="beta1" />
-        <vers num="7.x-3.0" edition="beta2" />
-        <vers num="7.x-3.0" edition="beta3" />
-        <vers num="7.x-3.0" edition="beta4" />
-        <vers num="7.x-3.0" edition="dev" />
-        <vers num="7.x-3.0" edition="rc1" />
-        <vers num="7.x-3.0" edition="rc2" />
-        <vers num="7.x-3.0" edition="rc3" />
-        <vers num="7.x-3.0" edition="rc4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2300" published="2012-08-14" name="CVE-2012-2300" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal allow remote authenticated users with the administer product classes permission to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/ubercart.git/commitdiff/dfd8658" source="CONFIRM" patch="1">http://drupalcode.org/project/ubercart.git/commitdiff/dfd8658</ref>
-      <ref url="http://drupalcode.org/project/ubercart.git/commitdiff/3e7c0b8" source="CONFIRM" patch="1">http://drupalcode.org/project/ubercart.git/commitdiff/3e7c0b8</ref>
-      <ref url="http://drupal.org/node/1547674" source="MISC" patch="1" adv="1">http://drupal.org/node/1547674</ref>
-      <ref url="http://drupal.org/node/1547508" source="CONFIRM" patch="1">http://drupal.org/node/1547508</ref>
-      <ref url="http://drupal.org/node/1547506" source="CONFIRM" patch="1">http://drupal.org/node/1547506</ref>
-      <ref url="http://www.securityfocus.com/bid/53251" source="BID">53251</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/2" source="MLIST">[oss-security] 20120502 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/1" source="MLIST">[oss-security] 20120502 CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/48935" source="SECUNIA" adv="1">48935</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ubercart" name="ubercart">
-        <vers num="6.x-2.0" edition="beta1" />
-        <vers num="6.x-2.0" edition="beta2" />
-        <vers num="6.x-2.0" edition="beta3" />
-        <vers num="6.x-2.0" edition="beta4" />
-        <vers num="6.x-2.0" edition="beta5" />
-        <vers num="6.x-2.0" edition="beta6" />
-        <vers num="6.x-2.0" edition="dev" />
-        <vers num="6.x-2.0" edition="rc1" />
-        <vers num="6.x-2.0" edition="rc2" />
-        <vers num="6.x-2.0" edition="rc3" />
-        <vers num="6.x-2.0" edition="rc4" />
-        <vers num="6.x-2.0" edition="rc5" />
-        <vers num="6.x-2.0" edition="rc6" />
-        <vers num="6.x-2.0" edition="rc7" />
-        <vers num="6.x-2.1" />
-        <vers num="6.x-2.2" />
-        <vers num="6.x-2.3" />
-        <vers num="6.x-2.4" />
-        <vers num="6.x-2.6" />
-        <vers num="6.x-2.7" />
-        <vers num="7.x-3.0" edition="alpha1" />
-        <vers num="7.x-3.0" edition="alpha2" />
-        <vers num="7.x-3.0" edition="alpha3" />
-        <vers num="7.x-3.0" edition="beta1" />
-        <vers num="7.x-3.0" edition="beta2" />
-        <vers num="7.x-3.0" edition="beta3" />
-        <vers num="7.x-3.0" edition="beta4" />
-        <vers num="7.x-3.0" edition="dev" />
-        <vers num="7.x-3.0" edition="rc1" />
-        <vers num="7.x-3.0" edition="rc2" />
-        <vers num="7.x-3.0" edition="rc3" />
-        <vers num="7.x-3.0" edition="rc4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2302" published="2012-07-25" name="CVE-2012-2302" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Site Documentation (Sitedoc) module for Drupal 6.x-1.x before 6.x-1.4 does not properly check the save location when archiving, which allows remote attackers to obtain sensitive information via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/sitedoc.git/commitdiff/521721c" source="CONFIRM" patch="1">http://drupalcode.org/project/sitedoc.git/commitdiff/521721c</ref>
-      <ref url="http://www.osvdb.org/81555" source="OSVDB">81555</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/2" source="MLIST">[oss-security] 20120502 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/1" source="MLIST">[oss-security] 20120502 CVE Request for Drupal contributed modules</ref>
-      <ref url="http://drupal.org/node/1547686" source="MISC" adv="1">http://drupal.org/node/1547686</ref>
-      <ref url="http://drupal.org/node/1546224" source="CONFIRM">http://drupal.org/node/1546224</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nancy_wichmann" name="sitedoc">
-        <vers num="6.x-1.0" edition="beta1" />
-        <vers num="6.x-1.0" edition="beta2" />
-        <vers num="6.x-1.0" edition="rc4" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2303" published="2012-07-18" name="CVE-2012-2303" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The Spaces module 6.x-3.x before 6.x-3.4 for Drupal does not enforce permissions on non-object pages, which allows remote attackers to obtain sensitive information and possibly have other impacts via unspecified vectors to the (1) Spaces or (2) Spaces OG module.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/spaces.git/commitdiff/cee919c" source="CONFIRM" patch="1">http://drupalcode.org/project/spaces.git/commitdiff/cee919c</ref>
-      <ref url="http://drupal.org/node/1547736" source="MISC" patch="1">http://drupal.org/node/1547736</ref>
-      <ref url="http://drupal.org/node/1547730" source="CONFIRM" patch="1">http://drupal.org/node/1547730</ref>
-      <ref url="http://www.securityfocus.com/bid/53252" source="BID">53252</ref>
-      <ref url="http://www.osvdb.org/81556" source="OSVDB">81556</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/2" source="MLIST">[oss-security] 20120502 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/1" source="MLIST">[oss-security] 20120502 CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/48930" source="SECUNIA" adv="1">48930</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="florian_weber" name="spaces">
-        <vers num="6.x-3.0" edition="alpha1" />
-        <vers num="6.x-3.0" edition="alpha2" />
-        <vers num="6.x-3.0" edition="beta1" />
-        <vers num="6.x-3.0" edition="beta2" />
-        <vers num="6.x-3.0" edition="beta3" />
-        <vers num="6.x-3.0" edition="beta4" />
-        <vers num="6.x-3.0" edition="beta5" />
-        <vers num="6.x-3.0" edition="beta6" />
-        <vers num="6.x-3.0" edition="r1" />
-        <vers num="6.x-3.0" edition="r2" />
-        <vers num="6.x-3.1" />
-        <vers num="6.x-3.2" />
-        <vers num="6.x-3.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2304" published="2012-08-14" name="CVE-2012-2304" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Linkit module 7.x-2.x before 7.x-2.3 for Drupal, when using an entity access module, does not check permissions when searching for entities, which allows remote attackers to obtain sensitive information via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1547716" source="CONFIRM" patch="1">http://drupal.org/node/1547716</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75183" source="XF">linkit-search-security-bypass(75183)</ref>
-      <ref url="http://www.securityfocus.com/bid/53253" source="BID">53253</ref>
-      <ref url="http://www.osvdb.org/81557" source="OSVDB">81557</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/2" source="MLIST">[oss-security] 20120502 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/1" source="MLIST">[oss-security] 20120502 CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/48900" source="SECUNIA" adv="1">48900</ref>
-      <ref url="http://drupal.org/node/1547738" source="MISC" adv="1">http://drupal.org/node/1547738</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emil_stjerneman" name="linkit">
-        <vers num="7.x-2.0" edition="beta1" />
-        <vers num="7.x-2.0" edition="beta2" />
-        <vers num="7.x-2.1" />
-        <vers num="7.x-2.2" />
-        <vers num="7.x-2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2305" published="2012-07-25" name="CVE-2012-2305" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the Node Gallery module for Drupal 6.x-3.1 and earlier allows remote attackers to hijack the authentication of certain users for requests that create node galleries.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/2" source="MLIST">[oss-security] 20120502 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/1" source="MLIST">[oss-security] 20120502 CVE Request for Drupal contributed modules</ref>
-      <ref url="http://drupal.org/node/1557852" source="MISC" adv="1">http://drupal.org/node/1557852</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="justin_ellison" name="node_gallery">
-        <vers prev="1" num="6.x-3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2306" published="2012-07-25" name="CVE-2012-2306" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/2" source="MLIST">[oss-security] 20120502 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/1" source="MLIST">[oss-security] 20120502 CVE Request for Drupal contributed modules</ref>
-      <ref url="http://drupal.org/node/1557868" source="MISC" adv="1">http://drupal.org/node/1557868</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="drupal" name="drupal">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2307" published="2012-07-25" name="CVE-2012-2307" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/2" source="MLIST">[oss-security] 20120502 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/1" source="MLIST">[oss-security] 20120502 CVE Request for Drupal contributed modules</ref>
-      <ref url="http://drupal.org/node/1557868" source="MISC" adv="1">http://drupal.org/node/1557868</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="plaatsoft" name="addressbook">
-        <vers num="5.x-3.3" />
-        <vers num="5.x-3.5" />
-        <vers num="6.x-3.4" />
-        <vers num="6.x-3.5" />
-        <vers num="6.x-3.6" />
-        <vers num="6.x-3.7" />
-        <vers num="6.x-4.0" />
-        <vers num="6.x-4.1" />
-        <vers prev="1" num="6.x-4.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2308" published="2012-07-25" name="CVE-2012-2308" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Taxonomy Grid : Catalog module for Drupal 6.x-1.6 and earlier allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75345" source="XF">drupal-taxonomygrid-unspecified-xss(75345)</ref>
-      <ref url="http://www.securityfocus.com/bid/53345" source="BID">53345</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/2" source="MLIST">[oss-security] 20120502 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/1" source="MLIST">[oss-security] 20120502 CVE Request for Drupal contributed modules</ref>
-      <ref url="http://drupal.org/node/1557872" source="MISC" adv="1">http://drupal.org/node/1557872</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tahiticlic" name="taxonomy_grid_catalog">
-        <vers prev="1" num="6.x-1.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2309" published="2012-07-25" name="CVE-2012-2309" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Glossify Internal Links Auto SEO module for Drupal 6.x-2.5 and earlier allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/2" source="MLIST">[oss-security] 20120502 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/1" source="MLIST">[oss-security] 20120502 CVE Request for Drupal contributed modules</ref>
-      <ref url="http://drupal.org/node/1557874" source="MISC" adv="1">http://drupal.org/node/1557874</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wearepropeople" name="glossify_internal_links_auto_seo">
-        <vers prev="1" num="6.x-2.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2310" published="2012-07-25" name="CVE-2012-2310" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the cctags module for Drupal 6.x-1.x before 6.x-1.10 and 7.x-1.x before 7.x-1.10 allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/2" source="MLIST">[oss-security] 20120502 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/03/1" source="MLIST">[oss-security] 20120502 CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49018" source="SECUNIA" adv="1">49018</ref>
-      <ref url="http://drupal.org/node/1558248" source="MISC" adv="1">http://drupal.org/node/1558248</ref>
-      <ref url="http://drupal.org/node/1508100" source="CONFIRM">http://drupal.org/node/1508100</ref>
-      <ref url="http://drupal.org/node/1508098" source="CONFIRM">http://drupal.org/node/1508098</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oleg_kovalchuk" name="cctags">
-        <vers num="6.x-1.0" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="6.x-1.5" />
-        <vers num="6.x-1.6" />
-        <vers num="6.x-1.7" />
-        <vers num="6.x-1.x" edition="dev" />
-        <vers num="7.x-1.0" />
-        <vers num="7.x-1.1" />
-        <vers num="7.x-1.2" />
-        <vers num="7.x-1.3" />
-        <vers num="7.x-1.4" />
-        <vers num="7.x-1.5" />
-        <vers num="7.x-1.6" />
-        <vers num="7.x-1.7" />
-        <vers num="7.x-1.8" />
-        <vers num="7.x-1.9" />
-        <vers num="7.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2311" published="2012-05-11" name="CVE-2012-2311" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence but no = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/520827" source="CERT-VN">VU#520827</ref>
-      <ref url="https://bugs.php.net/patch-display.php?bug_id=61910&amp;patch=cgi.diff-fix-check.patch&amp;revision=1336093719&amp;display=1" source="CONFIRM">https://bugs.php.net/patch-display.php?bug_id=61910&amp;patch=cgi.diff-fix-check.patch&amp;revision=1336093719&amp;display=1</ref>
-      <ref url="https://bugs.php.net/bug.php?id=61910" source="CONFIRM" adv="1">https://bugs.php.net/bug.php?id=61910</ref>
-      <ref url="http://www.php.net/ChangeLog-5.php#5.4.3" source="CONFIRM">http://www.php.net/ChangeLog-5.php#5.4.3</ref>
-      <ref url="http://www.php.net/archive/2012.php#id2012-05-08-1" source="CONFIRM">http://www.php.net/archive/2012.php#id2012-05-08-1</ref>
-      <ref url="http://secunia.com/advisories/49014" source="SECUNIA">49014</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134012830914727&amp;w=2" source="HP">HPSBUX02791</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134012830914727&amp;w=2" source="HP">SSRT100856</ref>
-      <ref url="http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/" source="MISC">http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="1.0" />
-        <vers num="2.0" />
-        <vers num="2.0b10" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta_4_patch1" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" />
-        <vers num="4.1.0" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="4.2.0" />
-        <vers num="4.2.1" />
-        <vers num="4.2.2" />
-        <vers num="4.2.3" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.10" />
-        <vers num="4.3.11" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.4" />
-        <vers num="4.3.5" />
-        <vers num="4.3.6" />
-        <vers num="4.3.7" />
-        <vers num="4.3.8" />
-        <vers num="4.3.9" />
-        <vers num="4.4.0" />
-        <vers num="4.4.1" />
-        <vers num="4.4.2" />
-        <vers num="4.4.3" />
-        <vers num="4.4.4" />
-        <vers num="4.4.5" />
-        <vers num="4.4.6" />
-        <vers num="4.4.7" />
-        <vers num="4.4.8" />
-        <vers num="4.4.9" />
-        <vers num="5.0.0" edition="beta1" />
-        <vers num="5.0.0" edition="beta2" />
-        <vers num="5.0.0" edition="beta3" />
-        <vers num="5.0.0" edition="beta4" />
-        <vers num="5.0.0" edition="rc1" />
-        <vers num="5.0.0" edition="rc2" />
-        <vers num="5.0.0" edition="rc3" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.1.0" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers num="5.2.0" />
-        <vers num="5.2.1" />
-        <vers num="5.2.10" />
-        <vers num="5.2.11" />
-        <vers num="5.2.12" />
-        <vers num="5.2.13" />
-        <vers num="5.2.14" />
-        <vers num="5.2.15" />
-        <vers num="5.2.16" />
-        <vers num="5.2.17" />
-        <vers num="5.2.2" />
-        <vers num="5.2.3" />
-        <vers num="5.2.4" />
-        <vers num="5.2.5" />
-        <vers num="5.2.6" />
-        <vers num="5.2.7" />
-        <vers num="5.2.8" />
-        <vers num="5.2.9" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.10" />
-        <vers num="5.3.11" />
-        <vers prev="1" num="5.3.12" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers num="5.3.8" />
-        <vers num="5.3.9" />
-        <vers num="5.4.0" edition="beta2" />
-        <vers num="5.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2313" published="2012-06-13" name="CVE-2012-2313" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:N/I:N/A:P)" CVSS_score="1.2" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="1.9" CVSS_base_score="1.2">
-    <desc>
-      <descript source="cve">The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/1bb57e940e1958e40d51f2078f50c3a96a9b2d75" source="CONFIRM" patch="1">https://github.com/torvalds/linux/commit/1bb57e940e1958e40d51f2078f50c3a96a9b2d75</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1bb57e940e1958e40d51f2078f50c3a96a9b2d75" source="CONFIRM" patch="1">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1bb57e940e1958e40d51f2078f50c3a96a9b2d75</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=818820" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=818820</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/04/8" source="MLIST">[oss-security] 20120504 Re: CVE Request: more tight ioctl permissions in dl2k driver</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.7" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.7</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="3.3" edition="rc1" />
-        <vers num="3.3" edition="rc2" />
-        <vers num="3.3" edition="rc3" />
-        <vers num="3.3" edition="rc4" />
-        <vers num="3.3" edition="rc5" />
-        <vers num="3.3" edition="rc6" />
-        <vers num="3.3" edition="rc7" />
-        <vers num="3.3.1" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers num="3.3.4" />
-        <vers num="3.3.5" />
-        <vers prev="1" num="3.3.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2314" published="2012-07-03" name="CVE-2012-2314" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">The bootloader configuration module (pyanaconda/bootloader.py) in Anaconda uses 755 permissions for /etc/grub.d, which allows local users to obtain password hashes and conduct brute force password guessing attacks.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/04/10" source="MLIST" patch="1">[oss-security] 20120504 CVE Request -- anaconda: Weak permissions by writing password configuration  file in bootloader configuration module</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=819031" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=819031</ref>
-      <ref url="http://www.securityfocus.com/bid/53486" source="BID">53486</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/04/12" source="MLIST">[oss-security] 20120504 Re: CVE Request -- anaconda: Weak permissions by writing  password configuration file in bootloader configuration module</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080188.html" source="FEDORA">FEDORA-2012-7579</ref>
-      <ref url="http://git.fedorahosted.org/git/?p=anaconda.git;a=commit;h=03ef13b625cc06873a924e0610340f8489fd92df" source="CONFIRM">http://git.fedorahosted.org/git/?p=anaconda.git;a=commit;h=03ef13b625cc06873a924e0610340f8489fd92df</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="fedoraproject" name="anaconda">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2315" published="2012-09-09" name="CVE-2012-2315" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">admin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2 does not properly enforce privileges for changing user roles, which allows remote authenticated users to assign administrator privileges to arbitrary users via the userEdit action.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/72112" source="XF">openkm-userpermissions-security-bypass(72112)</ref>
-      <ref url="http://www.securityfocus.com/bid/51250" source="BID">51250</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/04/2" source="MLIST">[oss-security] 20120504 Re: CVE-request: OpenKM 5.1.7 Privilege Escalation / OS Command Execution (XSRF based)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/04/13" source="MLIST">[oss-security] 20120504 Re: CVE-request: OpenKM 5.1.7 Privilege Escalation / OS Command Execution (XSRF based)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/27/6" source="MLIST">[oss-security] 20120427 Re: CVE-request: OpenKM 5.1.7 Privilege Escalation / OS Command Execution (XSRF based)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/23/8" source="MLIST">[oss-security] 20120323 Re: CVE-request: OpenKM 5.1.7 Privilege Escalation / OS Command Execution (XSRF based)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/23/6" source="MLIST">[oss-security] 20120323 CVE-request: OpenKM 5.1.7 Privilege Escalation / OS Command Execution (XSRF based)</ref>
-      <ref url="http://secunia.com/advisories/47424" source="SECUNIA" adv="1">47424</ref>
-      <ref url="http://osvdb.org/78105" source="OSVDB">78105</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0021.html" source="BUGTRAQ">20120104 Re: OpenKM 5.1.7 Privilege Escalation</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0007.html" source="BUGTRAQ">20120103 OpenKM 5.1.7 Privilege Escalation</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openkm" name="openkm">
-        <vers prev="1" num="5.1.7" />
-        <vers num="5.1.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2316" published="2012-09-09" name="CVE-2012-2316" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions before 5.1.8-2 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary code via the script parameter to admin/scripting.jsp.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.osvdb.org/78106" source="OSVDB">78106</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/04/2" source="MLIST">[oss-security] 20120504 Re: CVE-request: OpenKM 5.1.7 Privilege Escalation / OS Command Execution (XSRF based)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/04/13" source="MLIST">[oss-security] 20120504 Re: CVE-request: OpenKM 5.1.7 Privilege Escalation / OS Command Execution (XSRF based)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/27/6" source="MLIST">[oss-security] 20120427 Re: CVE-request: OpenKM 5.1.7 Privilege Escalation / OS Command Execution (XSRF based)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/23/8" source="MLIST">[oss-security] 20120323 Re: CVE-request: OpenKM 5.1.7 Privilege Escalation / OS Command Execution (XSRF based)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/23/6" source="MLIST">[oss-security] 20120323 CVE-request: OpenKM 5.1.7 Privilege Escalation / OS Command Execution (XSRF based)</ref>
-      <ref url="http://wiki.openkm.com/index.php/Changelog" source="CONFIRM">http://wiki.openkm.com/index.php/Changelog</ref>
-      <ref url="http://secunia.com/advisories/47420" source="SECUNIA" adv="1">47420</ref>
-      <ref url="http://openkm.svn.sourceforge.net/viewvc/openkm?view=revision&amp;revision=7406" source="CONFIRM">http://openkm.svn.sourceforge.net/viewvc/openkm?view=revision&amp;revision=7406</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-01/0008.html" source="BUGTRAQ">20120103 OpenKM 5.1.7 OS Command Execution (XSRF based)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openkm" name="openkm">
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2317" published="2012-08-07" name="CVE-2012-2317" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Debian php_crypt_revamped.patch patch for PHP 5.3.x, as used in the php5 package before 5.3.3-7+squeeze4 in Debian GNU/Linux squeeze, the php5 package before 5.3.2-1ubuntu4.17 in Ubuntu 10.04 LTS, and the php5 package before 5.3.5-1ubuntu7.10 in Ubuntu 11.04, does not properly handle an empty salt string, which might allow remote attackers to bypass authentication by leveraging an application that relies on the PHP crypt function to choose a salt for password hashing.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.ubuntu.com/usn/USN-1481-1" source="UBUNTU">USN-1481-1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/05/2" source="MLIST">[oss-security] 20120505 Re: Debian/Ubuntu php_crypt_revamped.patch</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/04/7" source="MLIST">[oss-security] 20120504 Debian/Ubuntu php_crypt_revamped.patch</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=581170" source="CONFIRM">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=581170</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="canonical" name="php5">
-        <vers prev="1" num="5.3.2-1ubuntu4.16" />
-        <vers num="5.3.2-1ubuntu4.17" />
-        <vers num="5.3.5-1ubuntu7.10" />
-        <vers prev="1" num="5.3.5-1ubuntu7.9" />
-      </prod>
-      <prod vendor="debian" name="php5-common">
-        <vers prev="1" num="5.3.2-1" />
-        <vers num="5.3.3-7+squeeze4" />
-      </prod>
-      <prod vendor="canonical" name="ubuntu_linux">
-        <vers num="10.04" edition="-" />
-        <vers num="10.04" edition="-:lts" />
-        <vers num="11.04" />
-      </prod>
-      <prod vendor="debian" name="debian_linux">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2318" published="2012-07-03" name="CVE-2012-2318" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, which allows remote servers to cause a denial of service (application crash) by placing these characters in a text/plain message.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://pidgin.im/news/security/?id=63" source="CONFIRM" patch="1" adv="1">http://pidgin.im/news/security/?id=63</ref>
-      <ref url="http://hg.pidgin.im/pidgin/main/rev/4d6bcb4f4ea4" source="CONFIRM" patch="1">http://hg.pidgin.im/pidgin/main/rev/4d6bcb4f4ea4</ref>
-      <ref url="https://hermes.opensuse.org/messages/15136503" source="SUSE">openSUSE-SU-2012:0866</ref>
-      <ref url="http://www.securityfocus.com/bid/53400" source="BID">53400</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pidgin" name="pidgin">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.10.0" />
-        <vers num="2.10.1" />
-        <vers num="2.10.2" />
-        <vers prev="1" num="2.10.3" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-        <vers num="2.5.4" />
-        <vers num="2.5.5" />
-        <vers num="2.5.6" />
-        <vers num="2.5.7" />
-        <vers num="2.5.8" />
-        <vers num="2.5.9" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.11" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-        <vers num="2.8.0" />
-        <vers num="2.9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2319" published="2012-05-17" name="CVE-2012-2319" modified="2012-05-17" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009-4020.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/6f24f892871acc47b40dd594c63606a17c714f77" source="CONFIRM">https://github.com/torvalds/linux/commit/6f24f892871acc47b40dd594c63606a17c714f77</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=819471" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=819471</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/11" source="MLIST">[oss-security] 20120507 Re: CVE request: Linux kernel: Buffer overflow in HFS plus filesystem</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.5" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.5</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6f24f892871acc47b40dd594c63606a17c714f77" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6f24f892871acc47b40dd594c63606a17c714f77</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers prev="1" num="3.3.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2320" published="2012-05-18" name="CVE-2012-2320" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=715172" source="MISC">https://bugzilla.novell.com/show_bug.cgi?id=715172</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75465" source="XF">connman-netlink-security-bypass(75465)</ref>
-      <ref url="http://www.securityfocus.com/bid/53406" source="BID">53406</ref>
-      <ref url="http://www.osvdb.org/81704" source="OSVDB">81704</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/6" source="MLIST">[oss-security] 20120507 Re: connman heads up / CVE requests</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/2" source="MLIST">[oss-security] 20120507 connman heads up / CVE requests</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/10" source="MLIST">[oss-security] 20120507 Re: connman heads up / CVE requests</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201205-02.xml" source="GENTOO">GLSA-201205-02</ref>
-      <ref url="http://secunia.com/advisories/49186" source="SECUNIA">49186</ref>
-      <ref url="http://secunia.com/advisories/49033" source="SECUNIA" adv="1">49033</ref>
-      <ref url="http://git.kernel.org/?p=network/connman/connman.git;a=commit;h=c1b968984212b46bea1330f5ae029507b9bfded9" source="CONFIRM">http://git.kernel.org/?p=network/connman/connman.git;a=commit;h=c1b968984212b46bea1330f5ae029507b9bfded9</ref>
-      <ref url="http://git.kernel.org/?p=network/connman/connman.git;a=commit;h=b0ec6eb4466acc57a9ea8be52c17b674b6ea0618" source="CONFIRM">http://git.kernel.org/?p=network/connman/connman.git;a=commit;h=b0ec6eb4466acc57a9ea8be52c17b674b6ea0618</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="connman" name="connman">
-        <vers num="0.1" />
-        <vers num="0.10" />
-        <vers num="0.11" />
-        <vers num="0.12" />
-        <vers num="0.13" />
-        <vers num="0.14" />
-        <vers num="0.15" />
-        <vers num="0.16" />
-        <vers num="0.17" />
-        <vers num="0.18" />
-        <vers num="0.19" />
-        <vers num="0.2" />
-        <vers num="0.20" />
-        <vers num="0.21" />
-        <vers num="0.22" />
-        <vers num="0.23" />
-        <vers num="0.24" />
-        <vers num="0.25" />
-        <vers num="0.26" />
-        <vers num="0.27" />
-        <vers num="0.28" />
-        <vers num="0.29" />
-        <vers num="0.3" />
-        <vers num="0.30" />
-        <vers num="0.31" />
-        <vers num="0.32" />
-        <vers num="0.33" />
-        <vers num="0.34" />
-        <vers num="0.35" />
-        <vers num="0.36" />
-        <vers num="0.37" />
-        <vers num="0.38" />
-        <vers num="0.39" />
-        <vers num="0.4" />
-        <vers num="0.40" />
-        <vers num="0.41" />
-        <vers num="0.42" />
-        <vers num="0.43" />
-        <vers num="0.44" />
-        <vers num="0.45" />
-        <vers num="0.46" />
-        <vers num="0.47" />
-        <vers num="0.48" />
-        <vers num="0.49" />
-        <vers num="0.5" />
-        <vers num="0.50" />
-        <vers num="0.51" />
-        <vers num="0.52" />
-        <vers num="0.53" />
-        <vers num="0.54" />
-        <vers num="0.55" />
-        <vers num="0.56" />
-        <vers num="0.57" />
-        <vers num="0.58" />
-        <vers num="0.59" />
-        <vers num="0.6" />
-        <vers num="0.60" />
-        <vers num="0.61" />
-        <vers num="0.62" />
-        <vers num="0.63" />
-        <vers num="0.64" />
-        <vers num="0.65" />
-        <vers num="0.66" />
-        <vers num="0.67" />
-        <vers num="0.68" />
-        <vers num="0.69" />
-        <vers num="0.7" />
-        <vers num="0.70" />
-        <vers num="0.71" />
-        <vers num="0.72" />
-        <vers num="0.73" />
-        <vers num="0.74" />
-        <vers num="0.75" />
-        <vers num="0.76" />
-        <vers num="0.77" />
-        <vers num="0.78" />
-        <vers num="0.79" />
-        <vers num="0.8" />
-        <vers num="0.80" />
-        <vers num="0.81" />
-        <vers num="0.82" />
-        <vers num="0.83" />
-        <vers prev="1" num="0.84" />
-        <vers num="0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2321" published="2012-05-18" name="CVE-2012-2321" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) host name or (2) domain name in a DHCP reply.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=715172" source="MISC">https://bugzilla.novell.com/show_bug.cgi?id=715172</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75466" source="XF">connman-hostname-command-exec(75466)</ref>
-      <ref url="http://www.securityfocus.com/bid/53408" source="BID">53408</ref>
-      <ref url="http://www.osvdb.org/81705" source="OSVDB">81705</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/6" source="MLIST">[oss-security] 20120507 Re: connman heads up / CVE requests</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/2" source="MLIST">[oss-security] 20120507 connman heads up / CVE requests</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/10" source="MLIST">[oss-security] 20120507 Re: connman heads up / CVE requests</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201205-02.xml" source="GENTOO">GLSA-201205-02</ref>
-      <ref url="http://secunia.com/advisories/49186" source="SECUNIA">49186</ref>
-      <ref url="http://secunia.com/advisories/49033" source="SECUNIA" adv="1">49033</ref>
-      <ref url="http://git.kernel.org/?p=network/connman/connman.git;a=commit;h=a5f540db7354b76bcabd0a05d8eb8ba2bff4e911" source="CONFIRM">http://git.kernel.org/?p=network/connman/connman.git;a=commit;h=a5f540db7354b76bcabd0a05d8eb8ba2bff4e911</ref>
-      <ref url="http://git.kernel.org/?p=network/connman/connman.git;a=commit;h=26ace5c59f790bce0f1988b88874c6f2c480fd5a" source="CONFIRM">http://git.kernel.org/?p=network/connman/connman.git;a=commit;h=26ace5c59f790bce0f1988b88874c6f2c480fd5a</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="connman" name="connman">
-        <vers num="0.1" />
-        <vers num="0.10" />
-        <vers num="0.11" />
-        <vers num="0.12" />
-        <vers num="0.13" />
-        <vers num="0.14" />
-        <vers num="0.15" />
-        <vers num="0.16" />
-        <vers num="0.17" />
-        <vers num="0.18" />
-        <vers num="0.19" />
-        <vers num="0.2" />
-        <vers num="0.20" />
-        <vers num="0.21" />
-        <vers num="0.22" />
-        <vers num="0.23" />
-        <vers num="0.24" />
-        <vers num="0.25" />
-        <vers num="0.26" />
-        <vers num="0.27" />
-        <vers num="0.28" />
-        <vers num="0.29" />
-        <vers num="0.3" />
-        <vers num="0.30" />
-        <vers num="0.31" />
-        <vers num="0.32" />
-        <vers num="0.33" />
-        <vers num="0.34" />
-        <vers num="0.35" />
-        <vers num="0.36" />
-        <vers num="0.37" />
-        <vers num="0.38" />
-        <vers num="0.39" />
-        <vers num="0.4" />
-        <vers num="0.40" />
-        <vers num="0.41" />
-        <vers num="0.42" />
-        <vers num="0.43" />
-        <vers num="0.44" />
-        <vers num="0.45" />
-        <vers num="0.46" />
-        <vers num="0.47" />
-        <vers num="0.48" />
-        <vers num="0.49" />
-        <vers num="0.5" />
-        <vers num="0.50" />
-        <vers num="0.51" />
-        <vers num="0.52" />
-        <vers num="0.53" />
-        <vers num="0.54" />
-        <vers num="0.55" />
-        <vers num="0.56" />
-        <vers num="0.57" />
-        <vers num="0.58" />
-        <vers num="0.59" />
-        <vers num="0.6" />
-        <vers num="0.60" />
-        <vers num="0.61" />
-        <vers num="0.62" />
-        <vers num="0.63" />
-        <vers num="0.64" />
-        <vers num="0.65" />
-        <vers num="0.66" />
-        <vers num="0.67" />
-        <vers num="0.68" />
-        <vers num="0.69" />
-        <vers num="0.7" />
-        <vers num="0.70" />
-        <vers num="0.71" />
-        <vers num="0.72" />
-        <vers num="0.73" />
-        <vers num="0.74" />
-        <vers num="0.75" />
-        <vers num="0.76" />
-        <vers num="0.77" />
-        <vers num="0.78" />
-        <vers num="0.79" />
-        <vers num="0.8" />
-        <vers num="0.80" />
-        <vers num="0.81" />
-        <vers num="0.82" />
-        <vers num="0.83" />
-        <vers prev="1" num="0.84" />
-        <vers num="0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2322" published="2012-05-18" name="CVE-2012-2322" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Integer overflow in the dhcpv6_get_option function in gdhcp/client.c in ConnMan before 0.85 allows remote attackers to cause a denial of service (infinite loop and crash) via an invalid length value in a DHCP packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=715172" source="MISC">https://bugzilla.novell.com/show_bug.cgi?id=715172</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75420" source="XF">connman-dhcp-dos(75420)</ref>
-      <ref url="http://www.securityfocus.com/bid/53410" source="BID">53410</ref>
-      <ref url="http://www.osvdb.org/81706" source="OSVDB">81706</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/6" source="MLIST">[oss-security] 20120507 Re: connman heads up / CVE requests</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/2" source="MLIST">[oss-security] 20120507 connman heads up / CVE requests</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/10" source="MLIST">[oss-security] 20120507 Re: connman heads up / CVE requests</ref>
-      <ref url="http://security.gentoo.org/glsa/glsa-201205-02.xml" source="GENTOO">GLSA-201205-02</ref>
-      <ref url="http://secunia.com/advisories/49186" source="SECUNIA">49186</ref>
-      <ref url="http://secunia.com/advisories/49033" source="SECUNIA" adv="1">49033</ref>
-      <ref url="http://git.kernel.org/?p=network/connman/connman.git;a=commitdiff;h=1d1a22fe586a455935483708fbe8eaeada79df7f" source="CONFIRM">http://git.kernel.org/?p=network/connman/connman.git;a=commitdiff;h=1d1a22fe586a455935483708fbe8eaeada79df7f</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="connman" name="connman">
-        <vers num="0.1" />
-        <vers num="0.10" />
-        <vers num="0.11" />
-        <vers num="0.12" />
-        <vers num="0.13" />
-        <vers num="0.14" />
-        <vers num="0.15" />
-        <vers num="0.16" />
-        <vers num="0.17" />
-        <vers num="0.18" />
-        <vers num="0.19" />
-        <vers num="0.2" />
-        <vers num="0.20" />
-        <vers num="0.21" />
-        <vers num="0.22" />
-        <vers num="0.23" />
-        <vers num="0.24" />
-        <vers num="0.25" />
-        <vers num="0.26" />
-        <vers num="0.27" />
-        <vers num="0.28" />
-        <vers num="0.29" />
-        <vers num="0.3" />
-        <vers num="0.30" />
-        <vers num="0.31" />
-        <vers num="0.32" />
-        <vers num="0.33" />
-        <vers num="0.34" />
-        <vers num="0.35" />
-        <vers num="0.36" />
-        <vers num="0.37" />
-        <vers num="0.38" />
-        <vers num="0.39" />
-        <vers num="0.4" />
-        <vers num="0.40" />
-        <vers num="0.41" />
-        <vers num="0.42" />
-        <vers num="0.43" />
-        <vers num="0.44" />
-        <vers num="0.45" />
-        <vers num="0.46" />
-        <vers num="0.47" />
-        <vers num="0.48" />
-        <vers num="0.49" />
-        <vers num="0.5" />
-        <vers num="0.50" />
-        <vers num="0.51" />
-        <vers num="0.52" />
-        <vers num="0.53" />
-        <vers num="0.54" />
-        <vers num="0.55" />
-        <vers num="0.56" />
-        <vers num="0.57" />
-        <vers num="0.58" />
-        <vers num="0.59" />
-        <vers num="0.6" />
-        <vers num="0.60" />
-        <vers num="0.61" />
-        <vers num="0.62" />
-        <vers num="0.63" />
-        <vers num="0.64" />
-        <vers num="0.65" />
-        <vers num="0.66" />
-        <vers num="0.67" />
-        <vers num="0.68" />
-        <vers num="0.69" />
-        <vers num="0.7" />
-        <vers num="0.70" />
-        <vers num="0.71" />
-        <vers num="0.72" />
-        <vers num="0.73" />
-        <vers num="0.74" />
-        <vers num="0.75" />
-        <vers num="0.76" />
-        <vers num="0.77" />
-        <vers num="0.78" />
-        <vers num="0.79" />
-        <vers num="0.8" />
-        <vers num="0.80" />
-        <vers num="0.81" />
-        <vers num="0.82" />
-        <vers num="0.83" />
-        <vers prev="1" num="0.84" />
-        <vers num="0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2324" published="2012-08-13" name="CVE-2012-2324" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.7 allow remote administrators to execute arbitrary SQL commands via unspecified vectors in the (1) user search or (2) Mail Log in the Admin Control Panel (ACP).</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://blog.mybb.com/2012/04/01/mybb-1-6-7-update-1-8-development/" source="CONFIRM" patch="1" adv="1">http://blog.mybb.com/2012/04/01/mybb-1-6-7-update-1-8-development/</ref>
-      <ref url="http://www.securityfocus.com/bid/53417" source="BID">53417</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/14" source="MLIST">[oss-security] 20120507 Re: CVE request: mybb before 1.6.7</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/13" source="MLIST">[oss-security] 20120507 CVE request: mybb before 1.6.7</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mybb" name="mybb">
-        <vers num="1.0" edition="beta4" />
-        <vers num="1.0" edition="pr1" />
-        <vers num="1.0" edition="pr2" />
-        <vers num="1.0" edition="rc1" />
-        <vers num="1.0" edition="rc2" />
-        <vers num="1.0" edition="rc3" />
-        <vers num="1.0" edition="rc4" />
-        <vers num="1.00" />
-        <vers num="1.01" />
-        <vers num="1.02" />
-        <vers num="1.03" />
-        <vers num="1.04" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.10" />
-        <vers num="1.2.11" />
-        <vers num="1.2.12" />
-        <vers num="1.2.13" />
-        <vers num="1.2.14" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers num="1.2.8" />
-        <vers num="1.2.9" />
-        <vers num="1.3" edition="pre-1.0" />
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.15" />
-        <vers num="1.4.16" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers prev="1" num="1.6.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2325" published="2012-08-13" name="CVE-2012-2325" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://blog.mybb.com/2012/04/01/mybb-1-6-7-update-1-8-development/" source="CONFIRM" patch="1" adv="1">http://blog.mybb.com/2012/04/01/mybb-1-6-7-update-1-8-development/</ref>
-      <ref url="http://www.securityfocus.com/bid/53417" source="BID">53417</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/14" source="MLIST">[oss-security] 20120507 Re: CVE request: mybb before 1.6.7</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/13" source="MLIST">[oss-security] 20120507 CVE request: mybb before 1.6.7</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mybb" name="mybb">
-        <vers num="1.0" edition="beta4" />
-        <vers num="1.0" edition="pr1" />
-        <vers num="1.0" edition="pr2" />
-        <vers num="1.0" edition="rc1" />
-        <vers num="1.0" edition="rc2" />
-        <vers num="1.0" edition="rc3" />
-        <vers num="1.0" edition="rc4" />
-        <vers num="1.00" />
-        <vers num="1.01" />
-        <vers num="1.02" />
-        <vers num="1.03" />
-        <vers num="1.04" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.10" />
-        <vers num="1.2.11" />
-        <vers num="1.2.12" />
-        <vers num="1.2.13" />
-        <vers num="1.2.14" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers num="1.2.8" />
-        <vers num="1.2.9" />
-        <vers num="1.3" edition="pre-1.0" />
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.15" />
-        <vers num="1.4.16" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers prev="1" num="1.6.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2326" published="2012-08-13" name="CVE-2012-2326" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to inject arbitrary web script or HTML via a malformed file name in an orphaned attachment.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://blog.mybb.com/2012/04/01/mybb-1-6-7-update-1-8-development/" source="CONFIRM" patch="1" adv="1">http://blog.mybb.com/2012/04/01/mybb-1-6-7-update-1-8-development/</ref>
-      <ref url="http://www.securityfocus.com/bid/53417" source="BID">53417</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/14" source="MLIST">[oss-security] 20120507 Re: CVE request: mybb before 1.6.7</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/13" source="MLIST">[oss-security] 20120507 CVE request: mybb before 1.6.7</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mybb" name="mybb">
-        <vers num="1.0" edition="beta4" />
-        <vers num="1.0" edition="pr1" />
-        <vers num="1.0" edition="pr2" />
-        <vers num="1.0" edition="rc1" />
-        <vers num="1.0" edition="rc2" />
-        <vers num="1.0" edition="rc3" />
-        <vers num="1.0" edition="rc4" />
-        <vers num="1.00" />
-        <vers num="1.01" />
-        <vers num="1.02" />
-        <vers num="1.03" />
-        <vers num="1.04" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.10" />
-        <vers num="1.2.11" />
-        <vers num="1.2.12" />
-        <vers num="1.2.13" />
-        <vers num="1.2.14" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers num="1.2.8" />
-        <vers num="1.2.9" />
-        <vers num="1.3" edition="pre-1.0" />
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.15" />
-        <vers num="1.4.16" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers prev="1" num="1.6.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2327" published="2012-08-13" name="CVE-2012-2327" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">MyBB (aka MyBulletinBoard) before 1.6.7 allows remote attackers to obtain sensitive information via a malformed forumread cookie, which reveals the installation path in an error message.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://blog.mybb.com/2012/04/01/mybb-1-6-7-update-1-8-development/" source="CONFIRM" patch="1" adv="1">http://blog.mybb.com/2012/04/01/mybb-1-6-7-update-1-8-development/</ref>
-      <ref url="http://www.securityfocus.com/bid/53417" source="BID">53417</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/14" source="MLIST">[oss-security] 20120507 Re: CVE request: mybb before 1.6.7</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/07/13" source="MLIST">[oss-security] 20120507 CVE request: mybb before 1.6.7</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mybb" name="mybb">
-        <vers num="1.0" edition="beta4" />
-        <vers num="1.0" edition="pr1" />
-        <vers num="1.0" edition="pr2" />
-        <vers num="1.0" edition="rc1" />
-        <vers num="1.0" edition="rc2" />
-        <vers num="1.0" edition="rc3" />
-        <vers num="1.0" edition="rc4" />
-        <vers num="1.00" />
-        <vers num="1.01" />
-        <vers num="1.02" />
-        <vers num="1.03" />
-        <vers num="1.04" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.10" />
-        <vers num="1.2.11" />
-        <vers num="1.2.12" />
-        <vers num="1.2.13" />
-        <vers num="1.2.14" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers num="1.2.8" />
-        <vers num="1.2.9" />
-        <vers num="1.3" edition="pre-1.0" />
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.15" />
-        <vers num="1.4.16" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers prev="1" num="1.6.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2329" published="2012-05-11" name="CVE-2012-2329" modified="2012-06-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a denial of service (application crash) via a long string in the header of an HTTP request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=820000" source="CONFIRM" patch="1">https://bugzilla.redhat.com/show_bug.cgi?id=820000</ref>
-      <ref url="https://bugs.php.net/bug.php?id=61807" source="CONFIRM">https://bugs.php.net/bug.php?id=61807</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75545" source="XF">php-apacherequestheaders-bo(75545)</ref>
-      <ref url="http://www.securityfocus.com/bid/53455" source="BID">53455</ref>
-      <ref url="http://www.php.net/ChangeLog-5.php#5.4.3" source="CONFIRM">http://www.php.net/ChangeLog-5.php#5.4.3</ref>
-      <ref url="http://www.php.net/archive/2012.php#id2012-05-08-1" source="CONFIRM">http://www.php.net/archive/2012.php#id2012-05-08-1</ref>
-      <ref url="http://secunia.com/advisories/49014" source="SECUNIA">49014</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="5.4.0" />
-        <vers num="5.4.1" />
-        <vers num="5.4.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2330" published="2012-08-13" name="CVE-2012-2330" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The Update method in src/node_http_parser.cc in Node.js before 0.6.17 and 0.7 before 0.7.8 does not properly check the length of a string, which allows remote attackers to obtain sensitive information (request header contents) and possibly spoof HTTP headers via a zero length string.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/joyent/node/commit/c9a231d" source="CONFIRM" patch="1">https://github.com/joyent/node/commit/c9a231d</ref>
-      <ref url="https://github.com/joyent/node/commit/7b3fb22" source="CONFIRM" patch="1">https://github.com/joyent/node/commit/7b3fb22</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/08/8" source="MLIST">[oss-security] 20120508 Re: CVE request: node.js &lt;0.6.17/0.7.8 HTTP server information disclosure</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/08/4" source="MLIST">[oss-security] 20120508 CVE request: node.js &lt;0.6.17/0.7.8 HTTP server information disclosure</ref>
-      <ref url="http://secunia.com/advisories/49066" source="SECUNIA" adv="1">49066</ref>
-      <ref url="http://blog.nodejs.org/2012/05/04/version-0-6-17-stable/" source="CONFIRM">http://blog.nodejs.org/2012/05/04/version-0-6-17-stable/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nodejs" name="nodejs">
-        <vers prev="1" num="0.6.16" />
-        <vers num="0.7.0" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2331" published="2012-08-13" name="CVE-2012-2331" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in serendipity/serendipity_admin_image_selector.php in Serendipity before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the serendipity[textarea] parameter.  NOTE: this issue might be resultant from cross-site request forgery (CSRF).</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/s9y/Serendipity/commit/264bf55719baacc069ff9d3cc35f0c349cde11e3" source="CONFIRM" patch="1">https://github.com/s9y/Serendipity/commit/264bf55719baacc069ff9d3cc35f0c349cde11e3</ref>
-      <ref url="http://www.securityfocus.com/bid/53418" source="BID">53418</ref>
-      <ref url="http://www.rul3z.de/index.php?/214-KORAMISADV2012-001-Serendipity-1.6-Backend-Cross-Site-Scripting-and-SQL-Injection-vulnerability.html" source="MISC">http://www.rul3z.de/index.php?/214-KORAMISADV2012-001-Serendipity-1.6-Backend-Cross-Site-Scripting-and-SQL-Injection-vulnerability.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/09/2" source="MLIST">[oss-security] 20120508 Re: CVE request: XSS and SQL injection in serendipity before 1.7.1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/08/6" source="MLIST">[oss-security] 20120508 CVE request: XSS and SQL injection in serendipity before 1.7.1</ref>
-      <ref url="http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-001.txt" source="MISC">http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-001.txt</ref>
-      <ref url="http://secunia.com/advisories/49009" source="SECUNIA" adv="1">49009</ref>
-      <ref url="http://blog.s9y.org/archives/240-Serendipity-1.6.1-released.html" source="CONFIRM">http://blog.s9y.org/archives/240-Serendipity-1.6.1-released.html</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-05/0037.html" source="BUGTRAQ">20120508 Serendipity 1.6 Backend Cross-Site Scripting and SQL-Injection vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="s9y" name="serendipity">
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.8" />
-        <vers num="0.8.1" />
-        <vers num="0.8.2" />
-        <vers num="0.8.3" />
-        <vers num="0.8.4" />
-        <vers num="0.8.5" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.3" />
-        <vers num="1.3.1" />
-        <vers num="1.4" />
-        <vers num="1.4.1" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers prev="1" num="1.6" />
-        <vers num="1.6.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2332" published="2012-08-13" name="CVE-2012-2332" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in serendipity/serendipity_admin.php in Serendipity before 1.6.1 allows remote attackers to execute arbitrary SQL commands via the serendipity[plugin_to_conf] parameter.  NOTE: this issue might be resultant from cross-site request forgery (CSRF).</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53418" source="BID">53418</ref>
-      <ref url="http://www.rul3z.de/index.php?/214-KORAMISADV2012-001-Serendipity-1.6-Backend-Cross-Site-Scripting-and-SQL-Injection-vulnerability.html" source="MISC">http://www.rul3z.de/index.php?/214-KORAMISADV2012-001-Serendipity-1.6-Backend-Cross-Site-Scripting-and-SQL-Injection-vulnerability.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/09/2" source="MLIST">[oss-security] 20120508 Re: CVE request: XSS and SQL injection in serendipity before 1.7.1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/08/6" source="MLIST">[oss-security] 20120508 CVE request: XSS and SQL injection in serendipity before 1.7.1</ref>
-      <ref url="http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-001.txt" source="MISC">http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-001.txt</ref>
-      <ref url="http://blog.s9y.org/archives/240-Serendipity-1.6.1-released.html" source="CONFIRM">http://blog.s9y.org/archives/240-Serendipity-1.6.1-released.html</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-05/0037.html" source="BUGTRAQ">20120508 Serendipity 1.6 Backend Cross-Site Scripting and SQL-Injection vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="s9y" name="serendipity">
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.8" />
-        <vers num="0.8.1" />
-        <vers num="0.8.2" />
-        <vers num="0.8.3" />
-        <vers num="0.8.4" />
-        <vers num="0.8.5" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.3" />
-        <vers num="1.3.1" />
-        <vers num="1.4" />
-        <vers num="1.4.1" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers prev="1" num="1.6" />
-        <vers num="1.6.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2333" published="2012-05-14" name="CVE-2012-2333" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=820686" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=820686</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75525" source="XF">openssl-tls-record-dos(75525)</ref>
-      <ref url="http://www.securitytracker.com/id?1027057" source="SECTRACK">1027057</ref>
-      <ref url="http://www.securityfocus.com/bid/53476" source="BID">53476</ref>
-      <ref url="http://www.openssl.org/news/secadv_20120510.txt" source="CONFIRM">http://www.openssl.org/news/secadv_20120510.txt</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2475" source="DEBIAN">DSA-2475</ref>
-      <ref url="http://www.cert.fi/en/reports/2012/vulnerability641549.html" source="MISC">http://www.cert.fi/en/reports/2012/vulnerability641549.html</ref>
-      <ref url="http://secunia.com/advisories/49324" source="SECUNIA">49324</ref>
-      <ref url="http://secunia.com/advisories/49208" source="SECUNIA">49208</ref>
-      <ref url="http://secunia.com/advisories/49116" source="SECUNIA">49116</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081460.html" source="FEDORA">FEDORA-2012-7939</ref>
-      <ref url="http://cvs.openssl.org/chngview?cn=22547" source="CONFIRM">http://cvs.openssl.org/chngview?cn=22547</ref>
-      <ref url="http://cvs.openssl.org/chngview?cn=22538" source="CONFIRM">http://cvs.openssl.org/chngview?cn=22538</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openssl" name="openssl">
-        <vers num="0.9.1c" />
-        <vers num="0.9.2b" />
-        <vers num="0.9.3" />
-        <vers num="0.9.3a" />
-        <vers num="0.9.4" />
-        <vers num="0.9.5" edition="beta1" />
-        <vers num="0.9.5" edition="beta2" />
-        <vers num="0.9.5a" edition="beta1" />
-        <vers num="0.9.5a" edition="beta2" />
-        <vers num="0.9.6" edition="beta1" />
-        <vers num="0.9.6" edition="beta2" />
-        <vers num="0.9.6" edition="beta3" />
-        <vers num="0.9.6a" edition="beta1" />
-        <vers num="0.9.6a" edition="beta2" />
-        <vers num="0.9.6a" edition="beta3" />
-        <vers num="0.9.6b" />
-        <vers num="0.9.6c" />
-        <vers num="0.9.6d" />
-        <vers num="0.9.6e" />
-        <vers num="0.9.6f" />
-        <vers num="0.9.6g" />
-        <vers num="0.9.6h" />
-        <vers num="0.9.6i" />
-        <vers num="0.9.6j" />
-        <vers num="0.9.6k" />
-        <vers num="0.9.6l" />
-        <vers num="0.9.6m" />
-        <vers num="0.9.7" edition="beta1" />
-        <vers num="0.9.7" edition="beta2" />
-        <vers num="0.9.7" edition="beta3" />
-        <vers num="0.9.7" edition="beta4" />
-        <vers num="0.9.7" edition="beta5" />
-        <vers num="0.9.7" edition="beta6" />
-        <vers num="0.9.7a" />
-        <vers num="0.9.7b" />
-        <vers num="0.9.7c" />
-        <vers num="0.9.7d" />
-        <vers num="0.9.7e" />
-        <vers num="0.9.7f" />
-        <vers num="0.9.7g" />
-        <vers num="0.9.7h" />
-        <vers num="0.9.7i" />
-        <vers num="0.9.7j" />
-        <vers num="0.9.7k" />
-        <vers num="0.9.7l" />
-        <vers num="0.9.7m" />
-        <vers num="0.9.8" />
-        <vers num="0.9.8a" />
-        <vers num="0.9.8b" />
-        <vers num="0.9.8c" />
-        <vers num="0.9.8d" />
-        <vers num="0.9.8e" />
-        <vers num="0.9.8f" />
-        <vers num="0.9.8g" />
-        <vers num="0.9.8h" />
-        <vers num="0.9.8i" />
-        <vers num="0.9.8j" />
-        <vers num="0.9.8k" />
-        <vers num="0.9.8l" />
-        <vers num="0.9.8m" edition="beta1" />
-        <vers num="0.9.8n" />
-        <vers num="0.9.8o" />
-        <vers num="0.9.8p" />
-        <vers num="0.9.8q" />
-        <vers num="0.9.8r" />
-        <vers num="0.9.8s" />
-        <vers num="0.9.8t" />
-        <vers num="0.9.8u" />
-        <vers num="0.9.8v" />
-        <vers prev="1" num="0.9.8w" />
-        <vers num="1.0.0" edition="beta1" />
-        <vers num="1.0.0" edition="beta2" />
-        <vers num="1.0.0" edition="beta3" />
-        <vers num="1.0.0" edition="beta4" />
-        <vers num="1.0.0" edition="beta5" />
-        <vers num="1.0.0a" />
-        <vers num="1.0.0b" />
-        <vers num="1.0.0c" />
-        <vers num="1.0.0d" />
-        <vers num="1.0.0e" />
-        <vers num="1.0.0f" />
-        <vers num="1.0.0g" />
-        <vers num="1.0.0h" />
-        <vers num="1.0.1" edition="beta1" />
-        <vers num="1.0.1" edition="beta2" />
-        <vers num="1.0.1" edition="beta3" />
-        <vers num="1.0.1a" />
-        <vers num="1.0.1b" />
-      </prod>
-      <prod vendor="redhat" name="openssl">
-        <vers num="0.9.6-15" />
-        <vers num="0.9.6b-3" />
-        <vers num="0.9.7a-2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2334" published="2012-06-19" name="CVE-2012-2334" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the length of an Escher graphics record in a PowerPoint (.ppt) document, which triggers a buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://cgit.freedesktop.org/libreoffice/core/commit/?id=512401decb286ba0fc3031939b8f7de8649c502e" source="CONFIRM" patch="1">http://cgit.freedesktop.org/libreoffice/core/commit/?id=512401decb286ba0fc3031939b8f7de8649c502e</ref>
-      <ref url="http://cgit.freedesktop.org/libreoffice/core/commit/?id=28a6558f9d3ca2dda3191f8b5b3f2378ee2533da" source="CONFIRM" patch="1">http://cgit.freedesktop.org/libreoffice/core/commit/?id=28a6558f9d3ca2dda3191f8b5b3f2378ee2533da</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=821803" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=821803</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75695" source="XF">openoffice-powerpoint-dos(75695)</ref>
-      <ref url="http://www.securityfocus.com/bid/53570" source="BID">53570</ref>
-      <ref url="http://www.osvdb.org/82517" source="OSVDB">82517</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/28/2" source="MLIST">[oss-security] 20120528 Kind request to update upstream CVE-2012-2334 advisories they to  reflect arbitrary code execution possibility too and OSS list notification</ref>
-      <ref url="http://www.openoffice.org/security/cves/CVE-2012-2334.html" source="CONFIRM" adv="1">http://www.openoffice.org/security/cves/CVE-2012-2334.html</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:091" source="MANDRIVA">MDVSA-2012:091</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:090" source="MANDRIVA">MDVSA-2012:090</ref>
-      <ref url="http://www.libreoffice.org/advisories/cve-2012-2334/" source="CONFIRM" adv="1">http://www.libreoffice.org/advisories/cve-2012-2334/</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2487" source="DEBIAN">DSA-2487</ref>
-      <ref url="http://securitytracker.com/id?1027070" source="SECTRACK">1027070</ref>
-      <ref url="http://secunia.com/advisories/49392" source="SECUNIA" adv="1">49392</ref>
-      <ref url="http://secunia.com/advisories/49373" source="SECUNIA" adv="1">49373</ref>
-      <ref url="http://secunia.com/advisories/47244" source="SECUNIA" adv="1">47244</ref>
-      <ref url="http://secunia.com/advisories/46992" source="SECUNIA" adv="1">46992</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0705.html" source="REDHAT">RHSA-2012:0705</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082168.html" source="FEDORA">FEDORA-2012-8114</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-05/0091.html" source="BUGTRAQ">20120516 CVE-2012-2334 Vulnerabilities related to malformed Powerpoint files in OpenOffice.org 3.3.0</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="openoffice.org">
-        <vers num="3.3" />
-        <vers num="3.4" edition="beta" />
-      </prod>
-      <prod vendor="libreoffice" name="libreoffice">
-        <vers num="3.3.0" />
-        <vers num="3.3.1" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers num="3.3.4" />
-        <vers num="3.4.0" />
-        <vers num="3.4.1" />
-        <vers num="3.4.2" />
-        <vers num="3.4.5" />
-        <vers num="3.5" />
-        <vers prev="1" num="3.5.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2335" published="2012-05-11" name="CVE-2012-2335" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">php-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers to bypass a protection mechanism in PHP 5.3.12 and 5.4.2 and execute arbitrary code by leveraging improper interaction between the PHP sapi/cgi/cgi_main.c component and a query string beginning with a +- sequence.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/520827" source="CERT-VN">VU#520827</ref>
-      <ref url="https://bugs.php.net/bug.php?id=61910" source="MISC" adv="1">https://bugs.php.net/bug.php?id=61910</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75652" source="XF">php-phpwrapperfcgi-code-exec(75652)</ref>
-      <ref url="http://www.php.net/archive/2012.php#id2012-05-06-1" source="MISC">http://www.php.net/archive/2012.php#id2012-05-06-1</ref>
-      <ref url="http://secunia.com/advisories/49014" source="SECUNIA">49014</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html" source="SUSE">SUSE-SU-2012:0840</ref>
-      <ref url="http://git.php.net/?p=php-src.git;a=blob;f=sapi/cgi/cgi_main.c;h=a7ac26f0#l1569" source="MISC">http://git.php.net/?p=php-src.git;a=blob;f=sapi/cgi/cgi_main.c;h=a7ac26f0#l1569</ref>
-      <ref url="http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/" source="MISC">http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="5.3.12" />
-        <vers num="5.4.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2336" published="2012-05-11" name="CVE-2012-2336" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugs.php.net/patch-display.php?bug_id=61910&amp;patch=CVE-2012-1823.patch&amp;revision=1336251592&amp;display=1" source="CONFIRM">https://bugs.php.net/patch-display.php?bug_id=61910&amp;patch=CVE-2012-1823.patch&amp;revision=1336251592&amp;display=1</ref>
-      <ref url="https://bugs.php.net/bug.php?id=61910" source="CONFIRM" adv="1">https://bugs.php.net/bug.php?id=61910</ref>
-      <ref url="http://www.php.net/ChangeLog-5.php#5.4.3" source="CONFIRM">http://www.php.net/ChangeLog-5.php#5.4.3</ref>
-      <ref url="http://www.php.net/archive/2012.php#id2012-05-08-1" source="CONFIRM">http://www.php.net/archive/2012.php#id2012-05-08-1</ref>
-      <ref url="http://secunia.com/advisories/49014" source="SECUNIA">49014</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html" source="SUSE">SUSE-SU-2012:0840</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="5.3.13" />
-        <vers num="5.4.0" edition="beta2" />
-        <vers num="5.4.1" />
-        <vers num="5.4.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2337" published="2012-05-18" name="CVE-2012-2337" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=820677" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=820677</ref>
-      <ref url="http://www.sudo.ws/sudo/alerts/netmask.html" source="CONFIRM" adv="1">http://www.sudo.ws/sudo/alerts/netmask.html</ref>
-      <ref url="http://www.securitytracker.com/id?1027077" source="SECTRACK">1027077</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:079" source="MANDRIVA">MDVSA-2012:079</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2478" source="DEBIAN">DSA-2478</ref>
-      <ref url="http://secunia.com/advisories/49291" source="SECUNIA">49291</ref>
-      <ref url="http://secunia.com/advisories/49244" source="SECUNIA">49244</ref>
-      <ref url="http://secunia.com/advisories/49219" source="SECUNIA">49219</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081432.html" source="FEDORA">FEDORA-2012-7998</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="todd_miller" name="sudo">
-        <vers num="1.6" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.2p3" />
-        <vers num="1.6.3" />
-        <vers num="1.6.3_p7" />
-        <vers num="1.6.4" />
-        <vers num="1.6.4p2" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-        <vers num="1.6.7p5" />
-        <vers num="1.6.8" />
-        <vers num="1.6.8p12" />
-        <vers num="1.6.9" />
-        <vers num="1.6.9p20" />
-        <vers num="1.6.9p21" />
-        <vers num="1.6.9p22" />
-        <vers num="1.6.9p23" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2338" published="2012-05-21" name="CVE-2012-2338" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1, 0.63.2, 0.63.3, and 0.64rc1 allows remote attackers to execute arbitrary SQL commands via the id_adh parameter to picture.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53463" source="BID">53463</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/11/1" source="MLIST">[oss-security] 20120510 Re: CVE-request: galette sql injection</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/10/5" source="MLIST">[oss-security] 20120510 CVE-request: galette sql injection</ref>
-      <ref url="http://redmine.ulysses.fr/projects/galette/repository/revisions/8c13ec159ba" source="CONFIRM">http://redmine.ulysses.fr/projects/galette/repository/revisions/8c13ec159ba</ref>
-      <ref url="http://redmine.ulysses.fr/issues/250" source="MISC">http://redmine.ulysses.fr/issues/250</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="johan_cwiklinski" name="galette">
-        <vers num="0.63" edition="rc1" />
-        <vers num="0.63.1" />
-        <vers num="0.63.2" />
-        <vers num="0.63.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2339" published="2012-05-21" name="CVE-2012-2339" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Glossary module 6.x-1.x before 6.x-1.8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "taxonomy information."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75503" source="XF">glossary-taxonomyinformation-xss(75503)</ref>
-      <ref url="http://www.securityfocus.com/bid/53440" source="BID">53440</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/15/6" source="MLIST">[oss-security] 20120615 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/11/2" source="MLIST">[oss-security] 20120510 Re: CVE Request for Drupal contributed modules - 2012-05-10</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/10/6" source="MLIST">[oss-security] 20120510 CVE Request for Drupal contributed modules - 2012-05-10</ref>
-      <ref url="http://secunia.com/advisories/49074" source="SECUNIA" adv="1">49074</ref>
-      <ref url="http://drupalcode.org/project/glossary.git/commitdiff/c6cc3ac" source="CONFIRM">http://drupalcode.org/project/glossary.git/commitdiff/c6cc3ac</ref>
-      <ref url="http://drupal.org/node/1569482" source="MISC" adv="1">http://drupal.org/node/1569482</ref>
-      <ref url="http://drupal.org/node/1568156" source="CONFIRM">http://drupal.org/node/1568156</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="drupal" name="drupal">
-        <vers num="" />
-      </prod>
-      <prod vendor="nancy_wichmann" name="glossary">
-        <vers num="6.x-1.0" edition="beta1" />
-        <vers num="6.x-1.0" edition="beta2" />
-        <vers num="6.x-1.0" edition="beta3" />
-        <vers num="6.x-1.0" edition="beta4" />
-        <vers num="6.x-1.0" edition="beta5" />
-        <vers num="6.x-1.0" edition="dev" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="6.x-1.5" />
-        <vers num="6.x-1.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2340" published="2012-05-21" name="CVE-2012-2340" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">The Contact Forms module 7.x-1.x before 7.x-1.2 for Drupal does not specify sufficiently restrictive permissions, which allows remote authenticated users with the "access the site-wide contact form" permission to modify the module settings via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1569508" source="MISC" patch="1">http://drupal.org/node/1569508</ref>
-      <ref url="http://drupal.org/node/1569352" source="CONFIRM" patch="1">http://drupal.org/node/1569352</ref>
-      <ref url="http://www.securityfocus.com/bid/53441" source="BID">53441</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/15/6" source="MLIST">[oss-security] 20120615 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/11/2" source="MLIST">[oss-security] 20120510 Re: CVE Request for Drupal contributed modules - 2012-05-10</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/10/6" source="MLIST">[oss-security] 20120510 CVE Request for Drupal contributed modules - 2012-05-10</ref>
-      <ref url="http://secunia.com/advisories/49070" source="SECUNIA" adv="1">49070</ref>
-      <ref url="http://drupalcode.org/project/contact_forms.git/commitdiff/d11ce2b" source="CONFIRM">http://drupalcode.org/project/contact_forms.git/commitdiff/d11ce2b</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="geoff_davies" name="contact_forms">
-        <vers num="7.x-1.1" />
-        <vers num="7.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2341" published="2012-05-18" name="CVE-2012-2341" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the Take Control module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to hijack the authentication of unspecified users for Ajax requests that manipulate files.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75504" source="XF">takecontrol-ajaxcalls-csrf(75504)</ref>
-      <ref url="http://www.securityfocus.com/bid/53452" source="BID">53452</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/15/6" source="MLIST">[oss-security] 20120615 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49060" source="SECUNIA" adv="1">49060</ref>
-      <ref url="http://drupal.org/node/1569512" source="CONFIRM">http://drupal.org/node/1569512</ref>
-      <ref url="http://drupal.org/node/1243604" source="CONFIRM">http://drupal.org/node/1243604</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rahul_singla" name="take_control">
-        <vers num="6.x-1.x" />
-        <vers num="6.x-2.0" edition="beta3" />
-        <vers num="6.x-2.x" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-2342" reject="1" published="2012-05-21" name="CVE-2012-2342" modified="2012-05-21">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-5097.  Reason: This candidate is a duplicate of CVE-2010-5097.  Notes: All CVE users should reference CVE-2010-5097 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" seq="2012-2343" reject="1" published="2012-05-21" name="CVE-2012-2343" modified="2012-05-21">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-5098.  Reason: This candidate is a duplicate of CVE-2010-5098.  Notes: All CVE users should reference CVE-2010-5098 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" seq="2012-2344" reject="1" published="2012-05-21" name="CVE-2012-2344" modified="2012-05-21">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-5099.  Reason: This candidate is a duplicate of CVE-2010-5099.  Notes: All CVE users should reference CVE-2010-5099 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" seq="2012-2345" reject="1" published="2012-05-21" name="CVE-2012-2345" modified="2012-05-21">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-5100.  Reason: This candidate is a duplicate of CVE-2010-5100.  Notes: All CVE users should reference CVE-2010-5100 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" seq="2012-2346" reject="1" published="2012-05-21" name="CVE-2012-2346" modified="2012-05-21">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-5101.  Reason: This candidate is a duplicate of CVE-2010-5101.  Notes: All CVE users should reference CVE-2010-5101 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" seq="2012-2347" reject="1" published="2012-05-21" name="CVE-2012-2347" modified="2012-05-21">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-5102.  Reason: This candidate is a duplicate of CVE-2010-5102.  Notes: All CVE users should reference CVE-2010-5102 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" seq="2012-2348" reject="1" published="2012-05-21" name="CVE-2012-2348" modified="2012-05-21">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-5103.  Reason: This candidate is a duplicate of CVE-2010-5103.  Notes: All CVE users should reference CVE-2010-5103 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" seq="2012-2349" reject="1" published="2012-05-21" name="CVE-2012-2349" modified="2012-05-21">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-5104.  Reason: This candidate is a reservation duplicate of CVE-2010-5104.  Notes: All CVE users should reference CVE-2010-5104 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2351" published="2012-07-12" name="CVE-2012-2351" modified="2012-07-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The default configuration of the auth/saml plugin in Mahara before 1.4.2 sets the "Match username attribute to Remote username" option to false, which allows remote SAML IdP servers to spoof users of other SAML IdP servers by using the same internal username.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/12/4" source="MLIST" patch="1">[oss-security] 20120512 Re: CVE request: mahara</ref>
-      <ref url="http://gitorious.org/mahara/mahara/commit/f07be6020e70fa8f53cd77fdcd63e7fd7ff8aaea" source="CONFIRM" patch="1">http://gitorious.org/mahara/mahara/commit/f07be6020e70fa8f53cd77fdcd63e7fd7ff8aaea</ref>
-      <ref url="https://bugs.launchpad.net/mahara/+bug/932909" source="CONFIRM">https://bugs.launchpad.net/mahara/+bug/932909</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/11/9" source="MLIST">[oss-security] 20120511 CVE request: mahara</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2467" source="DEBIAN">DSA-2467</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mahara" name="mahara">
-        <vers num="0.9.0" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.10" />
-        <vers num="1.0.11" />
-        <vers num="1.0.12" />
-        <vers num="1.0.13" />
-        <vers num="1.0.14" />
-        <vers num="1.0.15" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" />
-        <vers num="1.1.0" edition="alpha1" />
-        <vers num="1.1.0" edition="alpha2" />
-        <vers num="1.1.0" edition="alpha3" />
-        <vers num="1.1.0" edition="beta1" />
-        <vers num="1.1.0" edition="beta2" />
-        <vers num="1.1.0" edition="beta3" />
-        <vers num="1.1.0" edition="beta4" />
-        <vers num="1.1.0" edition="rc1" />
-        <vers num="1.1.0" edition="rc2" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.2.0" edition="alpha1" />
-        <vers num="1.2.0" edition="alpha2" />
-        <vers num="1.2.0" edition="alpha3" />
-        <vers num="1.2.0" edition="beta1" />
-        <vers num="1.2.0" edition="beta2" />
-        <vers num="1.2.0" edition="beta3" />
-        <vers num="1.2.0" edition="beta4" />
-        <vers num="1.2.0" edition="rc1" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.3.0" edition="beta1" />
-        <vers num="1.3.0" edition="beta2" />
-        <vers num="1.3.0" edition="beta3" />
-        <vers num="1.3.0" edition="beta4" />
-        <vers num="1.3.0" edition="rc1" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.3.4" />
-        <vers num="1.3.5" />
-        <vers num="1.3.6" />
-        <vers num="1.3.7" />
-        <vers num="1.3.8" />
-        <vers num="1.4" edition="rc1" />
-        <vers num="1.4" edition="rc2" />
-        <vers num="1.4" edition="rc3" />
-        <vers num="1.4" edition="rc4" />
-        <vers num="1.4.0" />
-        <vers prev="1" num="1.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2352" published="2012-05-31" name="CVE-2012-2352" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives via vectors related to the (1) do_arc_manage, (2) do_arc_download, or (3) do_arc_delete functions.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.sympa.org/distribution/latest-stable/NEWS" source="CONFIRM">https://www.sympa.org/distribution/latest-stable/NEWS</ref>
-      <ref url="https://sourcesup.renater.fr/scm/viewvc.php/branches/sympa-6.0-branch/wwsympa/wwsympa.fcgi.in?root=sympa&amp;r1=6706&amp;r2=7358&amp;pathrev=7358" source="CONFIRM">https://sourcesup.renater.fr/scm/viewvc.php/branches/sympa-6.0-branch/wwsympa/wwsympa.fcgi.in?root=sympa&amp;r1=6706&amp;r2=7358&amp;pathrev=7358</ref>
-      <ref url="http://www.securityfocus.com/bid/53503" source="BID">53503</ref>
-      <ref url="http://www.osvdb.org/81890" source="OSVDB">81890</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/12/8" source="MLIST">[oss-security] 20120512 Re: CVE request: sympa (try again)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/12/2" source="MLIST">[oss-security] 20120511 Re: CVE request: sympa (try again)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/11/8" source="MLIST">[oss-security] 20120511 CVE request: sympa (try again)</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2477" source="DEBIAN">DSA-2477</ref>
-      <ref url="http://secunia.com/advisories/49237" source="SECUNIA" adv="1">49237</ref>
-      <ref url="http://secunia.com/advisories/49045" source="SECUNIA" adv="1">49045</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sympa" name="sympa">
-        <vers num="0.001" />
-        <vers num="0.002" />
-        <vers num="0.003" />
-        <vers num="0.004" />
-        <vers num="0.005" />
-        <vers num="0.006" />
-        <vers num="0.007" />
-        <vers num="0.008" />
-        <vers num="0.009" />
-        <vers num="0.010" />
-        <vers num="0.011" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.1-2" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.3.4" />
-        <vers num="1.3.4-1" />
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.4.2-1" />
-        <vers num="1.5" />
-        <vers num="2.2.1b" />
-        <vers num="2.2.2b" />
-        <vers num="2.2.3b" />
-        <vers num="2.2.4" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2b" />
-        <vers num="2.3" edition="beta" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.4" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3b" />
-        <vers num="2.5.4b" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.7" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7a" />
-        <vers num="2.7b.1" />
-        <vers num="2.7b.2" />
-        <vers num="2.7b.3" />
-        <vers num="3.0" />
-        <vers num="3.0a" />
-        <vers num="3.0a.1" />
-        <vers num="3.0b.4" />
-        <vers num="3.0b.8" />
-        <vers num="3.0b.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1b.10" />
-        <vers num="3.1b.12" />
-        <vers num="3.1b.13" />
-        <vers num="3.1b.7" />
-        <vers num="3.1b.8" />
-        <vers num="3.1b.9" />
-        <vers num="3.2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2a" />
-        <vers num="3.3" />
-        <vers num="3.3.1" />
-        <vers num="3.3.3" />
-        <vers num="3.3.4b.3" />
-        <vers num="3.3.4b.4" />
-        <vers num="3.3.4b.5" />
-        <vers num="3.3.4b.6" />
-        <vers num="3.3.4b.7" />
-        <vers num="3.3.4b.8" />
-        <vers num="3.3.4b.9" />
-        <vers num="3.3.5" />
-        <vers num="3.3.6b.1" />
-        <vers num="3.3.6b.2" />
-        <vers num="3.3.6b.3" />
-        <vers num="3.3.6b.4" />
-        <vers num="3.3.6b.5" />
-        <vers num="3.3.6b.6" />
-        <vers num="3.3b.3" />
-        <vers num="3.3b.4" />
-        <vers num="3.4" />
-        <vers num="4.0.a1" />
-        <vers num="4.0.a3" />
-        <vers num="4.0.a4" />
-        <vers num="4.0.a5" />
-        <vers num="4.0.a6" />
-        <vers num="4.0.a7" />
-        <vers num="4.0.a8" />
-        <vers num="4.0.a9" />
-        <vers num="4.0.b1" />
-        <vers num="4.0.b2" />
-        <vers num="4.0.b3" />
-        <vers num="4.1" />
-        <vers num="4.2b.1" />
-        <vers num="4.2b.3" />
-        <vers num="5.0" />
-        <vers num="5.0a" />
-        <vers num="5.0a.1" />
-        <vers num="5.0b" />
-        <vers num="5.0b.1" />
-        <vers num="5.1" />
-        <vers num="5.1.2" />
-        <vers num="5.2" />
-        <vers num="5.2b" />
-        <vers num="5.2b2" />
-        <vers num="5.3" />
-        <vers num="5.3.2" />
-        <vers num="5.3a.10" />
-        <vers num="5.3a.8" />
-        <vers num="5.3a.9" />
-        <vers num="5.3b.1" />
-        <vers num="5.3b.3" />
-        <vers num="5.3b.4" />
-        <vers num="5.3b.5" />
-        <vers num="5.4" />
-        <vers num="5.4.1" />
-        <vers num="5.4.2" />
-        <vers num="5.4.3" />
-        <vers num="5.4a.2" />
-        <vers num="5.4a.4" />
-        <vers num="5.4b.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="6.0.6" />
-        <vers num="6.0b.1" />
-        <vers num="6.0b.2" />
-        <vers num="6.0b.3" />
-        <vers num="6.0b.4" />
-        <vers num="6.1.1" />
-        <vers prev="1" num="6.1.10" />
-        <vers num="6.1.2" />
-        <vers num="6.1.3" />
-        <vers num="6.1.4" />
-        <vers num="6.1.5" />
-        <vers num="6.1.6" />
-        <vers num="6.1.7" />
-        <vers num="6.1.8" />
-        <vers num="6.1.9" />
-        <vers num="6.1b.1" />
-        <vers num="6.1b.2" />
-        <vers num="6.1b.3" />
-        <vers num="6.1b.4" />
-        <vers num="6.1b.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2353" published="2012-07-20" name="CVE-2012-2353" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to obtain sensitive user information from hidden fields by leveraging the teacher role and navigating to "Enrolled users" under the Users Settings section.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/23/2" source="MLIST">[oss-security] 20120523 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-31923" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-31923</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2354" published="2012-07-20" name="CVE-2012-2354" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/site:readallmessages capability requirement and read arbitrary messages by using the "Recent conversations" feature with a modified parameter in a URL.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.moodle.org/gw?p=moodle.git;a=commit;h=48e03792ca8faa2d781f9ef74606f3b3f0d3baec" source="CONFIRM" patch="1">http://git.moodle.org/gw?p=moodle.git;a=commit;h=48e03792ca8faa2d781f9ef74606f3b3f0d3baec</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/23/2" source="MLIST">[oss-security] 20120523 Moodle security notifications public</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2355" published="2012-07-20" name="CVE-2012-2355" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass question:use* capability requirements and add arbitrary questions to a quiz via the questions feature.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/23/2" source="MLIST">[oss-security] 20120523 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-32240" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-32240</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2356" published="2012-07-20" name="CVE-2012-2356" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass intended capability requirements and save questions via a save_question action.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/23/2" source="MLIST">[oss-security] 20120523 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-32239" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-32239</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2357" published="2012-07-20" name="CVE-2012-2357" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Multi-Authentication feature in the Central Authentication Service (CAS) functionality in auth/cas/cas_form.html in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not use HTTPS, which allows remote attackers to obtain credentials by sniffing the network.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.moodle.org/gw?p=moodle.git;a=commit;h=895e76ea51c462c18ad66e0761ad76cd26a63ecf" source="CONFIRM" patch="1">http://git.moodle.org/gw?p=moodle.git;a=commit;h=895e76ea51c462c18ad66e0761ad76cd26a63ecf</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/23/2" source="MLIST">[oss-security] 20120523 Moodle security notifications public</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2358" published="2012-07-20" name="CVE-2012-2358" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:P)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass an activity's read-only state and modify the database by leveraging the student role and editing database activity entries that already exist.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/23/2" source="MLIST">[oss-security] 20120523 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-31811" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-31811</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2359" published="2012-07-20" name="CVE-2012-2359" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">admin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to gain privileges by leveraging the teacher role and modifying their own capabilities, as demonstrated by obtaining the backup:userinfo capability.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.moodle.org/gw?p=moodle.git;a=commit;h=0f75e1e6272db0303abc8e27362e5c3a1344b82f" source="CONFIRM" patch="1">http://git.moodle.org/gw?p=moodle.git;a=commit;h=0f75e1e6272db0303abc8e27362e5c3a1344b82f</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/23/2" source="MLIST">[oss-security] 20120523 Moodle security notifications public</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2360" published="2012-07-20" name="CVE-2012-2360" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Wiki subsystem in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is inserted into a page title.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/23/2" source="MLIST">[oss-security] 20120523 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-32018" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-32018</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2361" published="2012-07-20" name="CVE-2012-2361" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in admin/webservice/forms.php in the web services implementation in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the name field (aka the service name) to admin/webservice/service.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/23/2" source="MLIST">[oss-security] 20120523 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-31694" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-31694</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2362" published="2012-07-20" name="CVE-2012-2362" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in blog/lib.php in the blog implementation in Moodle 1.9.x before 1.9.18, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted parameter to blog/index.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://git.moodle.org/gw?p=moodle.git;a=commit;h=038131c8b5614f18c14d964dc53b6960ae6c30d8" source="CONFIRM" patch="1">http://git.moodle.org/gw?p=moodle.git;a=commit;h=038131c8b5614f18c14d964dc53b6960ae6c30d8</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/23/2" source="MLIST">[oss-security] 20120523 Moodle security notifications public</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="1.9" />
-        <vers num="1.9.1" />
-        <vers num="1.9.10" />
-        <vers num="1.9.11" />
-        <vers num="1.9.12" />
-        <vers num="1.9.13" />
-        <vers num="1.9.14" />
-        <vers num="1.9.15" />
-        <vers num="1.9.16" />
-        <vers num="1.9.17" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.4" />
-        <vers num="1.9.5" />
-        <vers num="1.9.6" />
-        <vers num="1.9.7" />
-        <vers num="1.9.8" />
-        <vers num="1.9.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2363" published="2012-07-20" name="CVE-2012-2363" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in calendar/event.php in the calendar implementation in Moodle 1.9.x before 1.9.18 allows remote authenticated users to execute arbitrary SQL commands via a crafted calendar event.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/23/2" source="MLIST">[oss-security] 20120523 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=refs%2Fheads%2FMOODLE_19_STABLE&amp;st=commit&amp;s=MDL-31746" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=refs%2Fheads%2FMOODLE_19_STABLE&amp;st=commit&amp;s=MDL-31746</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="1.9" />
-        <vers num="1.9.1" />
-        <vers num="1.9.10" />
-        <vers num="1.9.11" />
-        <vers num="1.9.12" />
-        <vers num="1.9.13" />
-        <vers num="1.9.14" />
-        <vers num="1.9.15" />
-        <vers num="1.9.16" />
-        <vers num="1.9.17" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.4" />
-        <vers num="1.9.5" />
-        <vers num="1.9.6" />
-        <vers num="1.9.7" />
-        <vers num="1.9.8" />
-        <vers num="1.9.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2364" published="2012-07-20" name="CVE-2012-2364" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in lib/filelib.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via an assignment submission with zip compression, leading to text/html rendering during a "download all" action.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://git.moodle.org/gw?p=moodle.git;a=commit;h=ce4126c7a9e07dd0514f7ac297b5e60cad0b8d20" source="CONFIRM" patch="1">http://git.moodle.org/gw?p=moodle.git;a=commit;h=ce4126c7a9e07dd0514f7ac297b5e60cad0b8d20</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/23/2" source="MLIST">[oss-security] 20120523 Moodle security notifications public</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2365" published="2012-07-20" name="CVE-2012-2365" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the idnumber field to cohort/edit.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/23/2" source="MLIST">[oss-security] 20120523 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-31691" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-31691</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2366" published="2012-07-20" name="CVE-2012-2366" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:P)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">mod/data/preset.php in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not properly iterate through an array, which allows remote authenticated users to overwrite arbitrary database activity presets via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/23/2" source="MLIST">[oss-security] 20120523 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-31763" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-31763</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2367" published="2012-07-20" name="CVE-2012-2367" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Moodle 1.9.x before 1.9.18, 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/calendar:manageownentries capability requirement and add a calendar entry via a New Entry action.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/23/2" source="MLIST">[oss-security] 20120523 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-18335" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-18335</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="1.9" />
-        <vers num="1.9.1" />
-        <vers num="1.9.10" />
-        <vers num="1.9.11" />
-        <vers num="1.9.12" />
-        <vers num="1.9.13" />
-        <vers num="1.9.14" />
-        <vers num="1.9.15" />
-        <vers num="1.9.16" />
-        <vers num="1.9.17" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.4" />
-        <vers num="1.9.5" />
-        <vers num="1.9.6" />
-        <vers num="1.9.7" />
-        <vers num="1.9.8" />
-        <vers num="1.9.9" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2368" published="2012-08-13" name="CVE-2012-2368" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Bytemark Symbiosis before Revision 1322 does not properly validate passwords, which allows remote attackers to gain access to email accounts via an arbitrary password.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://projects.bytemark.co.uk/projects/symbiosis/repository/diff?rev=1327&amp;rev_to=1322" source="CONFIRM" patch="1">https://projects.bytemark.co.uk/projects/symbiosis/repository/diff?rev=1327&amp;rev_to=1322</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/14/3" source="MLIST">[oss-security] 20120514 Re: CVE request: Bytemark Symbiosis</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/14/1" source="MLIST">[oss-security] 20120514 CVE request: Bytemark Symbiosis</ref>
-      <ref url="http://secunia.com/advisories/48993" source="SECUNIA" adv="1">48993</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bytemark" name="symbiosis">
-        <vers prev="1" num="1321" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2369" published="2012-05-23" name="CVE-2012-2369" modified="2012-06-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Format string vulnerability in the log_message_cb function in otr-plugin.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 3.2.1 for Pidgin might allow remote attackers to execute arbitrary code via format string specifiers in data that generates a log message.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/16/2" source="MLIST" patch="1">[oss-security] 20120516 Format string security flaw in pidgin-otr</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00003.html" source="SUSE">SUSE-SU-2012:0703</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cypherpunks" name="pidgin-otr">
-        <vers prev="1" num="3.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2370" published="2012-08-13" name="CVE-2012-2370" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Multiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service (application crash) via a negative (1) height or (2) width in an XBM file, which triggers a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.gnome.org/browse/gdk-pixbuf/commit/?id=b1bb3053856aede37d473c92f0e5a10e29f10516" source="CONFIRM" patch="1">http://git.gnome.org/browse/gdk-pixbuf/commit/?id=b1bb3053856aede37d473c92f0e5a10e29f10516</ref>
-      <ref url="http://git.gnome.org/browse/gdk-pixbuf/commit/?id=4f0f465f991cd454d03189497f923eb40c170c22" source="CONFIRM" patch="1">http://git.gnome.org/browse/gdk-pixbuf/commit/?id=4f0f465f991cd454d03189497f923eb40c170c22</ref>
-      <ref url="https://bugs.launchpad.net/ubuntu/+source/gdk-pixbuf/+bug/681150" source="MISC">https://bugs.launchpad.net/ubuntu/+source/gdk-pixbuf/+bug/681150</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75578" source="XF">gdkpixbuf-readbitmapfiledata-bo(75578)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/15/9" source="MLIST">[oss-security] 20120515 Re: CVE Request: gdk-pixbuf Integer overflow in XBM file loader</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/15/8" source="MLIST">[oss-security] 20120515 CVE Request: gdk-pixbuf Integer overflow in XBM file loader</ref>
-      <ref url="http://www.gentoo.org/security/en/glsa/glsa-201206-20.xml" source="GENTOO">GLSA-201206-20</ref>
-      <ref url="http://secunia.com/advisories/49715" source="SECUNIA" adv="1">49715</ref>
-      <ref url="http://secunia.com/advisories/49125" source="SECUNIA" adv="1">49125</ref>
-      <ref url="http://git.gnome.org/browse/gdk-pixbuf/" source="MISC">http://git.gnome.org/browse/gdk-pixbuf/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnome" name="gdk-pixbuf">
-        <vers num="2.23.3" />
-        <vers num="2.23.4" />
-        <vers num="2.23.5" />
-        <vers num="2.24.0" />
-        <vers num="2.24.1" />
-        <vers num="2.25.0" />
-        <vers num="2.25.2" />
-        <vers prev="1" num="2.26.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2371" published="2012-08-13" name="CVE-2012-2371" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pagination_wp_facethumb parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53497" source="BID">53497</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/16/1" source="MLIST">[oss-security] 20120515 Re: CVE-request: WordPress wp-facethumb plugin reflected XSS vulnerability</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/15/12" source="MLIST">[oss-security] 20120515 CVE-request: WordPress wp-facethumb plugin reflected XSS vulnerability</ref>
-      <ref url="http://wordpress.org/support/topic/plugin-wp-facethumb-reflected-xss-vulnerability-cwe-79" source="MISC">http://wordpress.org/support/topic/plugin-wp-facethumb-reflected-xss-vulnerability-cwe-79</ref>
-      <ref url="http://secunia.com/advisories/49143" source="SECUNIA" adv="1">49143</ref>
-      <ref url="http://packetstormsecurity.org/files/112658/WordPress-WP-FaceThumb-Gallery-0.1-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112658/WordPress-WP-FaceThumb-Gallery-0.1-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mnt-tech" name="wp-facethumb">
-        <vers num="0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2373" published="2012-08-09" name="CVE-2012-2373" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:N/I:N/A:C)" CVSS_score="4.0" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="1.9" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">The Linux kernel before 3.4.5 on the x86 platform, when Physical Address Extension (PAE) is enabled, does not properly use the Page Middle Directory (PMD), which allows local users to cause a denial of service (panic) via a crafted application that triggers a race condition.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/26c191788f18129af0eb32a358cdaea0c7479626" source="CONFIRM" patch="1">https://github.com/torvalds/linux/commit/26c191788f18129af0eb32a358cdaea0c7479626</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=822821" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=822821</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/18/11" source="MLIST">[oss-security] 20120518 Re: CVE Request -- kernel: mm: read_pmd_atomic: 32bit PAE pmd walk vs pmd_populate SMP race condition</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=26c191788f18129af0eb32a358cdaea0c7479626" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=26c191788f18129af0eb32a358cdaea0c7479626</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="3.4" edition="" />
-        <vers num="3.4" edition=":~~~~x86~" />
-        <vers num="3.4" edition="rc1" />
-        <vers num="3.4" edition="rc1:~~~~x86~" />
-        <vers num="3.4" edition="rc2" />
-        <vers num="3.4" edition="rc2:~~~~x86~" />
-        <vers num="3.4" edition="rc3" />
-        <vers num="3.4" edition="rc3:~~~~x86~" />
-        <vers num="3.4" edition="rc4" />
-        <vers num="3.4" edition="rc4:~~~~x86~" />
-        <vers num="3.4" edition="rc5" />
-        <vers num="3.4" edition="rc5:~~~~x86~" />
-        <vers num="3.4" edition="rc6" />
-        <vers num="3.4" edition="rc6:~~~~x86~" />
-        <vers num="3.4" edition="rc7" />
-        <vers num="3.4" edition="rc7:~~~~x86~" />
-        <vers num="3.4.1" edition="" />
-        <vers num="3.4.1" edition=":~~~~x86~" />
-        <vers num="3.4.2" edition="" />
-        <vers num="3.4.2" edition=":~~~~x86~" />
-        <vers num="3.4.3" edition="" />
-        <vers num="3.4.3" edition=":~~~~x86~" />
-        <vers prev="1" num="3.4.4" edition="" />
-        <vers prev="1" num="3.4.4" edition=":~~~~x86~" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2374" published="2012-05-23" name="CVE-2012-2374" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.tornadoweb.org/documentation/releases/v2.2.1.html" source="CONFIRM" adv="1">http://www.tornadoweb.org/documentation/releases/v2.2.1.html</ref>
-      <ref url="http://www.securityfocus.com/bid/53612" source="BID">53612</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/18/6" source="MLIST">[oss-security] 20120518 CVE Request -- Tornado (python-tornado): Tornado v2.2.1 tornado.web.RequestHandler.set_header() fix to prevent header injection</ref>
-      <ref url="http://secunia.com/advisories/49185" source="SECUNIA">49185</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/18/12" source="MLIST">[oss-security] 20120518 Re: CVE Request -- Tornado (python-tornado): Tornado v2.2.1 tornado.web.RequestHandler.set_header() fix to prevent header injection</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tornadoweb" name="tornado">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers prev="1" num="2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2375" published="2012-06-13" name="CVE-2012-2375" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:A/AC:H/Au:N/C:N/I:N/A:C)" CVSS_score="4.6" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.2" CVSS_base_score="4.6">
-    <desc>
-      <descript source="cve">The __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect length variable during a copy operation, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words in an FATTR4_ACL reply.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-4131.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/20e0fa98b751facf9a1101edaefbc19c82616a68" source="CONFIRM" patch="1">https://github.com/torvalds/linux/commit/20e0fa98b751facf9a1101edaefbc19c82616a68</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=20e0fa98b751facf9a1101edaefbc19c82616a68" source="CONFIRM" patch="1">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=20e0fa98b751facf9a1101edaefbc19c82616a68</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=822869" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=822869</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/18/13" source="MLIST">[oss-security] 20120518 Re: CVE Request -- kernel: incomplete fix for CVE-2011-4131</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.2" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="3.3" edition="rc1" />
-        <vers num="3.3" edition="rc2" />
-        <vers num="3.3" edition="rc3" />
-        <vers num="3.3" edition="rc4" />
-        <vers num="3.3" edition="rc5" />
-        <vers num="3.3" edition="rc6" />
-        <vers num="3.3" edition="rc7" />
-        <vers prev="1" num="3.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2376" published="2012-05-21" name="CVE-2012-2376" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments that trigger incorrect handling of COM object VARIANT types, as exploited in the wild in May 2012.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=823464" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=823464</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75778" source="XF">php-comprinttypeinfo-bo(75778)</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75778" source="XF">php-comprinttypeinfo-function-dos(75778)</ref>
-      <ref url="http://www.securitytracker.com/id?1027089" source="SECTRACK">1027089</ref>
-      <ref url="http://www.exploit-db.com/exploits/18861/" source="EXPLOIT-DB">18861</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/20/2" source="MLIST">[oss-security] 20120519 Re: CVE Request: PHP 5.4.3 on Windows com_print_typeinfo() Buffer Overflow (?)</ref>
-      <ref url="http://isc.sans.edu/diary.html?storyid=13255" source="MISC">http://isc.sans.edu/diary.html?storyid=13255</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="1.0" />
-        <vers num="2.0" />
-        <vers num="2.0b10" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta_4_patch1" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" />
-        <vers num="4.1.0" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="4.2.0" />
-        <vers num="4.2.1" />
-        <vers num="4.2.2" />
-        <vers num="4.2.3" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.10" />
-        <vers num="4.3.11" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.4" />
-        <vers num="4.3.5" />
-        <vers num="4.3.6" />
-        <vers num="4.3.7" />
-        <vers num="4.3.8" />
-        <vers num="4.3.9" />
-        <vers num="4.4.0" />
-        <vers num="4.4.1" />
-        <vers num="4.4.2" />
-        <vers num="4.4.3" />
-        <vers num="4.4.4" />
-        <vers num="4.4.5" />
-        <vers num="4.4.6" />
-        <vers num="4.4.7" />
-        <vers num="4.4.8" />
-        <vers num="4.4.9" />
-        <vers num="5.0.0" edition="beta1" />
-        <vers num="5.0.0" edition="beta2" />
-        <vers num="5.0.0" edition="beta3" />
-        <vers num="5.0.0" edition="beta4" />
-        <vers num="5.0.0" edition="rc1" />
-        <vers num="5.0.0" edition="rc2" />
-        <vers num="5.0.0" edition="rc3" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.1.0" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers num="5.2.0" />
-        <vers num="5.2.1" />
-        <vers num="5.2.10" />
-        <vers num="5.2.11" />
-        <vers num="5.2.12" />
-        <vers num="5.2.13" />
-        <vers num="5.2.14" />
-        <vers num="5.2.15" />
-        <vers num="5.2.16" />
-        <vers num="5.2.17" />
-        <vers num="5.2.2" />
-        <vers num="5.2.3" />
-        <vers num="5.2.4" />
-        <vers num="5.2.5" />
-        <vers num="5.2.6" />
-        <vers num="5.2.7" />
-        <vers num="5.2.8" />
-        <vers num="5.2.9" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers num="5.3.8" />
-        <vers num="5.3.9" />
-        <vers num="5.4.0" />
-        <vers num="5.4.1" />
-        <vers num="5.4.2" />
-        <vers prev="1" num="5.4.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2380" published="2012-06-26" name="CVE-2012-2380" modified="2012-07-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in the admin/editor console in Apache Roller before 5.0.1 allow remote attackers to hijack the authentication of admins or editors by leveraging the HTTP POST functionality.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/fulldisclosure/2012-06/0376.html" source="FULLDISC">20120624 CVE-2012-2380: Apache Roller Cross-Site-Resource-Forgery (XSRF) vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="roller">
-        <vers num="0.9.5" />
-        <vers num="0.9.6" />
-        <vers num="0.9.6.3" />
-        <vers num="0.9.6.4" />
-        <vers num="0.9.7" />
-        <vers num="0.9.7.1" />
-        <vers num="0.9.7.2" />
-        <vers num="0.9.8" />
-        <vers num="0.9.8.1" />
-        <vers num="0.9.8.2" />
-        <vers num="0.9.9" />
-        <vers num="1.0" edition="rc1" />
-        <vers num="1.0" edition="rc2" />
-        <vers num="1.0.1" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.3" />
-        <vers num="3.0" />
-        <vers num="3.1" />
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers prev="1" num="5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2381" published="2012-06-26" name="CVE-2012-2381" modified="2012-06-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Apache Roller before 5.0.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging the blogger role.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/fulldisclosure/2012-06/0377.html" source="FULLDISC">20120624 CVE-2012-2381: Apache Roller Cross-Site-Scripting (XSS) vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="roller">
-        <vers num="0.9.5" />
-        <vers num="0.9.6" />
-        <vers num="0.9.6.3" />
-        <vers num="0.9.6.4" />
-        <vers num="0.9.7" />
-        <vers num="0.9.7.1" />
-        <vers num="0.9.7.2" />
-        <vers num="0.9.8" />
-        <vers num="0.9.8.1" />
-        <vers num="0.9.8.2" />
-        <vers num="0.9.9" />
-        <vers num="1.0" edition="rc1" />
-        <vers num="1.0" edition="rc2" />
-        <vers num="1.0.1" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.3" />
-        <vers num="3.0" />
-        <vers num="3.1" />
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers prev="1" num="5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2383" published="2012-06-13" name="CVE-2012-2383" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Integer overflow in the i915_gem_execbuffer2 function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.3.5 on 32-bit platforms allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted ioctl call.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/ed8cd3b2cd61004cab85380c52b1817aca1ca49b" source="CONFIRM" patch="1">https://github.com/torvalds/linux/commit/ed8cd3b2cd61004cab85380c52b1817aca1ca49b</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ed8cd3b2cd61004cab85380c52b1817aca1ca49b" source="CONFIRM" patch="1">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ed8cd3b2cd61004cab85380c52b1817aca1ca49b</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=824176" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=824176</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/22/8" source="MLIST">[oss-security] 20120522 Re: CVE Request: some drm overflow checks</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.5" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.5</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="3.3" edition="rc1" />
-        <vers num="3.3" edition="rc2" />
-        <vers num="3.3" edition="rc3" />
-        <vers num="3.3" edition="rc4" />
-        <vers num="3.3" edition="rc5" />
-        <vers num="3.3" edition="rc6" />
-        <vers num="3.3" edition="rc7" />
-        <vers num="3.3.1" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers prev="1" num="3.3.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2384" published="2012-06-13" name="CVE-2012-2384" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Integer overflow in the i915_gem_do_execbuffer function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.3.5 on 32-bit platforms allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted ioctl call.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/44afb3a04391a74309d16180d1e4f8386fdfa745" source="CONFIRM" patch="1">https://github.com/torvalds/linux/commit/44afb3a04391a74309d16180d1e4f8386fdfa745</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=44afb3a04391a74309d16180d1e4f8386fdfa745" source="CONFIRM" patch="1">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=44afb3a04391a74309d16180d1e4f8386fdfa745</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=824178" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=824178</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/22/8" source="MLIST">[oss-security] 20120522 Re: CVE Request: some drm overflow checks</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.5" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.5</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="3.3" edition="rc1" />
-        <vers num="3.3" edition="rc2" />
-        <vers num="3.3" edition="rc3" />
-        <vers num="3.3" edition="rc4" />
-        <vers num="3.3" edition="rc5" />
-        <vers num="3.3" edition="rc6" />
-        <vers num="3.3" edition="rc7" />
-        <vers num="3.3.1" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers prev="1" num="3.3.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2385" published="2012-06-29" name="CVE-2012-2385" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/keithw/mosh/commit/9791768705528e911bfca6c4d8aa88139035060e" source="CONFIRM" patch="1">https://github.com/keithw/mosh/commit/9791768705528e911bfca6c4d8aa88139035060e</ref>
-      <ref url="https://github.com/keithw/mosh/issues/271" source="CONFIRM">https://github.com/keithw/mosh/issues/271</ref>
-      <ref url="https://github.com/keithw/mosh/blob/master/ChangeLog" source="CONFIRM">https://github.com/keithw/mosh/blob/master/ChangeLog</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=823943" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=823943</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75779" source="XF">mosh-sequences-dos(75779)</ref>
-      <ref url="http://www.securityfocus.com/bid/53646" source="BID">53646</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/22/9" source="MLIST">[oss-security] 20120522 Re: CVE Request -- mosh (and probably vte too): mosh  server DoS (long loop) due improper parsing of terminal parameters in terminal  dispatcher</ref>
-      <ref url="http://secunia.com/advisories/49260" source="SECUNIA">49260</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082850.html" source="FEDORA">FEDORA-2012-9442</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082814.html" source="FEDORA">FEDORA-2012-9414</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082766.html" source="FEDORA">FEDORA-2012-9422</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="keith_winstein" name="mosh">
-        <vers num="0.98c" />
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.3-1" />
-        <vers num="1.1.3-2" />
-        <vers num="1.2" />
-        <vers prev="1" num="1.2-2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2386" published="2012-07-07" name="CVE-2012-2386" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tar file that triggers a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=823594" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=823594</ref>
-      <ref url="https://bugs.php.net/bug.php?id=61065" source="CONFIRM">https://bugs.php.net/bug.php?id=61065</ref>
-      <ref url="http://www.php.net/ChangeLog-5.php" source="CONFIRM">http://www.php.net/ChangeLog-5.php</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/05/22/10" source="MLIST">[oss-security] 20120522 Re: CVE request: PHP Phar - arbitrary code execution</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html" source="SUSE">SUSE-SU-2012:0840</ref>
-      <ref url="http://git.php.net/?p=php-src.git;a=commit;h=158d8a6b088662ce9d31e0c777c6ebe90efdc854" source="CONFIRM">http://git.php.net/?p=php-src.git;a=commit;h=158d8a6b088662ce9d31e0c777c6ebe90efdc854</ref>
-      <ref url="http://0x1byte.blogspot.com/2011/04/php-phar-extension-heap-overflow.html" source="MISC">http://0x1byte.blogspot.com/2011/04/php-phar-extension-heap-overflow.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="1.0" />
-        <vers num="2.0" />
-        <vers num="2.0b10" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta_4_patch1" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" />
-        <vers num="4.1.0" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="4.2.0" />
-        <vers num="4.2.1" />
-        <vers num="4.2.2" />
-        <vers num="4.2.3" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.10" />
-        <vers num="4.3.11" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.4" />
-        <vers num="4.3.5" />
-        <vers num="4.3.6" />
-        <vers num="4.3.7" />
-        <vers num="4.3.8" />
-        <vers num="4.3.9" />
-        <vers num="4.4.0" />
-        <vers num="4.4.1" />
-        <vers num="4.4.2" />
-        <vers num="4.4.3" />
-        <vers num="4.4.4" />
-        <vers num="4.4.5" />
-        <vers num="4.4.6" />
-        <vers num="4.4.7" />
-        <vers num="4.4.8" />
-        <vers num="4.4.9" />
-        <vers num="5.0.0" edition="beta1" />
-        <vers num="5.0.0" edition="beta2" />
-        <vers num="5.0.0" edition="beta3" />
-        <vers num="5.0.0" edition="beta4" />
-        <vers num="5.0.0" edition="rc1" />
-        <vers num="5.0.0" edition="rc2" />
-        <vers num="5.0.0" edition="rc3" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.1.0" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers num="5.2.0" />
-        <vers num="5.2.1" />
-        <vers num="5.2.10" />
-        <vers num="5.2.11" />
-        <vers num="5.2.12" />
-        <vers num="5.2.13" />
-        <vers num="5.2.14" />
-        <vers num="5.2.15" />
-        <vers num="5.2.16" />
-        <vers num="5.2.17" />
-        <vers num="5.2.2" />
-        <vers num="5.2.3" />
-        <vers num="5.2.4" />
-        <vers num="5.2.5" />
-        <vers num="5.2.6" />
-        <vers num="5.2.7" />
-        <vers num="5.2.8" />
-        <vers num="5.2.9" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.10" />
-        <vers num="5.3.11" />
-        <vers prev="1" num="5.3.12" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers num="5.3.8" />
-        <vers num="5.3.9" />
-        <vers num="5.4.0" edition="beta2" />
-        <vers num="5.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2387" published="2012-08-20" name="CVE-2012-2387" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/22/11" source="MLIST">[oss-security] 20120522 CVE id request: devotee (debian vote engine) cryptographically weak random numbers permit discovery of secret ballot submissions</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/21/2" source="MLIST">[oss-security] 20120521 Re: CVE id request: devotee (debian vote engine) cryptographically weak random numbers permit discovery of secret ballot submissions</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/18/15" source="MLIST">[oss-security] 20120518 CVE id request: devotee (debian vote engine) cryptographically weak random numbers permit discovery of secret ballot submissions</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="debian" name="devotee">
-        <vers num="0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2388" published="2012-06-27" name="CVE-2012-2388" modified="2012-06-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76013" source="XF">strongswan-rsa-security-bypass(76013)</ref>
-      <ref url="http://www.strongswan.org/blog/2012/05/31/strongswan-4.6.4-released-%28cve-2012-2388%29.html" source="CONFIRM" adv="1">http://www.strongswan.org/blog/2012/05/31/strongswan-4.6.4-released-%28cve-2012-2388%29.html</ref>
-      <ref url="http://www.securitytracker.com/id?1027110" source="SECTRACK">1027110</ref>
-      <ref url="http://www.securityfocus.com/bid/53752" source="BID">53752</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2483" source="DEBIAN">DSA-2483</ref>
-      <ref url="http://secunia.com/advisories/49370" source="SECUNIA" adv="1">49370</ref>
-      <ref url="http://secunia.com/advisories/49336" source="SECUNIA" adv="1">49336</ref>
-      <ref url="http://secunia.com/advisories/49315" source="SECUNIA" adv="1">49315</ref>
-      <ref url="http://osvdb.org/82587" source="OSVDB">82587</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00002.html" source="SUSE">openSUSE-SU-2012:0691</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="strongswan" name="strongswan">
-        <vers num="4.2.0" />
-        <vers num="4.2.1" />
-        <vers num="4.2.10" />
-        <vers num="4.2.11" />
-        <vers num="4.2.12" />
-        <vers num="4.2.13" />
-        <vers num="4.2.14" />
-        <vers num="4.2.15" />
-        <vers num="4.2.16" />
-        <vers num="4.2.2" />
-        <vers num="4.2.3" />
-        <vers num="4.2.4" />
-        <vers num="4.2.5" />
-        <vers num="4.2.6" />
-        <vers num="4.2.7" />
-        <vers num="4.2.8" />
-        <vers num="4.2.9" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.4" />
-        <vers num="4.3.5" />
-        <vers num="4.3.6" />
-        <vers num="4.4.0" />
-        <vers num="4.4.1" />
-        <vers num="4.5.0" />
-        <vers num="4.5.1" />
-        <vers num="4.5.2" />
-        <vers num="4.5.3" />
-        <vers num="4.6.0" />
-        <vers num="4.6.1" />
-        <vers num="4.6.2" />
-        <vers num="4.6.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2389" published="2012-06-21" name="CVE-2012-2389" modified="2012-07-09" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">hostapd 0.7.3, and possibly other versions before 1.0, uses 0644 permissions for /etc/hostapd/hostapd.conf, which might allow local users to obtain sensitive information such as credentials.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=824660" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=824660</ref>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=740964" source="MISC">https://bugzilla.novell.com/show_bug.cgi?id=740964</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/23/5" source="MLIST">[oss-security] 20120523 Re: CVE request(?): hostapd: improper file permissions of hostapd's config leaks credentials</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/23/3" source="MLIST">[oss-security] 20120523 CVE request(?): hostapd: improper file permissions of hostapd's config leaks credentials</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/23/13" source="MLIST">[oss-security] 20120523 Re: CVE request(?): hostapd: improper file permissions of hostapd's config leaks credentials</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081983.html" source="FEDORA">FEDORA-2012-8611</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="w1.fi" name="hostapd">
-        <vers num="0.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2390" published="2012-06-13" name="CVE-2012-2390" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local users to cause a denial of service (memory consumption or system crash) via invalid MAP_HUGETLB mmap operations.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/c50ac050811d6485616a193eb0f37bfbd191cc89" source="CONFIRM" patch="1">https://github.com/torvalds/linux/commit/c50ac050811d6485616a193eb0f37bfbd191cc89</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c50ac050811d6485616a193eb0f37bfbd191cc89" source="CONFIRM" patch="1">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c50ac050811d6485616a193eb0f37bfbd191cc89</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=824345" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=824345</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/23/14" source="MLIST">[oss-security] 20120523 Re: CVE Request -- kernel: huge pages: memory leak on mmap failure</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.2" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="3.4" edition="rc1" />
-        <vers num="3.4" edition="rc2" />
-        <vers num="3.4" edition="rc3" />
-        <vers num="3.4" edition="rc4" />
-        <vers num="3.4" edition="rc5" />
-        <vers num="3.4" edition="rc6" />
-        <vers num="3.4" edition="rc7" />
-        <vers prev="1" num="3.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-2391" reject="1" published="2012-08-16" name="CVE-2012-2391" modified="2012-08-16">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-2942.  Reason: This candidate is a duplicate of CVE-2012-2942.  Notes: All CVE users should reference CVE-2012-2942 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2392" published="2012-06-30" name="CVE-2012-2392" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) ANSI MAP, (2) ASF, (3) IEEE 802.11, (4) IEEE 802.3, and (5) LTP dissectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7124" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7124</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7120" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7120</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7119" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7119</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7118" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7118</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6805" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6805</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-08.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-08.html</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:080" source="MANDRIVA">MDVSA-2012:080</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:042" source="MANDRIVA">MDVSA-2012:042</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:015" source="MANDRIVA">MDVSA-2012:015</ref>
-      <ref url="http://secunia.com/advisories/49226" source="SECUNIA">49226</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15604" source="OVAL">oval:org.mitre.oval:def:15604</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2393" published="2012-06-30" name="CVE-2012-2393" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does not properly construct certain array data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that triggers incorrect memory allocation.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-diameter.c?r1=42200&amp;r2=42199&amp;pathrev=42200" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-diameter.c?r1=42200&amp;r2=42199&amp;pathrev=42200</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7138" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7138</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-09.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-09.html</ref>
-      <ref url="http://www.securityfocus.com/bid/53652" source="BID">53652</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:080" source="MANDRIVA">MDVSA-2012:080</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:042" source="MANDRIVA">MDVSA-2012:042</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:015" source="MANDRIVA">MDVSA-2012:015</ref>
-      <ref url="http://secunia.com/advisories/49226" source="SECUNIA">49226</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15558" source="OVAL">oval:org.mitre.oval:def:15558</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=42200" source="CONFIRM">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=42200</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2394" published="2012-06-30" name="CVE-2012-2394" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=42393" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=42393</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7221" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7221</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-10.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-10.html</ref>
-      <ref url="http://www.securityfocus.com/bid/53653" source="BID">53653</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:080" source="MANDRIVA">MDVSA-2012:080</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:042" source="MANDRIVA">MDVSA-2012:042</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:015" source="MANDRIVA">MDVSA-2012:015</ref>
-      <ref url="http://secunia.com/advisories/49226" source="SECUNIA">49226</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" edition="" />
-        <vers num="1.4.0" edition=":~~~~sparc~" />
-        <vers num="1.4.0" edition=":~~~~itanium~" />
-        <vers num="1.4.1" edition="" />
-        <vers num="1.4.1" edition=":~~~~sparc~" />
-        <vers num="1.4.1" edition=":~~~~itanium~" />
-        <vers num="1.4.10" edition="" />
-        <vers num="1.4.10" edition=":~~~~sparc~" />
-        <vers num="1.4.10" edition=":~~~~itanium~" />
-        <vers num="1.4.11" edition="" />
-        <vers num="1.4.11" edition=":~~~~itanium~" />
-        <vers num="1.4.11" edition=":~~~~sparc~" />
-        <vers num="1.4.12" edition="" />
-        <vers num="1.4.12" edition=":~~~~itanium~" />
-        <vers num="1.4.12" edition=":~~~~sparc~" />
-        <vers num="1.4.13" edition="" />
-        <vers num="1.4.13" edition=":~~~~itanium~" />
-        <vers num="1.4.13" edition=":~~~~sparc~" />
-        <vers num="1.4.2" edition="" />
-        <vers num="1.4.2" edition=":~~~~itanium~" />
-        <vers num="1.4.2" edition=":~~~~sparc~" />
-        <vers num="1.4.3" edition="" />
-        <vers num="1.4.3" edition=":~~~~itanium~" />
-        <vers num="1.4.3" edition=":~~~~sparc~" />
-        <vers num="1.4.4" edition="" />
-        <vers num="1.4.4" edition=":~~~~itanium~" />
-        <vers num="1.4.4" edition=":~~~~sparc~" />
-        <vers num="1.4.5" edition="" />
-        <vers num="1.4.5" edition=":~~~~sparc~" />
-        <vers num="1.4.5" edition=":~~~~itanium~" />
-        <vers num="1.4.6" edition="" />
-        <vers num="1.4.6" edition=":~~~~itanium~" />
-        <vers num="1.4.6" edition=":~~~~sparc~" />
-        <vers num="1.4.7" edition="" />
-        <vers num="1.4.7" edition=":~~~~sparc~" />
-        <vers num="1.4.7" edition=":~~~~itanium~" />
-        <vers num="1.4.8" edition="" />
-        <vers num="1.4.8" edition=":~~~~itanium~" />
-        <vers num="1.4.8" edition=":~~~~sparc~" />
-        <vers num="1.4.9" edition="" />
-        <vers num="1.4.9" edition=":~~~~sparc~" />
-        <vers num="1.4.9" edition=":~~~~itanium~" />
-        <vers num="1.6.0" edition="" />
-        <vers num="1.6.0" edition=":~~~~sparc~" />
-        <vers num="1.6.0" edition=":~~~~itanium~" />
-        <vers num="1.6.1" edition="" />
-        <vers num="1.6.1" edition=":~~~~sparc~" />
-        <vers num="1.6.1" edition=":~~~~itanium~" />
-        <vers num="1.6.2" edition="" />
-        <vers num="1.6.2" edition=":~~~~itanium~" />
-        <vers num="1.6.2" edition=":~~~~sparc~" />
-        <vers num="1.6.3" edition="" />
-        <vers num="1.6.3" edition=":~~~~sparc~" />
-        <vers num="1.6.3" edition=":~~~~itanium~" />
-        <vers num="1.6.4" edition="" />
-        <vers num="1.6.4" edition=":~~~~itanium~" />
-        <vers num="1.6.4" edition=":~~~~sparc~" />
-        <vers num="1.6.5" edition="" />
-        <vers num="1.6.5" edition=":~~~~itanium~" />
-        <vers num="1.6.5" edition=":~~~~sparc~" />
-        <vers num="1.6.6" edition="" />
-        <vers num="1.6.6" edition=":~~~~itanium~" />
-        <vers num="1.6.6" edition=":~~~~sparc~" />
-        <vers num="1.6.7" edition="" />
-        <vers num="1.6.7" edition=":~~~~sparc~" />
-        <vers num="1.6.7" edition=":~~~~itanium~" />
-        <vers num="1.6.8" edition="" />
-        <vers num="1.6.8" edition=":~~~~sparc~" />
-        <vers num="1.6.8" edition=":~~~~itanium~" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2395" published="2012-06-15" name="CVE-2012-2395" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Incomplete blacklist vulnerability in action_power.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method in the xmlrpc API.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/cobbler/cobbler/commit/6d9167e5da44eca56bdf42b5776097a6779aaadf" source="CONFIRM" patch="1">https://github.com/cobbler/cobbler/commit/6d9167e5da44eca56bdf42b5776097a6779aaadf</ref>
-      <ref url="https://github.com/cobbler/cobbler/issues/141" source="CONFIRM">https://github.com/cobbler/cobbler/issues/141</ref>
-      <ref url="https://bugs.launchpad.net/ubuntu/+source/cobbler/+bug/978999" source="MISC">https://bugs.launchpad.net/ubuntu/+source/cobbler/+bug/978999</ref>
-      <ref url="http://www.securityfocus.com/bid/53666" source="BID">53666</ref>
-      <ref url="http://www.osvdb.org/82458" source="OSVDB">82458</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/23/4" source="MLIST">[oss-security] 20120523 CVE request: cobbler command injection</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/23/18" source="MLIST">[oss-security] 20120523 Re: CVE request: cobbler command injection</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00000.html" source="SUSE">SUSE-SU-2012:0814</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00016.html" source="SUSE">openSUSE-SU-2012:0655</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="michael_dehaan" name="cobbler">
-        <vers num="2.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2396" published="2012-04-19" name="CVE-2012-2396" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted MP4 file.</descript>
-      <descript source="nvd">http://cwe.mitre.org/data/definitions/369.html 'CWE-369: Divide By Zero'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/18757/" source="EXPLOIT-DB">18757</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15615" source="OVAL">oval:org.mitre.oval:def:15615</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="videolan" name="vlc_media_player">
-        <vers num="2.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2397" published="2012-04-20" name="CVE-2012-2397" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in ownCloud before 3.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences via vectors involving contacts.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/2" source="MLIST">[oss-security] 20120901 Re: CVE - ownCloud</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/11/1" source="MLIST">[oss-security] 20120810 ownCloud - matching CVEs to fix information and vice versa</ref>
-      <ref url="http://secunia.com/advisories/48850" source="SECUNIA">48850</ref>
-      <ref url="http://owncloud.org/security/advisories/CVE-2012-2397/" source="CONFIRM">http://owncloud.org/security/advisories/CVE-2012-2397/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="owncloud" name="owncloud">
-        <vers num="3.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2398" published="2012-04-20" name="CVE-2012-2398" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in files/ajax/download.php in ownCloud before 3.0.3 allows remote attackers to inject arbitrary web script or HTML via the files parameter, a different vulnerability than CVE-2012-2269.4.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/2" source="MLIST">[oss-security] 20120901 Re: CVE - ownCloud</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/11/1" source="MLIST">[oss-security] 20120810 ownCloud - matching CVEs to fix information and vice versa</ref>
-      <ref url="http://secunia.com/advisories/48850" source="SECUNIA" adv="1">48850</ref>
-      <ref url="http://owncloud.org/security/advisories/cve-2012-2398/" source="CONFIRM">http://owncloud.org/security/advisories/cve-2012-2398/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="owncloud" name="owncloud">
-        <vers num="3.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2399" published="2012-04-21" name="CVE-2012-2399" modified="2012-06-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in wp-includes/js/swfupload/swfupload.swf in WordPress before 3.3.2 has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://wordpress.org/news/2012/04/wordpress-3-3-2/" source="CONFIRM" patch="1" adv="1">http://wordpress.org/news/2012/04/wordpress-3-3-2/</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2470" source="DEBIAN">DSA-2470</ref>
-      <ref url="http://secunia.com/advisories/49138" source="SECUNIA">49138</ref>
-      <ref url="http://core.trac.wordpress.org/browser/branches/3.3/wp-includes/js/swfupload/swfupload.swf?rev=20503" source="CONFIRM">http://core.trac.wordpress.org/browser/branches/3.3/wp-includes/js/swfupload/swfupload.swf?rev=20503</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wordpress" name="wordpress">
-        <vers num="0.71" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" edition="a" />
-        <vers num="1.3" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.1" />
-        <vers num="1.5.1.2" />
-        <vers num="1.5.1.3" />
-        <vers num="1.5.2" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.2" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.5" />
-        <vers num="2.7" />
-        <vers num="2.7.1" />
-        <vers num="2.8" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" edition="a" />
-        <vers num="2.8.5" />
-        <vers num="2.8.5.1" />
-        <vers num="2.8.5.2" />
-        <vers num="2.8.6" />
-        <vers num="2.9" />
-        <vers num="2.9.1" />
-        <vers num="2.9.1.1" />
-        <vers num="2.9.2" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.3" />
-        <vers prev="1" num="3.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2400" published="2012-04-21" name="CVE-2012-2400" modified="2012-06-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://wordpress.org/news/2012/04/wordpress-3-3-2/" source="CONFIRM" patch="1" adv="1">http://wordpress.org/news/2012/04/wordpress-3-3-2/</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2470" source="DEBIAN">DSA-2470</ref>
-      <ref url="http://secunia.com/advisories/49138" source="SECUNIA">49138</ref>
-      <ref url="http://core.trac.wordpress.org/changeset/20499/branches/3.3/wp-includes/js/swfobject.js" source="CONFIRM">http://core.trac.wordpress.org/changeset/20499/branches/3.3/wp-includes/js/swfobject.js</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wordpress" name="wordpress">
-        <vers num="0.71" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" edition="a" />
-        <vers num="1.3" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.1" />
-        <vers num="1.5.1.2" />
-        <vers num="1.5.1.3" />
-        <vers num="1.5.2" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.2" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.5" />
-        <vers num="2.7" />
-        <vers num="2.7.1" />
-        <vers num="2.8" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" edition="a" />
-        <vers num="2.8.5" />
-        <vers num="2.8.5.1" />
-        <vers num="2.8.5.2" />
-        <vers num="2.8.6" />
-        <vers num="2.9" />
-        <vers num="2.9.1" />
-        <vers num="2.9.1.1" />
-        <vers num="2.9.2" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.3" />
-        <vers prev="1" num="3.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2401" published="2012-04-21" name="CVE-2012-2401" modified="2012-06-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which the SWF content was loaded, which allows remote attackers to bypass the Same Origin Policy via crafted content.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://wordpress.org/news/2012/04/wordpress-3-3-2/" source="CONFIRM" patch="1" adv="1">http://wordpress.org/news/2012/04/wordpress-3-3-2/</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2470" source="DEBIAN">DSA-2470</ref>
-      <ref url="http://secunia.com/advisories/49138" source="SECUNIA">49138</ref>
-      <ref url="http://core.trac.wordpress.org/browser/branches/3.3/wp-includes/js/plupload?rev=20487" source="CONFIRM">http://core.trac.wordpress.org/browser/branches/3.3/wp-includes/js/plupload?rev=20487</ref>
-      <ref url="http://core.trac.wordpress.org/browser/branches/3.3/wp-includes/js/plupload/changelog.txt?rev=20487" source="CONFIRM">http://core.trac.wordpress.org/browser/branches/3.3/wp-includes/js/plupload/changelog.txt?rev=20487</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="plupload" name="plupload">
-        <vers num="1.5.2" />
-        <vers prev="1" num="1.5.3" />
-      </prod>
-      <prod vendor="wordpress" name="wordpress">
-        <vers num="0.71" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" edition="a" />
-        <vers num="1.3" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.1" />
-        <vers num="1.5.1.2" />
-        <vers num="1.5.1.3" />
-        <vers num="1.5.2" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.2" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.5" />
-        <vers num="2.7" />
-        <vers num="2.7.1" />
-        <vers num="2.8" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" edition="a" />
-        <vers num="2.8.5" />
-        <vers num="2.8.5.1" />
-        <vers num="2.8.5.2" />
-        <vers num="2.8.6" />
-        <vers num="2.9" />
-        <vers num="2.9.1" />
-        <vers num="2.9.1.1" />
-        <vers num="2.9.2" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.3" />
-        <vers prev="1" num="3.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2402" published="2012-04-21" name="CVE-2012-2402" modified="2012-06-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:P)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to bypass intended access restrictions and deactivate network-wide plugins via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://wordpress.org/news/2012/04/wordpress-3-3-2/" source="CONFIRM" patch="1" adv="1">http://wordpress.org/news/2012/04/wordpress-3-3-2/</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2470" source="DEBIAN">DSA-2470</ref>
-      <ref url="http://secunia.com/advisories/49138" source="SECUNIA">49138</ref>
-      <ref url="http://core.trac.wordpress.org/changeset/20526/branches/3.3/wp-admin/plugins.php" source="CONFIRM">http://core.trac.wordpress.org/changeset/20526/branches/3.3/wp-admin/plugins.php</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wordpress" name="wordpress">
-        <vers num="0.71" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" edition="a" />
-        <vers num="1.3" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.1" />
-        <vers num="1.5.1.2" />
-        <vers num="1.5.1.3" />
-        <vers num="1.5.2" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.2" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.5" />
-        <vers num="2.7" />
-        <vers num="2.7.1" />
-        <vers num="2.8" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" edition="a" />
-        <vers num="2.8.5" />
-        <vers num="2.8.5.1" />
-        <vers num="2.8.5.2" />
-        <vers num="2.8.6" />
-        <vers num="2.9" />
-        <vers num="2.9.1" />
-        <vers num="2.9.1.1" />
-        <vers num="2.9.2" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.3" />
-        <vers prev="1" num="3.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2403" published="2012-04-21" name="CVE-2012-2403" modified="2012-06-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://wordpress.org/news/2012/04/wordpress-3-3-2/" source="CONFIRM" patch="1" adv="1">http://wordpress.org/news/2012/04/wordpress-3-3-2/</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2470" source="DEBIAN">DSA-2470</ref>
-      <ref url="http://secunia.com/advisories/49138" source="SECUNIA">49138</ref>
-      <ref url="http://core.trac.wordpress.org/changeset/20493/branches/3.3/wp-includes/formatting.php" source="CONFIRM">http://core.trac.wordpress.org/changeset/20493/branches/3.3/wp-includes/formatting.php</ref>
-      <ref url="http://core.trac.wordpress.org/changeset/20493/branches/3.3/wp-includes/capabilities.php" source="CONFIRM">http://core.trac.wordpress.org/changeset/20493/branches/3.3/wp-includes/capabilities.php</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wordpress" name="wordpress">
-        <vers num="0.71" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" edition="a" />
-        <vers num="1.3" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.1" />
-        <vers num="1.5.1.2" />
-        <vers num="1.5.1.3" />
-        <vers num="1.5.2" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.2" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.5" />
-        <vers num="2.7" />
-        <vers num="2.7.1" />
-        <vers num="2.8" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" edition="a" />
-        <vers num="2.8.5" />
-        <vers num="2.8.5.1" />
-        <vers num="2.8.5.2" />
-        <vers num="2.8.6" />
-        <vers num="2.9" />
-        <vers num="2.9.1" />
-        <vers num="2.9.1.1" />
-        <vers num="2.9.2" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.3" />
-        <vers prev="1" num="3.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2404" published="2012-04-21" name="CVE-2012-2404" modified="2012-06-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">wp-comments-post.php in WordPress before 3.3.2 supports offsite redirects, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://wordpress.org/news/2012/04/wordpress-3-3-2/" source="CONFIRM" patch="1" adv="1">http://wordpress.org/news/2012/04/wordpress-3-3-2/</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2470" source="DEBIAN">DSA-2470</ref>
-      <ref url="http://secunia.com/advisories/49138" source="SECUNIA">49138</ref>
-      <ref url="http://core.trac.wordpress.org/changeset/20486/branches/3.3/wp-comments-post.php" source="CONFIRM">http://core.trac.wordpress.org/changeset/20486/branches/3.3/wp-comments-post.php</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wordpress" name="wordpress">
-        <vers num="0.71" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" edition="a" />
-        <vers num="1.3" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.1" />
-        <vers num="1.5.1.2" />
-        <vers num="1.5.1.3" />
-        <vers num="1.5.2" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.2" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.5" />
-        <vers num="2.7" />
-        <vers num="2.7.1" />
-        <vers num="2.8" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" edition="a" />
-        <vers num="2.8.5" />
-        <vers num="2.8.5.1" />
-        <vers num="2.8.5.2" />
-        <vers num="2.8.6" />
-        <vers num="2.9" />
-        <vers num="2.9.1" />
-        <vers num="2.9.1.1" />
-        <vers num="2.9.2" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.3" />
-        <vers prev="1" num="3.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2405" published="2012-04-22" name="CVE-2012-2405" modified="2012-04-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a different vulnerability than CVE-2012-1113.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=812045" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=812045</ref>
-      <ref url="http://gallery.menalto.com/gallery_3_0_3_and_gallery_2_3_2" source="CONFIRM" adv="1">http://gallery.menalto.com/gallery_3_0_3_and_gallery_2_3_2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="maian" name="gallery">
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-      </prod>
-      <prod vendor="menalto" name="gallery">
-        <vers num="2.2.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2406" published="2012-05-18" name="CVE-2012-2406" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, which allows remote attackers to execute arbitrary code via a crafted file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75647" source="XF">realplayer-asmrulebook-code-exec(75647)</ref>
-      <ref url="http://www.securitytracker.com/id?1027076" source="SECTRACK">1027076</ref>
-      <ref url="http://service.real.com/realplayer/security/05152012_player/en/" source="CONFIRM" adv="1">http://service.real.com/realplayer/security/05152012_player/en/</ref>
-      <ref url="http://secunia.com/advisories/49193" source="SECUNIA">49193</ref>
-      <ref url="http://osvdb.org/81943" source="OSVDB">81943</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="realplayer">
-        <vers num="10.0" />
-        <vers num="10.5" />
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="11.0.2" />
-        <vers num="11.0.2.1744" />
-        <vers num="11.0.2.2315" />
-        <vers num="11.0.3" />
-        <vers num="11.0.4" />
-        <vers num="11.0.5" />
-        <vers num="11.1" />
-        <vers num="11.1.3" />
-        <vers num="11_build_6.0.14.748" />
-        <vers num="12.0.0.1444" />
-        <vers num="12.0.0.1548" />
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.0.1.609" />
-        <vers num="14.0.2" />
-        <vers num="14.0.3" />
-        <vers num="14.0.4" />
-        <vers num="14.0.5" />
-        <vers num="15.0.0" />
-        <vers num="15.0.1.13" />
-        <vers prev="1" num="15.0.4" />
-        <vers num="15.02.71" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-      </prod>
-      <prod vendor="realnetworks" name="realplayer_sp">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2407" published="2012-09-12" name="CVE-2012-2407" modified="2012-09-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted AAC file that is not properly handled during stream-data unpacking.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://service.real.com/realplayer/security/09072012_player/en/" source="CONFIRM" adv="1">http://service.real.com/realplayer/security/09072012_player/en/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="realplayer">
-        <vers num="10.0" />
-        <vers num="10.5" />
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="11.0.2" />
-        <vers num="11.0.2.1744" />
-        <vers num="11.0.2.2315" />
-        <vers num="11.0.3" />
-        <vers num="11.0.4" />
-        <vers num="11.0.5" />
-        <vers num="11.1" />
-        <vers num="11.1.3" />
-        <vers num="11_build_6.0.14.748" />
-        <vers num="12.0.0.1444" />
-        <vers num="12.0.0.1548" />
-        <vers num="12.0.0.1701" edition="" />
-        <vers num="12.0.0.1701" edition=":mac" />
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.0.1.609" />
-        <vers num="14.0.2" />
-        <vers num="14.0.3" />
-        <vers num="14.0.4" />
-        <vers num="14.0.5" />
-        <vers num="15.0.2.72" />
-        <vers num="15.0.3.37" />
-        <vers prev="1" num="15.0.5.109" />
-        <vers num="2.1.2" edition="" />
-        <vers num="2.1.2" edition=":enterprise" />
-        <vers num="2.1.3" edition="" />
-        <vers num="2.1.3" edition=":enterprise" />
-        <vers num="2.1.4" edition="" />
-        <vers num="2.1.4" edition=":enterprise" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-      </prod>
-      <prod vendor="realnetworks" name="realplayer_sp">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2408" published="2012-09-12" name="CVE-2012-2408" modified="2012-09-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted AAC file that is not properly handled during decoding.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://service.real.com/realplayer/security/09072012_player/en/" source="CONFIRM" adv="1">http://service.real.com/realplayer/security/09072012_player/en/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="realplayer">
-        <vers num="10.0" />
-        <vers num="10.5" />
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="11.0.2" />
-        <vers num="11.0.2.1744" />
-        <vers num="11.0.2.2315" />
-        <vers num="11.0.3" />
-        <vers num="11.0.4" />
-        <vers num="11.0.5" />
-        <vers num="11.1" />
-        <vers num="11.1.3" />
-        <vers num="11_build_6.0.14.748" />
-        <vers num="12.0.0.1444" />
-        <vers num="12.0.0.1548" />
-        <vers num="12.0.0.1701" edition="" />
-        <vers num="12.0.0.1701" edition=":mac" />
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.0.1.609" />
-        <vers num="14.0.2" />
-        <vers num="14.0.3" />
-        <vers num="14.0.4" />
-        <vers num="14.0.5" />
-        <vers num="15.0.2.72" />
-        <vers num="15.0.3.37" />
-        <vers prev="1" num="15.0.5.109" />
-        <vers num="2.1.2" edition="" />
-        <vers num="2.1.2" edition=":enterprise" />
-        <vers num="2.1.3" edition="" />
-        <vers num="2.1.3" edition=":enterprise" />
-        <vers num="2.1.4" edition="" />
-        <vers num="2.1.4" edition=":enterprise" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-      </prod>
-      <prod vendor="realnetworks" name="realplayer_sp">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2409" published="2012-09-12" name="CVE-2012-2409" modified="2012-09-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted RealMedia file, a different vulnerability than CVE-2012-2410.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://service.real.com/realplayer/security/09072012_player/en/" source="CONFIRM" adv="1">http://service.real.com/realplayer/security/09072012_player/en/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="realplayer">
-        <vers num="10.0" />
-        <vers num="10.5" />
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="11.0.2" />
-        <vers num="11.0.2.1744" />
-        <vers num="11.0.2.2315" />
-        <vers num="11.0.3" />
-        <vers num="11.0.4" />
-        <vers num="11.0.5" />
-        <vers num="11.1" />
-        <vers num="11.1.3" />
-        <vers num="11_build_6.0.14.748" />
-        <vers num="12.0.0.1444" />
-        <vers num="12.0.0.1548" />
-        <vers num="12.0.0.1701" edition="" />
-        <vers num="12.0.0.1701" edition=":mac" />
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.0.1.609" />
-        <vers num="14.0.2" />
-        <vers num="14.0.3" />
-        <vers num="14.0.4" />
-        <vers num="14.0.5" />
-        <vers num="15.0.2.72" />
-        <vers num="15.0.3.37" />
-        <vers prev="1" num="15.0.5.109" />
-        <vers num="2.1.2" edition="" />
-        <vers num="2.1.2" edition=":enterprise" />
-        <vers num="2.1.3" edition="" />
-        <vers num="2.1.3" edition=":enterprise" />
-        <vers num="2.1.4" edition="" />
-        <vers num="2.1.4" edition=":enterprise" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-      </prod>
-      <prod vendor="realnetworks" name="realplayer_sp">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2410" published="2012-09-12" name="CVE-2012-2410" modified="2012-09-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted RealMedia file, a different vulnerability than CVE-2012-2409.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://service.real.com/realplayer/security/09072012_player/en/" source="CONFIRM" adv="1">http://service.real.com/realplayer/security/09072012_player/en/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="realplayer">
-        <vers num="10.0" />
-        <vers num="10.5" />
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="11.0.2" />
-        <vers num="11.0.2.1744" />
-        <vers num="11.0.2.2315" />
-        <vers num="11.0.3" />
-        <vers num="11.0.4" />
-        <vers num="11.0.5" />
-        <vers num="11.1" />
-        <vers num="11.1.3" />
-        <vers num="11_build_6.0.14.748" />
-        <vers num="12.0.0.1444" />
-        <vers num="12.0.0.1548" />
-        <vers num="12.0.0.1701" edition="" />
-        <vers num="12.0.0.1701" edition=":mac" />
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.0.1.609" />
-        <vers num="14.0.2" />
-        <vers num="14.0.3" />
-        <vers num="14.0.4" />
-        <vers num="14.0.5" />
-        <vers num="15.0.2.72" />
-        <vers num="15.0.3.37" />
-        <vers prev="1" num="15.0.5.109" />
-        <vers num="2.1.2" edition="" />
-        <vers num="2.1.2" edition=":enterprise" />
-        <vers num="2.1.3" edition="" />
-        <vers num="2.1.3" edition=":enterprise" />
-        <vers num="2.1.4" edition="" />
-        <vers num="2.1.4" edition=":enterprise" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-      </prod>
-      <prod vendor="realnetworks" name="realplayer_sp">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2411" published="2012-05-18" name="CVE-2012-2411" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RealJukebox Media file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75648" source="XF">realplayer-realjukebox-bo(75648)</ref>
-      <ref url="http://www.securitytracker.com/id?1027076" source="SECTRACK">1027076</ref>
-      <ref url="http://service.real.com/realplayer/security/05152012_player/en/" source="CONFIRM">http://service.real.com/realplayer/security/05152012_player/en/</ref>
-      <ref url="http://secunia.com/advisories/49193" source="SECUNIA">49193</ref>
-      <ref url="http://osvdb.org/81944" source="OSVDB">81944</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="realplayer">
-        <vers num="10.0" />
-        <vers num="10.5" />
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="11.0.2" />
-        <vers num="11.0.2.1744" />
-        <vers num="11.0.2.2315" />
-        <vers num="11.0.3" />
-        <vers num="11.0.4" />
-        <vers num="11.0.5" />
-        <vers num="11.1" />
-        <vers num="11.1.3" />
-        <vers num="11_build_6.0.14.748" />
-        <vers num="12.0.0.1444" />
-        <vers num="12.0.0.1548" />
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.0.1.609" />
-        <vers num="14.0.2" />
-        <vers num="14.0.3" />
-        <vers num="14.0.4" />
-        <vers num="14.0.5" />
-        <vers num="15.0.0" />
-        <vers num="15.0.1.13" />
-        <vers prev="1" num="15.0.4" />
-        <vers num="15.02.71" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-      </prod>
-      <prod vendor="realnetworks" name="realplayer_sp">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2414" published="2012-04-30" name="CVE-2012-2414" modified="2012-05-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">main/manager.c in the Manager Interface in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4 does not properly enforce System class authorization requirements, which allows remote authenticated users to execute arbitrary commands via (1) the originate action in the MixMonitor application, (2) the SHELL and EVAL functions in the GetVar manager action, or (3) the SHELL and EVAL functions in the Status manager action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://downloads.asterisk.org/pub/security/AST-2012-004.html" source="CONFIRM" patch="1" adv="1">http://downloads.asterisk.org/pub/security/AST-2012-004.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="asterisk" name="open_source">
-        <vers num="1.6.2.0" edition="rc2" />
-        <vers num="1.6.2.0" edition="rc3" />
-        <vers num="1.6.2.0" edition="rc4" />
-        <vers num="1.6.2.0" edition="rc5" />
-        <vers num="1.6.2.0" edition="rc6" />
-        <vers num="1.6.2.0" edition="rc7" />
-        <vers num="1.6.2.0" edition="rc8" />
-        <vers num="1.6.2.1" edition="rc1" />
-        <vers num="1.6.2.10" edition="rc1" />
-        <vers num="1.6.2.10" edition="rc2" />
-        <vers num="1.6.2.11" edition="rc1" />
-        <vers num="1.6.2.11" edition="rc2" />
-        <vers num="1.6.2.12" edition="rc1" />
-        <vers num="1.6.2.13" />
-        <vers num="1.6.2.14" edition="rc1" />
-        <vers num="1.6.2.15" edition="rc1" />
-        <vers num="1.6.2.15.1" />
-        <vers num="1.6.2.16" edition="rc1" />
-        <vers num="1.6.2.16.1" />
-        <vers num="1.6.2.16.2" />
-        <vers num="1.6.2.17" edition="rc1" />
-        <vers num="1.6.2.17" edition="rc2" />
-        <vers num="1.6.2.17" edition="rc3" />
-        <vers num="1.6.2.17.1" />
-        <vers num="1.6.2.17.2" />
-        <vers num="1.6.2.17.3" />
-        <vers num="1.6.2.18" edition="rc1" />
-        <vers num="1.6.2.18.1" />
-        <vers num="1.6.2.18.2" />
-        <vers num="1.6.2.19" edition="rc1" />
-        <vers num="1.6.2.2" />
-        <vers num="1.6.2.20" />
-        <vers num="1.6.2.21" />
-        <vers num="1.6.2.22" />
-        <vers num="1.6.2.23" />
-        <vers num="1.6.2.3" edition="rc2" />
-        <vers num="1.6.2.4" />
-        <vers num="1.6.2.5" />
-        <vers num="1.6.2.6" edition="rc1" />
-        <vers num="1.6.2.6" edition="rc2" />
-        <vers num="1.6.2.7" edition="rc1" />
-        <vers num="1.6.2.7" edition="rc2" />
-        <vers num="1.6.2.7" edition="rc3" />
-        <vers num="1.6.2.8" edition="rc1" />
-        <vers num="1.6.2.9" edition="rc1" />
-        <vers num="1.6.2.9" edition="rc2" />
-        <vers num="1.6.2.9" edition="rc3" />
-        <vers num="1.8.0" edition="beta1" />
-        <vers num="1.8.0" edition="beta2" />
-        <vers num="1.8.0" edition="beta3" />
-        <vers num="1.8.0" edition="beta4" />
-        <vers num="1.8.0" edition="beta5" />
-        <vers num="1.8.0" edition="rc2" />
-        <vers num="1.8.0" edition="rc3" />
-        <vers num="1.8.0" edition="rc4" />
-        <vers num="1.8.0" edition="rc5" />
-        <vers num="1.8.1" edition="rc1" />
-        <vers num="1.8.1.1" />
-        <vers num="1.8.1.2" />
-        <vers num="1.8.10.0" edition="rc1" />
-        <vers num="1.8.10.0" edition="rc2" />
-        <vers num="1.8.10.0" edition="rc3" />
-        <vers num="1.8.10.0" edition="rc4" />
-        <vers num="1.8.10.1" />
-        <vers num="1.8.11.0" edition="rc2" />
-        <vers num="1.8.11.0" edition="rc3" />
-        <vers num="1.8.2" edition="rc1" />
-        <vers num="1.8.2.1" />
-        <vers num="1.8.2.2" />
-        <vers num="1.8.2.3" />
-        <vers num="1.8.2.4" />
-        <vers num="1.8.3" edition="rc1" />
-        <vers num="1.8.3" edition="rc2" />
-        <vers num="1.8.3" edition="rc3" />
-        <vers num="1.8.3.1" />
-        <vers num="1.8.3.2" />
-        <vers num="1.8.3.3" />
-        <vers num="1.8.4" edition="rc1" />
-        <vers num="1.8.4" edition="rc2" />
-        <vers num="1.8.4" edition="rc3" />
-        <vers num="1.8.4.1" />
-        <vers num="1.8.4.2" />
-        <vers num="1.8.4.3" />
-        <vers num="1.8.4.4" />
-        <vers num="1.8.5" edition="rc1" />
-        <vers num="1.8.5.0" />
-        <vers num="1.8.6.0" edition="rc1" />
-        <vers num="1.8.6.0" edition="rc2" />
-        <vers num="1.8.6.0" edition="rc3" />
-        <vers num="1.8.7.0" edition="rc1" />
-        <vers num="1.8.7.0" edition="rc2" />
-        <vers num="1.8.7.1" />
-        <vers num="1.8.7.2" />
-        <vers num="1.8.8.0" edition="rc1" />
-        <vers num="1.8.8.0" edition="rc2" />
-        <vers num="1.8.8.0" edition="rc3" />
-        <vers num="1.8.8.0" edition="rc4" />
-        <vers num="1.8.8.0" edition="rc5" />
-        <vers num="1.8.8.1" />
-        <vers num="1.8.8.2" />
-        <vers num="1.8.9.0" edition="rc1" />
-        <vers num="1.8.9.0" edition="rc2" />
-        <vers num="1.8.9.0" edition="rc3" />
-        <vers num="1.8.9.1" />
-        <vers num="1.8.9.2" />
-        <vers num="1.8.9.3" />
-        <vers num="10.0.0" edition="beta1" />
-        <vers num="10.0.0" edition="beta2" />
-        <vers num="10.0.0" edition="rc1" />
-        <vers num="10.0.0" edition="rc2" />
-        <vers num="10.0.0" edition="rc3" />
-        <vers num="10.0.1" />
-        <vers num="10.1.0" edition="rc1" />
-        <vers num="10.1.0" edition="rc2" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.2.0" edition="rc1" />
-        <vers num="10.2.0" edition="rc2" />
-        <vers num="10.2.0" edition="rc3" />
-        <vers num="10.2.0" edition="rc4" />
-        <vers num="10.2.1" />
-        <vers num="10.3.0" edition="rc2" />
-        <vers num="10.3.0" edition="rc3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2415" published="2012-04-30" name="CVE-2012-2415" modified="2012-09-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in chan_skinny.c in the Skinny channel driver in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 allows remote authenticated users to cause a denial of service or possibly have unspecified other impact via a series of KEYPAD_BUTTON_MESSAGE events.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://downloads.asterisk.org/pub/security/AST-2012-005.html" source="CONFIRM" patch="1" adv="1">http://downloads.asterisk.org/pub/security/AST-2012-005.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="asterisk" name="open_source">
-        <vers num="1.6.2.0" edition="rc2" />
-        <vers num="1.6.2.0" edition="rc3" />
-        <vers num="1.6.2.0" edition="rc4" />
-        <vers num="1.6.2.0" edition="rc5" />
-        <vers num="1.6.2.0" edition="rc6" />
-        <vers num="1.6.2.0" edition="rc7" />
-        <vers num="1.6.2.0" edition="rc8" />
-        <vers num="1.6.2.1" edition="rc1" />
-        <vers num="1.6.2.10" edition="rc1" />
-        <vers num="1.6.2.10" edition="rc2" />
-        <vers num="1.6.2.11" edition="rc1" />
-        <vers num="1.6.2.11" edition="rc2" />
-        <vers num="1.6.2.12" edition="rc1" />
-        <vers num="1.6.2.13" />
-        <vers num="1.6.2.14" edition="rc1" />
-        <vers num="1.6.2.15" edition="rc1" />
-        <vers num="1.6.2.15.1" />
-        <vers num="1.6.2.16" edition="rc1" />
-        <vers num="1.6.2.16.1" />
-        <vers num="1.6.2.16.2" />
-        <vers num="1.6.2.17" edition="rc1" />
-        <vers num="1.6.2.17" edition="rc2" />
-        <vers num="1.6.2.17" edition="rc3" />
-        <vers num="1.6.2.17.1" />
-        <vers num="1.6.2.17.2" />
-        <vers num="1.6.2.17.3" />
-        <vers num="1.6.2.18" edition="rc1" />
-        <vers num="1.6.2.18.1" />
-        <vers num="1.6.2.18.2" />
-        <vers num="1.6.2.19" edition="rc1" />
-        <vers num="1.6.2.2" />
-        <vers num="1.6.2.20" />
-        <vers num="1.6.2.21" />
-        <vers num="1.6.2.22" />
-        <vers num="1.6.2.23" />
-        <vers num="1.6.2.3" edition="rc2" />
-        <vers num="1.6.2.4" />
-        <vers num="1.6.2.5" />
-        <vers num="1.6.2.6" edition="rc1" />
-        <vers num="1.6.2.6" edition="rc2" />
-        <vers num="1.6.2.7" edition="rc1" />
-        <vers num="1.6.2.7" edition="rc2" />
-        <vers num="1.6.2.7" edition="rc3" />
-        <vers num="1.6.2.8" edition="rc1" />
-        <vers num="1.6.2.9" edition="rc1" />
-        <vers num="1.6.2.9" edition="rc2" />
-        <vers num="1.6.2.9" edition="rc3" />
-        <vers num="1.8.0" edition="beta1" />
-        <vers num="1.8.0" edition="beta2" />
-        <vers num="1.8.0" edition="beta3" />
-        <vers num="1.8.0" edition="beta4" />
-        <vers num="1.8.0" edition="beta5" />
-        <vers num="1.8.0" edition="rc2" />
-        <vers num="1.8.0" edition="rc3" />
-        <vers num="1.8.0" edition="rc4" />
-        <vers num="1.8.0" edition="rc5" />
-        <vers num="1.8.1" edition="rc1" />
-        <vers num="1.8.1.1" />
-        <vers num="1.8.1.2" />
-        <vers num="1.8.10.0" edition="rc1" />
-        <vers num="1.8.10.0" edition="rc2" />
-        <vers num="1.8.10.0" edition="rc3" />
-        <vers num="1.8.10.0" edition="rc4" />
-        <vers num="1.8.10.1" />
-        <vers num="1.8.11.0" edition="rc2" />
-        <vers num="1.8.11.0" edition="rc3" />
-        <vers num="1.8.2" edition="rc1" />
-        <vers num="1.8.2.1" />
-        <vers num="1.8.2.2" />
-        <vers num="1.8.2.3" />
-        <vers num="1.8.2.4" />
-        <vers num="1.8.3" edition="rc1" />
-        <vers num="1.8.3" edition="rc2" />
-        <vers num="1.8.3" edition="rc3" />
-        <vers num="1.8.3.1" />
-        <vers num="1.8.3.2" />
-        <vers num="1.8.3.3" />
-        <vers num="1.8.4" edition="rc1" />
-        <vers num="1.8.4" edition="rc2" />
-        <vers num="1.8.4" edition="rc3" />
-        <vers num="1.8.4.1" />
-        <vers num="1.8.4.2" />
-        <vers num="1.8.4.3" />
-        <vers num="1.8.4.4" />
-        <vers num="1.8.5" edition="rc1" />
-        <vers num="1.8.5.0" />
-        <vers num="1.8.6.0" edition="rc1" />
-        <vers num="1.8.6.0" edition="rc2" />
-        <vers num="1.8.6.0" edition="rc3" />
-        <vers num="1.8.7.0" edition="rc1" />
-        <vers num="1.8.7.0" edition="rc2" />
-        <vers num="1.8.7.1" />
-        <vers num="1.8.7.2" />
-        <vers num="1.8.8.0" edition="rc1" />
-        <vers num="1.8.8.0" edition="rc2" />
-        <vers num="1.8.8.0" edition="rc3" />
-        <vers num="1.8.8.0" edition="rc4" />
-        <vers num="1.8.8.0" edition="rc5" />
-        <vers num="1.8.8.1" />
-        <vers num="1.8.8.2" />
-        <vers num="1.8.9.0" edition="rc1" />
-        <vers num="1.8.9.0" edition="rc2" />
-        <vers num="1.8.9.0" edition="rc3" />
-        <vers num="1.8.9.1" />
-        <vers num="1.8.9.2" />
-        <vers num="1.8.9.3" />
-        <vers num="10.0.0" edition="beta1" />
-        <vers num="10.0.0" edition="beta2" />
-        <vers num="10.0.0" edition="rc1" />
-        <vers num="10.0.0" edition="rc2" />
-        <vers num="10.0.0" edition="rc3" />
-        <vers num="10.0.1" />
-        <vers num="10.1.0" edition="rc1" />
-        <vers num="10.1.0" edition="rc2" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.2.0" edition="rc1" />
-        <vers num="10.2.0" edition="rc2" />
-        <vers num="10.2.0" edition="rc3" />
-        <vers num="10.2.0" edition="rc4" />
-        <vers num="10.2.1" />
-        <vers num="10.3.0" edition="rc2" />
-        <vers num="10.3.0" edition="rc3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2416" published="2012-04-30" name="CVE-2012-2416" modified="2012-05-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service (daemon crash) by sending a SIP UPDATE message that triggers a connected-line update attempt without an associated channel.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://downloads.asterisk.org/pub/security/AST-2012-006.html" source="CONFIRM" patch="1" adv="1">http://downloads.asterisk.org/pub/security/AST-2012-006.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="asterisk" name="open_source">
-        <vers num="1.6.2.0" edition="rc2" />
-        <vers num="1.6.2.0" edition="rc3" />
-        <vers num="1.6.2.0" edition="rc4" />
-        <vers num="1.6.2.0" edition="rc5" />
-        <vers num="1.6.2.0" edition="rc6" />
-        <vers num="1.6.2.0" edition="rc7" />
-        <vers num="1.6.2.0" edition="rc8" />
-        <vers num="1.6.2.1" edition="rc1" />
-        <vers num="1.6.2.10" edition="rc1" />
-        <vers num="1.6.2.10" edition="rc2" />
-        <vers num="1.6.2.11" edition="rc1" />
-        <vers num="1.6.2.11" edition="rc2" />
-        <vers num="1.6.2.12" edition="rc1" />
-        <vers num="1.6.2.13" />
-        <vers num="1.6.2.14" edition="rc1" />
-        <vers num="1.6.2.15" edition="rc1" />
-        <vers num="1.6.2.15.1" />
-        <vers num="1.6.2.16" edition="rc1" />
-        <vers num="1.6.2.16.1" />
-        <vers num="1.6.2.16.2" />
-        <vers num="1.6.2.17" edition="rc1" />
-        <vers num="1.6.2.17" edition="rc2" />
-        <vers num="1.6.2.17" edition="rc3" />
-        <vers num="1.6.2.17.1" />
-        <vers num="1.6.2.17.2" />
-        <vers num="1.6.2.17.3" />
-        <vers num="1.6.2.18" edition="rc1" />
-        <vers num="1.6.2.18.1" />
-        <vers num="1.6.2.18.2" />
-        <vers num="1.6.2.19" edition="rc1" />
-        <vers num="1.6.2.2" />
-        <vers num="1.6.2.20" />
-        <vers num="1.6.2.21" />
-        <vers num="1.6.2.22" />
-        <vers num="1.6.2.23" />
-        <vers num="1.6.2.3" edition="rc2" />
-        <vers num="1.6.2.4" />
-        <vers num="1.6.2.5" />
-        <vers num="1.6.2.6" edition="rc1" />
-        <vers num="1.6.2.6" edition="rc2" />
-        <vers num="1.6.2.7" edition="rc1" />
-        <vers num="1.6.2.7" edition="rc2" />
-        <vers num="1.6.2.7" edition="rc3" />
-        <vers num="1.6.2.8" edition="rc1" />
-        <vers num="1.6.2.9" edition="rc1" />
-        <vers num="1.6.2.9" edition="rc2" />
-        <vers num="1.6.2.9" edition="rc3" />
-        <vers num="1.8.0" edition="beta1" />
-        <vers num="1.8.0" edition="beta2" />
-        <vers num="1.8.0" edition="beta3" />
-        <vers num="1.8.0" edition="beta4" />
-        <vers num="1.8.0" edition="beta5" />
-        <vers num="1.8.0" edition="rc2" />
-        <vers num="1.8.0" edition="rc3" />
-        <vers num="1.8.0" edition="rc4" />
-        <vers num="1.8.0" edition="rc5" />
-        <vers num="1.8.1" edition="rc1" />
-        <vers num="1.8.1.1" />
-        <vers num="1.8.1.2" />
-        <vers num="1.8.10.0" edition="rc1" />
-        <vers num="1.8.10.0" edition="rc2" />
-        <vers num="1.8.10.0" edition="rc3" />
-        <vers num="1.8.10.0" edition="rc4" />
-        <vers num="1.8.10.1" />
-        <vers num="1.8.11.0" edition="rc2" />
-        <vers num="1.8.11.0" edition="rc3" />
-        <vers num="1.8.2" edition="rc1" />
-        <vers num="1.8.2.1" />
-        <vers num="1.8.2.2" />
-        <vers num="1.8.2.3" />
-        <vers num="1.8.2.4" />
-        <vers num="1.8.3" edition="rc1" />
-        <vers num="1.8.3" edition="rc2" />
-        <vers num="1.8.3" edition="rc3" />
-        <vers num="1.8.3.1" />
-        <vers num="1.8.3.2" />
-        <vers num="1.8.3.3" />
-        <vers num="1.8.4" edition="rc1" />
-        <vers num="1.8.4" edition="rc2" />
-        <vers num="1.8.4" edition="rc3" />
-        <vers num="1.8.4.1" />
-        <vers num="1.8.4.2" />
-        <vers num="1.8.4.3" />
-        <vers num="1.8.4.4" />
-        <vers num="1.8.5" edition="rc1" />
-        <vers num="1.8.5.0" />
-        <vers num="1.8.6.0" edition="rc1" />
-        <vers num="1.8.6.0" edition="rc2" />
-        <vers num="1.8.6.0" edition="rc3" />
-        <vers num="1.8.7.0" edition="rc1" />
-        <vers num="1.8.7.0" edition="rc2" />
-        <vers num="1.8.7.1" />
-        <vers num="1.8.7.2" />
-        <vers num="1.8.8.0" edition="rc1" />
-        <vers num="1.8.8.0" edition="rc2" />
-        <vers num="1.8.8.0" edition="rc3" />
-        <vers num="1.8.8.0" edition="rc4" />
-        <vers num="1.8.8.0" edition="rc5" />
-        <vers num="1.8.8.1" />
-        <vers num="1.8.8.2" />
-        <vers num="1.8.9.0" edition="rc1" />
-        <vers num="1.8.9.0" edition="rc2" />
-        <vers num="1.8.9.0" edition="rc3" />
-        <vers num="1.8.9.1" />
-        <vers num="1.8.9.2" />
-        <vers num="1.8.9.3" />
-        <vers num="10.0.0" edition="beta1" />
-        <vers num="10.0.0" edition="beta2" />
-        <vers num="10.0.0" edition="rc1" />
-        <vers num="10.0.0" edition="rc2" />
-        <vers num="10.0.0" edition="rc3" />
-        <vers num="10.0.1" />
-        <vers num="10.1.0" edition="rc1" />
-        <vers num="10.1.0" edition="rc2" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.2.0" edition="rc1" />
-        <vers num="10.2.0" edition="rc2" />
-        <vers num="10.2.0" edition="rc3" />
-        <vers num="10.2.0" edition="rc4" />
-        <vers num="10.2.1" />
-        <vers num="10.3.0" edition="rc2" />
-        <vers num="10.3.0" edition="rc3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2417" published="2012-06-16" name="CVE-2012-2417" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/Legrandin/pycrypto/commit/9f912f13df99ad3421eff360d6a62d7dbec755c2" source="MISC" patch="1">https://github.com/Legrandin/pycrypto/commit/9f912f13df99ad3421eff360d6a62d7dbec755c2</ref>
-      <ref url="https://hermes.opensuse.org/messages/15083589" source="SUSE">openSUSE-SU-2012:0830</ref>
-      <ref url="https://github.com/dlitz/pycrypto/blob/373ea760f21701b162e8c4912a66928ee30d401a/ChangeLog" source="CONFIRM">https://github.com/dlitz/pycrypto/blob/373ea760f21701b162e8c4912a66928ee30d401a/ChangeLog</ref>
-      <ref url="https://bugs.launchpad.net/pycrypto/+bug/985164" source="MISC">https://bugs.launchpad.net/pycrypto/+bug/985164</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75871" source="XF">pycrypto-keys-weak-security(75871)</ref>
-      <ref url="http://www.securityfocus.com/bid/53687" source="BID">53687</ref>
-      <ref url="http://www.osvdb.org/82279" source="OSVDB">82279</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/25/1" source="MLIST">[oss-security] 20120524 CVE-2012-2417 - PyCrypto &lt;= 2.5 insecure ElGamal key generation</ref>
-      <ref url="http://secunia.com/advisories/49263" source="SECUNIA" adv="1">49263</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081789.html" source="FEDORA">FEDORA-2012-8470</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081759.html" source="FEDORA">FEDORA-2012-8490</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081713.html" source="FEDORA">FEDORA-2012-8392</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dlitz" name="pycrypto">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1" edition="alpha2" />
-        <vers num="1.9" edition="alpha1" />
-        <vers num="1.9" edition="alpha2" />
-        <vers num="1.9" edition="alpha3" />
-        <vers num="1.9" edition="alpha4" />
-        <vers num="1.9" edition="alpha5" />
-        <vers num="1.9" edition="alpha6" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.1.0" edition="alpha1" />
-        <vers num="2.1.0" edition="alpha2" />
-        <vers num="2.1.0" edition="beta1" />
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.4" />
-        <vers num="2.4.1" />
-        <vers prev="1" num="2.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2418" published="2012-04-25" name="CVE-2012-2418" modified="2012-04-27" CVSS_version="2.0" CVSS_vector="(AV:A/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="6.8" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.2" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a URI with a % (percent) character as its (1) last or (2) second-to-last character.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/232979" source="CERT-VN">VU#232979</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522138" source="BUGTRAQ">20120330 Intuit Help System Protocol URL Heap Corruption and Memory Leak</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="intuit" name="quickbooks">
-        <vers num="2009" />
-        <vers num="2010" />
-        <vers num="2011" />
-        <vers num="2012" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2419" published="2012-04-25" name="CVE-2012-2419" modified="2012-04-27" CVSS_version="2.0" CVSS_vector="(AV:A/AC:H/Au:N/C:N/I:N/A:P)" CVSS_score="1.8" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.2" CVSS_base_score="1.8">
-    <desc>
-      <descript source="cve">Memory leak in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allows remote attackers to cause a denial of service (memory consumption) via a URI with multiple references to the same name-value pair.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/232979" source="CERT-VN">VU#232979</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522138" source="BUGTRAQ">20120330 Intuit Help System Protocol URL Heap Corruption and Memory Leak</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="intuit" name="quickbooks">
-        <vers num="2009" />
-        <vers num="2010" />
-        <vers num="2011" />
-        <vers num="2012" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2420" published="2012-04-25" name="CVE-2012-2420" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:A/AC:H/Au:N/C:P/I:N/A:N)" CVSS_score="1.8" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.2" CVSS_base_score="1.8">
-    <desc>
-      <descript source="cve">The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow remote attackers to obtain sensitive information via a URI with a % (percent) character as its (1) last or (2) second-to-last character, in situations where a certain "post-URL data" buffer contains a 0x0000 character but a buffer overflow does not occur.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local_network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/232979" source="CERT-VN">VU#232979</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74548" source="XF">quickbooks-helpasyncl-info-disc(74548)</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522138" source="BUGTRAQ">20120330 Intuit Help System Protocol URL Heap Corruption and Memory Leak</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="intuit" name="quickbooks">
-        <vers num="2009" />
-        <vers num="2010" />
-        <vers num="2011" />
-        <vers num="2012" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2421" published="2012-04-25" name="CVE-2012-2421" modified="2012-04-27" CVSS_version="2.0" CVSS_vector="(AV:A/AC:H/Au:N/C:P/I:N/A:N)" CVSS_score="1.8" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.2" CVSS_base_score="1.8">
-    <desc>
-      <descript source="cve">Absolute path traversal vulnerability in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow remote attackers to read arbitrary files in ZIP archives via a full pathname in the URI.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local_network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/232979" source="CERT-VN">VU#232979</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522139" source="BUGTRAQ">20120330 Intuit Help System Protocol File Retrieval</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="intuit" name="quickbooks">
-        <vers num="2009" />
-        <vers num="2010" />
-        <vers num="2011" />
-        <vers num="2012" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2422" published="2012-04-25" name="CVE-2012-2422" modified="2012-04-27" CVSS_version="2.0" CVSS_vector="(AV:A/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="2.9" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="5.5" CVSS_base_score="2.9">
-    <desc>
-      <descript source="cve">Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile functionality.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local_network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/232979" source="CERT-VN">VU#232979</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522139" source="BUGTRAQ">20120330 Intuit Help System Protocol File Retrieval</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="intuit" name="quickbooks">
-        <vers num="2009" />
-        <vers num="2010" />
-        <vers num="2011" />
-        <vers num="2012" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2423" published="2012-04-25" name="CVE-2012-2423" modified="2012-04-27" CVSS_version="2.0" CVSS_vector="(AV:A/AC:H/Au:N/C:P/I:N/A:N)" CVSS_score="1.8" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.2" CVSS_base_score="1.8">
-    <desc>
-      <descript source="cve">The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, provide different responses to remote requests depending on whether a ZIP pathname is valid, which allows remote attackers to obtain potentially sensitive information about the installation path and product version via a series of requests involving the Msxml2.XMLHTTP object.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local_network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/232979" source="CERT-VN">VU#232979</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522139" source="BUGTRAQ">20120330 Intuit Help System Protocol File Retrieval</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="intuit" name="quickbooks">
-        <vers num="2009" />
-        <vers num="2010" />
-        <vers num="2011" />
-        <vers num="2012" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2424" published="2012-04-25" name="CVE-2012-2424" modified="2012-04-27" CVSS_version="2.0" CVSS_vector="(AV:A/AC:H/Au:N/C:N/I:N/A:P)" CVSS_score="1.8" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.2" CVSS_base_score="1.8">
-    <desc>
-      <descript source="cve">The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a URI that lacks a required delimiter.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/476.html
-
-CWE-476: NULL Pointer Dereference
-
-</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/232979" source="CERT-VN">VU#232979</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522139" source="BUGTRAQ">20120330 Intuit Help System Protocol File Retrieval</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522138" source="BUGTRAQ">20120330 Intuit Help System Protocol URL Heap Corruption and Memory Leak</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="intuit" name="quickbooks">
-        <vers num="2009" />
-        <vers num="2010" />
-        <vers num="2011" />
-        <vers num="2012" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2425" published="2012-04-25" name="CVE-2012-2425" modified="2012-04-27" CVSS_version="2.0" CVSS_vector="(AV:A/AC:H/Au:N/C:N/I:N/A:P)" CVSS_score="1.8" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.2" CVSS_base_score="1.8">
-    <desc>
-      <descript source="cve">The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service (application crash) via a long URI.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/232979" source="CERT-VN">VU#232979</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522139" source="BUGTRAQ">20120330 Intuit Help System Protocol File Retrieval</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522138" source="BUGTRAQ">20120330 Intuit Help System Protocol URL Heap Corruption and Memory Leak</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="intuit" name="quickbooks">
-        <vers num="2009" />
-        <vers num="2010" />
-        <vers num="2011" />
-        <vers num="2012" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2426" published="2012-05-25" name="CVE-2012-2426" modified="2012-05-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="xarrow" name="xarrow">
-        <vers prev="1" num="3.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2427" published="2012-05-25" name="CVE-2012-2427" modified="2012-05-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via packets that trigger an invalid free operation.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="xarrow" name="xarrow">
-        <vers prev="1" num="3.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2428" published="2012-05-25" name="CVE-2012-2428" modified="2012-05-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Integer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via a crafted packet that triggers an out-of-bounds read operation.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="xarrow" name="xarrow">
-        <vers prev="1" num="3.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2429" published="2012-05-25" name="CVE-2012-2429" modified="2012-05-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The server in xArrow before 3.4.1 performs an invalid read operation, which allows remote attackers to execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf" source="MISC" patch="1">http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="xarrow" name="xarrow">
-        <vers prev="1" num="3.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2435" published="2012-05-27" name="CVE-2012-2435" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in the captcha module in Pligg CMS before 1.2.2 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the captcha parameter to module.php, as demonstrated by cross-site request forgery (CSRF) attacks.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23089" source="MISC">https://www.htbridge.com/advisory/HTB23089</ref>
-      <ref url="http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&amp;revision=2440" source="CONFIRM">http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&amp;revision=2440</ref>
-      <ref url="http://forums.pligg.com/downloads.php?do=file&amp;id=15" source="CONFIRM">http://forums.pligg.com/downloads.php?do=file&amp;id=15</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pligg" name="pligg_cms">
-        <vers num="1.0.0" edition="rc1" />
-        <vers num="1.0.0" edition="rc2" />
-        <vers num="1.0.0" edition="rc3" />
-        <vers num="1.0.0" edition="rc4" />
-        <vers num="1.0.0" edition="rc5" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.1.0" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.2.0" />
-        <vers prev="1" num="1.2.1" />
-        <vers num="9.5" />
-        <vers num="9.9" />
-        <vers num="9.9.0" edition="beta" />
-        <vers num="9.9.5" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2436" published="2012-05-27" name="CVE-2012-2436" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary parameter in a move or (2) minimize action to admin/admin_index.php; (3) the karma_username parameter to module.php in the karma module; (4) q_1_low, (5) q_1_high, (6) q_2_low, or (7) q_2_high parameter in a configure action to module.php in the captcha module; or (8) the edit parameter to module.php in the admin_language module.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23089" source="MISC">https://www.htbridge.com/advisory/HTB23089</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75834" source="XF">pliggcms-adminindex-xss(75834)</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75764" source="XF">pliggcms-multiple1-xss(75764)</ref>
-      <ref url="http://www.securityfocus.com/bid/53662" source="BID">53662</ref>
-      <ref url="http://www.securityfocus.com/bid/53625" source="BID">53625</ref>
-      <ref url="http://secunia.com/secunia_research/2012-18/" source="MISC" adv="1">http://secunia.com/secunia_research/2012-18/</ref>
-      <ref url="http://secunia.com/advisories/49257" source="SECUNIA">49257</ref>
-      <ref url="http://secunia.com/advisories/45431" source="SECUNIA" adv="1">45431</ref>
-      <ref url="http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&amp;revision=2452" source="CONFIRM">http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&amp;revision=2452</ref>
-      <ref url="http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&amp;revision=2441" source="CONFIRM">http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&amp;revision=2441</ref>
-      <ref url="http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&amp;revision=2440" source="CONFIRM">http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&amp;revision=2440</ref>
-      <ref url="http://pligg.svn.sourceforge.net/viewvc/pligg/trunk/modules/admin_language/admin_language_main.php?r1=2442&amp;r2=2441&amp;pathrev=2442" source="CONFIRM">http://pligg.svn.sourceforge.net/viewvc/pligg/trunk/modules/admin_language/admin_language_main.php?r1=2442&amp;r2=2441&amp;pathrev=2442</ref>
-      <ref url="http://forums.pligg.com/downloads.php?do=file&amp;id=15" source="CONFIRM">http://forums.pligg.com/downloads.php?do=file&amp;id=15</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pligg" name="pligg_cms">
-        <vers num="1.0.0" edition="rc1" />
-        <vers num="1.0.0" edition="rc2" />
-        <vers num="1.0.0" edition="rc3" />
-        <vers num="1.0.0" edition="rc4" />
-        <vers num="1.0.0" edition="rc5" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.1.0" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.2.0" />
-        <vers prev="1" num="1.2.1" />
-        <vers num="9.5" />
-        <vers num="9.9" />
-        <vers num="9.9.0" edition="beta" />
-        <vers num="9.9.5" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2439" published="2012-04-27" name="CVE-2012-2439" modified="2012-04-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The default configuration of the NETGEAR ProSafe FVS318N firewall enables web-based administration on the WAN interface, which allows remote attackers to establish an HTTP connection and possibly have unspecified other impact via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/928795" source="CERT-VN">VU#928795</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netgear" name="prosafe_fvs318n">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2440" published="2012-04-27" name="CVE-2012-2440" modified="2012-04-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The default configuration of the TP-Link 8840T router enables web-based administration on the WAN interface, which allows remote attackers to establish an HTTP connection and possibly have unspecified other impact via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/834723" source="CERT-VN">VU#834723</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tp-link" name="8840t">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2441" published="2012-04-27" name="CVE-2012-2441" modified="2012-04-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:C/I:C/A:C)" CVSS_score="8.5" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="6.8" CVSS_base_score="8.5">
-    <desc>
-      <descript source="cve">RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) SSH or (2) HTTPS session, a different vulnerability than CVE-2012-1803.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/889195" source="CERT-VN">VU#889195</ref>
-      <ref url="http://www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/" source="MISC">http://www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/</ref>
-      <ref url="http://www.ruggedcom.com/productbulletin/ros-security-page/" source="CONFIRM" adv="1">http://www.ruggedcom.com/productbulletin/ros-security-page/</ref>
-      <ref url="http://seclists.org/fulldisclosure/2012/Apr/277" source="FULLDISC">20120423 RuggedCom - Backdoor Accounts in my SCADA network? You don't say...</ref>
-      <ref url="http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars" source="MISC">http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ruggedcom" name="ros">
-        <vers prev="1" num="3.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2442" published="2012-07-25" name="CVE-2012-2442" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Buffer overflow in the Video Manager in Nokia PC Suite 7.1.180.64 and earlier allows remote attackers to cause a denial of service via a crafted mp4 file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75235" source="XF">nokiapcsuite-mp4-dos(75235)</ref>
-      <ref url="http://www.securityfocus.com/bid/53290" source="BID">53290</ref>
-      <ref url="http://www.exploit-db.com/exploits/18795" source="EXPLOIT-DB">18795</ref>
-      <ref url="http://packetstormsecurity.org/files/112295/Nokia-CP-Suite-Video-Manager-7.1.180.64-Denial-Of-Service.html" source="MISC">http://packetstormsecurity.org/files/112295/Nokia-CP-Suite-Video-Manager-7.1.180.64-Denial-Of-Service.html</ref>
-      <ref url="http://osvdb.org/81498" source="OSVDB">81498</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nokia" name="pc_suite">
-        <vers prev="1" num="7.1.180.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2446" published="2012-07-09" name="CVE-2012-2446" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in tools/local_lookup.php in the WebAdmin Portal in Netsweeper allows remote attackers to inject arbitrary web script or HTML via the group parameter in a lookup action.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/763795" source="CERT-VN">VU#763795</ref>
-      <ref url="http://infosec42.blogspot.com/2012/07/cve-2012-2446-cve-2012-2447-cve-2012.html" source="MISC">http://infosec42.blogspot.com/2012/07/cve-2012-2446-cve-2012-2447-cve-2012.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netsweeper" name="netsweeper">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2447" published="2012-07-09" name="CVE-2012-2447" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in accountmgr/adminupdate.php in the WebAdmin Portal in Netsweeper allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via an add action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/763795" source="CERT-VN">VU#763795</ref>
-      <ref url="http://infosec42.blogspot.com/2012/07/cve-2012-2446-cve-2012-2447-cve-2012.html" source="MISC">http://infosec42.blogspot.com/2012/07/cve-2012-2446-cve-2012-2447-cve-2012.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netsweeper" name="netsweeper">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2448" published="2012-05-04" name="CVE-2012-2448" modified="2012-05-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) via NFS traffic.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0009.html" source="CONFIRM" adv="1">http://www.vmware.com/security/advisories/VMSA-2012-0009.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="esx">
-        <vers num="3.5" edition="update1" />
-        <vers num="3.5" edition="update2" />
-        <vers num="3.5" edition="update3" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-      </prod>
-      <prod vendor="vmware" name="esxi">
-        <vers num="3.5" edition="1" />
-        <vers num="4.0" edition="1" />
-        <vers num="4.0" edition="2" />
-        <vers num="4.0" edition="3" />
-        <vers num="4.0" edition="4" />
-        <vers num="4.1" edition="1" />
-        <vers num="4.1" edition="2" />
-        <vers num="5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2449" published="2012-05-04" name="CVE-2012-2449" modified="2012-05-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly configure the virtual floppy device, which allows guest OS users to cause a denial of service (out-of-bounds write operation and VMX process crash) or possibly execute arbitrary code on the host OS by leveraging administrative privileges on the guest OS.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0009.html" source="CONFIRM">http://www.vmware.com/security/advisories/VMSA-2012-0009.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="fusion">
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-      </prod>
-      <prod vendor="vmware" name="player">
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-      </prod>
-      <prod vendor="vmware" name="workstation">
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="8.0.2" />
-      </prod>
-      <prod vendor="vmware" name="esx">
-        <vers num="3.5" edition="update1" />
-        <vers num="3.5" edition="update2" />
-        <vers num="3.5" edition="update3" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-      </prod>
-      <prod vendor="vmware" name="esxi">
-        <vers num="3.5" edition="1" />
-        <vers num="4.0" edition="1" />
-        <vers num="4.0" edition="2" />
-        <vers num="4.0" edition="3" />
-        <vers num="4.0" edition="4" />
-        <vers num="4.1" edition="1" />
-        <vers num="4.1" edition="2" />
-        <vers num="5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2450" published="2012-05-04" name="CVE-2012-2450" modified="2012-05-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly register SCSI devices, which allows guest OS users to cause a denial of service (invalid write operation and VMX process crash) or possibly execute arbitrary code on the host OS by leveraging administrative privileges on the guest OS.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0009.html" source="CONFIRM" adv="1">http://www.vmware.com/security/advisories/VMSA-2012-0009.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="fusion">
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-      </prod>
-      <prod vendor="vmware" name="player">
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-      </prod>
-      <prod vendor="vmware" name="workstation">
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="8.0.2" />
-      </prod>
-      <prod vendor="vmware" name="esx">
-        <vers num="3.5" edition="update1" />
-        <vers num="3.5" edition="update2" />
-        <vers num="3.5" edition="update3" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-      </prod>
-      <prod vendor="vmware" name="esxi">
-        <vers num="3.5" edition="1" />
-        <vers num="4.0" edition="1" />
-        <vers num="4.0" edition="2" />
-        <vers num="4.0" edition="3" />
-        <vers num="4.0" edition="4" />
-        <vers num="4.1" edition="1" />
-        <vers num="4.1" edition="2" />
-        <vers num="5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2451" published="2012-06-27" name="CVE-2012-2451" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="3.6" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.9" CVSS_base_score="3.6">
-    <desc>
-      <descript source="cve">The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.  NOTE: some of these details are obtained from third party information.  NOTE: it has been reported that this might only be exploitable by writing in the same directory as the .ini file. If this is the case, then this issue might not cross privilege boundaries.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://bitbucket.org/shlomif/perl-config-inifiles/changeset/a08fa26f4f59" source="CONFIRM" patch="1">https://bitbucket.org/shlomif/perl-config-inifiles/changeset/a08fa26f4f59</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=818386" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=818386</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75328" source="XF">config-inifiles-symlink(75328)</ref>
-      <ref url="http://www.securityfocus.com/bid/53361" source="BID">53361</ref>
-      <ref url="http://www.osvdb.org/81671" source="OSVDB">81671</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/02/6" source="MLIST">[oss-security] 20120502 temporary file issue in Config::IniFiles Config-IniFiles perl-Config-IniFiles</ref>
-      <ref url="http://secunia.com/advisories/48990" source="SECUNIA" adv="1">48990</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081207.html" source="FEDORA">FEDORA-2012-7763</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080716.html" source="FEDORA">FEDORA-2012-7777</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080713.html" source="FEDORA">FEDORA-2012-7802</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="shlomi_fish" name="config-inifiles">
-        <vers prev="1" num="2.70" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2459" published="2012-08-06" name="CVE-2012-2459" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.6, 0.5.x before 0.5.5, 0.6.0.x before 0.6.0.7, and 0.6.x before 0.6.2 allows remote attackers to cause a denial of service (block-processing outage and incorrect block count) via unknown behavior on a Bitcoin network.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://en.bitcoin.it/wiki/CVEs" source="CONFIRM" adv="1">https://en.bitcoin.it/wiki/CVEs</ref>
-      <ref url="https://bugs.gentoo.org/show_bug.cgi?id=415973" source="CONFIRM">https://bugs.gentoo.org/show_bug.cgi?id=415973</ref>
-      <ref url="https://bitcointalk.org/?topic=81749" source="CONFIRM">https://bitcointalk.org/?topic=81749</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bitcoin" name="bitcoin-qt">
-        <vers num="0.3.10" />
-        <vers num="0.3.11" />
-        <vers num="0.3.12" />
-        <vers num="0.3.4" />
-        <vers num="0.3.5" />
-        <vers num="0.3.8" />
-        <vers num="0.4.0" />
-        <vers num="0.4.1" edition="rc6" />
-        <vers num="0.4.4" edition="rc2" />
-        <vers prev="1" num="0.4.5" />
-      </prod>
-      <prod vendor="bitcoin" name="bitcoind">
-        <vers num="0.3.10" />
-        <vers num="0.3.11" />
-        <vers num="0.3.12" />
-        <vers num="0.3.4" />
-        <vers num="0.3.5" />
-        <vers num="0.3.8" />
-        <vers num="0.4.0" />
-        <vers num="0.4.1" edition="rc6" />
-        <vers num="0.4.4" edition="rc2" />
-        <vers prev="1" num="0.4.5" />
-        <vers num="0.5.0" edition="rc" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2469" published="2012-08-06" name="CVE-2012-2469" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches, when the High Availability (HA) policy is configured for Reset, allows remote attackers to cause a denial of service (device reset) via a malformed Cisco Discovery Protocol (CDP) packet, aka Bug IDs CSCtk34535 and CSCtk19132.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/switches/datacenter/sw/5_x/nx-os/release/notes/52_nx-os_release_note.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/switches/datacenter/sw/5_x/nx-os/release/notes/52_nx-os_release_note.html</ref>
-      <ref url="http://www.4salesbyself.com/troubleshooting-random-nexus-reboots.aspx" source="MISC">http://www.4salesbyself.com/troubleshooting-random-nexus-reboots.aspx</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="nexus_7000">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nexus_7000_10-slot">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nexus_7000_18-slot">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nexus_7000_9-slot">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nx-os">
-        <vers num="4.2" />
-        <vers num="5.0" />
-        <vers num="5.1" />
-        <vers num="5.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2472" published="2012-08-06" name="CVE-2012-2472" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes, which might allow remote attackers to cause a denial of service (CPU consumption) via crafted SIP traffic, aka Bug ID CSCtz63143.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="adaptive_security_appliance_software">
-        <vers num="8.2" />
-        <vers num="8.2(1)" />
-        <vers num="8.2(2)" />
-        <vers num="8.2(3)" />
-        <vers num="8.2(3.9)" />
-        <vers num="8.2(4)" />
-        <vers num="8.2(4.1)" />
-        <vers num="8.2(4.4)" />
-        <vers num="8.2(5)" />
-        <vers num="8.2.1" />
-        <vers num="8.2.2" edition="interim" />
-        <vers num="8.2.3" />
-        <vers num="8.4" />
-        <vers num="8.4(1)" />
-        <vers num="8.4(1.11)" />
-        <vers num="8.4(2)" />
-        <vers num="8.4(2.11)" />
-      </prod>
-      <prod vendor="cisco" name="5500_series_adaptive_security_appliance">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2474" published="2012-08-06" name="CVE-2012-2474" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 allows remote authenticated users to cause a denial of service (memory consumption and blank response page) by using the clientless WebVPN feature, aka Bug ID CSCth34278.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/web/software/280775065/45357/ASA-825-Interim-Release-Notes.html" source="CONFIRM" adv="1">http://www.cisco.com/web/software/280775065/45357/ASA-825-Interim-Release-Notes.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="adaptive_security_appliance_software">
-        <vers num="8.2" />
-        <vers num="8.2(1)" />
-        <vers num="8.2(2)" />
-        <vers num="8.2(3)" />
-        <vers num="8.2(3.9)" />
-        <vers num="8.2(4)" />
-        <vers num="8.2(4.1)" />
-        <vers num="8.2(4.4)" />
-        <vers num="8.2(5)" />
-        <vers num="8.2.1" />
-        <vers num="8.2.2" edition="interim" />
-        <vers num="8.2.3" />
-        <vers num="8.3(1)" />
-        <vers num="8.3(2)" />
-        <vers num="8.3.1" edition="interim" />
-        <vers num="8.3.2" />
-        <vers num="8.4" />
-      </prod>
-      <prod vendor="cisco" name="5500_series_adaptive_security_appliance">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2486" published="2012-07-12" name="CVE-2012-2486" modified="2012-07-16" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="8.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="6.5" CVSS_base_score="8.3">
-    <desc>
-      <descript source="cve">The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute arbitrary code by leveraging certain adjacency and sending a malformed CDP packet, aka Bug IDs CSCtz40953, CSCtz40947, CSCtz40965, and CSCtz40953.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctsman" source="CISCO" adv="1">20120711 Multiple Vulnerabilities in Cisco TelePresence Manager</ref>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts" source="CISCO" adv="1">20120711 Multiple Vulnerabilities in Cisco TelePresence Immersive Endpoint Devices</ref>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs" source="CISCO" adv="1">20120711 Multiple Vulnerabilities in Cisco TelePresence Recording Server</ref>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctms" source="CISCO" adv="1">20120711 Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="telepresence_manager">
-        <vers num="1.1.0.0" />
-        <vers num="1.1.0.0(209)" />
-        <vers num="1.2.0.0" />
-        <vers num="1.2.0.0(200)" />
-        <vers num="1.3.2(466)" />
-        <vers num="1.4.0(279)" />
-        <vers num="1.5.1(420)" />
-        <vers num="1.5.2(423)" />
-        <vers num="1.6.0(220)" />
-        <vers num="1.6.2(64)" />
-        <vers num="1.6.3(113)" />
-        <vers num="1.6.5(167)" />
-        <vers num="1.7.1(732)" />
-        <vers num="1.7.2(256)" />
-        <vers num="1.7.3.1" />
-        <vers num="1.7.4" />
-        <vers num="1.7.5(62)" />
-        <vers num="1.8.0(582)" />
-        <vers prev="1" num="1.8.1(682)" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_multipoint_switch_software">
-        <vers num="1.0.4.0" />
-        <vers num="1.0.4.0(21)" />
-        <vers num="1.1.0" />
-        <vers num="1.1.0(254)" />
-        <vers num="1.1.1" />
-        <vers num="1.1.1(30)" />
-        <vers num="1.1.2" />
-        <vers num="1.1.2(6)" />
-        <vers num="1.5.0" />
-        <vers num="1.5.0(222)" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1(2)" />
-        <vers num="1.5.2" />
-        <vers num="1.5.2(21)" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.12" />
-        <vers num="1.5.4" />
-        <vers num="1.5.4(4)" />
-        <vers num="1.5.5" />
-        <vers num="1.5.5(1)" />
-        <vers num="1.5.6" />
-        <vers num="1.5.6(1)" />
-        <vers num="1.6.0" />
-        <vers num="1.6.0(108)" />
-        <vers num="1.6.1" />
-        <vers num="1.6.1(2)" />
-        <vers num="1.6.2" />
-        <vers num="1.6.2(3)" />
-        <vers num="1.6.3" />
-        <vers num="1.6.3(2)" />
-        <vers num="1.6.4" />
-        <vers num="1.6.4(3)" />
-        <vers num="1.7.0" />
-        <vers num="1.7.0.1(5)" />
-        <vers num="1.7.1(15)" />
-        <vers num="1.7.2(75)" />
-        <vers num="1.7.3(2)" />
-        <vers num="1.8.0" />
-        <vers num="1.8.0(1026)" />
-        <vers num="1.8.1(1041)" />
-        <vers num="1.8.2" />
-        <vers num="1.8.2(2)" />
-        <vers prev="1" num="1.8.3(9)" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_recording_server">
-        <vers num="1.6.1(2)" />
-        <vers num="1.6.2(31)" />
-        <vers num="1.6.3(4)" />
-        <vers num="1.7.0(190)" />
-        <vers num="1.7.1(22)" />
-        <vers num="1.7.2.1" />
-        <vers num="1.7.3(3)" />
-        <vers prev="1" num="1.8.0(160)" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_software">
-        <vers num="1.2.3(1101)" />
-        <vers num="1.3.2(1393)" />
-        <vers num="1.4.7(2229)" />
-        <vers num="1.5.1(2082)" />
-        <vers num="1.5.10(3648)" />
-        <vers num="1.5.11(3659)" />
-        <vers num="1.5.12(3701)" />
-        <vers num="1.5.13(3717)" />
-        <vers num="1.5.3(2115)" />
-        <vers num="1.6.0(3954)" />
-        <vers num="1.6.2(4023)" />
-        <vers num="1.6.3(4042)" />
-        <vers num="1.6.4(4072)" />
-        <vers num="1.6.5(4097)" />
-        <vers num="1.6.6(4109)" />
-        <vers num="1.6.7(4212)" />
-        <vers num="1.6.8(4222)" />
-        <vers num="1.7.0.1(4764)" />
-        <vers num="1.7.0.2(4719)" />
-        <vers num="1.7.1(4864)" />
-        <vers num="1.7.2(4937)" />
-        <vers num="1.7.2.1(2)" />
-        <vers num="1.7.4(270)" />
-        <vers num="1.7.5(42)" />
-        <vers num="1.7.6(4)" />
-        <vers num="1.8.0(55)" />
-        <vers num="1.8.0u)" />
-        <vers num="1.8.1(34)" />
-        <vers num="1.8.14)" />
-        <vers num="1.8.2(11)" />
-        <vers num="1.8.3(4)" />
-        <vers num="1.9.0(46)" />
-        <vers prev="1" num="1.9.0.1(3)" />
-        <vers num="4.0.0" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_multipoint_switch">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_1300_65">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_3000">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_3010">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_3200">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_3210">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_t3">
-        <vers num="" edition=":custom" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_tx1300_47">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_tx1310_65">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_tx9000">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_tx9200">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2488" published="2012-05-31" name="CVE-2012-2488" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service (packet transmission outage) via a crafted packet, aka Bug IDs CSCty94537 and CSCtz62593.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120530-iosxr
-
-'Affected Products
-This vulnerability affects IOS XR Software version 4.2.0 running on the Cisco ASR 9000 Series RSP440. It also affects IOS XR Software versions 4.0.3, 4.0.4, 4.1.0, 4.1.1, 4.1.2, and 4.2.0 running on the CRS Performance Route Processor.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027104" source="SECTRACK">1027104</ref>
-      <ref url="http://www.securityfocus.com/bid/53728" source="BID">53728</ref>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120530-iosxr" source="CISCO" adv="1">20120530 Cisco IOS XR Software Route Processor Denial of Service Vulnerability</ref>
-      <ref url="http://secunia.com/advisories/49329" source="SECUNIA">49329</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="asr_9000_rsp440_router">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="crs_performance_route_processor">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="ios_xr">
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers prev="1" num="4.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2490" published="2012-08-06" name="CVE-2012-2490" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Cisco IP Communicator 8.6 allows man-in-the-middle attackers to modify the Certificate Trust List via unspecified vectors, aka Bug ID CSCtz01471.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/voice_ip_comm/cipc/8_5/english/release_notes/CIPC8x_RN.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/voice_ip_comm/cipc/8_5/english/release_notes/CIPC8x_RN.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ip_communicator">
-        <vers num="8.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2493" published="2012-06-20" name="CVE-2012-2493" modified="2012-06-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug ID CSCtw47523.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac" source="CISCO" adv="1">20120620 Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="anyconnect_secure_mobility_client">
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.2" />
-        <vers num="2.2.128" />
-        <vers num="2.2.133" />
-        <vers num="2.2.136" />
-        <vers num="2.2.140" />
-        <vers num="2.3" />
-        <vers num="2.3.185" />
-        <vers num="2.3.2016" />
-        <vers num="2.3.254" />
-        <vers num="2.4" />
-        <vers num="2.4.0202" />
-        <vers num="2.4.1012" />
-        <vers num="2.5" />
-        <vers num="3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2494" published="2012-06-20" name="CVE-2012-2494" modified="2012-06-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 and 3.x before 3.0 MR8 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote attackers to force a version downgrade by using (1) ActiveX or (2) Java components to offer signed code that corresponds to an older software release, aka Bug ID CSCtw48681.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac" source="CISCO" adv="1">20120620 Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="anyconnect_secure_mobility_client">
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.2" />
-        <vers num="2.2.128" />
-        <vers num="2.2.133" />
-        <vers num="2.2.136" />
-        <vers num="2.2.140" />
-        <vers num="2.3" />
-        <vers num="2.3.185" />
-        <vers num="2.3.2016" />
-        <vers num="2.3.254" />
-        <vers num="2.4" />
-        <vers num="2.4.0202" />
-        <vers num="2.4.1012" />
-        <vers num="2.5" />
-        <vers num="3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2495" published="2012-06-20" name="CVE-2012-2495" modified="2012-06-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR8 and Cisco Secure Desktop before 3.6.6020 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote attackers to force a version downgrade by using (1) ActiveX or (2) Java components to offer signed code that corresponds to an older software release, aka Bug ID CSCtx74235.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac" source="CISCO" adv="1">20120620 Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="anyconnect_secure_mobility_client">
-        <vers num="3.0" />
-      </prod>
-      <prod vendor="cisco" name="secure_desktop">
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1.27" />
-        <vers num="3.1.1.33" />
-        <vers num="3.1.1.45" />
-        <vers num="3.2" />
-        <vers num="3.2.1" />
-        <vers num="3.3" />
-        <vers num="3.4" />
-        <vers num="3.4.1" />
-        <vers num="3.4.2" />
-        <vers num="3.4.2048" />
-        <vers num="3.5" />
-        <vers num="3.5.1077" />
-        <vers num="3.5.2001" />
-        <vers prev="1" num="3.5.2008" />
-        <vers num="3.5.841" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2496" published="2012-06-20" name="CVE-2012-2496" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">A certain Java applet in the VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR7 on 64-bit Linux platforms does not properly restrict use of Java components, which allows remote attackers to execute arbitrary code via a crafted web site, aka Bug ID CSCty45925.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac" source="CISCO" adv="1">20120620 Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="anyconnect_secure_mobility_client">
-        <vers num="3.0" edition="" />
-        <vers num="3.0" edition=":~~~~x64~" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2498" published="2012-08-06" name="CVE-2012-2498" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="4.9" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29197.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/release/notes/anyconnect30rn.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/release/notes/anyconnect30rn.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="anyconnect_secure_mobility_client">
-        <vers num="3.0" />
-        <vers num="3.0.0629" />
-        <vers num="3.0.07059" />
-        <vers num="3.0.08057" />
-        <vers num="3.0.08066" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2499" published="2012-08-06" name="CVE-2012-2499" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz26985.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/release/notes/anyconnect30rn.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/release/notes/anyconnect30rn.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="anyconnect_secure_mobility_client">
-        <vers num="3.0" />
-        <vers num="3.0.0629" />
-        <vers num="3.0.07059" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2500" published="2012-08-06" name="CVE-2012-2500" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="4.9" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29470.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/release/notes/anyconnect30rn.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/release/notes/anyconnect30rn.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="anyconnect_secure_mobility_client">
-        <vers num="3.0" />
-        <vers num="3.0.0629" />
-        <vers num="3.0.07059" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2511" published="2012-05-15" name="CVE-2012-2511" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://service.sap.com/sap/support/notes/1687910" source="MISC">https://service.sap.com/sap/support/notes/1687910</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75453" source="XF">netweaver-diagtraceatoms-dos(75453)</ref>
-      <ref url="http://www.securitytracker.com/id?1027052" source="SECTRACK">1027052</ref>
-      <ref url="http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities" source="MISC">http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities</ref>
-      <ref url="http://scn.sap.com/docs/DOC-8218" source="CONFIRM">http://scn.sap.com/docs/DOC-8218</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sap" name="netweaver">
-        <vers num="7.0" edition="ehp1" />
-        <vers num="7.0" edition="ehp2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2512" published="2012-05-15" name="CVE-2012-2512" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://service.sap.com/sap/support/notes/1687910" source="MISC">https://service.sap.com/sap/support/notes/1687910</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75454" source="XF">netweaver-diagtracestream-dos(75454)</ref>
-      <ref url="http://www.securitytracker.com/id?1027052" source="SECTRACK">1027052</ref>
-      <ref url="http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities" source="MISC">http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities</ref>
-      <ref url="http://scn.sap.com/docs/DOC-8218" source="CONFIRM">http://scn.sap.com/docs/DOC-8218</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sap" name="netweaver">
-        <vers num="7.0" edition="ehp1" />
-        <vers num="7.0" edition="ehp2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2513" published="2012-05-15" name="CVE-2012-2513" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://service.sap.com/sap/support/notes/1687910" source="MISC">https://service.sap.com/sap/support/notes/1687910</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75455" source="XF">netweaver-diaginput-dos(75455)</ref>
-      <ref url="http://www.securitytracker.com/id?1027052" source="SECTRACK">1027052</ref>
-      <ref url="http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities" source="MISC">http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities</ref>
-      <ref url="http://scn.sap.com/docs/DOC-8218" source="CONFIRM">http://scn.sap.com/docs/DOC-8218</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sap" name="netweaver">
-        <vers num="7.0" edition="ehp1" />
-        <vers num="7.0" edition="ehp2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2514" published="2012-05-15" name="CVE-2012-2514" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://service.sap.com/sap/support/notes/1687910" source="MISC">https://service.sap.com/sap/support/notes/1687910</ref>
-      <ref url="http://www.securitytracker.com/id?1027052" source="SECTRACK">1027052</ref>
-      <ref url="http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities" source="MISC">http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities</ref>
-      <ref url="http://scn.sap.com/docs/DOC-8218" source="CONFIRM">http://scn.sap.com/docs/DOC-8218</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sap" name="netweaver">
-        <vers num="7.0" edition="ehp1" />
-        <vers num="7.0" edition="ehp2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2515" published="2012-07-04" name="CVE-2012-2515" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; GE Intelligent Platforms Proficy HMI/SCADA iFIX 5.0 and 5.1; GE Intelligent Platforms Proficy Pulse 1.0; GE Intelligent Platforms Proficy Batch Execution 5.6; GE Intelligent Platforms SI7 I/O Driver 7.20 through 7.42; and other products, allow remote attackers to execute arbitrary code via a long string in the second argument to the (1) JumpMappedID or (2) JumpURL method.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-02.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-02.pdf</ref>
-      <ref url="http://www.securityfocus.com/bid/36546" source="BID">36546</ref>
-      <ref url="http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/14000/KB14863/en_US/GEIP12-04%20Security%20Advisory%20-%20Proficy%20HTML%20Help.pdf" source="CONFIRM" adv="1">http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/14000/KB14863/en_US/GEIP12-04%20Security%20Advisory%20-%20Proficy%20HTML%20Help.pdf</ref>
-      <ref url="http://secunia.com/advisories/36914" source="SECUNIA" adv="1">36914</ref>
-      <ref url="http://secunia.com/advisories/36905" source="SECUNIA" adv="1">36905</ref>
-      <ref url="http://retrogod.altervista.org/9sg_emc_keyhelp.html" source="MISC">http://retrogod.altervista.org/9sg_emc_keyhelp.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emc" name="captiva_quickscan_pro">
-        <vers num="4.6" edition="sp1" />
-      </prod>
-      <prod vendor="emc" name="documentum_applicationxtender_desktop">
-        <vers num="5.4" />
-      </prod>
-      <prod vendor="ge" name="intelligent_platforms_proficy_batch_execution">
-        <vers num="5.6" />
-      </prod>
-      <prod vendor="ge" name="intelligent_platforms_proficy_historian">
-        <vers num="3.1" />
-        <vers num="3.5" />
-        <vers num="4.0" />
-        <vers num="4.5" />
-      </prod>
-      <prod vendor="ge" name="intelligent_platforms_proficy_hmi/scada_ifix">
-        <vers num="5.0" />
-        <vers num="5.1" />
-      </prod>
-      <prod vendor="ge" name="intelligent_platforms_proficy_pulse">
-        <vers num="1.0" />
-      </prod>
-      <prod vendor="ge" name="intelligent_platforms_si7_i/o_driver">
-        <vers num="7.20" />
-        <vers num="7.42" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2516" published="2012-07-04" name="CVE-2012-2516" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0 and 5.1; Proficy Pulse 1.0; Proficy Batch Execution 5.6; SI7 I/O Driver 7.20 through 7.42; and other products, allows remote attackers to execute arbitrary commands via crafted input, related to a "command injection vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-02.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-02.pdf</ref>
-      <ref url="http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/14000/KB14863/en_US/GEIP12-04%20Security%20Advisory%20-%20Proficy%20HTML%20Help.pdf" source="CONFIRM" adv="1">http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/14000/KB14863/en_US/GEIP12-04%20Security%20Advisory%20-%20Proficy%20HTML%20Help.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ge" name="intelligent_platforms_proficy_batch_execution">
-        <vers num="5.6" />
-      </prod>
-      <prod vendor="ge" name="intelligent_platforms_proficy_historian">
-        <vers num="3.1" />
-        <vers num="3.5" />
-        <vers num="4.0" />
-        <vers num="4.5" />
-      </prod>
-      <prod vendor="ge" name="intelligent_platforms_proficy_hmi/scada_ifix">
-        <vers num="5.0" />
-        <vers num="5.1" />
-      </prod>
-      <prod vendor="ge" name="intelligent_platforms_proficy_pulse">
-        <vers num="1.0" />
-      </prod>
-      <prod vendor="ge" name="intelligent_platforms_si7_i/o_driver">
-        <vers num="7.20" />
-        <vers num="7.42" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2521" published="2012-08-14" name="CVE-2012-2521" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Asynchronous NULL Object Access Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-052" source="MS" patch="1" adv="1">MS12-052</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="internet_explorer">
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2522" published="2012-08-14" name="CVE-2012-2522" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a malformed virtual function table after this table's deletion, aka "Virtual Function Table Corruption Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-052" source="MS" patch="1" adv="1">MS12-052</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="internet_explorer">
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2523" published="2012-08-14" name="CVE-2012-2523" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Integer overflow in Microsoft Internet Explorer 8 and 9, JScript 5.8, and VBScript 5.8 on 64-bit platforms allows remote attackers to execute arbitrary code by leveraging an incorrect size calculation during object copying, aka "JavaScript Integer Overflow Remote Code Execution Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-056" source="MS" patch="1" adv="1">MS12-056</ref>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-052" source="MS" patch="1" adv="1">MS12-052</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="internet_explorer">
-        <vers num="8" />
-        <vers num="9" />
-      </prod>
-      <prod vendor="microsoft" name="jscript">
-        <vers num="5.8" />
-      </prod>
-      <prod vendor="microsoft" name="vbscript">
-        <vers num="5.8" edition="-" />
-        <vers num="5.8" edition="-:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2524" published="2012-08-14" name="CVE-2012-2524" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka "CGM File Format Memory Corruption Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-057" source="MS" patch="1" adv="1">MS12-057</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="office">
-        <vers num="2007" edition="sp2" />
-        <vers num="2007" edition="sp3" />
-        <vers num="2010" edition="sp1" />
-        <vers num="2010" edition="sp1:x86" />
-        <vers num="2010" edition="sp1:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2526" published="2012-08-14" name="CVE-2012-2526" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP3 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to a deleted object, aka "Remote Desktop Protocol Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-053" source="MS" patch="1" adv="1">MS12-053</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2527" published="2012-08-14" name="CVE-2012-2527" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-055" source="MS" patch="1" adv="1">MS12-055</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="windows_7">
-        <vers num="" edition=":x86" />
-        <vers num="" edition=":x64" />
-        <vers num="" edition="sp1" />
-        <vers num="" edition="sp1:x86" />
-        <vers num="" edition="sp1:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2003">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_server_2008">
-        <vers num="" edition="r2" />
-        <vers num="" edition="r2:x64" />
-        <vers num="" edition="r2:itanium" />
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-        <vers num="" edition="sp2:itanium" />
-        <vers num="" edition="sp2:x86" />
-        <vers num="r2" edition="sp1" />
-        <vers num="r2" edition="sp1:x64" />
-        <vers num="r2" edition="sp1:itanium" />
-      </prod>
-      <prod vendor="microsoft" name="windows_vista">
-        <vers num="" edition="sp2" />
-        <vers num="" edition="sp2:x64" />
-      </prod>
-      <prod vendor="microsoft" name="windows_xp">
-        <vers num="" edition="sp3" />
-        <vers num="-" edition="sp2" />
-        <vers num="-" edition="sp2:x64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2536" published="2012-09-11" name="CVE-2012-2536" modified="2012-09-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://technet.microsoft.com/security/bulletin/MS12-062" source="MS" adv="1">MS12-062</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="microsoft" name="system_center_configuration_manager">
-        <vers num="2007" edition="sp2" />
-      </prod>
-      <prod vendor="microsoft" name="systems_management_server">
-        <vers num="2003" edition="sp2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2559" published="2012-07-04" name="CVE-2012-2559" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">WellinTech KingHistorian 3.0 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer write) via a crafted packet to TCP port 5678.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wellintech" name="kinghistorian">
-        <vers num="3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2560" published="2012-07-04" name="CVE-2012-2560" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a crafted HTTP request to port 8001.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf</ref>
-      <ref url="http://www.wellintech.com/index.php/news/33-patch-for-kingview653" source="CONFIRM" patch="1" adv="1">http://www.wellintech.com/index.php/news/33-patch-for-kingview653</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wellintech" name="kingview">
-        <vers num="3.0" />
-        <vers num="6.5.30.2010.18018" />
-        <vers num="6.52" />
-        <vers prev="1" num="6.53" />
-        <vers num="65.30.17249" />
-        <vers num="65.30.2010.18018" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2561" published="2012-05-21" name="CVE-2012-2561" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">HP Business Service Management (BSM) 9.12 does not properly restrict the uploading of .war files, which allows remote attackers to execute arbitrary JSP code within the JBOSS Application Server component via a crafted request to TCP port 1098, 1099, or 4444.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/859230" source="CERT-VN">VU#859230</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134013352316810&amp;w=2" source="HP">SSRT100820</ref>
-      <ref url="http://marc.info/?l=bugtraq&amp;m=134013352316810&amp;w=2" source="HP">HPSBMU02792</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="business_service_management">
-        <vers num="9.12" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2562" published="2012-05-22" name="CVE-2012-2562" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="7.6" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="4.9" CVSS_base_score="7.6">
-    <desc>
-      <descript source="cve">The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to execute a (1) LOCATE, (2) TRACK, (3) UPDATECFG, (4) UPDATEACCT, (5) STAT, (6) TERM, or (7) WIPE command via an SMS message.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/464683" source="CERT-VN">VU#464683</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75782" source="XF">mobiletrack-sms-commands-sec-bypass(75782)</ref>
-      <ref url="http://secunia.com/advisories/49268" source="SECUNIA">49268</ref>
-      <ref url="http://blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/" source="MISC">http://blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="xelex" name="mobiletrack">
-        <vers prev="1" num="2.3.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2563" published="2012-06-08" name="CVE-2012-2563" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Bloxx Web Filtering before 5.0.14 allow (1) remote attackers to inject arbitrary web script or HTML via web traffic that is examined within the Bloxx Reports component, and allow (2) remote authenticated administrators to inject arbitrary web script or HTML via vectors involving administrative menu functions.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/722963" source="CERT-VN">VU#722963</ref>
-      <ref url="http://www.securityfocus.com/bid/53715" source="BID">53715</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8R9LBY" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8R9LBY</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bloxx" name="web_filtering">
-        <vers prev="1" num="5.0.13" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2564" published="2012-06-08" name="CVE-2012-2564" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bloxx Web Filtering before 5.0.14 allow remote attackers to hijack the authentication of administrators for requests that perform administrative actions.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8R9LBY" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8R9LBY</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/722963" source="CERT-VN">VU#722963</ref>
-      <ref url="http://www.securityfocus.com/bid/53715" source="BID">53715</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bloxx" name="web_filtering">
-        <vers prev="1" num="5.0.13" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2565" published="2012-06-08" name="CVE-2012-2565" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Bloxx Web Filtering before 5.0.14 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8R9LBY" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8R9LBY</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/722963" source="CERT-VN">VU#722963</ref>
-      <ref url="http://www.securityfocus.com/bid/53715" source="BID">53715</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bloxx" name="web_filtering">
-        <vers prev="1" num="5.0.13" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2566" published="2012-06-08" name="CVE-2012-2566" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Bloxx Web Filtering before 5.0.14 does not properly interpret X-Forwarded-For headers during access-control and logging operations for HTTPS connection attempts, which allows remote attackers to bypass intended IP address and domain restrictions, and trigger misleading log entries, via a crafted header.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8R9LBY" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8R9LBY</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/722963" source="CERT-VN">VU#722963</ref>
-      <ref url="http://www.securityfocus.com/bid/53715" source="BID">53715</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bloxx" name="web_filtering">
-        <vers prev="1" num="5.0.13" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2567" published="2012-05-22" name="CVE-2012-2567" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:N/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/464683" source="CERT-VN">VU#464683</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75783" source="XF">mobiletrack-ftp-info-disclosure(75783)</ref>
-      <ref url="http://secunia.com/advisories/49268" source="SECUNIA">49268</ref>
-      <ref url="http://blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/" source="MISC">http://blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="xelex" name="mobiletrack">
-        <vers prev="1" num="2.3.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2568" published="2012-05-25" name="CVE-2012-2568" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">d41d8cd98f00b204e9800998ecf8427e.php in the management web server on the Seagate BlackArmor device allows remote attackers to change the administrator password via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-      <sec_prot admin="1" />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/515283" source="CERT-VN">VU#515283</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75854" source="XF">blackarmor-network-sec-bypass(75854)</ref>
-      <ref url="http://www.securityfocus.com/bid/53670" source="BID">53670</ref>
-      <ref url="http://secunia.com/advisories/49282" source="SECUNIA">49282</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="seagate" name="blackarmor_nas">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2570" published="2012-08-15" name="CVE-2012-2570" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in products_map.php in X-Cart Gold 4.5 allows remote attackers to inject arbitrary web script or HTML via the symb parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77146" source="XF">xcartgold-productsmap-xss(77146)</ref>
-      <ref url="http://www.securityfocus.com/bid/54628" source="BID">54628</ref>
-      <ref url="http://www.exploit-db.com/exploits/20010" source="EXPLOIT-DB">20010</ref>
-      <ref url="http://secunia.com/advisories/50006" source="SECUNIA" adv="1">50006</ref>
-      <ref url="http://osvdb.org/84115" source="OSVDB">84115</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="qualiteam" name="x-cart">
-        <vers num="4.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2571" published="2012-08-12" name="CVE-2012-2571" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in WinWebMail Server 3.8.1.6 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted Cascading Style Sheets (CSS) expression property, (3) a CSS expression property in the STYLE attribute of an arbitrary element, (4) a crafted SRC attribute of an IFRAME element, or (5) UTF-7 text in an HTTP-EQUIV="CONTENT-TYPE" META element.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/20366/" source="EXPLOIT-DB">20366</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="winwebmail" name="winwebmail_server">
-        <vers num="3.8.1.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2573" published="2012-08-12" name="CVE-2012-2573" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in T-dah WebMail 3.2.0-2.3 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted Cascading Style Sheets (CSS) expression property, (3) a CSS expression property in the STYLE attribute of an arbitrary element, (4) an ONLOAD attribute of a BODY element, (5) a crafted SRC attribute of an IFRAME element, (6) a crafted CONTENT attribute of an HTTP-EQUIV="refresh" META element, or (7) a data: URL in the CONTENT attribute of an HTTP-EQUIV="refresh" META element.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/20364/" source="EXPLOIT-DB">20364</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tdah" name="t-day_webmail">
-        <vers num="3.2.0-2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2574" published="2012-07-23" name="CVE-2012-2574" modified="2012-07-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to a "blind SQL injection" issue.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;suid=20120720_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;suid=20120720_00</ref>
-      <ref url="http://www.securityfocus.com/bid/54424" source="BID">54424</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="web_gateway">
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-2575" published="2012-09-17" name="CVE-2012-2575" modified="2012-09-17">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in NetWin SurgeMail 6.0a4 allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IFRAME element in the body of an HTML e-mail message.</descript>
-    </desc>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/20363/" source="EXPLOIT-DB">20363</ref>
-    </refs>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2577" published="2012-08-12" name="CVE-2012-2577" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) syslocation, (2) syscontact, or (3) sysName field of an snmpd.conf file.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/174119" source="CERT-VN">VU#174119</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77147" source="XF">orionnetwork-snmpdconf-csrf(77147)</ref>
-      <ref url="http://www.solarwinds.com/documentation/Orion/docs/ReleaseNotes/releaseNotes.htm" source="CONFIRM" adv="1">http://www.solarwinds.com/documentation/Orion/docs/ReleaseNotes/releaseNotes.htm</ref>
-      <ref url="http://www.securityfocus.com/bid/54624" source="BID">54624</ref>
-      <ref url="http://secunia.com/advisories/50004" source="SECUNIA" adv="1">50004</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="solarwinds" name="orion_network_performance_monitor">
-        <vers num="10.0" />
-        <vers num="10.1" />
-        <vers prev="1" num="10.2" />
-        <vers num="7.8.5" />
-        <vers num="8.5" />
-        <vers num="8.5.1" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2582" published="2012-08-23" name="CVE-2012-2582" modified="2012-08-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a Cascading Style Sheets (CSS) expression property in the STYLE attribute of an arbitrary element or (2) UTF-7 text in an HTTP-EQUIV="CONTENT-TYPE" META element.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/582879" source="CERT-VN">VU#582879</ref>
-      <ref url="http://www.otrs.com/en/open-source/community-news/security-advisories/security-advisory-2012-01/" source="CONFIRM" adv="1">http://www.otrs.com/en/open-source/community-news/security-advisories/security-advisory-2012-01/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="otrs" name="otrs">
-        <vers num="2.4.0" edition="beta1" />
-        <vers num="2.4.0" edition="beta2" />
-        <vers num="2.4.0" edition="beta3" />
-        <vers num="2.4.0" edition="beta4" />
-        <vers num="2.4.0" edition="beta5" />
-        <vers num="2.4.0" edition="beta6" />
-        <vers num="2.4.1" />
-        <vers num="2.4.10" />
-        <vers num="2.4.11" />
-        <vers num="2.4.12" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers num="2.4.8" />
-        <vers num="2.4.9" />
-        <vers num="3.0.0" edition="beta1" />
-        <vers num="3.0.0" edition="beta2" />
-        <vers num="3.0.0" edition="beta3" />
-        <vers num="3.0.0" edition="beta4" />
-        <vers num="3.0.0" edition="beta5" />
-        <vers num="3.0.0" edition="beta6" />
-        <vers num="3.0.0" edition="beta7" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-      </prod>
-      <prod vendor="otrs" name="otrs_itsm">
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2584" published="2012-08-12" name="CVE-2012-2584" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) the Cascading Style Sheets (CSS) expression property in conjunction with a CSS comment within the STYLE attribute of an IMG element, (2) the CSS expression property in conjunction with multiple CSS comments within the STYLE attribute of an arbitrary element, or (3) an innerHTML attribute within an XML document.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77543" source="XF">mdaemon-body-xss(77543)</ref>
-      <ref url="http://www.securityfocus.com/bid/54885" source="BID">54885</ref>
-      <ref url="http://www.exploit-db.com/exploits/20357/" source="EXPLOIT-DB">20357</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="altn" name="mdaemon">
-        <vers num="12.5.4" edition="-" />
-        <vers num="12.5.4" edition="-:free" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2585" published="2012-08-12" name="CVE-2012-2585" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ServiceDesk Plus 8.1 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted Cascading Style Sheets (CSS) expression property, (3) a CSS expression property in the STYLE attribute of an arbitrary element, or (4) a crafted SRC attribute of an IFRAME element, or an e-mail message subject with (5) a SCRIPT element, (6) a CSS expression property in the STYLE attribute of an arbitrary element, (7) a crafted SRC attribute of an IFRAME element, (8) a crafted CONTENT attribute of an HTTP-EQUIV="refresh" META element, or (9) a data: URL in the CONTENT attribute of an HTTP-EQUIV="refresh" META element.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/20356/" source="EXPLOIT-DB">20356</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="manageengine" name="servicedesk_plus">
-        <vers num="8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2587" published="2012-08-12" name="CVE-2012-2587" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in AfterLogic MailSuite Pro 6.3 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with a crafted SRC attribute of (1) an IFRAME element or (2) a SCRIPT element.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/20352/" source="EXPLOIT-DB">20352</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="afterlogic" name="mailsuite_pro">
-        <vers num="6.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2590" published="2012-08-12" name="CVE-2012-2590" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in ESCON SupportPortal Professional Edition 3.0 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted SRC attribute of an IFRAME element, (3) a crafted CONTENT attribute of an HTTP-EQUIV="Set-Cookie" META element, or (4) an innerHTML attribute within an XML document.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/20350/" source="EXPLOIT-DB">20350</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="e-supportportal" name="escon_supportportal">
-        <vers num="3.0" edition="" />
-        <vers num="3.0" edition=":professional" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2595" published="2012-06-08" name="CVE-2012-2595" modified="2012-06-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 allow remote attackers to inject arbitrary web script or HTML via vectors involving special characters in parameters.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-158-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-158-01.pdf</ref>
-      <ref url="http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-223158.pdf" source="CONFIRM" adv="1">http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-223158.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="siemens" name="wincc">
-        <vers num="7.0" edition="sp3" />
-        <vers num="7.0" edition="sp3:update_1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2596" published="2012-06-08" name="CVE-2012-2596" modified="2012-06-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:N)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">The XPath functionality in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 does not properly handle special characters in parameters, which allows remote authenticated users to read or modify settings via a crafted URL, related to an "XML injection" attack.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-158-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-158-01.pdf</ref>
-      <ref url="http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-223158.pdf" source="CONFIRM" adv="1">http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-223158.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="siemens" name="wincc">
-        <vers num="7.0" edition="sp3" />
-        <vers num="7.0" edition="sp3:update_1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2597" published="2012-06-08" name="CVE-2012-2597" modified="2012-06-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Multiple directory traversal vulnerabilities in Siemens WinCC 7.0 SP3 before Update 2 allow remote authenticated users to read arbitrary files via a crafted parameter in a URL.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-158-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-158-01.pdf</ref>
-      <ref url="http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-223158.pdf" source="CONFIRM" adv="1">http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-223158.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="siemens" name="wincc">
-        <vers num="7.0" edition="sp3" />
-        <vers num="7.0" edition="sp3:update_1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2598" published="2012-06-08" name="CVE-2012-2598" modified="2012-06-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Buffer overflow in the DiagAgent web server in Siemens WinCC 7.0 SP3 through Update 2 allows remote attackers to cause a denial of service (agent outage) via crafted input.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-158-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-158-01.pdf</ref>
-      <ref url="http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-223158.pdf" source="CONFIRM" adv="1">http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-223158.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="siemens" name="wincc">
-        <vers num="7.0" edition="sp3" />
-        <vers num="7.0" edition="sp3:update_1" />
-        <vers num="7.0" edition="sp3:update_2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2601" published="2012-08-15" name="CVE-2012-2601" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute arbitrary SQL commands via the sGroupList parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77152" source="XF">ipswitch-wrvmwarehostlist-sql-injection(77152)</ref>
-      <ref url="http://www.whatsupgold.com/blog/2012/07/23/keeping-whatsup-gold-secure/" source="MISC" adv="1">http://www.whatsupgold.com/blog/2012/07/23/keeping-whatsup-gold-secure/</ref>
-      <ref url="http://www.securityfocus.com/bid/54626" source="BID">54626</ref>
-      <ref url="http://www.exploit-db.com/exploits/20035" source="EXPLOIT-DB">20035</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ipswitch" name="whatsup_gold">
-        <vers num="15.02" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2602" published="2012-08-12" name="CVE-2012-2602" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create user accounts via CreateUserStepContainer actions to Admin/Accounts/Add/OrionAccount.aspx or (2) modify account privileges via a ynAdminRights action to Admin/Accounts/EditAccount.aspx.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/174119" source="CERT-VN">VU#174119</ref>
-      <ref url="http://www.solarwinds.com/documentation/Orion/docs/ReleaseNotes/releaseNotes.htm" source="MISC">http://www.solarwinds.com/documentation/Orion/docs/ReleaseNotes/releaseNotes.htm</ref>
-      <ref url="http://www.securityfocus.com/bid/54624" source="BID">54624</ref>
-      <ref url="http://www.exploit-db.com/exploits/20011" source="EXPLOIT-DB">20011</ref>
-      <ref url="http://secunia.com/advisories/50004" source="SECUNIA" adv="1">50004</ref>
-      <ref url="http://osvdb.org/84116" source="OSVDB">84116</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="solarwinds" name="orion_network_performance_monitor">
-        <vers num="10.1.13.0" />
-        <vers prev="1" num="10.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2603" published="2012-06-08" name="CVE-2012-2603" modified="2012-06-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">The server in CollabNet ScrumWorks Pro before 6.0 allows remote authenticated users to gain privileges and obtain sensitive information via a modified desktop client.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8RJPJX" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8RJPJX</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/442595" source="CERT-VN">VU#442595</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="collabnet" name="scrumworks">
-        <vers num="" edition="5.0" />
-        <vers num="" edition="5.0:pro" />
-        <vers num="" edition="5.1" />
-        <vers num="" edition="5.1:pro" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2604" published="2012-06-13" name="CVE-2012-2604" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8TJKAF" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8TJKAF</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/709939" source="CERT-VN">VU#709939</ref>
-      <ref url="https://na3.salesforce.com/sfc/#version?selectedDocumentId=06950000000IyBX" source="CONFIRM">https://na3.salesforce.com/sfc/#version?selectedDocumentId=06950000000IyBX</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bradfordnetworks" name="network_sentry_appliance_software">
-        <vers prev="1" num="5.3" />
-      </prod>
-      <prod vendor="bradfordnetworks" name="network_sentry_appliance">
-        <vers num="ns500rx" />
-        <vers num="ns500x" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2605" published="2012-06-13" name="CVE-2012-2605" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote attackers to hijack the authentication of administrators for requests that (1) insert XSS sequences or (2) send messages to clients.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8TJKAF" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8TJKAF</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/709939" source="CERT-VN">VU#709939</ref>
-      <ref url="https://na3.salesforce.com/sfc/#version?selectedDocumentId=06950000000IySO" source="CONFIRM">https://na3.salesforce.com/sfc/#version?selectedDocumentId=06950000000IySO</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bradfordnetworks" name="network_sentry_appliance_software">
-        <vers prev="1" num="5.3" />
-      </prod>
-      <prod vendor="bradfordnetworks" name="network_sentry_appliance">
-        <vers num="ns500rx" />
-        <vers num="ns500x" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2606" published="2012-06-13" name="CVE-2012-2606" modified="2012-06-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted packet to UDP port 4567, as demonstrated by a replay attack.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/709939" source="CERT-VN">VU#709939</ref>
-      <ref url="https://na3.salesforce.com/sfc/#version?id=06850000000JDx3" source="CONFIRM">https://na3.salesforce.com/sfc/#version?id=06850000000JDx3</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8TJKAF" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8TJKAF</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bradfordnetworks" name="network_sentry_appliance_software">
-        <vers prev="1" num="5.3" />
-      </prod>
-      <prod vendor="bradfordnetworks" name="network_sentry_appliance">
-        <vers num="ns500rx" />
-        <vers num="ns500x" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2607" published="2012-07-16" name="CVE-2012-2607" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The Johnson Controls CK721-A controller with firmware before SSM4388_03.1.0.14_BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 (aka the download port).</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/977312" source="CERT-VN">VU#977312</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/MORO-8UYN8P" source="CONFIRM">http://www.kb.cert.org/vuls/id/MORO-8UYN8P</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="johnsoncontrols" name="network_controller">
-        <vers num="ck721-a" />
-      </prod>
-      <prod vendor="johnsoncontrols" name="network_controller_firmware">
-        <vers num="03.0" />
-        <vers prev="1" num="03.1.0.14" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2611" published="2012-05-15" name="CVE-2012-2611" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when a certain Developer Trace configuration is enabled, allows remote attackers to execute arbitrary code via a crafted SAP Diag packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://service.sap.com/sap/support/notes/1687910" source="MISC">https://service.sap.com/sap/support/notes/1687910</ref>
-      <ref url="http://www.securitytracker.com/id?1027052" source="SECTRACK">1027052</ref>
-      <ref url="http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities" source="MISC">http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities</ref>
-      <ref url="http://scn.sap.com/docs/DOC-8218" source="CONFIRM">http://scn.sap.com/docs/DOC-8218</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sap" name="netweaver">
-        <vers num="7.0" edition="ehp1" />
-        <vers num="7.0" edition="ehp2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2612" published="2012-05-15" name="CVE-2012-2612" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://service.sap.com/sap/support/notes/1687910" source="MISC">https://service.sap.com/sap/support/notes/1687910</ref>
-      <ref url="http://www.securitytracker.com/id?1027052" source="SECTRACK">1027052</ref>
-      <ref url="http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities" source="MISC">http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities</ref>
-      <ref url="http://scn.sap.com/docs/DOC-8218" source="CONFIRM">http://scn.sap.com/docs/DOC-8218</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sap" name="netweaver">
-        <vers num="7.0" edition="ehp1" />
-        <vers num="7.0" edition="ehp2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2614" published="2012-07-12" name="CVE-2012-2614" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long string in a version attribute of an ispXCF element in an .xcf file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/19340" source="EXPLOIT-DB">19340</ref>
-      <ref url="http://www.coresecurity.com/content/lattice-diamond-programmer-buffer-overflow" source="MISC">http://www.coresecurity.com/content/lattice-diamond-programmer-buffer-overflow</ref>
-      <ref url="http://secunia.com/advisories/48431" source="SECUNIA">48431</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-06/0136.html" source="BUGTRAQ">20120621 CORE-2012-0530 - Lattice Diamond Programmer Buffer Overflow</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="lattice_semiconductor" name="lattice_diamond_programmer">
-        <vers num="1.4.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2626" published="2012-07-31" name="CVE-2012-2626" modified="2012-07-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt" source="MISC">https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt</ref>
-      <ref url="http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html" source="MISC">http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dell" name="sonicwall_scrutinizer">
-        <vers num="8.6.2" edition="-" />
-        <vers num="8.6.2" edition="-:free" />
-        <vers num="9.0.0" edition="-" />
-        <vers num="9.0.0" edition="-:free" />
-        <vers num="9.0.1" edition="-" />
-        <vers num="9.0.1" edition="-:free" />
-        <vers prev="1" num="9.5.0" edition="-" />
-        <vers prev="1" num="9.5.0" edition="-:free" />
-      </prod>
-      <prod vendor="dell" name="sonicwall_scrutinizer_with_flow_analytics_module">
-        <vers num="8.6.2" edition="-" />
-        <vers num="8.6.2" edition="-:pay" />
-        <vers num="9.0.0" edition="-" />
-        <vers num="9.0.0" edition="-:pay" />
-        <vers num="9.0.1" edition="-" />
-        <vers num="9.0.1" edition="-:pay" />
-        <vers prev="1" num="9.5.0" edition="-" />
-        <vers prev="1" num="9.5.0" edition="-:pay" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2627" published="2012-07-31" name="CVE-2012-2627" modified="2012-08-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:C/A:C)" CVSS_score="9.4" CVSS_impact_subscore="9.2" CVSS_exploit_subscore="10.0" CVSS_base_score="9.4">
-    <desc>
-      <descript source="cve">d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMFILES%\Scrutinizer\snmp\mibs\ via a multipart/form-data POST request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt" source="MISC">https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt</ref>
-      <ref url="http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html" source="MISC">http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dell" name="sonicwall_scrutinizer">
-        <vers num="8.6.2" edition="-" />
-        <vers num="8.6.2" edition="-:free" />
-        <vers num="9.0.0" edition="-" />
-        <vers num="9.0.0" edition="-:free" />
-        <vers num="9.0.1" edition="-" />
-        <vers num="9.0.1" edition="-:free" />
-        <vers prev="1" num="9.5.0" edition="-" />
-        <vers prev="1" num="9.5.0" edition="-:free" />
-      </prod>
-      <prod vendor="dell" name="sonicwall_scrutinizer_with_flow_analytics_module">
-        <vers num="8.6.2" edition="-" />
-        <vers num="8.6.2" edition="-:pay" />
-        <vers num="9.0.0" edition="-" />
-        <vers num="9.0.0" edition="-:pay" />
-        <vers num="9.0.1" edition="-" />
-        <vers num="9.0.1" edition="-:pay" />
-        <vers prev="1" num="9.5.0" edition="-" />
-        <vers prev="1" num="9.5.0" edition="-:pay" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2630" published="2012-06-04" name="CVE-2012-2630" modified="2012-06-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Puella Magi Madoka Magica iP application 1.05 and earlier for Android places cleartext Twitter credentials in a log file, which allows remote attackers to obtain sensitive information via a crafted application.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000054" source="JVNDB">JVNDB-2012-000054</ref>
-      <ref url="http://jvn.jp/en/jp/JVN23328321/index.html" source="JVN">JVN#23328321</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bandainamcogames" name="madomagi-ip_android">
-        <vers num="1.05" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2631" published="2012-06-15" name="CVE-2012-2631" modified="2012-06-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in WEBLOGIC @WEB ShoppingCart before 1.5.2.0, and @WEB ShoppingCart T 1.5.0.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.atmarkweb.jp/atcart/" source="CONFIRM">http://www.atmarkweb.jp/atcart/</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000055" source="JVNDB">JVNDB-2012-000055</ref>
-      <ref url="http://jvn.jp/en/jp/JVN78305073/index.html" source="JVN">JVN#78305073</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="atmarkweb" name="@web_shoppingcart">
-        <vers num="1.1.0.0" />
-        <vers num="1.1.1.0" />
-        <vers num="1.1.2.0" />
-        <vers num="1.2.0.0" />
-        <vers num="1.3.0.0" />
-        <vers num="1.3.1.0" />
-        <vers num="1.3.1.1" />
-        <vers num="1.5.0.0" />
-        <vers prev="1" num="1.5.1.0" />
-      </prod>
-      <prod vendor="atmarkweb" name="@web_shoppingcart_t">
-        <vers prev="1" num="1.5.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2632" published="2012-06-15" name="CVE-2012-2632" modified="2012-06-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intended URL restrictions via a TCP session.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.seil.jp/support/security/a01232.html" source="CONFIRM" adv="1">http://www.seil.jp/support/security/a01232.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000059" source="JVNDB">JVNDB-2012-000059</ref>
-      <ref url="http://jvn.jp/en/jp/JVN24646833/index.html" source="JVN">JVN#24646833</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="seil" name="b1">
-        <vers num="2.30" />
-        <vers num="2.40" />
-        <vers num="2.41" />
-        <vers num="2.42" />
-        <vers num="2.50" />
-        <vers num="2.51" />
-        <vers num="2.52" />
-        <vers num="2.60" />
-        <vers num="2.61" />
-        <vers num="2.62" />
-        <vers num="2.63" />
-        <vers num="2.70" />
-        <vers num="2.72" />
-        <vers num="2.73" />
-        <vers num="2.74" />
-        <vers num="2.75" />
-        <vers num="3.01" />
-        <vers num="3.02" />
-        <vers num="3.10" />
-        <vers num="3.11" />
-        <vers num="3.12" />
-        <vers num="3.13" />
-        <vers num="3.20" />
-        <vers num="3.21" />
-        <vers num="3.30" />
-        <vers num="3.31" />
-        <vers num="3.40" />
-        <vers num="3.41" />
-        <vers num="3.50" />
-        <vers num="3.51" />
-        <vers num="3.60" />
-        <vers num="3.70" />
-        <vers num="3.71" />
-        <vers num="3.75" />
-      </prod>
-      <prod vendor="seil" name="x1">
-        <vers num="2.30" />
-        <vers num="2.40" />
-        <vers num="2.41" />
-        <vers num="2.42" />
-        <vers num="2.50" />
-        <vers num="2.51" />
-        <vers num="2.52" />
-        <vers num="2.60" />
-        <vers num="2.61" />
-        <vers num="2.62" />
-        <vers num="2.63" />
-        <vers num="2.70" />
-        <vers num="2.72" />
-        <vers num="2.73" />
-        <vers num="2.74" />
-        <vers num="2.75" />
-        <vers num="3.01" />
-        <vers num="3.02" />
-        <vers num="3.10" />
-        <vers num="3.11" />
-        <vers num="3.12" />
-        <vers num="3.13" />
-        <vers num="3.20" />
-        <vers num="3.21" />
-        <vers num="3.30" />
-        <vers num="3.31" />
-        <vers num="3.40" />
-        <vers num="3.41" />
-        <vers num="3.50" />
-        <vers num="3.51" />
-        <vers num="3.60" />
-        <vers num="3.70" />
-        <vers num="3.71" />
-        <vers num="3.75" />
-      </prod>
-      <prod vendor="seil" name="x2">
-        <vers num="2.30" />
-        <vers num="2.40" />
-        <vers num="2.41" />
-        <vers num="2.42" />
-        <vers num="2.50" />
-        <vers num="2.51" />
-        <vers num="2.52" />
-        <vers num="2.60" />
-        <vers num="2.61" />
-        <vers num="2.62" />
-        <vers num="2.63" />
-        <vers num="2.70" />
-        <vers num="2.72" />
-        <vers num="2.73" />
-        <vers num="2.74" />
-        <vers num="2.75" />
-        <vers num="3.01" />
-        <vers num="3.02" />
-        <vers num="3.10" />
-        <vers num="3.11" />
-        <vers num="3.12" />
-        <vers num="3.13" />
-        <vers num="3.20" />
-        <vers num="3.21" />
-        <vers num="3.30" />
-        <vers num="3.31" />
-        <vers num="3.40" />
-        <vers num="3.41" />
-        <vers num="3.50" />
-        <vers num="3.51" />
-        <vers num="3.60" />
-        <vers num="3.70" />
-        <vers num="3.71" />
-        <vers num="3.75" />
-      </prod>
-      <prod vendor="seil" name="b1_firmware">
-        <vers num="2.30" />
-        <vers num="2.40" />
-        <vers num="2.41" />
-        <vers num="2.42" />
-        <vers num="2.50" />
-        <vers num="2.51" />
-        <vers num="2.52" />
-        <vers num="2.60" />
-        <vers num="2.61" />
-        <vers num="2.62" />
-        <vers num="2.63" />
-        <vers num="2.70" />
-        <vers num="2.72" />
-        <vers num="2.73" />
-        <vers num="2.74" />
-        <vers num="2.75" />
-        <vers num="3.01" />
-        <vers num="3.02" />
-        <vers num="3.10" />
-        <vers num="3.11" />
-        <vers num="3.12" />
-        <vers num="3.13" />
-        <vers num="3.20" />
-        <vers num="3.21" />
-        <vers num="3.30" />
-        <vers num="3.31" />
-        <vers num="3.40" />
-        <vers num="3.41" />
-        <vers num="3.50" />
-        <vers num="3.51" />
-        <vers num="3.60" />
-        <vers num="3.70" />
-        <vers num="3.71" />
-        <vers num="3.75" />
-      </prod>
-      <prod vendor="seil" name="x86_firmware">
-        <vers num="1.00" />
-        <vers num="1.61" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2633" published="2012-06-15" name="CVE-2012-2633" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.wpwp.org/archives/wassup-1-8-3-1/" source="CONFIRM">http://www.wpwp.org/archives/wassup-1-8-3-1/</ref>
-      <ref url="http://wordpress.org/extend/plugins/wassup/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/wassup/changelog/</ref>
-      <ref url="http://plugins.trac.wordpress.org/changeset?old_path=%2Fwassup&amp;old=545369&amp;new_path=%2Fwassup&amp;new=545369" source="CONFIRM">http://plugins.trac.wordpress.org/changeset?old_path=%2Fwassup&amp;old=545369&amp;new_path=%2Fwassup&amp;new=545369</ref>
-      <ref url="http://osvdb.org/82017" source="OSVDB">82017</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000058" source="JVNDB">JVNDB-2012-000058</ref>
-      <ref url="http://jvn.jp/en/jp/JVN15646988/index.html" source="JVN">JVN#15646988</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wordpress" name="wassup_plugin">
-        <vers num="1.4" />
-        <vers num="1.4.3" />
-        <vers num="1.7.2" />
-        <vers num="1.7.2.1" />
-        <vers num="1.8" />
-        <vers num="1.8.1" />
-        <vers num="1.8.2" />
-        <vers prev="1" num="1.8.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2634" published="2012-06-15" name="CVE-2012-2634" modified="2012-06-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in FeedDemon before 4.0, when the feed preview option is enabled, allows remote attackers to inject arbitrary web script or HTML via a feed.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000056" source="JVNDB">JVNDB-2012-000056</ref>
-      <ref url="http://jvn.jp/en/jp/JVN18397171/index.html" source="JVN">JVN#18397171</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="newsgator" name="feeddemon">
-        <vers num="2" />
-        <vers num="2.0.0.24" />
-        <vers num="2.6" />
-        <vers num="2.6.1.4" />
-        <vers num="2.6.1.5" />
-        <vers num="2.7" />
-        <vers prev="1" num="3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2635" published="2012-06-15" name="CVE-2012-2635" modified="2012-06-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Dolphin Browser HD application before 7.6 and Dolphin for Pad application before 1.0.1 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000057" source="JVNDB">JVNDB-2012-000057</ref>
-      <ref url="http://jvn.jp/en/jp/JVN90751882/index.html" source="JVN">JVN#90751882</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dolphin-browser" name="dolphin_browser_hd">
-        <vers num="6.2.0" />
-        <vers num="7.2.1" />
-        <vers num="7.3.0" />
-        <vers prev="1" num="7.4.0" />
-      </prod>
-      <prod vendor="dolphin-browser" name="dolphin_for_pad">
-        <vers prev="1" num="1.0" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2636" published="2012-06-19" name="CVE-2012-2636" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kent-web.com/bbs/patio.html" source="CONFIRM">http://www.kent-web.com/bbs/patio.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000061" source="JVNDB">JVNDB-2012-000061</ref>
-      <ref url="http://jvn.jp/en/jp/JVN33171616/index.html" source="JVN">JVN#33171616</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kent-web" name="web_patio">
-        <vers prev="1" num="4.04" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2637" published="2012-06-19" name="CVE-2012-2637" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kent-web.com/bbs/patio.html" source="CONFIRM">http://www.kent-web.com/bbs/patio.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000062" source="JVNDB">JVNDB-2012-000062</ref>
-      <ref url="http://jvn.jp/en/jp/JVN58102473/index.html" source="JVN">JVN#58102473</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kent-web" name="web_patio">
-        <vers num="4.04" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2638" published="2012-06-19" name="CVE-2012-2638" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in SmallPICT.cgi in SmallPICT before 2.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://wap2.jp/download/spict/" source="CONFIRM" adv="1">http://wap2.jp/download/spict/</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000060" source="JVNDB">JVNDB-2012-000060</ref>
-      <ref url="http://jvn.jp/en/jp/JVN36993373/index.html" source="JVN">JVN#36993373</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wap2" name="smallpict">
-        <vers prev="1" num="2.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-2639" reject="1" published="2012-06-26" name="CVE-2012-2639" modified="2012-06-27">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2011-4940.  Reason: This candidate is a reservation duplicate of CVE-2011-4940.  Notes: All CVE users should reference CVE-2011-4940 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs />
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2640" published="2012-07-05" name="CVE-2012-2640" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The NEC BIGLOBE Yome Collection application 1.8.3 and earlier for Android allows remote attackers to read the IMEI value from an SD card via a crafted application that lacks the READ_PHONE_STATE permission.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://yomecolle.jp/info/android_oshirase/" source="CONFIRM" patch="1" adv="1">http://yomecolle.jp/info/android_oshirase/</ref>
-      <ref url="http://www.nec.co.jp/security-info/secinfo/nv12-008.html" source="CONFIRM">http://www.nec.co.jp/security-info/secinfo/nv12-008.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000064" source="JVNDB">JVNDB-2012-000064</ref>
-      <ref url="http://jvn.jp/en/jp/JVN05102851/index.html" source="JVN">JVN#05102851</ref>
-      <ref url="http://jvn.jp/en/jp/JVN05102851/995355/index.html" source="CONFIRM">http://jvn.jp/en/jp/JVN05102851/995355/index.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="yomecolle" name="nec_biglobe_yome_collection">
-        <vers prev="1" num="1.8.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2641" published="2012-07-05" name="CVE-2012-2641" modified="2012-07-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to inject arbitrary web script or HTML by triggering improper interaction with an unspecified library.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.zenphoto.org/news/zenphoto-1.4.3" source="CONFIRM">http://www.zenphoto.org/news/zenphoto-1.4.3</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000065" source="JVNDB">JVNDB-2012-000065</ref>
-      <ref url="http://jvn.jp/en/jp/JVN59842447/index.html" source="JVN">JVN#59842447</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="zenphoto" name="zenphoto">
-        <vers num="0.9" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" edition="beta" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.7" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.1.2" />
-        <vers prev="1" num="1.4.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2642" published="2012-07-07" name="CVE-2012-2642" modified="2012-07-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the MT4i plugin 3.1 beta 4 and earlier for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-2644.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.hazama.nu/pukiwiki/index.php?MT4i%2F3.1" source="CONFIRM">http://www.hazama.nu/pukiwiki/index.php?MT4i%2F3.1</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000067" source="JVNDB">JVNDB-2012-000067</ref>
-      <ref url="http://jvn.jp/en/jp/JVN80835745/index.html" source="JVN">JVN#80835745</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hazama" name="mt4i">
-        <vers prev="1" num="3.1" edition="beta_4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2643" published="2012-07-07" name="CVE-2012-2643" modified="2012-07-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in KENT-WEB YY-BOARD before 6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted form entry.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kent-web.com/bbs/yybbs.html" source="CONFIRM">http://www.kent-web.com/bbs/yybbs.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000068" source="JVNDB">JVNDB-2012-000068</ref>
-      <ref url="http://jvn.jp/en/jp/JVN03582364/index.html" source="JVN">JVN#03582364</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kent-web" name="yy-board">
-        <vers prev="1" num="6.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2644" published="2012-07-07" name="CVE-2012-2644" modified="2012-07-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the MT4i plugin 3.1 beta 4 and earlier for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-2642.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.hazama.nu/pukiwiki/index.php?MT4i%2F3.1" source="CONFIRM">http://www.hazama.nu/pukiwiki/index.php?MT4i%2F3.1</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000069" source="JVNDB">JVNDB-2012-000069</ref>
-      <ref url="http://jvn.jp/en/jp/JVN79111101/index.html" source="JVN">JVN#79111101</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hazama" name="mt4i">
-        <vers prev="1" num="3.1" edition="beta_4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2645" published="2012-07-16" name="CVE-2012-2645" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Yahoo! Japan Yahoo! Browser application 1.2.0 and earlier for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://play.google.com/store/apps/details?id=jp.co.yahoo.android.ybrowser" source="MISC" patch="1">https://play.google.com/store/apps/details?id=jp.co.yahoo.android.ybrowser</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000070" source="JVNDB">JVNDB-2012-000070</ref>
-      <ref url="http://jvn.jp/en/jp/JVN46088915/index.html" source="JVN">JVN#46088915</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="yahoo" name="yahoo!_browser">
-        <vers prev="1" num="1.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2646" published="2012-07-25" name="CVE-2012-2646" modified="2012-07-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black" source="CONFIRM">https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black</ref>
-      <ref url="https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir" source="CONFIRM">https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000071" source="JVNDB">JVNDB-2012-000071</ref>
-      <ref url="http://jvn.jp/en/jp/JVN88643450/index.html" source="JVN">JVN#88643450</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="fenrir-inc" name="sleipnir_mobile">
-        <vers prev="1" num="2.0.4" edition="" />
-        <vers prev="1" num="2.0.4" edition=":black" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2647" published="2012-07-31" name="CVE-2012-2647" modified="2012-07-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Yahoo! Toolbar 1.0.0.5 and earlier for Chrome and Safari allows remote attackers to modify the configured search URL, and intercept search terms, via a crafted web page.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000072" source="JVNDB">JVNDB-2012-000072</ref>
-      <ref url="http://jvn.jp/en/jp/JVN51769987/index.html" source="JVN">JVN#51769987</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="yahoo" name="toolbar">
-        <vers prev="1" num="1.0.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2648" published="2012-08-07" name="CVE-2012-2648" modified="2012-08-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the GoodReader app 3.16 and earlier for iOS on the iPad, and 3.15.1 and earlier for iOS on the iPhone and iPod touch, allows remote attackers to inject arbitrary web script or HTML via vectors involving use of this app in conjunction with a web browser.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000073" source="JVNDB">JVNDB-2012-000073</ref>
-      <ref url="http://jvn.jp/en/jp/JVN01598734/index.html" source="JVN">JVN#01598734</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="goodiware" name="goodreader">
-        <vers num="1.1" edition="-" />
-        <vers num="1.1" edition="-:~~~iphone_os~~" />
-        <vers num="2.0" edition="-" />
-        <vers num="2.0" edition="-:~~~iphone_os~~" />
-        <vers num="2.1" edition="-" />
-        <vers num="2.1" edition="-:~~~iphone_os~~" />
-        <vers num="2.2" edition="-" />
-        <vers num="2.2" edition="-:~~~iphone_os~~" />
-        <vers num="2.3" edition="-" />
-        <vers num="2.3" edition="-:~~~iphone_os~~" />
-        <vers num="2.4" edition="-" />
-        <vers num="2.4" edition="-:~~~iphone_os~~" />
-        <vers num="2.5" edition="-" />
-        <vers num="2.5" edition="-:~~~iphone_os~~" />
-        <vers num="2.5.1" edition="-" />
-        <vers num="2.5.1" edition="-:~~~iphone_os~~" />
-        <vers num="2.6" edition="-" />
-        <vers num="2.6" edition="-:~~~iphone_os~~" />
-        <vers num="2.7" edition="-" />
-        <vers num="2.7" edition="-:~~~iphone_os~~" />
-        <vers num="2.7.4" edition="-" />
-        <vers num="2.7.4" edition="-:~~~iphone_os~~" />
-        <vers num="2.8" edition="-" />
-        <vers num="2.8" edition="-:~~~iphone_os~~" />
-        <vers num="2.8.2" edition="-" />
-        <vers num="2.8.2" edition="-:~~~iphone_os~~" />
-        <vers num="2.8.4" edition="-" />
-        <vers num="2.8.4" edition="-:~~~iphone_os~~" />
-        <vers num="2.8.5" edition="-" />
-        <vers num="2.8.5" edition="-:~~~iphone_os~~" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:~~~iphone_os~~" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:~~~iphone_os~~" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:~~~iphone_os~~" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:~~~iphone_os~~" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:~~~iphone_os~~" />
-        <vers num="3.1.2" edition="-" />
-        <vers num="3.1.2" edition="-:~~~iphone_os~~" />
-        <vers num="3.10.0" edition="-" />
-        <vers num="3.10.0" edition="-:~~~iphone_os~~" />
-        <vers num="3.10.1" edition="-" />
-        <vers num="3.10.1" edition="-:~~~iphone_os~~" />
-        <vers num="3.10.2" edition="-" />
-        <vers num="3.10.2" edition="-:~~~iphone_os~~" />
-        <vers num="3.10.3" edition="-" />
-        <vers num="3.10.3" edition="-:~~~iphone_os~~" />
-        <vers num="3.11.0" edition="-" />
-        <vers num="3.11.0" edition="-:~~~iphone_os~~" />
-        <vers num="3.11.1" edition="-" />
-        <vers num="3.11.1" edition="-:~~~iphone_os~~" />
-        <vers num="3.12.0" edition="-" />
-        <vers num="3.12.0" edition="-:~~~iphone_os~~" />
-        <vers num="3.12.1" edition="-" />
-        <vers num="3.12.1" edition="-:~~~iphone_os~~" />
-        <vers num="3.13.0" edition="-" />
-        <vers num="3.13.0" edition="-:~~~iphone_os~~" />
-        <vers num="3.13.1" edition="-" />
-        <vers num="3.13.1" edition="-:~~~iphone_os~~" />
-        <vers num="3.14.0" edition="-" />
-        <vers num="3.14.0" edition="-:~~~iphone_os~~" />
-        <vers num="3.14.1" edition="-" />
-        <vers num="3.14.1" edition="-:~~~iphone_os~~" />
-        <vers num="3.14.2" edition="-" />
-        <vers num="3.14.2" edition="-:~~~iphone_os~~" />
-        <vers num="3.15.0" edition="-" />
-        <vers num="3.15.0" edition="-:~~~iphone_os~~" />
-        <vers prev="1" num="3.15.1" edition="-" />
-        <vers prev="1" num="3.15.1" edition="-:~~~iphone_os~~" />
-        <vers prev="1" num="3.16" edition="-" />
-        <vers prev="1" num="3.16" edition="-:~~~iphone_os~~" />
-        <vers num="3.2.0" edition="-" />
-        <vers num="3.2.0" edition="-:~~~iphone_os~~" />
-        <vers num="3.2.1" edition="-" />
-        <vers num="3.2.1" edition="-:~~~iphone_os~~" />
-        <vers num="3.2.3" edition="-" />
-        <vers num="3.2.3" edition="-:~~~iphone_os~~" />
-        <vers num="3.3.0" edition="-" />
-        <vers num="3.3.0" edition="-:~~~iphone_os~~" />
-        <vers num="3.3.1" edition="-" />
-        <vers num="3.3.1" edition="-:~~~iphone_os~~" />
-        <vers num="3.4.0" edition="-" />
-        <vers num="3.4.0" edition="-:~~~iphone_os~~" />
-        <vers num="3.4.1" edition="-" />
-        <vers num="3.4.1" edition="-:~~~iphone_os~~" />
-        <vers num="3.5.0" edition="-" />
-        <vers num="3.5.0" edition="-:~~~iphone_os~~" />
-        <vers num="3.5.1" edition="-" />
-        <vers num="3.5.1" edition="-:~~~iphone_os~~" />
-        <vers num="3.6.0" edition="-" />
-        <vers num="3.6.0" edition="-:~~~iphone_os~~" />
-        <vers num="3.6.1" edition="-" />
-        <vers num="3.6.1" edition="-:~~~iphone_os~~" />
-        <vers num="3.7.0" edition="-" />
-        <vers num="3.7.0" edition="-:~~~iphone_os~~" />
-        <vers num="3.7.1" edition="-" />
-        <vers num="3.7.1" edition="-:~~~iphone_os~~" />
-        <vers num="3.8.0" edition="-" />
-        <vers num="3.8.0" edition="-:~~~iphone_os~~" />
-        <vers num="3.8.1" edition="-" />
-        <vers num="3.8.1" edition="-:~~~iphone_os~~" />
-        <vers num="3.9.0" edition="-" />
-        <vers num="3.9.0" edition="-:~~~iphone_os~~" />
-        <vers num="3.9.1" edition="-" />
-        <vers num="3.9.1" edition="-:~~~iphone_os~~" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2649" published="2012-08-08" name="CVE-2012-2649" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allow remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black" source="CONFIRM">https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black</ref>
-      <ref url="https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir" source="CONFIRM">https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000075" source="JVNDB">JVNDB-2012-000075</ref>
-      <ref url="http://jvn.jp/en/jp/JVN99730704/index.html" source="JVN">JVN#99730704</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="fenrir-inc" name="sleipnir_mobile">
-        <vers num="1.0.0" edition="alpha" />
-        <vers num="1.0.0" edition="alpha:black" />
-        <vers num="1.0.0" edition="beta_update1" />
-        <vers num="1.0.0" edition="beta_update1:black" />
-        <vers num="1.0.0" edition="rc" />
-        <vers num="1.0.0" edition="rc:black" />
-        <vers num="1.1.0" edition="-" />
-        <vers num="1.1.0" edition="-:black" />
-        <vers num="1.2.0" edition="-" />
-        <vers num="1.2.0" edition="-:black" />
-        <vers num="1.3.0" edition="-" />
-        <vers num="1.3.0" edition="-:black" />
-        <vers num="1.4.0" edition="-" />
-        <vers num="1.4.0" edition="-:black" />
-        <vers num="1.5.0" edition="-" />
-        <vers num="1.5.0" edition="-:black" />
-        <vers num="1.5.1" edition="-" />
-        <vers num="1.5.1" edition="-:black" />
-        <vers num="1.6.0" edition="-" />
-        <vers num="1.6.0" edition="-:black" />
-        <vers num="1.7.0" edition="-" />
-        <vers num="1.7.0" edition="-:black" />
-        <vers num="1.7.1" edition="-" />
-        <vers num="1.7.1" edition="-:black" />
-        <vers num="2.0.0" edition="-" />
-        <vers num="2.0.0" edition="-:black" />
-        <vers num="2.0.1" edition="-" />
-        <vers num="2.0.1" edition="-:black" />
-        <vers num="2.0.2" edition="-" />
-        <vers num="2.0.2" edition="-:black" />
-        <vers num="2.0.3" edition="-" />
-        <vers num="2.0.3" edition="-:black" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:black" />
-        <vers num="2.1.0" edition="-" />
-        <vers num="2.1.0" edition="-:black" />
-        <vers prev="1" num="2.2.0" edition="-" />
-        <vers prev="1" num="2.2.0" edition="-:black" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2652" published="2012-08-07" name="CVE-2012-2652" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="4.4" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.4" CVSS_base_score="4.4">
-    <desc>
-      <descript source="cve">The bdrv_open function in Qemu 1.0 does not properly handle the failure of the mkstemp function, when in snapshot node, which allows local users to overwrite or read arbitrary files via a symlink attack on an unspecified temporary file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.ubuntu.com/usn/USN-1522-1" source="UBUNTU">USN-1522-1</ref>
-      <ref url="http://www.securityfocus.com/bid/53725" source="BID">53725</ref>
-      <ref url="http://secunia.com/advisories/50132" source="SECUNIA" adv="1">50132</ref>
-      <ref url="http://git.kernel.org/?p=virt/kvm/qemu-kvm.git;a=commit;h=eba25057b9a5e19d10ace2bc7716667a31297169" source="CONFIRM">http://git.kernel.org/?p=virt/kvm/qemu-kvm.git;a=commit;h=eba25057b9a5e19d10ace2bc7716667a31297169</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="qemu" name="qemu">
-        <vers num="1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2653" published="2012-07-12" name="CVE-2012-2653" modified="2012-07-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabilities in the daemon.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/25/5" source="MLIST">[oss-security] 20120525 Re: CVE Request: powerdns does not clear supplementary groups</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/24/14" source="MLIST">[oss-security] 20120524 Re: CVE Request: powerdns does not clear supplementary groups</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/24/13" source="MLIST">[oss-security] 20120525 Re: CVE Request: powerdns does not clear supplementary groups</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/24/12" source="MLIST">[oss-security] 20120524 Re: CVE Request: powerdns does not clear supplementary groups</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2481" source="DEBIAN">DSA-2481</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082569.html" source="FEDORA">FEDORA-2012-8675</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082565.html" source="FEDORA">FEDORA-2012-8702</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082553.html" source="FEDORA">FEDORA-2012-8677</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="lawrence_berkeley_national_laboratory" name="arpwatch">
-        <vers num="2.1a15" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2654" published="2012-06-21" name="CVE-2012-2654" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restrictions.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/openstack/nova/commit/ff06c7c885dc94ed7c828e8cdbb8b5d850a7e654" source="CONFIRM" patch="1">https://github.com/openstack/nova/commit/ff06c7c885dc94ed7c828e8cdbb8b5d850a7e654</ref>
-      <ref url="https://github.com/openstack/nova/commit/9f9e9da777161426a6f8cb4314b78e09beac2978" source="CONFIRM" patch="1">https://github.com/openstack/nova/commit/9f9e9da777161426a6f8cb4314b78e09beac2978</ref>
-      <ref url="https://bugs.launchpad.net/nova/+bug/985184" source="CONFIRM" patch="1">https://bugs.launchpad.net/nova/+bug/985184</ref>
-      <ref url="https://review.openstack.org/#/c/8239/" source="CONFIRM">https://review.openstack.org/#/c/8239/</ref>
-      <ref url="https://lists.launchpad.net/openstack/msg12883.html" source="MLIST">[openstack] 20120606 [OSSA 2012-007] Security groups fail to be set correctly (CVE-2012-2654)</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76110" source="XF">nova-security-group-sec-bypass(76110)</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1466-1" source="UBUNTU">USN-1466-1</ref>
-      <ref url="http://secunia.com/advisories/49439" source="SECUNIA" adv="1">49439</ref>
-      <ref url="http://secunia.com/advisories/46808" source="SECUNIA" adv="1">46808</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openstack" name="compute">
-        <vers num="2012.2" />
-      </prod>
-      <prod vendor="openstack" name="diablo">
-        <vers num="2011.3" />
-      </prod>
-      <prod vendor="openstack" name="essex">
-        <vers num="2012.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2655" published="2012-07-18" name="CVE-2012-2655" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call handler.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.postgresql.org/about/news/1398/" source="CONFIRM" adv="1">http://www.postgresql.org/about/news/1398/</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:092" source="MANDRIVA">MDVSA-2012:092</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2491" source="DEBIAN">DSA-2491</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1037.html" source="REDHAT">RHSA-2012:1037</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082294.html" source="FEDORA">FEDORA-2012-8915</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082292.html" source="FEDORA">FEDORA-2012-8924</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082258.html" source="FEDORA">FEDORA-2012-8893</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="postgresql" name="postgresql">
-        <vers num="8.3" />
-        <vers num="8.3.1" />
-        <vers num="8.3.10" />
-        <vers num="8.3.11" />
-        <vers num="8.3.12" />
-        <vers num="8.3.13" />
-        <vers num="8.3.14" />
-        <vers num="8.3.15" />
-        <vers num="8.3.16" />
-        <vers num="8.3.17" />
-        <vers num="8.3.18" />
-        <vers num="8.3.2" />
-        <vers num="8.3.3" />
-        <vers num="8.3.4" />
-        <vers num="8.3.5" />
-        <vers num="8.3.6" />
-        <vers num="8.3.7" />
-        <vers num="8.3.8" />
-        <vers num="8.3.9" />
-        <vers num="8.4" />
-        <vers num="8.4.1" />
-        <vers num="8.4.10" />
-        <vers num="8.4.11" />
-        <vers num="8.4.2" />
-        <vers num="8.4.3" />
-        <vers num="8.4.4" />
-        <vers num="8.4.5" />
-        <vers num="8.4.6" />
-        <vers num="8.4.7" />
-        <vers num="8.4.8" />
-        <vers num="8.4.9" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.0.4" />
-        <vers num="9.0.5" />
-        <vers num="9.0.6" />
-        <vers num="9.0.7" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2657" published="2012-08-31" name="CVE-2012-2657" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">** DISPUTED **  Buffer overflow in the SQLDriverConnect function in unixODBC 2.0.10, 2.3.1, and earlier allows local users to cause a denial of service (crash) via a long string in the FILEDSN option.  NOTE: this issue might not be a vulnerability, since the ability to set this option typically implies that the attacker already has legitimate access to cause a DoS or execute code, and therefore the issue would not cross privilege boundaries. There may be limited attack scenarios if isql command-line options are exposed to an attacker, although it seems likely that other, more serious issues would also be exposed, and this issue might not cross privilege boundaries in that context.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75940" source="XF">unixodbc-sdc-bo(75940)</ref>
-      <ref url="http://www.securityfocus.com/bid/53712" source="BID">53712</ref>
-      <ref url="http://www.osvdb.org/82460" source="OSVDB">82460</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/06/3" source="MLIST">[oss-security] 20120605 Re: CVE id request: Multiple buffer overflow in unixODBC</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/31/2" source="MLIST">[oss-security] 20120531 Re: CVE id request: Multiple buffer overflow in unixODBC</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/30/7" source="MLIST">[oss-security] 20120530 Re: CVE id request: Multiple buffer overflow in unixODBC</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/29/7" source="MLIST">[oss-security] 20120529 CVE id request: Multiple buffer overflow in unixODBC</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/29/10" source="MLIST">[oss-security] 20120529 Re: CVE id request: Multiple buffer overflow in unixODBC</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="unixodbc" name="unixodbc">
-        <vers num="2.0.10" />
-        <vers num="2.3.0" />
-        <vers prev="1" num="2.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2658" published="2012-08-31" name="CVE-2012-2658" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">** DISPUTED **  Buffer overflow in the SQLDriverConnect function in unixODBC 2.3.1 allows local users to cause a denial of service (crash) via a long string in the DRIVER option.  NOTE: this issue might not be a vulnerability, since the ability to set this option typically implies that the attacker already has legitimate access to cause a DoS or execute code, and therefore the issue would not cross privilege boundaries. There may be limited attack scenarios if isql command-line options are exposed to an attacker, although it seems likely that other, more serious issues would also be exposed, and this issue might not cross privilege boundaries in that context.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75940" source="XF">unixodbc-sdc-bo(75940)</ref>
-      <ref url="http://www.securityfocus.com/bid/53712" source="BID">53712</ref>
-      <ref url="http://www.osvdb.org/82460" source="OSVDB">82460</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/06/3" source="MLIST">[oss-security] 20120605 Re: CVE id request: Multiple buffer overflow in unixODBC</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/31/2" source="MLIST">[oss-security] 20120531 Re: CVE id request: Multiple buffer overflow in unixODBC</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/30/7" source="MLIST">[oss-security] 20120530 Re: CVE id request: Multiple buffer overflow in unixODBC</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/29/7" source="MLIST">[oss-security] 20120529 CVE id request: Multiple buffer overflow in unixODBC</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/29/10" source="MLIST">[oss-security] 20120529 Re: CVE id request: Multiple buffer overflow in unixODBC</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="unixodbc" name="unixodbc">
-        <vers num="2.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2660" published="2012-06-22" name="CVE-2012-2660" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain "[nil]" values, a related issue to CVE-2012-2694.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://groups.google.com/group/rubyonrails-security/msg/d890f8d58b5fbf32?dmode=source&amp;output=gplain" source="MLIST">[rubyonrails-security] 20120531 Unsafe Query Generation Risk in Ruby on Rails (CVE-2012-2660)</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00017.html" source="SUSE">SUSE-SU-2012:1015</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00002.html" source="SUSE">openSUSE-SU-2012:0978</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rubyonrails" name="ruby_on_rails">
-        <vers num="3.0.0" edition="beta" />
-        <vers num="3.0.0" edition="beta2" />
-        <vers num="3.0.0" edition="beta3" />
-        <vers num="3.0.0" edition="beta4" />
-        <vers num="3.0.0" edition="rc" />
-        <vers num="3.0.0" edition="rc2" />
-        <vers num="3.0.1" edition="pre" />
-        <vers num="3.0.10" edition="rc1" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" edition="rc1" />
-        <vers num="3.0.13" edition="rc1" />
-        <vers num="3.0.2" edition="pre" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" edition="rc" />
-        <vers num="3.0.4" edition="rc1" />
-        <vers num="3.0.5" edition="rc1" />
-        <vers num="3.0.6" edition="rc1" />
-        <vers num="3.0.6" edition="rc2" />
-        <vers num="3.0.7" edition="rc1" />
-        <vers num="3.0.7" edition="rc2" />
-        <vers num="3.0.8" edition="rc1" />
-        <vers num="3.0.8" edition="rc2" />
-        <vers num="3.0.8" edition="rc3" />
-        <vers num="3.0.8" edition="rc4" />
-        <vers num="3.0.9" edition="rc1" />
-        <vers num="3.0.9" edition="rc2" />
-        <vers num="3.0.9" edition="rc3" />
-        <vers num="3.0.9" edition="rc4" />
-        <vers num="3.0.9" edition="rc5" />
-        <vers num="3.1.0" edition="beta1" />
-        <vers num="3.1.0" edition="rc1" />
-        <vers num="3.1.0" edition="rc2" />
-        <vers num="3.1.0" edition="rc3" />
-        <vers num="3.1.0" edition="rc4" />
-        <vers num="3.1.0" edition="rc5" />
-        <vers num="3.1.0" edition="rc6" />
-        <vers num="3.1.0" edition="rc7" />
-        <vers num="3.1.0" edition="rc8" />
-        <vers num="3.1.1" edition="rc1" />
-        <vers num="3.1.1" edition="rc2" />
-        <vers num="3.1.1" edition="rc3" />
-        <vers num="3.1.2" edition="rc1" />
-        <vers num="3.1.2" edition="rc2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" edition="rc1" />
-        <vers num="3.1.5" edition="rc1" />
-        <vers num="3.2.0" edition="rc1" />
-        <vers num="3.2.0" edition="rc2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" edition="rc1" />
-        <vers num="3.2.3" edition="rc1" />
-        <vers num="3.2.3" edition="rc2" />
-        <vers num="3.2.4" edition="rc1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2661" published="2012-06-22" name="CVE-2012-2661" modified="2012-07-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL injection attacks via nested query parameters that leverage unintended recursion, a related issue to CVE-2012-2695.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://groups.google.com/group/rubyonrails-security/msg/fc2da6c627fc92df?dmode=source&amp;output=gplain" source="MLIST">[rubyonrails-security] 20120531 SQL Injection Vulnerability in Ruby on Rails (CVE-2012-2661)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rubyonrails" name="ruby_on_rails">
-        <vers num="3.0.0" edition="beta" />
-        <vers num="3.0.0" edition="beta2" />
-        <vers num="3.0.0" edition="beta3" />
-        <vers num="3.0.0" edition="beta4" />
-        <vers num="3.0.0" edition="rc" />
-        <vers num="3.0.0" edition="rc2" />
-        <vers num="3.0.1" edition="pre" />
-        <vers num="3.0.10" edition="rc1" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" edition="rc1" />
-        <vers num="3.0.13" edition="rc1" />
-        <vers num="3.0.2" edition="pre" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" edition="rc" />
-        <vers num="3.0.4" edition="rc1" />
-        <vers num="3.0.5" edition="rc1" />
-        <vers num="3.0.6" edition="rc1" />
-        <vers num="3.0.6" edition="rc2" />
-        <vers num="3.0.7" edition="rc1" />
-        <vers num="3.0.7" edition="rc2" />
-        <vers num="3.0.8" edition="rc1" />
-        <vers num="3.0.8" edition="rc2" />
-        <vers num="3.0.8" edition="rc3" />
-        <vers num="3.0.8" edition="rc4" />
-        <vers num="3.0.9" edition="rc1" />
-        <vers num="3.0.9" edition="rc2" />
-        <vers num="3.0.9" edition="rc3" />
-        <vers num="3.0.9" edition="rc4" />
-        <vers num="3.0.9" edition="rc5" />
-        <vers num="3.1.0" edition="beta1" />
-        <vers num="3.1.0" edition="rc1" />
-        <vers num="3.1.0" edition="rc2" />
-        <vers num="3.1.0" edition="rc3" />
-        <vers num="3.1.0" edition="rc4" />
-        <vers num="3.1.0" edition="rc5" />
-        <vers num="3.1.0" edition="rc6" />
-        <vers num="3.1.0" edition="rc7" />
-        <vers num="3.1.0" edition="rc8" />
-        <vers num="3.1.1" edition="rc1" />
-        <vers num="3.1.1" edition="rc2" />
-        <vers num="3.1.1" edition="rc3" />
-        <vers num="3.1.2" edition="rc1" />
-        <vers num="3.1.2" edition="rc2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" edition="rc1" />
-        <vers num="3.1.5" edition="rc1" />
-        <vers num="3.2.0" edition="rc1" />
-        <vers num="3.2.0" edition="rc2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" edition="rc1" />
-        <vers num="3.2.3" edition="rc1" />
-        <vers num="3.2.3" edition="rc2" />
-        <vers num="3.2.4" edition="rc1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2662" published="2012-08-13" name="CVE-2012-2662" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77101" source="XF">rhcs-agentendentity-xss(77101)</ref>
-      <ref url="http://www.securitytracker.com/id?1027284" source="SECTRACK" adv="1">1027284</ref>
-      <ref url="http://www.securityfocus.com/bid/54608" source="BID">54608</ref>
-      <ref url="http://secunia.com/advisories/50013" source="SECUNIA" adv="1">50013</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1103.html" source="REDHAT" adv="1">RHSA-2012:1103</ref>
-      <ref url="http://osvdb.org/84099" source="OSVDB">84099</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="redhat" name="certificate_system">
-        <vers num="7.1" />
-        <vers num="7.2" />
-        <vers num="7.3" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers prev="1" num="8.1" />
-      </prod>
-      <prod vendor="redhat" name="dogtag_certificate_system">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2664" published="2012-06-29" name="CVE-2012-2664" modified="2012-08-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archive of debugging information, which might allow attackers to obtain passwords or password hashes.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76468" source="XF">sos-anaconda-info-disclosure(76468)</ref>
-      <ref url="http://www.securityfocus.com/bid/54116" source="BID">54116</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0958.html" source="REDHAT" adv="1">RHSA-2012:0958</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="redhat" name="sos">
-        <vers prev="1" num="2.2-18" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2665" published="2012-08-06" name="CVE-2012-2665" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Open Document Text (.odt) file with (1) a child tag within an incorrect parent tag, (2) duplicate tags, or (3) a Base64 ChecksumAttribute whose length is not evenly divisible by four.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=826077" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=826077</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1537-1" source="UBUNTU">USN-1537-1</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1536-1" source="UBUNTU">USN-1536-1</ref>
-      <ref url="http://www.securitytracker.com/id?1027332" source="SECTRACK">1027332</ref>
-      <ref url="http://www.securitytracker.com/id?1027331" source="SECTRACK">1027331</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2520" source="DEBIAN">DSA-2520</ref>
-      <ref url="http://secunia.com/advisories/50146" source="SECUNIA" adv="1">50146</ref>
-      <ref url="http://secunia.com/advisories/50142" source="SECUNIA" adv="1">50142</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1135.html" source="REDHAT">RHSA-2012:1135</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="libreoffice" name="libreoffice">
-        <vers num="3.5." edition="rc1" />
-        <vers num="3.5.0" edition="rc1" />
-        <vers num="3.5.0" edition="rc2" />
-        <vers num="3.5.0" edition="rc3" />
-        <vers num="3.5.1" edition="rc1" />
-        <vers num="3.5.1" edition="rc2" />
-        <vers num="3.5.2" edition="rc1" />
-        <vers num="3.5.2" edition="rc2" />
-        <vers num="3.5.3" edition="rc1" />
-        <vers num="3.5.3" edition="rc2" />
-        <vers prev="1" num="3.5.4" edition="rc2" />
-      </prod>
-      <prod vendor="sun" name="openoffice.org">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2667" published="2012-06-07" name="CVE-2012-2667" modified="2012-06-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Session fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony before 1.4.18 allows remote attackers to hijack web sessions via vectors related to the regenerate method and unspecified "database backed session classes."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76027" source="XF">symfony-session-hijacking(76027)</ref>
-      <ref url="http://www.securityfocus.com/bid/53776" source="BID">53776</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/05/2" source="MLIST">[oss-security] 20120605 Re: CVE Request -- Symfony / php-symfony-symfony: Session fixation flaw corrected in upstream 1.4.18 version</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/04/1" source="MLIST">[oss-security] 20120604 CVE Request -- Symfony / php-symfony-symfony: Session fixation flaw corrected in upstream 1.4.18 version</ref>
-      <ref url="http://trac.symfony-project.org/browser/tags/RELEASE_1_4_18/CHANGELOG" source="CONFIRM">http://trac.symfony-project.org/browser/tags/RELEASE_1_4_18/CHANGELOG</ref>
-      <ref url="http://symfony.com/blog/security-release-symfony-1-4-18-released" source="CONFIRM" adv="1">http://symfony.com/blog/security-release-symfony-1-4-18-released</ref>
-      <ref url="http://secunia.com/advisories/49312" source="SECUNIA" adv="1">49312</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sensiolabs" name="symfony">
-        <vers num="1.4.0" edition="rc1" />
-        <vers num="1.4.0" edition="rc2" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.15" />
-        <vers num="1.4.16" />
-        <vers prev="1" num="1.4.17" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2668" published="2012-06-16" name="CVE-2012-2668" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=825875" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=825875</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76099" source="XF">openldap-nss-weak-security(76099)</ref>
-      <ref url="http://www.securitytracker.com/id?1027127" source="SECTRACK">1027127</ref>
-      <ref url="http://www.securityfocus.com/bid/53823" source="BID">53823</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/06/2" source="MLIST">[oss-security] 20120606 Re: CVE request: openldap does not honor TLSCipherSuite configuration option</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/06/1" source="MLIST">[oss-security] 20120605 Re: CVE request: openldap does not honor TLSCipherSuite configuration option</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/05/4" source="MLIST">[oss-security] 20120605 CVE request: openldap does not honor TLSCipherSuite configuration option</ref>
-      <ref url="http://www.openldap.org/its/index.cgi?findid=7285" source="CONFIRM">http://www.openldap.org/its/index.cgi?findid=7285</ref>
-      <ref url="http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=commitdiff;h=2c2bb2e" source="CONFIRM">http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=commitdiff;h=2c2bb2e</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1151.html" source="REDHAT">RHSA-2012:1151</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=676309" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=676309</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openldap" name="openldap">
-        <vers num="2.4.10" />
-        <vers num="2.4.11" />
-        <vers num="2.4.12" />
-        <vers num="2.4.13" />
-        <vers num="2.4.14" />
-        <vers num="2.4.15" />
-        <vers num="2.4.16" />
-        <vers num="2.4.17" />
-        <vers num="2.4.18" />
-        <vers num="2.4.19" />
-        <vers num="2.4.20" />
-        <vers num="2.4.21" />
-        <vers num="2.4.22" />
-        <vers num="2.4.23" />
-        <vers num="2.4.24" />
-        <vers num="2.4.25" />
-        <vers num="2.4.26" />
-        <vers num="2.4.27" />
-        <vers num="2.4.28" />
-        <vers num="2.4.29" />
-        <vers num="2.4.30" />
-        <vers prev="1" num="2.4.31" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers num="2.4.8" />
-        <vers num="2.4.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2670" published="2012-06-16" name="CVE-2012-2670" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">manageuser.php in Collabtive before 0.7.6 allows remote authenticated users, and possibly unauthenticated attackers, to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg, then accessing it via a direct request to the file in files/standard/avatar.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xync.org/2012/06/04/Arbitrary-File-Upload-in-Collabtive.html" source="MISC">http://xync.org/2012/06/04/Arbitrary-File-Upload-in-Collabtive.html</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76101" source="XF">collabtive-manageuser-file-upload(76101)</ref>
-      <ref url="http://www.securityfocus.com/bid/53813" source="BID">53813</ref>
-      <ref url="http://www.securityfocus.com/archive/1/522973/30/0/threaded" source="BUGTRAQ">20120605 Arbitrary File Upload/Execution in Collabtive</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/06/9" source="MLIST">[oss-security] 20120606 Re: Arbitrary File Upload/Execution in Collabtive</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/06/6" source="MLIST">[oss-security] 20120606 Arbitrary File Upload/Execution in Collabtive</ref>
-      <ref url="http://www.collabtive.o-dyn.de/blog/?p=426" source="CONFIRM">http://www.collabtive.o-dyn.de/blog/?p=426</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-06/0007.html" source="BUGTRAQ">20120604 Arbitrary File Upload/Execution in Collabtive</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="o-dyn" name="collabtive">
-        <vers num="0.6.4" />
-        <vers num="0.6.5" />
-        <vers num="0.7" />
-        <vers prev="1" num="0.7.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2671" published="2012-06-16" name="CVE-2012-2671" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The Rack::Cache rubygem 0.3.0 through 1.1 caches Set-Cookie and other sensitive headers, which allows attackers to obtain sensitive cookie information, hijack web sessions, or have other unspecified impact by accessing the cache.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/rtomayko/rack-cache/pull/52" source="CONFIRM">https://github.com/rtomayko/rack-cache/pull/52</ref>
-      <ref url="https://github.com/rtomayko/rack-cache/commit/2e3a64d07daac4c757cc57620f2288e865a09b90" source="CONFIRM">https://github.com/rtomayko/rack-cache/commit/2e3a64d07daac4c757cc57620f2288e865a09b90</ref>
-      <ref url="https://github.com/rtomayko/rack-cache/blob/master/CHANGES" source="CONFIRM">https://github.com/rtomayko/rack-cache/blob/master/CHANGES</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=824520" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=824520</ref>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=763650" source="MISC">https://bugzilla.novell.com/show_bug.cgi?id=763650</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/06/8" source="MLIST">[oss-security] 20120606 Re: CVE request: rack-cache caches sensitive headers (Set-Cookie)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/06/4" source="MLIST">[oss-security] 20120606 CVE request: rack-cache caches sensitive headers (Set-Cookie)</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081812.html" source="FEDORA">FEDORA-2012-8439</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rtomayko" name="rack-cach">
-        <vers num="0.3.0" />
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2672" published="2012-06-16" name="CVE-2012-2672" modified="2012-06-18" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access resources from another WAR file by calling the FacesContext.getCurrentInstance function.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://issues.jboss.org/browse/JBPAPP-9197" source="MISC">https://issues.jboss.org/browse/JBPAPP-9197</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76179" source="XF">mojarra-facescontext-info-disc(76179)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/07/3" source="MLIST">[oss-security] 20120606 Re: CVE request: Mojarra allows deployed web applications to read FacesContext from other applications</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/07/2" source="MLIST">[oss-security] 20120606 CVE request: Mojarra allows deployed web applications to read FacesContext from other applications</ref>
-      <ref url="http://secunia.com/advisories/49284" source="SECUNIA" adv="1">49284</ref>
-      <ref url="http://java.net/jira/browse/JAVASERVERFACES-2436" source="CONFIRM">http://java.net/jira/browse/JAVASERVERFACES-2436</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="mojarra">
-        <vers num="2.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2673" published="2012-07-25" name="CVE-2012-2673" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc funtions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/ivmai/bdwgc/commit/e10c1eb9908c2774c16b3148b30d2f3823d66a9a" source="CONFIRM" patch="1">https://github.com/ivmai/bdwgc/commit/e10c1eb9908c2774c16b3148b30d2f3823d66a9a</ref>
-      <ref url="https://github.com/ivmai/bdwgc/commit/be9df82919960214ee4b9d3313523bff44fd99e1" source="CONFIRM" patch="1">https://github.com/ivmai/bdwgc/commit/be9df82919960214ee4b9d3313523bff44fd99e1</ref>
-      <ref url="https://github.com/ivmai/bdwgc/commit/83231d0ab5ed60015797c3d1ad9056295ac3b2bb" source="CONFIRM" patch="1">https://github.com/ivmai/bdwgc/commit/83231d0ab5ed60015797c3d1ad9056295ac3b2bb</ref>
-      <ref url="https://github.com/ivmai/bdwgc/commit/6a93f8e5bcad22137f41b6c60a1c7384baaec2b3" source="CONFIRM" patch="1">https://github.com/ivmai/bdwgc/commit/6a93f8e5bcad22137f41b6c60a1c7384baaec2b3</ref>
-      <ref url="https://github.com/ivmai/bdwgc/blob/master/ChangeLog" source="CONFIRM">https://github.com/ivmai/bdwgc/blob/master/ChangeLog</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1546-1" source="UBUNTU">USN-1546-1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/07/13" source="MLIST">[oss-security] 20120607 Re: memory allocator upstream patches</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/05/1" source="MLIST">[oss-security] 20120605 memory allocator upstream patches</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082988.html" source="FEDORA">FEDORA-2012-9637</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082926.html" source="FEDORA">FEDORA-2012-9556</ref>
-      <ref url="http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/" source="MISC">http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="boehm-demers-weiser" name="garbage_collector">
-        <vers num="1.3" />
-        <vers num="1.4" />
-        <vers num="1.5" />
-        <vers num="1.8" />
-        <vers num="1.9" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.4" />
-        <vers num="3.0" />
-        <vers num="3.1" />
-        <vers num="3.2" />
-        <vers num="3.3" />
-        <vers num="3.4" />
-        <vers num="3.5" />
-        <vers num="3.6" />
-        <vers num="3.7" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-        <vers num="4.10" />
-        <vers num="4.11" />
-        <vers num="4.12" />
-        <vers num="4.13" />
-        <vers num="4.14" edition="alpha1" />
-        <vers num="4.14" edition="alpha2" />
-        <vers num="4.2" />
-        <vers num="4.3" />
-        <vers num="4.4" />
-        <vers num="4.5" />
-        <vers num="4.6" />
-        <vers num="4.7" />
-        <vers num="4.8" />
-        <vers num="4.9" />
-        <vers num="5.0" edition="alpha1" />
-        <vers num="5.0" edition="alpha2" />
-        <vers num="5.0" edition="alpha3" />
-        <vers num="5.0" edition="alpha4" />
-        <vers num="5.0" edition="alpha6" />
-        <vers num="5.0" edition="alpha7" />
-        <vers num="5.1" />
-        <vers num="5.2" />
-        <vers num="5.3" />
-        <vers num="5.4" />
-        <vers num="6.0" edition="alpha1" />
-        <vers num="6.0" edition="alpha2" />
-        <vers num="6.0" edition="alpha3" />
-        <vers num="6.0" edition="alpha4" />
-        <vers num="6.0" edition="alpha5" />
-        <vers num="6.0" edition="alpha6" />
-        <vers num="6.0" edition="alpha7" />
-        <vers num="6.0" edition="alpha8" />
-        <vers num="6.0" edition="alpha9" />
-        <vers num="6.1" edition="alpha1" />
-        <vers num="6.1" edition="alpha2" />
-        <vers num="6.1" edition="alpha3" />
-        <vers num="6.1" edition="alpha4" />
-        <vers num="6.1" edition="alpha5" />
-        <vers num="6.2" edition="alpha1" />
-        <vers num="6.2" edition="alpha2" />
-        <vers num="6.2" edition="alpha3" />
-        <vers num="6.2" edition="alpha4" />
-        <vers num="6.2" edition="alpha5" />
-        <vers num="6.2" edition="alpha6" />
-        <vers num="6.3" edition="alpha1" />
-        <vers num="6.3" edition="alpha2" />
-        <vers num="6.3" edition="alpha3" />
-        <vers num="6.3" edition="alpha4" />
-        <vers num="6.3" edition="alpha5" />
-        <vers num="6.3" edition="alpha6" />
-        <vers num="6.4" />
-        <vers num="6.5" />
-        <vers num="6.6" />
-        <vers num="6.7" />
-        <vers num="6.8" />
-        <vers num="6.9" />
-        <vers num="7.0" edition="alpha1" />
-        <vers num="7.0" edition="alpha2" />
-        <vers num="7.0" edition="alpha3" />
-        <vers num="7.0" edition="alpha4" />
-        <vers num="7.0" edition="alpha5" />
-        <vers num="7.0" edition="alpha7" />
-        <vers num="7.0" edition="alpha9" />
-        <vers num="7.1" edition="alpha2" />
-        <vers prev="1" num="7.2" edition="alpha2" />
-        <vers prev="1" num="7.2" edition="alpha4" />
-        <vers prev="1" num="7.2" edition="alpha6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2674" published="2012-07-25" name="CVE-2012-2674" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple integer overflows in the (1) chk_malloc, (2) leak_malloc, and (3) leak_memalign functions in libc/bionic/malloc_debug_leak.c in Bionic (libc) for Android, when libc.debug.malloc is set, make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/android/platform_bionic/commit/7f5aa4f35e23fd37425b3a5041737cdf58f87385" source="CONFIRM" patch="1">https://github.com/android/platform_bionic/commit/7f5aa4f35e23fd37425b3a5041737cdf58f87385</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/07/13" source="MLIST">[oss-security] 20120607 Re: memory allocator upstream patches</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/05/1" source="MLIST">[oss-security] 20120605 memory allocator upstream patches</ref>
-      <ref url="http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/" source="MISC">http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="bionic">
-        <vers num="-" edition="" />
-        <vers num="-" edition=":~~~android~~" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2675" published="2012-07-25" name="CVE-2012-2675" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple integer overflows in the (1) CallMalloc (malloc) and (2) nedpcalloc (calloc) functions in nedmalloc (nedmalloc.c) before 1.10 beta2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/ned14/nedmalloc/commit/2965eca30c408c13473c4146a9d47d547d288db1" source="CONFIRM" patch="1">https://github.com/ned14/nedmalloc/commit/2965eca30c408c13473c4146a9d47d547d288db1</ref>
-      <ref url="https://github.com/ned14/nedmalloc/commit/1a759756639ab7543b650a10c2d77a0ffc7a2000" source="CONFIRM" patch="1">https://github.com/ned14/nedmalloc/commit/1a759756639ab7543b650a10c2d77a0ffc7a2000</ref>
-      <ref url="https://github.com/ned14/nedmalloc/blob/master/Readme.html" source="CONFIRM">https://github.com/ned14/nedmalloc/blob/master/Readme.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/07/13" source="MLIST">[oss-security] 20120607 Re: memory allocator upstream patches</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/05/1" source="MLIST">[oss-security] 20120605 memory allocator upstream patches</ref>
-      <ref url="http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/" source="MISC">http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nedprod" name="nedmalloc">
-        <vers prev="1" num="1.10" edition="beta1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2676" published="2012-07-25" name="CVE-2012-2676" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple integer overflows in the (1) malloc and (2) calloc functions in Hoard before 3.9 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows on implementing code via a large size value, which causes less memory to be allocated than expected.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/emeryberger/Hoard/blob/master/NEWS" source="CONFIRM">https://github.com/emeryberger/Hoard/blob/master/NEWS</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/07/13" source="MLIST">[oss-security] 20120607 Re: memory allocator upstream patches</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/05/1" source="MLIST">[oss-security] 20120605 memory allocator upstream patches</ref>
-      <ref url="http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/" source="MISC">http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="emery_berger" name="hoard">
-        <vers prev="1" num="3.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2677" published="2012-07-25" name="CVE-2012-2677" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Integer overflow in the ordered_malloc function in boost/pool/pool.hpp in Boost Pool before 3.9 makes it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large memory chunk size value, which causes less memory to be allocated than expected.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://svn.boost.org/trac/boost/changeset/78326" source="CONFIRM" patch="1">https://svn.boost.org/trac/boost/changeset/78326</ref>
-      <ref url="https://svn.boost.org/trac/boost/ticket/6701" source="CONFIRM">https://svn.boost.org/trac/boost/ticket/6701</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/07/13" source="MLIST">[oss-security] 20120607 Re: memory allocator upstream patches</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/05/1" source="MLIST">[oss-security] 20120605 memory allocator upstream patches</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082977.html" source="FEDORA">FEDORA-2012-9818</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083416.html" source="FEDORA">FEDORA-2012-9029</ref>
-      <ref url="http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/" source="MISC">http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="boost" name="pool">
-        <vers prev="1" num="1.0.0" />
-        <vers num="2.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2678" published="2012-07-03" name="CVE-2012-2678" modified="2012-07-03" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:P/I:N/A:N)" CVSS_score="1.2" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="1.9" CVSS_base_score="1.2">
-    <desc>
-      <descript source="cve">389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/54153" source="BID">54153</ref>
-      <ref url="http://secunia.com/advisories/49734" source="SECUNIA" adv="1">49734</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1041.html" source="REDHAT" adv="1">RHSA-2012:1041</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0997.html" source="REDHAT" adv="1">RHSA-2012:0997</ref>
-      <ref url="http://osvdb.org/83336" source="OSVDB">83336</ref>
-      <ref url="http://directory.fedoraproject.org/wiki/Release_Notes" source="CONFIRM">http://directory.fedoraproject.org/wiki/Release_Notes</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="fedoraproject" name="389_directory_server">
-        <vers num="1.2.1" />
-        <vers num="1.2.10" edition="alpha8" />
-        <vers num="1.2.10" edition="rc1" />
-        <vers num="1.2.10.1" />
-        <vers num="1.2.10.2" />
-        <vers num="1.2.10.3" />
-        <vers num="1.2.10.4" />
-        <vers num="1.2.10.7" />
-        <vers num="1.2.11.1" />
-        <vers prev="1" num="1.2.11.5" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.5" edition="rc1" />
-        <vers num="1.2.5" edition="rc2" />
-        <vers num="1.2.5" edition="rc3" />
-        <vers num="1.2.5" edition="rc4" />
-        <vers num="1.2.6" edition="a2" />
-        <vers num="1.2.6" edition="a3" />
-        <vers num="1.2.6" edition="a4" />
-        <vers num="1.2.6" edition="rc1" />
-        <vers num="1.2.6" edition="rc2" />
-        <vers num="1.2.6" edition="rc3" />
-        <vers num="1.2.6" edition="rc6" />
-        <vers num="1.2.6" edition="rc7" />
-        <vers num="1.2.6.1" />
-        <vers num="1.2.7" edition="alpha3" />
-        <vers num="1.2.7.5" />
-        <vers num="1.2.8" edition="alpha1" />
-        <vers num="1.2.8" edition="alpha2" />
-        <vers num="1.2.8" edition="alpha3" />
-        <vers num="1.2.8" edition="rc1" />
-        <vers num="1.2.8" edition="rc2" />
-        <vers num="1.2.8.1" />
-        <vers num="1.2.8.2" />
-        <vers num="1.2.8.3" />
-        <vers num="1.2.9.9" />
-      </prod>
-      <prod vendor="redhat" name="directory_server">
-        <vers num="7.1" />
-        <vers num="8.0" />
-        <vers num="8.1" />
-        <vers prev="1" num="8.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2687" published="2012-08-22" name="CVE-2012-2687" modified="2012-08-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is not properly handled during construction of a variant list.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.apache.org/dist/httpd/CHANGES_2.4.3" source="CONFIRM">http://www.apache.org/dist/httpd/CHANGES_2.4.3</ref>
-      <ref url="http://mail-archives.apache.org/mod_mbox/www-announce/201208.mbox/%3C0BFFEA9B-801B-4BAA-9534-56F640268E30@apache.org%3E" source="MLIST" adv="1">[announce] 20120821 [ANNOUNCEMENT] Apache HTTP Server 2.4.3 Released</ref>
-      <ref url="http://httpd.apache.org/security/vulnerabilities_24.html" source="CONFIRM" adv="1">http://httpd.apache.org/security/vulnerabilities_24.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="http_server">
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2688" published="2012-07-20" name="CVE-2012-2688" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15376003" source="SUSE">openSUSE-SU-2012:0976</ref>
-      <ref url="http://www.php.net/ChangeLog-5.php" source="CONFIRM">http://www.php.net/ChangeLog-5.php</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2527" source="DEBIAN">DSA-2527</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00022.html" source="SUSE">SUSE-SU-2012:1034</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00021.html" source="SUSE">SUSE-SU-2012:1033</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="1.0" />
-        <vers num="2.0" />
-        <vers num="2.0b10" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta_4_patch1" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" />
-        <vers num="4.1.0" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="4.2.0" />
-        <vers num="4.2.1" />
-        <vers num="4.2.2" />
-        <vers num="4.2.3" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.10" />
-        <vers num="4.3.11" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.4" />
-        <vers num="4.3.5" />
-        <vers num="4.3.6" />
-        <vers num="4.3.7" />
-        <vers num="4.3.8" />
-        <vers num="4.3.9" />
-        <vers num="4.4.0" />
-        <vers num="4.4.1" />
-        <vers num="4.4.2" />
-        <vers num="4.4.3" />
-        <vers num="4.4.4" />
-        <vers num="4.4.5" />
-        <vers num="4.4.6" />
-        <vers num="4.4.7" />
-        <vers num="4.4.8" />
-        <vers num="4.4.9" />
-        <vers num="5.0.0" edition="beta1" />
-        <vers num="5.0.0" edition="beta2" />
-        <vers num="5.0.0" edition="beta3" />
-        <vers num="5.0.0" edition="beta4" />
-        <vers num="5.0.0" edition="rc1" />
-        <vers num="5.0.0" edition="rc2" />
-        <vers num="5.0.0" edition="rc3" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.1.0" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers num="5.2.0" />
-        <vers num="5.2.1" />
-        <vers num="5.2.10" />
-        <vers num="5.2.11" />
-        <vers num="5.2.12" />
-        <vers num="5.2.13" />
-        <vers num="5.2.14" />
-        <vers num="5.2.15" />
-        <vers num="5.2.16" />
-        <vers num="5.2.17" />
-        <vers num="5.2.2" />
-        <vers num="5.2.3" />
-        <vers num="5.2.4" />
-        <vers num="5.2.5" />
-        <vers num="5.2.6" />
-        <vers num="5.2.7" />
-        <vers num="5.2.8" />
-        <vers num="5.2.9" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.10" />
-        <vers num="5.3.11" />
-        <vers num="5.3.12" />
-        <vers num="5.3.13" />
-        <vers prev="1" num="5.3.14" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers num="5.3.8" />
-        <vers num="5.3.9" />
-        <vers num="5.4.0" />
-        <vers num="5.4.1" />
-        <vers num="5.4.2" />
-        <vers num="5.4.3" />
-        <vers num="5.4.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2690" published="2012-06-29" name="CVE-2012-2690" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://www.redhat.com/archives/libguestfs/2012-May/msg00104.html" source="MLIST">[Libguestfs] 20120521 [ANNOUNCE] libguestfs 1.18 released - tools for managing virtual machines and disk images</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76220" source="XF">libguestfs-virtedit-info-disc(76220)</ref>
-      <ref url="http://www.securityfocus.com/bid/53932" source="BID">53932</ref>
-      <ref url="http://secunia.com/advisories/49545" source="SECUNIA" adv="1">49545</ref>
-      <ref url="http://secunia.com/advisories/49431" source="SECUNIA" adv="1">49431</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0774.html" source="REDHAT">RHSA-2012:0774</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="libguestfs" name="libguestfs">
-        <vers num="1.16.0" />
-        <vers num="1.16.1" />
-        <vers num="1.16.10" />
-        <vers num="1.16.11" />
-        <vers num="1.16.12" />
-        <vers num="1.16.13" />
-        <vers num="1.16.14" />
-        <vers num="1.16.15" />
-        <vers num="1.16.16" />
-        <vers num="1.16.17" />
-        <vers num="1.16.18" />
-        <vers num="1.16.19" />
-        <vers num="1.16.2" />
-        <vers num="1.16.20" />
-        <vers num="1.16.21" />
-        <vers num="1.16.22" />
-        <vers num="1.16.23" />
-        <vers num="1.16.24" />
-        <vers num="1.16.25" />
-        <vers num="1.16.26" />
-        <vers num="1.16.3" />
-        <vers num="1.16.4" />
-        <vers num="1.16.5" />
-        <vers num="1.16.6" />
-        <vers num="1.16.7" />
-        <vers num="1.16.8" />
-        <vers num="1.16.9" />
-        <vers num="1.17.0" />
-        <vers num="1.17.1" />
-        <vers num="1.17.10" />
-        <vers num="1.17.11" />
-        <vers num="1.17.12" />
-        <vers num="1.17.13" />
-        <vers num="1.17.14" />
-        <vers num="1.17.15" />
-        <vers num="1.17.16" />
-        <vers num="1.17.17" />
-        <vers num="1.17.18" />
-        <vers num="1.17.19" />
-        <vers num="1.17.2" />
-        <vers num="1.17.20" />
-        <vers num="1.17.21" />
-        <vers num="1.17.22" />
-        <vers num="1.17.23" />
-        <vers num="1.17.24" />
-        <vers num="1.17.25" />
-        <vers num="1.17.26" />
-        <vers num="1.17.27" />
-        <vers num="1.17.28" />
-        <vers num="1.17.29" />
-        <vers num="1.17.3" />
-        <vers num="1.17.30" />
-        <vers num="1.17.31" />
-        <vers num="1.17.32" />
-        <vers num="1.17.33" />
-        <vers num="1.17.34" />
-        <vers num="1.17.35" />
-        <vers num="1.17.36" />
-        <vers num="1.17.37" />
-        <vers num="1.17.38" />
-        <vers num="1.17.39" />
-        <vers num="1.17.4" />
-        <vers num="1.17.40" />
-        <vers num="1.17.41" />
-        <vers num="1.17.42" />
-        <vers prev="1" num="1.17.43" />
-        <vers num="1.17.5" />
-        <vers num="1.17.6" />
-        <vers num="1.17.7" />
-        <vers num="1.17.8" />
-        <vers num="1.17.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2691" published="2012-06-16" name="CVE-2012-2691" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/mantisbt/mantisbt/commit/edc8142bb8ac0ac0df1a3824d78c15f4015d959e" source="CONFIRM" patch="1">https://github.com/mantisbt/mantisbt/commit/edc8142bb8ac0ac0df1a3824d78c15f4015d959e</ref>
-      <ref url="https://github.com/mantisbt/mantisbt/commit/175d973105fe9f03a37ced537b742611631067e0" source="CONFIRM" patch="1">https://github.com/mantisbt/mantisbt/commit/175d973105fe9f03a37ced537b742611631067e0</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76180" source="XF">mantisbt-soapapi-sec-bypass(76180)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/11/6" source="MLIST">[oss-security] 20120611 Re: CVE requests (x2) for Mantis Bug Tracker (MantisBT) before 1.2.11</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/09/1" source="MLIST">[oss-security] 20120609 CVE requests (x2) for Mantis Bug Tracker (MantisBT) before 1.2.11</ref>
-      <ref url="http://www.mantisbt.org/bugs/view.php?id=14340" source="CONFIRM">http://www.mantisbt.org/bugs/view.php?id=14340</ref>
-      <ref url="http://www.mantisbt.org/bugs/changelog_page.php?version_id=148" source="CONFIRM">http://www.mantisbt.org/bugs/changelog_page.php?version_id=148</ref>
-      <ref url="http://secunia.com/advisories/49414" source="SECUNIA" adv="1">49414</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mantisbt" name="mantisbt">
-        <vers num="0.18.0" />
-        <vers num="0.19.0" edition="a1" />
-        <vers num="0.19.0" edition="a2" />
-        <vers num="0.19.0" edition="rc1" />
-        <vers num="0.19.1" />
-        <vers num="0.19.2" />
-        <vers num="0.19.3" />
-        <vers num="0.19.4" />
-        <vers num="0.19.5" />
-        <vers num="1.0.0" edition="a1" />
-        <vers num="1.0.0" edition="a2" />
-        <vers num="1.0.0" edition="a3" />
-        <vers num="1.0.0" edition="rc1" />
-        <vers num="1.0.0" edition="rc2" />
-        <vers num="1.0.0" edition="rc3" />
-        <vers num="1.0.0" edition="rc4" />
-        <vers num="1.0.0" edition="rc5" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1.0" edition="a1" />
-        <vers num="1.1.0" edition="a2" />
-        <vers num="1.1.0" edition="a3" />
-        <vers num="1.1.0" edition="a4" />
-        <vers num="1.1.0" edition="rc1" />
-        <vers num="1.1.0" edition="rc2" />
-        <vers num="1.1.0" edition="rc3" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.2.0" edition="a1" />
-        <vers num="1.2.0" edition="a2" />
-        <vers num="1.2.0" edition="a3" />
-        <vers num="1.2.0" edition="rc1" />
-        <vers num="1.2.0" edition="rc2" />
-        <vers num="1.2.1" />
-        <vers prev="1" num="1.2.10" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers num="1.2.8" />
-        <vers num="1.2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2692" published="2012-06-16" name="CVE-2012-2692" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:P)" CVSS_score="3.6" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.9" CVSS_base_score="3.6">
-    <desc>
-      <descript source="cve">MantisBT before 1.2.11 does not check the delete_attachments_threshold permission when form_security_validation is set to OFF, which allows remote authenticated users with certain privileges to bypass intended access restrictions and delete arbitrary attachments.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/mantisbt/mantisbt/commit/ceafe6f0c679411b81368052633a63dd3ca06d9c" source="CONFIRM" patch="1">https://github.com/mantisbt/mantisbt/commit/ceafe6f0c679411b81368052633a63dd3ca06d9c</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/11/6" source="MLIST">[oss-security] 20120611 Re: CVE requests (x2) for Mantis Bug Tracker (MantisBT) before 1.2.11</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/09/1" source="MLIST">[oss-security] 20120609 CVE requests (x2) for Mantis Bug Tracker (MantisBT) before 1.2.11</ref>
-      <ref url="http://www.mantisbt.org/bugs/view.php?id=14016" source="CONFIRM">http://www.mantisbt.org/bugs/view.php?id=14016</ref>
-      <ref url="http://www.mantisbt.org/bugs/changelog_page.php?version_id=148" source="CONFIRM">http://www.mantisbt.org/bugs/changelog_page.php?version_id=148</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mantisbt" name="mantisbt">
-        <vers num="0.18.0" />
-        <vers num="0.19.0" edition="a1" />
-        <vers num="0.19.0" edition="a2" />
-        <vers num="0.19.0" edition="rc1" />
-        <vers num="0.19.1" />
-        <vers num="0.19.2" />
-        <vers num="0.19.3" />
-        <vers num="0.19.4" />
-        <vers num="0.19.5" />
-        <vers num="1.0.0" edition="a1" />
-        <vers num="1.0.0" edition="a2" />
-        <vers num="1.0.0" edition="a3" />
-        <vers num="1.0.0" edition="rc1" />
-        <vers num="1.0.0" edition="rc2" />
-        <vers num="1.0.0" edition="rc3" />
-        <vers num="1.0.0" edition="rc4" />
-        <vers num="1.0.0" edition="rc5" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.2.0" edition="a1" />
-        <vers num="1.2.0" edition="a2" />
-        <vers num="1.2.1" />
-        <vers prev="1" num="1.2.10" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers num="1.2.8" />
-        <vers num="1.2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2693" published="2012-06-16" name="CVE-2012-2693" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="3.7" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="1.9" CVSS_base_score="3.7">
-    <desc>
-      <descript source="cve">libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://www.redhat.com/archives/libvir-list/2012-April/msg01494.html" source="MLIST" patch="1">[libvirt] 20120428 [PATCH 0/3] usb devices with same vendor, productID hotplug support</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/11/3" source="MLIST">[oss-security] 20120611 Re: CVE request -- libvirt: address bus= device= when identicle vendor ID/product IDs usb devices attached are ignored</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/11/2" source="MLIST">[oss-security] 20120611 CVE request -- libvirt: address bus= device= when identicle vendor ID/product IDs usb devices attached are ignored</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0748.html" source="REDHAT">RHSA-2012:0748</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="redhat" name="libvirt">
-        <vers num="0.0.1" />
-        <vers num="0.0.2" />
-        <vers num="0.0.3" />
-        <vers num="0.0.4" />
-        <vers num="0.0.5" />
-        <vers num="0.0.6" />
-        <vers num="0.1.0" />
-        <vers num="0.1.1" />
-        <vers num="0.1.3" />
-        <vers num="0.1.4" />
-        <vers num="0.1.5" />
-        <vers num="0.1.6" />
-        <vers num="0.1.7" />
-        <vers num="0.1.8" />
-        <vers num="0.1.9" />
-        <vers num="0.2.0" />
-        <vers num="0.2.1" />
-        <vers num="0.2.2" />
-        <vers num="0.2.3" />
-        <vers num="0.3.0" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.4.0" />
-        <vers num="0.4.1" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.5.0" />
-        <vers num="0.5.1" />
-        <vers num="0.6.0" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.6.4" />
-        <vers num="0.6.5" />
-        <vers num="0.7.0" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.2" />
-        <vers num="0.8.3" />
-        <vers num="0.8.4" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9.0" />
-        <vers num="0.9.1" />
-        <vers num="0.9.10" />
-        <vers prev="1" num="0.9.11" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="0.9.4" />
-        <vers num="0.9.5" />
-        <vers num="0.9.6" />
-        <vers num="0.9.7" />
-        <vers num="0.9.8" />
-        <vers num="0.9.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2694" published="2012-06-22" name="CVE-2012-2694" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain "['xyz', nil]" values, a related issue to CVE-2012-2660.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://groups.google.com/group/rubyonrails-security/msg/e2d3a87f2c211def?dmode=source&amp;output=gplain" source="MLIST">[rubyonrails-security] 20120612 Ruby on Rails Unsafe Query Generation Risk in Ruby on Rails (CVE-2012-2694)</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00017.html" source="SUSE">SUSE-SU-2012:1015</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00002.html" source="SUSE">openSUSE-SU-2012:0978</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rubyonrails" name="ruby_on_rails">
-        <vers num="3.0.0" edition="beta" />
-        <vers num="3.0.0" edition="beta2" />
-        <vers num="3.0.0" edition="beta3" />
-        <vers num="3.0.0" edition="beta4" />
-        <vers num="3.0.0" edition="rc" />
-        <vers num="3.0.0" edition="rc2" />
-        <vers num="3.0.1" edition="pre" />
-        <vers num="3.0.10" edition="rc1" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" edition="rc1" />
-        <vers prev="1" num="3.0.13" edition="rc1" />
-        <vers num="3.0.2" edition="pre" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" edition="rc" />
-        <vers num="3.0.4" edition="rc1" />
-        <vers num="3.0.5" edition="rc1" />
-        <vers num="3.0.6" edition="rc1" />
-        <vers num="3.0.6" edition="rc2" />
-        <vers num="3.0.7" edition="rc1" />
-        <vers num="3.0.7" edition="rc2" />
-        <vers num="3.0.8" edition="rc1" />
-        <vers num="3.0.8" edition="rc2" />
-        <vers num="3.0.8" edition="rc3" />
-        <vers num="3.0.8" edition="rc4" />
-        <vers num="3.0.9" edition="rc1" />
-        <vers num="3.0.9" edition="rc2" />
-        <vers num="3.0.9" edition="rc3" />
-        <vers num="3.0.9" edition="rc4" />
-        <vers num="3.0.9" edition="rc5" />
-        <vers num="3.1.0" edition="beta1" />
-        <vers num="3.1.0" edition="rc1" />
-        <vers num="3.1.0" edition="rc2" />
-        <vers num="3.1.0" edition="rc3" />
-        <vers num="3.1.0" edition="rc4" />
-        <vers num="3.1.0" edition="rc5" />
-        <vers num="3.1.0" edition="rc6" />
-        <vers num="3.1.0" edition="rc7" />
-        <vers num="3.1.0" edition="rc8" />
-        <vers num="3.1.1" edition="rc1" />
-        <vers num="3.1.1" edition="rc2" />
-        <vers num="3.1.1" edition="rc3" />
-        <vers num="3.1.2" edition="rc1" />
-        <vers num="3.1.2" edition="rc2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" edition="rc1" />
-        <vers num="3.1.5" edition="rc1" />
-        <vers num="3.2.0" edition="rc1" />
-        <vers num="3.2.0" edition="rc2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" edition="rc1" />
-        <vers num="3.2.3" edition="rc1" />
-        <vers num="3.2.3" edition="rc2" />
-        <vers num="3.2.4" edition="rc1" />
-        <vers num="3.2.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2695" published="2012-06-22" name="CVE-2012-2695" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The Active Record component in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL injection attacks via nested query parameters that leverage improper handling of nested hashes, a related issue to CVE-2012-2661.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://groups.google.com/group/rubyonrails-security/msg/aee3413fb038bf56?dmode=source&amp;output=gplain" source="MLIST">[rubyonrails-security] 20120612 Ruby on Rails SQL Injection (CVE-2012-2695)</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00002.html" source="SUSE">openSUSE-SU-2012:0978</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rubyonrails" name="ruby_on_rails">
-        <vers num="3.0.0" edition="beta" />
-        <vers num="3.0.0" edition="beta2" />
-        <vers num="3.0.0" edition="beta3" />
-        <vers num="3.0.0" edition="beta4" />
-        <vers num="3.0.0" edition="rc" />
-        <vers num="3.0.0" edition="rc2" />
-        <vers num="3.0.1" edition="pre" />
-        <vers num="3.0.10" edition="rc1" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" edition="rc1" />
-        <vers prev="1" num="3.0.13" edition="rc1" />
-        <vers num="3.0.2" edition="pre" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" edition="rc" />
-        <vers num="3.0.4" edition="rc1" />
-        <vers num="3.0.5" edition="rc1" />
-        <vers num="3.0.6" edition="rc1" />
-        <vers num="3.0.6" edition="rc2" />
-        <vers num="3.0.7" edition="rc1" />
-        <vers num="3.0.7" edition="rc2" />
-        <vers num="3.0.8" edition="rc1" />
-        <vers num="3.0.8" edition="rc2" />
-        <vers num="3.0.8" edition="rc3" />
-        <vers num="3.0.8" edition="rc4" />
-        <vers num="3.0.9" edition="rc1" />
-        <vers num="3.0.9" edition="rc2" />
-        <vers num="3.0.9" edition="rc3" />
-        <vers num="3.0.9" edition="rc4" />
-        <vers num="3.0.9" edition="rc5" />
-        <vers num="3.1.0" edition="beta1" />
-        <vers num="3.1.0" edition="rc1" />
-        <vers num="3.1.0" edition="rc2" />
-        <vers num="3.1.0" edition="rc3" />
-        <vers num="3.1.0" edition="rc4" />
-        <vers num="3.1.0" edition="rc5" />
-        <vers num="3.1.0" edition="rc6" />
-        <vers num="3.1.0" edition="rc7" />
-        <vers num="3.1.0" edition="rc8" />
-        <vers num="3.1.1" edition="rc1" />
-        <vers num="3.1.1" edition="rc2" />
-        <vers num="3.1.1" edition="rc3" />
-        <vers num="3.1.2" edition="rc1" />
-        <vers num="3.1.2" edition="rc2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" edition="rc1" />
-        <vers num="3.1.5" edition="rc1" />
-        <vers num="3.2.0" edition="rc1" />
-        <vers num="3.2.0" edition="rc2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" edition="rc1" />
-        <vers num="3.2.3" edition="rc1" />
-        <vers num="3.2.3" edition="rc2" />
-        <vers num="3.2.4" edition="rc1" />
-        <vers num="3.2.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2698" published="2012-06-29" name="CVE-2012-2698" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.17.5, 1.18.x before 1.18.4, and 1.19.x before 1.19.1 allows remote attackers to inject arbitrary web script or HTML via the uselang parameter to index.php/Main_page.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://gerrit.wikimedia.org/r/#/c/7979/1/includes/SkinTemplate.php" source="CONFIRM" patch="1">https://gerrit.wikimedia.org/r/#/c/7979/1/includes/SkinTemplate.php</ref>
-      <ref url="https://www.mediawiki.org/wiki/Release_notes/1.19" source="CONFIRM">https://www.mediawiki.org/wiki/Release_notes/1.19</ref>
-      <ref url="https://www.mediawiki.org/wiki/Release_notes/1.18" source="CONFIRM">https://www.mediawiki.org/wiki/Release_notes/1.18</ref>
-      <ref url="https://www.mediawiki.org/wiki/Release_notes/1.17" source="CONFIRM">https://www.mediawiki.org/wiki/Release_notes/1.17</ref>
-      <ref url="https://bugzilla.wikimedia.org/show_bug.cgi?id=36938" source="CONFIRM">https://bugzilla.wikimedia.org/show_bug.cgi?id=36938</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76311" source="XF">mediawiki-index-uselang-xss(76311)</ref>
-      <ref url="http://www.osvdb.org/82983" source="OSVDB">82983</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/2" source="MLIST">[oss-security] 20120613 Re: CVE request: XSS in uselang http parameter (mediawiki)</ref>
-      <ref url="http://securitytracker.com/id?1027179" source="SECTRACK">1027179</ref>
-      <ref url="http://secunia.com/advisories/49484" source="SECUNIA" adv="1">49484</ref>
-      <ref url="http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-June/000118.html" source="MLIST" adv="1">[MediaWiki-announce] 20120613 MediaWiki security release 1.19.1</ref>
-      <ref url="http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-June/000117.html" source="MLIST">[MediaWiki-announce] 20120613 MediaWiki security release 1.18.4</ref>
-      <ref url="http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-June/000116.html" source="MLIST">[MediaWiki-announce] 20120613 MediaWiki security release 1.17.5</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mediawiki" name="mediawiki">
-        <vers num="1.1.0" />
-        <vers num="1.10.0" edition="rc1" />
-        <vers num="1.10.0" edition="rc2" />
-        <vers num="1.10.1" />
-        <vers num="1.10.2" />
-        <vers num="1.10.3" />
-        <vers num="1.10.4" />
-        <vers num="1.11" />
-        <vers num="1.11.0" edition="rc1" />
-        <vers num="1.11.1" />
-        <vers num="1.11.2" />
-        <vers num="1.12.0" edition="rc1" />
-        <vers num="1.12.1" />
-        <vers num="1.12.2" />
-        <vers num="1.12.3" />
-        <vers num="1.12.4" />
-        <vers num="1.13.0" edition="rc1" />
-        <vers num="1.13.0" edition="rc2" />
-        <vers num="1.13.1" />
-        <vers num="1.13.2" />
-        <vers num="1.13.3" />
-        <vers num="1.13.4" />
-        <vers num="1.14.0" edition="rc1" />
-        <vers num="1.14.1" />
-        <vers num="1.15.0" edition="rc1" />
-        <vers num="1.15.1" />
-        <vers num="1.15.2" />
-        <vers num="1.15.3" />
-        <vers num="1.15.4" />
-        <vers num="1.15.5" />
-        <vers num="1.16.0" edition="beta1" />
-        <vers num="1.16.0" edition="beta2" />
-        <vers num="1.16.0" edition="beta3" />
-        <vers num="1.16.1" />
-        <vers num="1.16.2" />
-        <vers num="1.17" edition="beta_1" />
-        <vers num="1.17.0" edition="rc1" />
-        <vers num="1.17.1" />
-        <vers num="1.17.2" />
-        <vers num="1.17.3" />
-        <vers prev="1" num="1.17.4" />
-        <vers num="1.18" edition="beta_1" />
-        <vers num="1.18.0" edition="rc1" />
-        <vers num="1.18.1" />
-        <vers num="1.18.2" />
-        <vers num="1.18.3" />
-        <vers num="1.19" edition="beta_1" />
-        <vers num="1.19" edition="beta_2" />
-        <vers num="1.19.0" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.10" />
-        <vers num="1.3.11" />
-        <vers num="1.3.12" />
-        <vers num="1.3.13" />
-        <vers num="1.3.14" />
-        <vers num="1.3.15" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.3.4" />
-        <vers num="1.3.5" />
-        <vers num="1.3.6" />
-        <vers num="1.3.7" />
-        <vers num="1.3.8" />
-        <vers num="1.3.9" />
-        <vers num="1.4" edition="beta1" />
-        <vers num="1.4" edition="beta2" />
-        <vers num="1.4" edition="beta3" />
-        <vers num="1.4" edition="beta4" />
-        <vers num="1.4" edition="beta5" />
-        <vers num="1.4" edition="beta6" />
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.5" edition="alpha1" />
-        <vers num="1.5" edition="alpha2" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5" edition="beta3" />
-        <vers num="1.5" edition="beta4" />
-        <vers num="1.5" edition="rc2" />
-        <vers num="1.5" edition="rc3" />
-        <vers num="1.5" edition="rc4" />
-        <vers num="1.5.0" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.10" />
-        <vers num="1.6.11" />
-        <vers num="1.6.12" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-        <vers num="1.6.8" />
-        <vers num="1.6.9" />
-        <vers num="1.7.0" />
-        <vers num="1.7.1" />
-        <vers num="1.7.2" />
-        <vers num="1.7.3" />
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-        <vers num="1.8.2" />
-        <vers num="1.8.3" />
-        <vers num="1.8.4" />
-        <vers num="1.8.5" />
-        <vers num="1.9.0" edition="rc2" />
-        <vers num="1.9.1" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.4" />
-        <vers num="1.9.5" />
-        <vers num="1.9.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-2699" reject="1" published="2012-06-26" name="CVE-2012-2699" modified="2012-06-26">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-2339.  Reason: This candidate is a duplicate of CVE-2012-2339.  Notes: All CVE users should reference CVE-2012-2339 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" seq="2012-2700" reject="1" published="2012-06-26" name="CVE-2012-2700" modified="2012-06-26">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-2340.  Reason: This candidate is a duplicate of CVE-2012-2340.  Notes: All CVE users should reference CVE-2012-2340 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" seq="2012-2701" reject="1" published="2012-06-26" name="CVE-2012-2701" modified="2012-06-26">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-2341.  Reason: This candidate is a duplicate of CVE-2012-2341.  Notes: All CVE users should reference CVE-2012-2341 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2702" published="2012-06-26" name="CVE-2012-2702" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Ubercart Product Keys module 6.x-1.x before 6.x-1.1 for Drupal does not properly check access for product keys, which allows remote attackers to read all unassigned product keys via certain conditions related to the uid.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/uc_product_keys.git/commitdiff/19fa261" source="CONFIRM" patch="1">http://drupalcode.org/project/uc_product_keys.git/commitdiff/19fa261</ref>
-      <ref url="http://drupal.org/node/1585532" source="MISC" patch="1" adv="1">http://drupal.org/node/1585532</ref>
-      <ref url="http://drupal.org/node/1580752" source="CONFIRM" patch="1" adv="1">http://drupal.org/node/1580752</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75720" source="XF">ubercartproductkeys-keys-security-bypass(75720)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49169" source="SECUNIA">49169</ref>
-      <ref url="http://osvdb.org/82005" source="OSVDB">82005</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tony_freixas" name="ubercart_product_keys">
-        <vers num="6.x-1.0" edition="alpha1" />
-        <vers num="6.x-1.0" edition="alpha2" />
-        <vers num="6.x-1.0" edition="alpha3" />
-        <vers num="6.x-1.0" edition="beta1" />
-        <vers num="6.x-1.0" edition="rc1" />
-        <vers num="6.x-1.0" edition="rc2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2703" published="2012-06-26" name="CVE-2012-2703" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Advertisement module 6.x-2.x before 6.x-2.3 for Drupal, when debug mode is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to the "$conf variable in settings.php."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://drupal.org/node/1580376" source="CONFIRM" patch="1">https://drupal.org/node/1580376</ref>
-      <ref url="http://drupalcode.org/project/ad.git/commitdiff/4337f34" source="CONFIRM" patch="1">http://drupalcode.org/project/ad.git/commitdiff/4337f34</ref>
-      <ref url="http://drupal.org/node/1585544" source="MISC" patch="1" adv="1">http://drupal.org/node/1585544</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75718" source="XF">advertisement-settings-xss(75718)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="john_franklin" name="advertisement">
-        <vers num="6.x-2.0" edition="alpha1" />
-        <vers num="6.x-2.0" edition="alpha2" />
-        <vers num="6.x-2.0" edition="beta1" />
-        <vers num="6.x-2.0" edition="beta2" />
-        <vers num="6.x-2.0" edition="beta3" />
-        <vers num="6.x-2.0" edition="beta4" />
-        <vers num="6.x-2.0" edition="beta5" />
-        <vers num="6.x-2.0" edition="beta6" />
-        <vers num="6.x-2.0-rc1" />
-        <vers num="6.x-2.1" edition="rc1" />
-        <vers num="6.x-2.2" edition="rc1" />
-        <vers num="6.x-2.3" edition="beta1" />
-        <vers num="6.x-2.3" edition="dev" />
-        <vers num="6.x-2.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2704" published="2012-08-31" name="CVE-2012-2704" modified="2012-09-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access to debug information, which allows remote attackers to obtain sensitive site configuration information that is specified by the $conf variable in settings.php.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://drupal.org/node/1580376" source="CONFIRM" patch="1">https://drupal.org/node/1580376</ref>
-      <ref url="http://drupalcode.org/project/ad.git/commitdiff/c2ffab2" source="CONFIRM" patch="1">http://drupalcode.org/project/ad.git/commitdiff/c2ffab2</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75719" source="XF">advertisement-settings-info-disclosure(75719)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://drupal.org/node/1585544" source="MISC" adv="1">http://drupal.org/node/1585544</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="john_franklin" name="advertisement">
-        <vers num="6.x-2.0" edition="alpha1" />
-        <vers num="6.x-2.0" edition="alpha2" />
-        <vers num="6.x-2.0" edition="beta1" />
-        <vers num="6.x-2.0" edition="beta2" />
-        <vers num="6.x-2.0" edition="beta3" />
-        <vers num="6.x-2.0" edition="beta4" />
-        <vers num="6.x-2.0" edition="beta5" />
-        <vers num="6.x-2.0" edition="beta6" />
-        <vers num="6.x-2.0-rc1" />
-        <vers num="6.x-2.1" edition="rc1" />
-        <vers num="6.x-2.2" edition="rc1" />
-        <vers num="6.x-2.3" edition="beta1" />
-        <vers num="6.x-2.3" edition="dev" />
-        <vers num="6.x-2.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2705" published="2012-06-26" name="CVE-2012-2705" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">The filter_titles function in the Smart Breadcrumb module 6.x-1.x before 6.x-1.3 for Drupal does not properly convert a title to plain-text, which allows remote authenticated users with create or edit node permissions to conduct cross-site scripting (XSS) attacks via the title parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/smart_breadcrumb.git/commitdiff/834f75a" source="CONFIRM" patch="1">http://drupalcode.org/project/smart_breadcrumb.git/commitdiff/834f75a</ref>
-      <ref url="http://drupal.org/node/1585564" source="MISC" patch="1" adv="1">http://drupal.org/node/1585564</ref>
-      <ref url="http://drupal.org/node/1568216" source="CONFIRM" patch="1">http://drupal.org/node/1568216</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75713" source="XF">smartbreadcrumb-filtertitles-xss(75713)</ref>
-      <ref url="http://www.securityfocus.com/bid/53592" source="BID">53592</ref>
-      <ref url="http://www.osvdb.org/82006" source="OSVDB">82006</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49163" source="SECUNIA" adv="1">49163</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="christopher_mitchell" name="smart_breadcrumb">
-        <vers num="6.x-1.0" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2706" published="2012-06-26" name="CVE-2012-2706" modified="2012-06-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to user registration.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75716" source="XF">postaffiliatepro-registration-xss(75716)</ref>
-      <ref url="http://www.securityfocus.com/bid/53589" source="BID">53589</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://drupal.org/node/1585648" source="MISC" adv="1">http://drupal.org/node/1585648</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="peter_pokrivcak" name="post_affiliate_pro">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2707" published="2012-06-26" name="CVE-2012-2707" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:P)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">The Hostmaster (Aegir) module 6.x-1.x before 6.x-1.9 for Drupal does not properly exit when users do not have access to package/task nodes, which allows remote attackers to bypass intended access restrictions and edit unauthorized nodes.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/hostmaster.git/commitdiff/8a61101" source="CONFIRM" patch="1">http://drupalcode.org/project/hostmaster.git/commitdiff/8a61101</ref>
-      <ref url="http://drupal.org/node/1585658" source="CONFIRM" patch="1">http://drupal.org/node/1585658</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75715" source="XF">hostmaster-node-security-bypass(75715)</ref>
-      <ref url="http://www.securityfocus.com/bid/53588" source="BID">53588</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://drupal.org/node/1585678" source="MISC" adv="1">http://drupal.org/node/1585678</ref>
-      <ref url="http://community.aegirproject.org/1.9" source="CONFIRM">http://community.aegirproject.org/1.9</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="antoine_beaupre" name="hostmaster">
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="6.x-1.5" />
-        <vers num="6.x-1.6" />
-        <vers num="6.x-1.7" />
-        <vers num="6.x-1.8" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2708" published="2012-06-26" name="CVE-2012-2708" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the _hosting_task_log_table function in modules/hosting/task/hosting_task.module in the Hostmaster (Aegir) module 6.x-1.x before 6.x-1.9 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a Drush log message in a provision task log.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/hostmaster.git/commitdiff/9476561" source="CONFIRM" patch="1">http://drupalcode.org/project/hostmaster.git/commitdiff/9476561</ref>
-      <ref url="http://drupal.org/node/1585658" source="CONFIRM" patch="1">http://drupal.org/node/1585658</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75714" source="XF">hostmaster-logmessages-xss(75714)</ref>
-      <ref url="http://www.securityfocus.com/bid/53588" source="BID">53588</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://drupal.org/node/1585678" source="MISC" adv="1">http://drupal.org/node/1585678</ref>
-      <ref url="http://community.aegirproject.org/1.9" source="CONFIRM">http://community.aegirproject.org/1.9</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="antoine_beaupre" name="hostmaster">
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="6.x-1.5" />
-        <vers num="6.x-1.6" />
-        <vers num="6.x-1.7" />
-        <vers num="6.x-1.8" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-2709" reject="1" published="2012-06-29" name="CVE-2012-2709" modified="2012-06-29">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-2907.  Reason: This candidate is a duplicate of CVE-2012-2907.  Notes: All CVE users should reference CVE-2012-2907 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2710" published="2012-06-26" name="CVE-2012-2710" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Zen module 6.x-1.x before 6.x-1.1 for Drupal, when "Append the content title to the end of the breadcrumb" is enabled, allows remote attackers to inject arbitrary web script or HTML via the content title in a breadcrumb.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/628480" source="CONFIRM" patch="1">http://drupal.org/node/628480</ref>
-      <ref url="http://drupal.org/node/1585960" source="MISC" patch="1" adv="1">http://drupal.org/node/1585960</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75711" source="XF">zen-breadcrumb-xss(75711)</ref>
-      <ref url="http://www.securityfocus.com/bid/53573" source="BID">53573</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="john_albin" name="zen">
-        <vers num="6.x-1.0" edition="beta2" />
-        <vers num="6.x-1.0" edition="beta3" />
-        <vers num="6.x-1.0beta1" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2711" published="2012-06-26" name="CVE-2012-2711" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy List module 6.x-1.x before 6.x-1.4 for Drupal allow remote authenticated users with create or edit taxonomy terms permissions to inject arbitrary web script or HTML via vectors related to taxonomy information.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53671" source="BID" patch="1">53671</ref>
-      <ref url="http://drupalcode.org/project/taxonomy_list.git/commitdiff/7dd21a0" source="CONFIRM" patch="1">http://drupalcode.org/project/taxonomy_list.git/commitdiff/7dd21a0</ref>
-      <ref url="http://drupal.org/node/1597262" source="MISC" patch="1" adv="1">http://drupal.org/node/1597262</ref>
-      <ref url="http://drupal.org/node/1595396" source="CONFIRM" patch="1">http://drupal.org/node/1595396</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75867" source="XF">taxonomylist-taxonomyinformation-xss(75867)</ref>
-      <ref url="http://www.osvdb.org/82164" source="OSVDB">82164</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49238" source="SECUNIA" adv="1">49238</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nancy_wichmann" name="taxonomy_list">
-        <vers num="6.x-1.0" />
-        <vers num="6.x-1.0-beta1" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.2" edition="dev" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.x-dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2712" published="2012-06-26" name="CVE-2012-2712" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the Search API module 7.x-1.x before 7.x-1.1 for Drupal, when supporting manual entry of field identifiers, allow remote attackers to inject arbitrary web script or HTML via vectors related to thrown exceptions and logging errors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/search_api.git/commitdiff/5a18c8c" source="CONFIRM" patch="1">http://drupalcode.org/project/search_api.git/commitdiff/5a18c8c</ref>
-      <ref url="http://drupal.org/node/1597364" source="MISC" patch="1" adv="1">http://drupal.org/node/1597364</ref>
-      <ref url="http://drupal.org/node/1596524" source="CONFIRM" patch="1">http://drupal.org/node/1596524</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75868" source="XF">searchapi-exceptions-errors-xss(75868)</ref>
-      <ref url="http://www.securityfocus.com/bid/53672" source="BID">53672</ref>
-      <ref url="http://www.osvdb.org/82230" source="OSVDB">82230</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49236" source="SECUNIA" adv="1">49236</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="thomas_seidl" name="search_api">
-        <vers num="7.x-1.0" edition="beta1" />
-        <vers num="7.x-1.0" edition="beta10" />
-        <vers num="7.x-1.0" edition="beta2" />
-        <vers num="7.x-1.0" edition="beta3" />
-        <vers num="7.x-1.0" edition="beta4" />
-        <vers num="7.x-1.0" edition="beta5" />
-        <vers num="7.x-1.0" edition="beta6" />
-        <vers num="7.x-1.0" edition="beta7" />
-        <vers num="7.x-1.0" edition="beta8" />
-        <vers num="7.x-1.0" edition="beta9" />
-        <vers num="7.x-1.0" edition="rc1" />
-        <vers num="7.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2713" published="2012-06-26" name="CVE-2012-2713" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the BrowserID (Mozilla Persona) module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that login a user to another web site.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://drupal.org/node/1596464" source="CONFIRM" patch="1">https://drupal.org/node/1596464</ref>
-      <ref url="http://www.securityfocus.com/bid/53673" source="BID" patch="1">53673</ref>
-      <ref url="http://drupalcode.org/project/browserid.git/commitdiff/5e5cdcd" source="CONFIRM" patch="1">http://drupalcode.org/project/browserid.git/commitdiff/5e5cdcd</ref>
-      <ref url="http://drupal.org/node/1597414" source="MISC" patch="1" adv="1">http://drupal.org/node/1597414</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75869" source="XF">browserid-authentication-csrf(75869)</ref>
-      <ref url="http://www.osvdb.org/82466" source="OSVDB">82466</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49227" source="SECUNIA" adv="1">49227</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="isaac_sukin" name="browserid">
-        <vers num="7.x-1.0" />
-        <vers num="7.x-1.1" />
-        <vers num="7.x-1.2" />
-        <vers num="7.x-1.x-dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2715" published="2012-06-26" name="CVE-2012-2715" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the themes_links function in template.php in the Amadou theme module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to class attributes in a list of links.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53732" source="BID" patch="1">53732</ref>
-      <ref url="http://drupalcode.org/project/amadou.git/commitdiff/071ea83" source="CONFIRM" patch="1">http://drupalcode.org/project/amadou.git/commitdiff/071ea83</ref>
-      <ref url="http://drupal.org/node/1608780" source="MISC" patch="1" adv="1">http://drupal.org/node/1608780</ref>
-      <ref url="http://drupal.org/node/1608730" source="CONFIRM" patch="1">http://drupal.org/node/1608730</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75997" source="XF">drupal-amadou-template-xss(75997)</ref>
-      <ref url="http://www.osvdb.org/82433" source="OSVDB">82433</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49328" source="SECUNIA" adv="1">49328</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="jason_moore" name="amadou">
-        <vers num="6.x-1.0" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2716" published="2012-06-21" name="CVE-2012-2716" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the Comment Moderation module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to hijack the authentication of administrators for requests that publish comments.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/comment_moderation.git/commitdiff/f18c3de" source="CONFIRM" patch="1">http://drupalcode.org/project/comment_moderation.git/commitdiff/f18c3de</ref>
-      <ref url="http://drupal.org/node/1608822" source="MISC" patch="1" adv="1">http://drupal.org/node/1608822</ref>
-      <ref url="http://drupal.org/node/1608822" source="CONFIRM" patch="1" adv="1">http://drupal.org/node/1608822</ref>
-      <ref url="http://drupal.org/node/1538768" source="CONFIRM" patch="1">http://drupal.org/node/1538768</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75998" source="XF">drupal-commentmoderation-unspecified-csrf(75998)</ref>
-      <ref url="http://www.securityfocus.com/bid/53738" source="BID">53738</ref>
-      <ref url="http://secunia.com/advisories/49326" source="SECUNIA" adv="1">49326</ref>
-      <ref url="http://osvdb.org/82434" source="OSVDB">82434</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="david_stosik" name="comment_moderation">
-        <vers num="6.x-1.0" />
-        <vers num="6.x-1.x-dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2717" published="2012-06-27" name="CVE-2012-2717" modified="2012-06-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the Mobile Tools module 6.x-2.x before 6.x-2.3 for Drupal allow remote attackers to inject arbitrary web script or HTML via the (1) Mobile URL field or (2) Desktop URL field to the General configuration page, or the (3) message to the Mobile Tools block message options.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53734" source="BID" patch="1">53734</ref>
-      <ref url="http://drupalcode.org/project/mobile_tools.git/commitdiff/614b0fc" source="CONFIRM" patch="1">http://drupalcode.org/project/mobile_tools.git/commitdiff/614b0fc</ref>
-      <ref url="http://drupal.org/node/1608828" source="MISC" patch="1" adv="1">http://drupal.org/node/1608828</ref>
-      <ref url="http://drupal.org/node/1169008" source="CONFIRM" patch="1">http://drupal.org/node/1169008</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76002" source="XF">drupal-mobiletools-unspecified-xss(76002)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.madirish.net/content/drupal-mobile-tools-6x-23-xss" source="MISC">http://www.madirish.net/content/drupal-mobile-tools-6x-23-xss</ref>
-      <ref url="http://secunia.com/advisories/49318" source="SECUNIA" adv="1">49318</ref>
-      <ref url="http://osvdb.org/82410" source="OSVDB">82410</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mathew_winstone" name="mobile_tools">
-        <vers num="6.x-2.0" />
-        <vers num="6.x-2.1" />
-        <vers num="6.x-2.2" />
-        <vers num="6.x-2.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2718" published="2012-06-21" name="CVE-2012-2718" modified="2012-06-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in the Counter module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "recording visits."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76004" source="XF">drupal-counter-unspecified-sql-injection(76004)</ref>
-      <ref url="http://www.securityfocus.com/bid/53736" source="BID">53736</ref>
-      <ref url="http://osvdb.org/82527" source="OSVDB">82527</ref>
-      <ref url="http://drupal.org/node/1608854" source="MISC" adv="1">http://drupal.org/node/1608854</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="drupal-id" name="counter_module">
-        <vers num="-" />
-        <vers num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2719" published="2012-06-26" name="CVE-2012-2719" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="5.1" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="4.9" CVSS_base_score="5.1">
-    <desc>
-      <descript source="cve">The filedepot module 6.x-1.x before 6.x-1.3 for Drupal, when accessed using multiple different browsers from the same IP address, causes Internet Explorer sessions to "switch users" when uploading a file, which has unspecified impact possibly involving file uploads to the wrong user directory, aka "Session Management Vulnerability."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1608864" source="MISC" patch="1" adv="1">http://drupal.org/node/1608864</ref>
-      <ref url="http://drupal.org/node/1598782" source="CONFIRM" patch="1">http://drupal.org/node/1598782</ref>
-      <ref url="http://www.osvdb.org/82575" source="OSVDB">82575</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49316" source="SECUNIA" adv="1">49316</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="blaine_lang" name="filedepot">
-        <vers num="6.x-1.0" edition="rc1" />
-        <vers num="6.x-1.0" edition="rc2" />
-        <vers num="6.x-1.0" edition="rc3" />
-        <vers num="6.x-1.0" edition="rc4" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2720" published="2012-06-26" name="CVE-2012-2720" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Token Authentication (tokenauth) module 6.x-1.x before 6.x-1.7 for Drupal does not properly revert user sessions, which might allow remote attackers to perform requests with extra privileges.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1619808" source="MISC" patch="1" adv="1">http://drupal.org/node/1619808</ref>
-      <ref url="http://drupal.org/node/1618476" source="CONFIRM" patch="1">http://drupal.org/node/1618476</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76141" source="XF">tokenauth-usersession-security-bypass(76141)</ref>
-      <ref url="http://www.securityfocus.com/bid/53840" source="BID">53840</ref>
-      <ref url="http://www.osvdb.org/82727" source="OSVDB">82727</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49400" source="SECUNIA">49400</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adam_ross" name="tokenauth">
-        <vers num="6.x-1.0" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="6.x-1.5" />
-        <vers num="6.x-1.6" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2721" published="2012-06-26" name="CVE-2012-2721" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The default views in the Organic Groups (OG) module 6.x-2.x before 6.x-2.4 for Drupal do not properly check permissions when all users have the "access content" permission removed, which allows remote attackers to bypass access restrictions and possibly have other unspecified impact.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/og.git/commitdiff/1485708" source="CONFIRM" patch="1">http://drupalcode.org/project/og.git/commitdiff/1485708</ref>
-      <ref url="http://drupal.org/node/1619810" source="MISC" patch="1" adv="1">http://drupal.org/node/1619810</ref>
-      <ref url="http://drupal.org/node/1619736" source="CONFIRM" patch="1">http://drupal.org/node/1619736</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76150" source="XF">organicgroups-permission-security-bypass(76150)</ref>
-      <ref url="http://www.securityfocus.com/bid/53838" source="BID">53838</ref>
-      <ref url="http://www.osvdb.org/82728" source="OSVDB">82728</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49397" source="SECUNIA" adv="1">49397</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moshe_weitzman" name="organic_groups">
-        <vers num="6.x-2.0" edition="rc1" />
-        <vers num="6.x-2.0" edition="rc2" />
-        <vers num="6.x-2.0" edition="rc3" />
-        <vers num="6.x-2.1" />
-        <vers num="6.x-2.2" />
-        <vers num="6.x-2.3" />
-        <vers num="6.x-2.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2722" published="2012-06-26" name="CVE-2012-2722" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The node selection interface in the WYSIWYG editor (CKEditor) in the Node Embed module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.0 for Drupal does not properly check permissions, which allows remote attackers to bypass intended access restrictions and read node titles.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/node_embed.git/commitdiff/d06f022" source="CONFIRM" patch="1">http://drupalcode.org/project/node_embed.git/commitdiff/d06f022</ref>
-      <ref url="http://drupalcode.org/project/node_embed.git/commitdiff/7a2296c" source="CONFIRM" patch="1">http://drupalcode.org/project/node_embed.git/commitdiff/7a2296c</ref>
-      <ref url="http://drupal.org/node/1619824" source="MISC" patch="1" adv="1">http://drupal.org/node/1619824</ref>
-      <ref url="http://drupal.org/node/1618430" source="CONFIRM" patch="1">http://drupal.org/node/1618430</ref>
-      <ref url="http://drupal.org/node/1618428" source="CONFIRM" patch="1">http://drupal.org/node/1618428</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76148" source="XF">nodeembed-selectembed-security-bypass(76148)</ref>
-      <ref url="http://www.securityfocus.com/bid/53835" source="BID">53835</ref>
-      <ref url="http://www.osvdb.org/82735" source="OSVDB">82735</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/48348" source="SECUNIA" adv="1">48348</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="scott_reynen" name="node_embed">
-        <vers num="6.x-1.0" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="7.x-1.0" edition="rc1" />
-        <vers num="7.x-1.0" edition="rc2" />
-        <vers num="7.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2723" published="2012-06-26" name="CVE-2012-2723" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with maestro admin permissions to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/maestro.git/commitdiff/c499971" source="CONFIRM" patch="1">http://drupalcode.org/project/maestro.git/commitdiff/c499971</ref>
-      <ref url="http://drupal.org/node/1619830" source="MISC" patch="1" adv="1">http://drupal.org/node/1619830</ref>
-      <ref url="http://drupal.org/node/1617952" source="CONFIRM" patch="1">http://drupal.org/node/1617952</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76145" source="XF">maestro-unspecified-xss(76145)</ref>
-      <ref url="http://www.securityfocus.com/bid/53836" source="BID">53836</ref>
-      <ref url="http://www.osvdb.org/82713" source="OSVDB">82713</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49393" source="SECUNIA" adv="1">49393</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="blaine_lang" name="maestro">
-        <vers num="7.x-1.0" edition="alpha1" />
-        <vers num="7.x-1.0" edition="alpha2" />
-        <vers num="7.x-1.0" edition="alpha3" />
-        <vers num="7.x-1.0" edition="rc1" />
-        <vers num="7.x-1.1" />
-        <vers num="7.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2725" published="2012-06-26" name="CVE-2012-2725" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">classes/Filter/WhitelistedExternalFilter.php in the Authoring HTML module 6.x-1.x before 6.x-1.1 for Drupal does not properly validate sources with the host white list, which allows remote authenticated users to bypass intended access restrictions and conduct cross-site scripting (XSS) attacks.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/authoring_html.git/commitdiff/ceae1ab" source="CONFIRM" patch="1">http://drupalcode.org/project/authoring_html.git/commitdiff/ceae1ab</ref>
-      <ref url="http://drupal.org/node/1619852" source="MISC" patch="1" adv="1">http://drupal.org/node/1619852</ref>
-      <ref url="http://drupal.org/node/1619086" source="CONFIRM" patch="1">http://drupal.org/node/1619086</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76127" source="XF">authoringhtml-embeddedscripts-xss(76127)</ref>
-      <ref url="http://www.osvdb.org/82739" source="OSVDB">82739</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49387" source="SECUNIA" adv="1">49387</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="authoring_html" name="6.x-1.0">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2726" published="2012-06-26" name="CVE-2012-2726" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Protest module 6.x-1.x before 6.x-1.2 or 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "administer protest" permission to inject arbitrary web script or HTML via the protest_body parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/protest.git/commitdiff/cf8c543" source="CONFIRM" patch="1">http://drupalcode.org/project/protest.git/commitdiff/cf8c543</ref>
-      <ref url="http://drupalcode.org/project/protest.git/commitdiff/c85eaed" source="CONFIRM" patch="1">http://drupalcode.org/project/protest.git/commitdiff/c85eaed</ref>
-      <ref url="http://drupal.org/node/1619856" source="MISC" patch="1" adv="1">http://drupal.org/node/1619856</ref>
-      <ref url="http://drupal.org/node/1618092" source="CONFIRM" patch="1">http://drupal.org/node/1618092</ref>
-      <ref url="http://drupal.org/node/1618090" source="CONFIRM" patch="1">http://drupal.org/node/1618090</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76126" source="XF">protest-protestbodyparameter-xss(76126)</ref>
-      <ref url="http://www.osvdb.org/82715" source="OSVDB">82715</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49386" source="SECUNIA" adv="1">49386</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="alberto_trujillo_gonzalez" name="protest">
-        <vers num="6.x-1.0" />
-        <vers num="6.x-1.x" edition="dev" />
-        <vers num="7.x-1.0" />
-        <vers num="7.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2727" published="2012-06-26" name="CVE-2012-2727" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:P)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Open redirect vulnerability in the Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when synchronizing user data, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1632734" source="MISC" patch="1" adv="1">http://drupal.org/node/1632734</ref>
-      <ref url="http://drupal.org/node/1632704" source="CONFIRM" patch="1">http://drupal.org/node/1632704</ref>
-      <ref url="http://drupal.org/node/1632702" source="CONFIRM" patch="1">http://drupal.org/node/1632702</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76292" source="XF">janrain-drupal-spoofing(76292)</ref>
-      <ref url="http://www.securityfocus.com/bid/53992" source="BID">53992</ref>
-      <ref url="http://www.osvdb.org/82958" source="OSVDB">82958</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49480" source="SECUNIA" adv="1">49480</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bryce_hamrick" name="janrain_capture">
-        <vers num="6.x-1.0" />
-        <vers num="7.x-1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2728" published="2012-06-26" name="CVE-2012-2728" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in the Node Hierarchy module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to hijack the authentication of administrators for requests that change a node hierarchy position via an (1) up or (2) down action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/nodehierarchy.git/commitdiff/8b4b3f5" source="CONFIRM" patch="1">http://drupalcode.org/project/nodehierarchy.git/commitdiff/8b4b3f5</ref>
-      <ref url="http://drupal.org/node/1632900" source="MISC" patch="1" adv="1">http://drupal.org/node/1632900</ref>
-      <ref url="http://drupal.org/node/1632432" source="CONFIRM" patch="1">http://drupal.org/node/1632432</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76345" source="XF">drupal-nodehierarchy-unspecified-csrf(76345)</ref>
-      <ref url="http://www.securityfocus.com/bid/53993" source="BID">53993</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ronan_dowling" name="node_hierarchy">
-        <vers num="6.x-1.0" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2729" published="2012-06-26" name="CVE-2012-2729" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in the SimpleMeta module 6.x-1.x before 6.x-2.0 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) delete or (2) add a meta tag entry.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1632908" source="MISC" patch="1" adv="1">http://drupal.org/node/1632908</ref>
-      <ref url="http://drupal.org/node/1534874" source="CONFIRM" patch="1">http://drupal.org/node/1534874</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76344" source="XF">drupal-simplemeta-unspecified-csrf(76344)</ref>
-      <ref url="http://www.securityfocus.com/bid/53997" source="BID">53997</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adcillc" name="simplemeta">
-        <vers num="6.x-1.0" />
-        <vers num="6.x-1.1" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-2.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2730" published="2012-06-26" name="CVE-2012-2730" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The Protected Node module 6.x-1.x before 6.x-1.6 for Drupal does not properly "protect node access when nodes are accessed outside of the standard node view," which allows remote attackers to bypass intended access restrictions.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1632918" source="MISC" patch="1" adv="1">http://drupal.org/node/1632918</ref>
-      <ref url="http://drupal.org/node/1258034" source="CONFIRM" patch="1">http://drupal.org/node/1258034</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76291" source="XF">protected-node-drupal-sec-bypass(76291)</ref>
-      <ref url="http://www.securityfocus.com/bid/54001" source="BID">54001</ref>
-      <ref url="http://www.osvdb.org/82984" source="OSVDB">82984</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49509" source="SECUNIA" adv="1">49509</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="alexis_wilke" name="protected_node">
-        <vers num="6.x-1.0" />
-        <vers num="6.x-1.2" />
-        <vers num="6.x-1.3" />
-        <vers num="6.x-1.4" />
-        <vers num="6.x-1.5" />
-        <vers num="6.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2731" published="2012-06-26" name="CVE-2012-2731" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:N/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">The Ubercart AJAX Cart 6.x-2.x before 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote attackers to obtain sensitive information by sniffing or reading the cache of the HTML of a webpage.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1633048" source="MISC" patch="1" adv="1">http://drupal.org/node/1633048</ref>
-      <ref url="http://drupal.org/node/1619586" source="CONFIRM" patch="1">http://drupal.org/node/1619586</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76332" source="XF">uberart-ajax-info-disc(76332)</ref>
-      <ref url="http://www.securityfocus.com/bid/53999" source="BID">53999</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://drupalcode.org/project/uc_ajax_cart.git/commitdiff/b59cdd5" source="CONFIRM">http://drupalcode.org/project/uc_ajax_cart.git/commitdiff/b59cdd5</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="richardo_ante" name="ubercart_ajax_cart">
-        <vers num="6.x-2.0" edition="alpha6" />
-        <vers num="6.x-2.0" edition="alpha7" />
-        <vers num="6.x-2.0" edition="alpha8" />
-        <vers num="6.x-2.0" edition="beta1" />
-        <vers num="6.x-2.0" edition="beta10" />
-        <vers num="6.x-2.0" edition="beta11" />
-        <vers num="6.x-2.0" edition="beta2" />
-        <vers num="6.x-2.0" edition="beta3" />
-        <vers num="6.x-2.0" edition="beta4" />
-        <vers num="6.x-2.0" edition="beta5" />
-        <vers num="6.x-2.0" edition="beta6" />
-        <vers num="6.x-2.0" edition="beta7" />
-        <vers num="6.x-2.0" edition="beta8" />
-        <vers num="6.x-2.0" edition="beta9" />
-        <vers num="6.x-2.0" edition="rc1" />
-        <vers num="6.x-2.0" edition="rc2" />
-        <vers num="6.x-2.0" edition="rc3" />
-        <vers num="6.x-2.0" edition="rc4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-2732" reject="1" published="2012-06-26" name="CVE-2012-2732" modified="2012-06-26">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-2021.  Reason: This candidate is a duplicate of CVE-2010-2021.  Notes: All CVE users should reference CVE-2010-2021 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2737" published="2012-07-22" name="CVE-2012-2737" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="1.9" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.4" CVSS_base_score="1.9">
-    <desc>
-      <descript source="cve">The user_change_icon_file_authorized_cb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does not properly check the UID when copying an icon file to the system cache directory, which allows local users to read arbitrary files via a race condition.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://cgit.freedesktop.org/accountsservice/commit/?id=bd51aa4cdac380f55d607f4ffdf2ab3c00d08721" source="CONFIRM" patch="1">http://cgit.freedesktop.org/accountsservice/commit/?id=bd51aa4cdac380f55d607f4ffdf2ab3c00d08721</ref>
-      <ref url="http://cgit.freedesktop.org/accountsservice/commit/?id=4c5b12e363410e490e776e4b4a86dcce157a543d" source="CONFIRM" patch="1">http://cgit.freedesktop.org/accountsservice/commit/?id=4c5b12e363410e490e776e4b4a86dcce157a543d</ref>
-      <ref url="http://cgit.freedesktop.org/accountsservice/commit/?id=26213aa0e0d8dca5f36cc23f6942525224cbe9f5" source="CONFIRM" patch="1">http://cgit.freedesktop.org/accountsservice/commit/?id=26213aa0e0d8dca5f36cc23f6942525224cbe9f5</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=832532" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=832532</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76648" source="XF">accountsservice-userchangeicon-info-disc(76648)</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1485-1" source="UBUNTU">USN-1485-1</ref>
-      <ref url="http://www.securityfocus.com/bid/54223" source="BID">54223</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/28/9" source="MLIST">[oss-security] 20120628 accountsservice local file disclosure flaw (CVE-2012-2737)</ref>
-      <ref url="http://secunia.com/advisories/49759" source="SECUNIA" adv="1">49759</ref>
-      <ref url="http://secunia.com/advisories/49695" source="SECUNIA" adv="1">49695</ref>
-      <ref url="http://osvdb.org/83398" source="OSVDB">83398</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083359.html" source="FEDORA">FEDORA-2012-10120</ref>
-      <ref url="http://cgit.freedesktop.org/accountsservice/commit/?id=27f3d93a82fde4f6c7ab54f3f008af04f93f9c69" source="CONFIRM">http://cgit.freedesktop.org/accountsservice/commit/?id=27f3d93a82fde4f6c7ab54f3f008af04f93f9c69</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ray_stode" name="accountsservice">
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.10" />
-        <vers num="0.6.11" />
-        <vers num="0.6.12" />
-        <vers num="0.6.13" />
-        <vers num="0.6.14" />
-        <vers num="0.6.15" />
-        <vers num="0.6.16" />
-        <vers num="0.6.17" />
-        <vers num="0.6.18" />
-        <vers num="0.6.19" />
-        <vers num="0.6.2" />
-        <vers num="0.6.20" />
-        <vers prev="1" num="0.6.21" />
-        <vers num="0.6.3" />
-        <vers num="0.6.4" />
-        <vers num="0.6.5" />
-        <vers num="0.6.6" />
-        <vers num="0.6.7" />
-        <vers num="0.6.8" />
-        <vers num="0.6.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2738" published="2012-07-22" name="CVE-2012-2738" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.gnome.org/show_bug.cgi?id=676090" source="CONFIRM">https://bugzilla.gnome.org/show_bug.cgi?id=676090</ref>
-      <ref url="http://www.securityfocus.com/bid/54281" source="BID">54281</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/15/11" source="MLIST">[oss-security] 20120615 Re: CVE Request -- mosh (and probably vte too): mosh server DoS (long loop) due improper parsing of terminal parameters in terminal dispatcher</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/23/6" source="MLIST">[oss-security] 20120522 Re: CVE Request -- mosh (and probably vte too): mosh server DoS (long loop) due improper parsing of terminal parameters in terminal dispatcher</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083403.html" source="FEDORA">FEDORA-2012-9575</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083398.html" source="FEDORA">FEDORA-2012-9546</ref>
-      <ref url="http://ftp.gnome.org/pub/GNOME/sources/vte/0.32/vte-0.32.2.news" source="CONFIRM">http://ftp.gnome.org/pub/GNOME/sources/vte/0.32/vte-0.32.2.news</ref>
-      <ref url="http://ftp.gnome.org/pub/GNOME/sources/vte/0.32/vte-0.32.2.changes" source="CONFIRM">http://ftp.gnome.org/pub/GNOME/sources/vte/0.32/vte-0.32.2.changes</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nalin_dahyabhai" name="vte">
-        <vers num="0.10" />
-        <vers num="0.10.1" />
-        <vers num="0.10.10" />
-        <vers num="0.10.11" />
-        <vers num="0.10.12" />
-        <vers num="0.10.13" />
-        <vers num="0.10.14" />
-        <vers num="0.10.15" />
-        <vers num="0.10.16" />
-        <vers num="0.10.17" />
-        <vers num="0.10.19" />
-        <vers num="0.10.2" />
-        <vers num="0.10.20" />
-        <vers num="0.10.21" />
-        <vers num="0.10.22" />
-        <vers num="0.10.23" />
-        <vers num="0.10.25" />
-        <vers num="0.10.26" />
-        <vers num="0.10.27" />
-        <vers num="0.10.28" />
-        <vers num="0.10.29" />
-        <vers num="0.10.3" />
-        <vers num="0.10.4" />
-        <vers num="0.10.5" />
-        <vers num="0.10.6" />
-        <vers num="0.10.7" />
-        <vers num="0.10.8" />
-        <vers num="0.10.9" />
-        <vers num="0.11.0" />
-        <vers num="0.11.1" />
-        <vers num="0.11.10" />
-        <vers num="0.11.11" />
-        <vers num="0.11.12" />
-        <vers num="0.11.13" />
-        <vers num="0.11.14" />
-        <vers num="0.11.15" />
-        <vers num="0.11.16" />
-        <vers num="0.11.17" />
-        <vers num="0.11.18" />
-        <vers num="0.11.19" />
-        <vers num="0.11.2" />
-        <vers num="0.11.20" />
-        <vers num="0.11.21" />
-        <vers num="0.11.3" />
-        <vers num="0.11.4" />
-        <vers num="0.11.5" />
-        <vers num="0.11.6" />
-        <vers num="0.11.7" />
-        <vers num="0.11.8" />
-        <vers num="0.11.9" />
-        <vers num="0.12.0" />
-        <vers num="0.12.1" />
-        <vers num="0.12.2" />
-        <vers num="0.13.0" />
-        <vers num="0.13.1" />
-        <vers num="0.13.2" />
-        <vers num="0.13.3" />
-        <vers num="0.13.4" />
-        <vers num="0.13.5" />
-        <vers num="0.13.6" />
-        <vers num="0.13.7" />
-        <vers num="0.14.0" />
-        <vers num="0.14.1" />
-        <vers num="0.14.2" />
-        <vers num="0.15.0" />
-        <vers num="0.15.1" />
-        <vers num="0.15.2" />
-        <vers num="0.15.3" />
-        <vers num="0.15.4" />
-        <vers num="0.15.5" />
-        <vers num="0.15.6" />
-        <vers num="0.16.0" />
-        <vers num="0.16.1" />
-        <vers num="0.16.10" />
-        <vers num="0.16.11" />
-        <vers num="0.16.12" />
-        <vers num="0.16.13" />
-        <vers num="0.16.14" />
-        <vers num="0.16.2" />
-        <vers num="0.16.3" />
-        <vers num="0.16.4" />
-        <vers num="0.16.5" />
-        <vers num="0.16.6" />
-        <vers num="0.16.7" />
-        <vers num="0.16.8" />
-        <vers num="0.16.9" />
-        <vers num="0.17.1" />
-        <vers num="0.17.2" />
-        <vers num="0.17.3" />
-        <vers num="0.17.4" />
-        <vers num="0.19.1" />
-        <vers num="0.19.2" />
-        <vers num="0.19.3" />
-        <vers num="0.19.4" />
-        <vers num="0.20.0" />
-        <vers num="0.20.1" />
-        <vers num="0.20.2" />
-        <vers num="0.20.3" />
-        <vers num="0.20.4" />
-        <vers num="0.20.5" />
-        <vers num="0.21.1" />
-        <vers num="0.21.2" />
-        <vers num="0.21.3" />
-        <vers num="0.21.4" />
-        <vers num="0.21.5" />
-        <vers num="0.21.6" />
-        <vers num="0.21.7" />
-        <vers num="0.22.0" />
-        <vers num="0.22.1" />
-        <vers num="0.22.2" />
-        <vers num="0.22.3" />
-        <vers num="0.22.4" />
-        <vers num="0.22.5" />
-        <vers num="0.23.1" />
-        <vers num="0.23.2" />
-        <vers num="0.23.3" />
-        <vers num="0.23.4" />
-        <vers num="0.23.5" />
-        <vers num="0.24.0" />
-        <vers num="0.24.1" />
-        <vers num="0.24.2" />
-        <vers num="0.24.3" />
-        <vers num="0.25.1" />
-        <vers num="0.25.90" />
-        <vers num="0.25.91" />
-        <vers num="0.26.0" />
-        <vers num="0.26.1" />
-        <vers num="0.26.2" />
-        <vers num="0.27.0" />
-        <vers num="0.27.1" />
-        <vers num="0.27.2" />
-        <vers num="0.27.3" />
-        <vers num="0.27.4" />
-        <vers num="0.27.5" />
-        <vers num="0.27.90" />
-        <vers num="0.28.0" />
-        <vers num="0.28.1" />
-        <vers num="0.28.2" />
-        <vers num="0.29.0" />
-        <vers num="0.29.1" />
-        <vers num="0.30.0" />
-        <vers num="0.30.1" />
-        <vers num="0.31.0" />
-        <vers num="0.32.0" />
-        <vers prev="1" num="0.32.1" />
-        <vers num="0.9.0" />
-        <vers num="0.9.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2740" published="2012-09-06" name="CVE-2012-2740" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in public_html/lists/admin in phpList before 2.10.18 allows remote attackers to execute arbitrary SQL commands via the sortby parameter in a find action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.phplist.com/?lid=567" source="CONFIRM" patch="1" adv="1">https://www.phplist.com/?lid=567</ref>
-      <ref url="https://mantis.phplist.com/view.php?id=16557" source="MISC">https://mantis.phplist.com/view.php?id=16557</ref>
-      <ref url="http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5081.php" source="MISC">http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5081.php</ref>
-      <ref url="http://www.securityfocus.com/bid/52657" source="BID">52657</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/17/2" source="MLIST">[oss-security] 20120616 Re: CVE request: phplist before 2.10.18 XSS and sql injection</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/16/1" source="MLIST">[oss-security] 20120616 CVE request: phplist before 2.10.18 XSS and sql injection</ref>
-      <ref url="http://www.exploit-db.com/exploits/18639" source="EXPLOIT-DB">18639</ref>
-      <ref url="http://securitytracker.com/id?1027181" source="SECTRACK">1027181</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="phplist" name="phplist">
-        <vers num="2.10.1" />
-        <vers num="2.10.10" />
-        <vers num="2.10.11" />
-        <vers num="2.10.12" />
-        <vers num="2.10.13" />
-        <vers num="2.10.14" />
-        <vers num="2.10.15" />
-        <vers num="2.10.16" />
-        <vers prev="1" num="2.10.17" />
-        <vers num="2.10.2" />
-        <vers num="2.10.3" />
-        <vers num="2.10.4" />
-        <vers num="2.10.5" />
-        <vers num="2.10.7" />
-        <vers num="2.10.8" />
-        <vers num="2.10.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2741" published="2012-09-06" name="CVE-2012-2741" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in public_html/lists/admin/ in phpList before 2.10.18 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a reconcileusers action.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.phplist.com/?lid=567" source="CONFIRM" patch="1" adv="1">https://www.phplist.com/?lid=567</ref>
-      <ref url="https://mantis.phplist.com/view.php?id=16557" source="MISC">https://mantis.phplist.com/view.php?id=16557</ref>
-      <ref url="http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5081.php" source="MISC">http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5081.php</ref>
-      <ref url="http://www.securityfocus.com/bid/52657" source="BID">52657</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/17/2" source="MLIST">[oss-security] 20120616 Re: CVE request: phplist before 2.10.18 XSS and sql injection</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/16/1" source="MLIST">[oss-security] 20120616 CVE request: phplist before 2.10.18 XSS and sql injection</ref>
-      <ref url="http://www.exploit-db.com/exploits/18639" source="EXPLOIT-DB">18639</ref>
-      <ref url="http://securitytracker.com/id?1027181" source="SECTRACK">1027181</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="phplist" name="phplist">
-        <vers num="2.10.1" />
-        <vers num="2.10.10" />
-        <vers num="2.10.11" />
-        <vers num="2.10.12" />
-        <vers num="2.10.13" />
-        <vers num="2.10.14" />
-        <vers num="2.10.15" />
-        <vers num="2.10.16" />
-        <vers prev="1" num="2.10.17" />
-        <vers num="2.10.2" />
-        <vers num="2.10.3" />
-        <vers num="2.10.4" />
-        <vers num="2.10.5" />
-        <vers num="2.10.7" />
-        <vers num="2.10.8" />
-        <vers num="2.10.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2742" published="2012-06-27" name="CVE-2012-2742" modified="2012-06-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugs.gentoo.org/show_bug.cgi?id=421571" source="MISC">https://bugs.gentoo.org/show_bug.cgi?id=421571</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76407" source="XF">revelation-passwordlength-weak-security(76407)</ref>
-      <ref url="http://www.securityfocus.com/bid/54060" source="BID">54060</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/18/3" source="MLIST">[oss-security] 20120618 Re: CVE Request -- Revelation: 1) Limits effective password length to 32 characters 2) Doesn't iterate the passphrase through SHA algorithm to derive the encryption key</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/18/1" source="MLIST">[oss-security] 20120618 CVE Request -- Revelation: 1) Limits effective password length to 32 characters 2) Doesn't iterate the passphrase through SHA algorithm to derive the encryption key</ref>
-      <ref url="http://oss.codepoet.no/revelation/issue/61/file-format-magic-string-version-mismatch" source="CONFIRM">http://oss.codepoet.no/revelation/issue/61/file-format-magic-string-version-mismatch</ref>
-      <ref url="http://knoxin.blogspot.co.uk/2012/06/revelation-password-manager-considered.html" source="MISC">http://knoxin.blogspot.co.uk/2012/06/revelation-password-manager-considered.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mikel_olasagasti" name="revelation">
-        <vers num="0.1.0" />
-        <vers num="0.1.1" />
-        <vers num="0.1.2" />
-        <vers num="0.2.0" />
-        <vers num="0.2.1" />
-        <vers num="0.3.0" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.1" />
-        <vers num="0.4.10" />
-        <vers num="0.4.11" />
-        <vers num="0.4.12" />
-        <vers prev="1" num="0.4.13-2" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2743" published="2012-06-27" name="CVE-2012-2743" modified="2012-06-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugs.gentoo.org/show_bug.cgi?id=421571" source="MISC">https://bugs.gentoo.org/show_bug.cgi?id=421571</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76408" source="XF">revelation-sha-weak-security(76408)</ref>
-      <ref url="http://www.securityfocus.com/bid/54060" source="BID">54060</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/18/3" source="MLIST">[oss-security] 20120618 Re: CVE Request -- Revelation: 1) Limits effective password length to 32 characters 2) Doesn't iterate the passphrase through SHA algorithm to derive the encryption key</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/18/1" source="MLIST">[oss-security] 20120618 CVE Request -- Revelation: 1) Limits effective password length to 32 characters 2) Doesn't iterate the passphrase through SHA algorithm to derive the encryption key</ref>
-      <ref url="http://oss.codepoet.no/revelation/issue/61/file-format-magic-string-version-mismatch" source="CONFIRM">http://oss.codepoet.no/revelation/issue/61/file-format-magic-string-version-mismatch</ref>
-      <ref url="http://knoxin.blogspot.co.uk/2012/06/revelation-password-manager-considered.html" source="MISC">http://knoxin.blogspot.co.uk/2012/06/revelation-password-manager-considered.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mikel_olasagasti" name="revelation">
-        <vers num="0.1.0" />
-        <vers num="0.1.1" />
-        <vers num="0.1.2" />
-        <vers num="0.2.0" />
-        <vers num="0.2.1" />
-        <vers num="0.3.0" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.1" />
-        <vers num="0.4.10" />
-        <vers num="0.4.11" />
-        <vers num="0.4.12" />
-        <vers prev="1" num="0.4.13-2" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2744" published="2012-08-09" name="CVE-2012-2744" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">net/ipv6/netfilter/nf_conntrack_reasm.c in the Linux kernel before 2.6.34, when the nf_conntrack_ipv6 module is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via certain types of fragmented IPv6 packets.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/476.html
-
-'CWE-476: NULL Pointer Dereference'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/9e2dcf72023d1447f09c47d77c99b0c49659e5ce" source="CONFIRM" patch="1">https://github.com/torvalds/linux/commit/9e2dcf72023d1447f09c47d77c99b0c49659e5ce</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=833402" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=833402</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1148.html" source="REDHAT">RHSA-2012:1148</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1064.html" source="REDHAT">RHSA-2012:1064</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=9e2dcf72023d1447f09c47d77c99b0c49659e5ce" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=9e2dcf72023d1447f09c47d77c99b0c49659e5ce</ref>
-      <ref url="http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34" source="CONFIRM">http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="2.6.33" />
-        <vers num="2.6.33.1" />
-        <vers num="2.6.33.10" />
-        <vers num="2.6.33.11" />
-        <vers num="2.6.33.12" />
-        <vers num="2.6.33.13" />
-        <vers num="2.6.33.14" />
-        <vers num="2.6.33.15" />
-        <vers num="2.6.33.16" />
-        <vers num="2.6.33.17" />
-        <vers num="2.6.33.18" />
-        <vers num="2.6.33.19" />
-        <vers num="2.6.33.2" />
-        <vers prev="1" num="2.6.33.20" />
-        <vers num="2.6.33.3" />
-        <vers num="2.6.33.4" />
-        <vers num="2.6.33.5" />
-        <vers num="2.6.33.6" />
-        <vers num="2.6.33.7" />
-        <vers num="2.6.33.8" />
-        <vers num="2.6.33.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2745" published="2012-08-09" name="CVE-2012-2745" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:N/I:N/A:C)" CVSS_score="4.7" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.4" CVSS_base_score="4.7">
-    <desc>
-      <descript source="cve">The copy_creds function in kernel/cred.c in the Linux kernel before 3.3.2 provides an invalid replacement session keyring to a child process, which allows local users to cause a denial of service (panic) via a crafted application that uses the fork system call.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/torvalds/linux/commit/79549c6dfda0603dba9a70a53467ce62d9335c33" source="CONFIRM" patch="1">https://github.com/torvalds/linux/commit/79549c6dfda0603dba9a70a53467ce62d9335c33</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=833428" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=833428</ref>
-      <ref url="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.2" source="CONFIRM">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.2</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1064.html" source="REDHAT">RHSA-2012:1064</ref>
-      <ref url="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=79549c6dfda0603dba9a70a53467ce62d9335c33" source="CONFIRM">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=79549c6dfda0603dba9a70a53467ce62d9335c33</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="linux" name="linux_kernel">
-        <vers num="3.3" edition="rc1" />
-        <vers num="3.3" edition="rc2" />
-        <vers num="3.3" edition="rc3" />
-        <vers num="3.3" edition="rc4" />
-        <vers num="3.3" edition="rc5" />
-        <vers num="3.3" edition="rc6" />
-        <vers num="3.3" edition="rc7" />
-        <vers prev="1" num="3.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2746" published="2012-07-03" name="CVE-2012-2746" modified="2012-07-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://fedorahosted.org/389/ticket/365" source="CONFIRM" adv="1">https://fedorahosted.org/389/ticket/365</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=833482" source="CONFIRM" adv="1">https://bugzilla.redhat.com/show_bug.cgi?id=833482</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76595" source="XF">389directory-logging-info-disclosure(76595)</ref>
-      <ref url="http://www.securityfocus.com/bid/54153" source="BID">54153</ref>
-      <ref url="http://www.osvdb.org/83329" source="OSVDB">83329</ref>
-      <ref url="http://secunia.com/advisories/49734" source="SECUNIA" adv="1">49734</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1041.html" source="REDHAT" adv="1">RHSA-2012:1041</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-0997.html" source="REDHAT" adv="1">RHSA-2012:0997</ref>
-      <ref url="http://directory.fedoraproject.org/wiki/Release_Notes" source="CONFIRM" adv="1">http://directory.fedoraproject.org/wiki/Release_Notes</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="fedoraproject" name="389_directory_server">
-        <vers num="1.2.1" />
-        <vers num="1.2.10" edition="alpha8" />
-        <vers num="1.2.10" edition="rc1" />
-        <vers num="1.2.10.1" />
-        <vers num="1.2.10.2" />
-        <vers num="1.2.10.3" />
-        <vers num="1.2.10.4" />
-        <vers num="1.2.10.7" />
-        <vers num="1.2.11.1" />
-        <vers prev="1" num="1.2.11.5" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.5" edition="rc1" />
-        <vers num="1.2.5" edition="rc2" />
-        <vers num="1.2.5" edition="rc3" />
-        <vers num="1.2.5" edition="rc4" />
-        <vers num="1.2.6" edition="a2" />
-        <vers num="1.2.6" edition="a3" />
-        <vers num="1.2.6" edition="a4" />
-        <vers num="1.2.6" edition="rc1" />
-        <vers num="1.2.6" edition="rc2" />
-        <vers num="1.2.6" edition="rc3" />
-        <vers num="1.2.6" edition="rc6" />
-        <vers num="1.2.6" edition="rc7" />
-        <vers num="1.2.6.1" />
-        <vers num="1.2.7" edition="alpha3" />
-        <vers num="1.2.7.5" />
-        <vers num="1.2.8" edition="alpha1" />
-        <vers num="1.2.8" edition="alpha2" />
-        <vers num="1.2.8" edition="alpha3" />
-        <vers num="1.2.8" edition="rc1" />
-        <vers num="1.2.8" edition="rc2" />
-        <vers num="1.2.8.1" />
-        <vers num="1.2.8.2" />
-        <vers num="1.2.8.3" />
-        <vers num="1.2.9.9" />
-      </prod>
-      <prod vendor="redhat" name="directory_server">
-        <vers num="7.1" />
-        <vers num="8.0" />
-        <vers num="8.1" />
-        <vers prev="1" num="8.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2747" published="2012-07-03" name="CVE-2012-2747" modified="2012-07-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to gain privileges via unknown attack vectors related to "Inadequate checking."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76415" source="XF">joomla-unspecified-security-bypass(76415)</ref>
-      <ref url="http://www.securityfocus.com/bid/54073" source="BID">54073</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/19/2" source="MLIST">[oss-security] 20120619 Re: Joomla! Security News 2012-06-19</ref>
-      <ref url="http://www.joomla.org/announcements/release-news/5427-joomla-255-released.html" source="CONFIRM" adv="1">http://www.joomla.org/announcements/release-news/5427-joomla-255-released.html</ref>
-      <ref url="http://secunia.com/advisories/49605" source="SECUNIA">49605</ref>
-      <ref url="http://osvdb.org/83070" source="OSVDB">83070</ref>
-      <ref url="http://developer.joomla.org/security/news/470-20120601-core-privilege-escalation" source="CONFIRM">http://developer.joomla.org/security/news/470-20120601-core-privilege-escalation</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="joomla" name="joomla">
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-        <vers num="2.5.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2748" published="2012-07-03" name="CVE-2012-2748" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to obtain sensitive information via vectors related to "Inadequate filtering" and a "SQL error."</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76414" source="XF">joomla-unspecified1-information-disclosure(76414)</ref>
-      <ref url="http://www.securityfocus.com/bid/54073" source="BID">54073</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/19/2" source="MLIST">[oss-security] 20120619 Re: Joomla! Security News 2012-06-19</ref>
-      <ref url="http://www.joomla.org/announcements/release-news/5427-joomla-255-released.html" source="CONFIRM">http://www.joomla.org/announcements/release-news/5427-joomla-255-released.html</ref>
-      <ref url="http://secunia.com/advisories/49605" source="SECUNIA" adv="1">49605</ref>
-      <ref url="http://osvdb.org/83069" source="OSVDB">83069</ref>
-      <ref url="http://developer.joomla.org/security/news/471-20120602-core-information-disclosure" source="CONFIRM">http://developer.joomla.org/security/news/471-20120602-core-information-disclosure</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="joomla" name="joomla!">
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-        <vers num="2.5.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2749" published="2012-08-16" name="CVE-2012-2749" modified="2012-08-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of service (mysqld crash) via vectors related to incorrect calculation and a sort order index.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=833737" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=833737</ref>
-      <ref url="http://dev.mysql.com/doc/refman/5.1/en/news-5-1-63.html" source="CONFIRM">http://dev.mysql.com/doc/refman/5.1/en/news-5-1-63.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.10" />
-        <vers num="5.1.11" />
-        <vers num="5.1.12" />
-        <vers num="5.1.13" />
-        <vers num="5.1.14" />
-        <vers num="5.1.15" />
-        <vers num="5.1.16" />
-        <vers num="5.1.17" />
-        <vers num="5.1.18" />
-        <vers num="5.1.19" />
-        <vers num="5.1.2" />
-        <vers num="5.1.20" />
-        <vers num="5.1.21" />
-        <vers num="5.1.22" />
-        <vers num="5.1.23" edition="a" />
-        <vers num="5.1.23_bk" />
-        <vers num="5.1.23a" />
-        <vers num="5.1.24" />
-        <vers num="5.1.25" />
-        <vers num="5.1.26" />
-        <vers num="5.1.27" />
-        <vers num="5.1.28" />
-        <vers num="5.1.29" />
-        <vers num="5.1.3" />
-        <vers num="5.1.30" />
-        <vers num="5.1.31" edition="sp1" />
-        <vers num="5.1.32" />
-        <vers num="5.1.32-bzr" />
-        <vers num="5.1.33" />
-        <vers num="5.1.34" edition="sp1" />
-        <vers num="5.1.35" />
-        <vers num="5.1.36" />
-        <vers num="5.1.37" edition="sp1" />
-        <vers num="5.1.38" />
-        <vers num="5.1.39" />
-        <vers num="5.1.4" />
-        <vers num="5.1.40" edition="sp1" />
-        <vers num="5.1.41" />
-        <vers num="5.1.42" />
-        <vers num="5.1.43" edition="sp1" />
-        <vers num="5.1.44" />
-        <vers num="5.1.45" />
-        <vers num="5.1.46" edition="sp1" />
-        <vers num="5.1.47" />
-        <vers num="5.1.48" />
-        <vers num="5.1.49" edition="sp1" />
-        <vers num="5.1.5" />
-        <vers num="5.1.50" />
-        <vers num="5.1.5a" />
-        <vers num="5.1.6" />
-        <vers num="5.1.7" />
-        <vers num="5.1.8" />
-        <vers num="5.1.9" />
-        <vers num="5.5.0" />
-        <vers num="5.5.1" />
-        <vers num="5.5.2" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.1.51" />
-        <vers num="5.1.52" edition="sp1" />
-        <vers num="5.1.53" />
-        <vers num="5.1.54" />
-        <vers num="5.1.55" />
-        <vers num="5.1.56" />
-        <vers num="5.1.57" />
-        <vers num="5.1.58" />
-        <vers num="5.1.59" />
-        <vers num="5.1.60" />
-        <vers num="5.1.61" />
-        <vers num="5.1.62" />
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.22" />
-        <vers num="5.5.23" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2750" published="2012-08-16" name="CVE-2012-2750" modified="2012-08-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug #59533. NOTE: this might be a duplicate of CVE-2012-1689, but as of 20120816, Oracle has not commented on this possibility.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=833742" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=833742</ref>
-      <ref url="http://dev.mysql.com/doc/refman/5.5/en/news-5-5-23.html" source="CONFIRM">http://dev.mysql.com/doc/refman/5.5/en/news-5-5-23.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysql" name="mysql">
-        <vers num="5.5.0" />
-        <vers num="5.5.1" />
-        <vers num="5.5.2" />
-        <vers num="5.5.3" />
-        <vers num="5.5.4" />
-        <vers num="5.5.5" />
-        <vers num="5.5.6" />
-        <vers num="5.5.7" />
-        <vers num="5.5.8" />
-        <vers num="5.5.9" />
-      </prod>
-      <prod vendor="oracle" name="mysql">
-        <vers num="5.5.10" />
-        <vers num="5.5.11" />
-        <vers num="5.5.12" />
-        <vers num="5.5.13" />
-        <vers num="5.5.14" />
-        <vers num="5.5.15" />
-        <vers num="5.5.16" />
-        <vers num="5.5.17" />
-        <vers num="5.5.18" />
-        <vers num="5.5.19" />
-        <vers num="5.5.20" />
-        <vers num="5.5.21" />
-        <vers num="5.5.22" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2751" published="2012-07-22" name="CVE-2012-2751" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in the Content-Disposition field of a request with a multipart/form-data Content-Type header, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-5031.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/trunk/CHANGES?r1=1920&amp;r2=1919&amp;pathrev=1920" source="CONFIRM" patch="1">http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/trunk/CHANGES?r1=1920&amp;r2=1919&amp;pathrev=1920</ref>
-      <ref url="http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/trunk/apache2/msc_multipart.c?r1=1918&amp;r2=1917&amp;pathrev=1918" source="CONFIRM" patch="1">http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/trunk/apache2/msc_multipart.c?r1=1918&amp;r2=1917&amp;pathrev=1918</ref>
-      <ref url="http://www.securityfocus.com/bid/54156" source="BID">54156</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/22/2" source="MLIST">[oss-security] 20120621 Re: mod_security CVE request</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/22/1" source="MLIST">[oss-security] 20120621 mod_security CVE request</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:118" source="MANDRIVA">MDVSA-2012:118</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2506" source="DEBIAN">DSA-2506</ref>
-      <ref url="http://secunia.com/advisories/49782" source="SECUNIA" adv="1">49782</ref>
-      <ref url="http://secunia.com/advisories/49576" source="SECUNIA" adv="1">49576</ref>
-      <ref url="http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/branches/2.6.x/CHANGES" source="CONFIRM">http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/branches/2.6.x/CHANGES</ref>
-      <ref url="http://blog.ivanristic.com/2012/06/modsecurity-and-modsecurity-core-rule-set-multipart-bypasses.html" source="MISC">http://blog.ivanristic.com/2012/06/modsecurity-and-modsecurity-core-rule-set-multipart-bypasses.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="modsecurity" name="modsecurity">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.10" />
-        <vers num="2.5.11" />
-        <vers num="2.5.12" />
-        <vers num="2.5.13" edition="dev1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-        <vers num="2.5.4" />
-        <vers num="2.5.5" />
-        <vers num="2.5.6" />
-        <vers num="2.5.7" />
-        <vers num="2.5.8" />
-        <vers num="2.5.9" />
-        <vers num="2.6.0" edition="rc1" />
-        <vers num="2.6.1" edition="rc1" />
-        <vers num="2.6.2" edition="rc1" />
-        <vers num="2.6.3" edition="rc1" />
-        <vers num="2.6.4" edition="rc1" />
-        <vers prev="1" num="2.6.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2752" published="2012-06-01" name="CVE-2012-2752" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the current working directory.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/lists/426.html 'Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75891" source="XF">vmware-vma-unspec-priv-esc(75891)</ref>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0010.html" source="CONFIRM" adv="1">http://www.vmware.com/security/advisories/VMSA-2012-0010.html</ref>
-      <ref url="http://www.securitytracker.com/id?1027099" source="SECTRACK">1027099</ref>
-      <ref url="http://www.securityfocus.com/bid/53697" source="BID">53697</ref>
-      <ref url="http://secunia.com/advisories/49322" source="SECUNIA">49322</ref>
-      <ref url="http://secunia.com/advisories/49300" source="SECUNIA">49300</ref>
-      <ref url="http://osvdb.org/82276" source="OSVDB">82276</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="vma">
-        <vers num="4.0" />
-        <vers num="4.1" />
-        <vers num="5.0.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2753" published="2012-06-19" name="CVE-2012-2753" modified="2012-06-26" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint Connect R73.x, and Remote Access Clients E75.x allows local users to gain privileges via a Trojan horse DLL in the current working directory.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk76480" source="CONFIRM" patch="1" adv="1">https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk76480</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-06/0069.html" source="BUGTRAQ">20120613 Security Advisory - Checkpoint Endpoint Connect VPN - DLL Hijack</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="checkpoint" name="endpoint_connect">
-        <vers num="r73" />
-      </prod>
-      <prod vendor="checkpoint" name="endpoint_security">
-        <vers num="e80" edition="-" />
-        <vers num="e80" edition="-:vpn_blade" />
-        <vers num="e80.10" edition="-" />
-        <vers num="e80.10" edition="-:vpn_blade" />
-        <vers num="e80.20" edition="-" />
-        <vers num="e80.20" edition="-:vpn_blade" />
-        <vers num="e80.30" edition="-" />
-        <vers num="e80.30" edition="-:vpn_blade" />
-        <vers num="r73" />
-      </prod>
-      <prod vendor="checkpoint" name="endpoint_security_vpn">
-        <vers num="r75" />
-      </prod>
-      <prod vendor="checkpoint" name="remote_access_clients">
-        <vers num="e75" />
-        <vers num="e75.10" />
-        <vers num="e75.20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2759" published="2012-05-22" name="CVE-2012-2759" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in login-with-ajax.php in the Login With Ajax (aka login-with-ajax) plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter in a lostpassword action to wp-login.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75470" source="XF">loginwithajax-loginwithajax-xss(75470)</ref>
-      <ref url="http://www.securityfocus.com/bid/53423" source="BID">53423</ref>
-      <ref url="http://www.secureworks.com/research/advisories/SWRX-2012-003/" source="MISC">http://www.secureworks.com/research/advisories/SWRX-2012-003/</ref>
-      <ref url="http://wordpress.org/extend/plugins/login-with-ajax/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/login-with-ajax/changelog/</ref>
-      <ref url="http://plugins.trac.wordpress.org/changeset/541069" source="CONFIRM">http://plugins.trac.wordpress.org/changeset/541069</ref>
-      <ref url="http://osvdb.org/81712" source="OSVDB">81712</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netweblogic" name="login_with_ajax">
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.2" />
-        <vers num="2.21" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers prev="1" num="3.0.4" />
-        <vers num="3.0b" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2760" published="2012-07-25" name="CVE-2012-2760" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">mod_auth_openid before 0.7 for Apache uses world-readable permissions for /tmp/mod_auth_openid.db, which allows local users to obtain session ids.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/bmuller/mod_auth_openid/pull/30" source="MISC">https://github.com/bmuller/mod_auth_openid/pull/30</ref>
-      <ref url="https://github.com/bmuller/mod_auth_openid/blob/master/ChangeLog" source="CONFIRM">https://github.com/bmuller/mod_auth_openid/blob/master/ChangeLog</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75813" source="XF">modauthopenid-database-info-disclosure(75813)</ref>
-      <ref url="http://www.securityfocus.com/bid/53661" source="BID">53661</ref>
-      <ref url="http://www.osvdb.org/82139" source="OSVDB">82139</ref>
-      <ref url="http://www.exploit-db.com/exploits/18917" source="EXPLOIT-DB">18917</ref>
-      <ref url="http://secunia.com/advisories/49247" source="SECUNIA" adv="1">49247</ref>
-      <ref url="http://packetstormsecurity.org/files/112991/Mod_Auth_OpenID-Session-Stealing.html" source="MISC">http://packetstormsecurity.org/files/112991/Mod_Auth_OpenID-Session-Stealing.html</ref>
-      <ref url="http://archives.neohapsis.com/archives/fulldisclosure/2012-05/0235.html" source="FULLDISC">20120522 session stealing in mod_auth_openid - CVE-2012-2760</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="findingscience" name="mod_auth_openid">
-        <vers num="0.1" edition="" />
-        <vers num="0.1" edition=":~~~apache~~" />
-        <vers num="0.2" edition="" />
-        <vers num="0.2" edition=":~~~apache~~" />
-        <vers num="0.2.1" edition="" />
-        <vers num="0.2.1" edition=":~~~apache~~" />
-        <vers num="0.3" edition="" />
-        <vers num="0.3" edition=":~~~apache~~" />
-        <vers num="0.4" edition="" />
-        <vers num="0.4" edition=":~~~apache~~" />
-        <vers num="0.5" edition="" />
-        <vers num="0.5" edition=":~~~apache~~" />
-        <vers prev="1" num="0.6" edition="" />
-        <vers prev="1" num="0.6" edition=":~~~apache~~" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2762" published="2012-06-07" name="CVE-2012-2762" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows remote attackers to execute arbitrary SQL commands via the url parameter to comment.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23092" source="MISC">https://www.htbridge.com/advisory/HTB23092</ref>
-      <ref url="https://github.com/s9y/Serendipity/commit/87153991d06bc18fe4af05f97810487c4a340a92#diff-1" source="CONFIRM">https://github.com/s9y/Serendipity/commit/87153991d06bc18fe4af05f97810487c4a340a92#diff-1</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75760" source="XF">serendipity-trackbacksinc-sql-injection(75760)</ref>
-      <ref url="http://www.securitytracker.com/id?1027079" source="SECTRACK">1027079</ref>
-      <ref url="http://www.securityfocus.com/bid/53620" source="BID">53620</ref>
-      <ref url="http://www.osvdb.org/82036" source="OSVDB">82036</ref>
-      <ref url="http://secunia.com/advisories/49234" source="SECUNIA" adv="1">49234</ref>
-      <ref url="http://blog.s9y.org/archives/241-Serendipity-1.6.2-released.html" source="CONFIRM" adv="1">http://blog.s9y.org/archives/241-Serendipity-1.6.2-released.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="s9y" name="serendipity">
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.8" />
-        <vers num="0.8.1" />
-        <vers num="0.8.2" />
-        <vers num="0.8.3" />
-        <vers num="0.8.4" />
-        <vers num="0.8.5" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.3" />
-        <vers num="1.3.1" />
-        <vers num="1.4" />
-        <vers num="1.4.1" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.6" />
-        <vers prev="1" num="1.6.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2763" published="2012-07-12" name="CVE-2012-2763" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrary code via a long string in a command to the script-fu server.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.gnome.org/browse/gimp/commit/?h=gimp-2-6&amp;id=744f7a4a2b5acb8b531a6f5dd8744ebb95348fc2" source="CONFIRM" patch="1">http://git.gnome.org/browse/gimp/commit/?h=gimp-2-6&amp;id=744f7a4a2b5acb8b531a6f5dd8744ebb95348fc2</ref>
-      <ref url="https://bugzilla.gnome.org/show_bug.cgi?id=679215" source="CONFIRM">https://bugzilla.gnome.org/show_bug.cgi?id=679215</ref>
-      <ref url="http://www.reactionpenetrationtesting.co.uk/advisories/scriptfu-buffer-overflow-GIMP-2.6.html" source="MISC">http://www.reactionpenetrationtesting.co.uk/advisories/scriptfu-buffer-overflow-GIMP-2.6.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/01/1" source="MLIST">[oss-security] 20120630 Re: ScriptFu Server Buffer Overflow in GIMP &lt;= 2.6</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/31/1" source="MLIST">[oss-security] 20120530 ScriptFu Server Buffer Overflow in GIMP &lt;= 2.6</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00000.html" source="SUSE">openSUSE-SU-2012:1080</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gimp" name="gimp">
-        <vers num="2.2" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.6.1" />
-        <vers num="2.6.11" />
-        <vers prev="1" num="2.6.12" />
-        <vers num="2.6.13" />
-        <vers num="2.6.6" />
-        <vers num="2.6.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2764" published="2012-06-27" name="CVE-2012-2764" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in Google Chrome before 20.0.1132.43 on Windows might allow local users to gain privileges via a Trojan horse Metro DLL in the current working directory.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15375" source="OVAL">oval:org.mitre.oval:def:15375</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=130276" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=130276</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2768" published="2012-08-15" name="CVE-2012-2768" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Practical Solutions RT allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html" source="MLIST" patch="1" adv="1">[rt-announce] 20120725 Security vulnerabilities in three commonly deployed RT extensions</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77212" source="XF">rtfm-unspec-xss(77212)</ref>
-      <ref url="http://www.securityfocus.com/bid/54689" source="BID">54689</ref>
-      <ref url="http://secunia.com/advisories/50024" source="SECUNIA" adv="1">50024</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="best_practical_solutions" name="request_tracker">
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.15" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.4.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2769" published="2012-08-15" name="CVE-2012-2769" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the Extension::MobileUI extension before 1.02 for Best Practical Solutions RT 3.8.x and in Best Practical Solutions RT before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html" source="MLIST" patch="1" adv="1">[rt-announce] 20120725 Security vulnerabilities in three commonly deployed RT extensions</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77211" source="XF">extensionmobileui-unspec-xs(77211)</ref>
-      <ref url="http://www.securityfocus.com/bid/54684" source="BID">54684</ref>
-      <ref url="http://secunia.com/advisories/50010" source="SECUNIA" adv="1">50010</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="jesse_vincent" name="extension::mobileui">
-        <vers prev="1" num="1.01" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2770" published="2012-08-15" name="CVE-2012-2770" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html" source="MLIST" patch="1" adv="1">[rt-announce] 20120725 Security vulnerabilities in three commonly deployed RT extensions</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77213" source="XF">authenexternalauth-url-sec-bypass(77213)</ref>
-      <ref url="http://www.securityfocus.com/bid/54681" source="BID">54681</ref>
-      <ref url="http://secunia.com/advisories/50060" source="SECUNIA" adv="1">50060</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mike_peachey" name="authen::externalauth">
-        <vers num="0.05" />
-        <vers prev="1" num="0.08" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2772" published="2012-09-10" name="CVE-2012-2772" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the ff_rv34_decode_frame function in libavcodec/rv34.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to "width/height changing with frame threading."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=cb7190cd2c691fd93e4d3664f3fce6c19ee001dd" source="CONFIRM" patch="1">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=cb7190cd2c691fd93e4d3664f3fce6c19ee001dd</ref>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2774" published="2012-09-10" name="CVE-2012-2774" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The ff_MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors, relate to starting "a frame outside SETUP state."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=59a4b73531428d2f420b4dad545172c8483ced0f" source="CONFIRM" patch="1">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=59a4b73531428d2f420b4dad545172c8483ced0f</ref>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2775" published="2012-09-10" name="CVE-2012-2775" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to a large order and an "out of array write in quant_cof."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=9d3032b960ae03066c008d6e6774f68b17a1d69d" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=9d3032b960ae03066c008d6e6774f68b17a1d69d</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2776" published="2012-09-10" name="CVE-2012-2776" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to an "out of picture write."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=ba775a54bc2136ec5da85385a923b05ee6fab159" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=ba775a54bc2136ec5da85385a923b05ee6fab159</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers prev="1" num="0.10.3" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2777" published="2012-09-10" name="CVE-2012-2777" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to "width/height changing in CAVS," a different vulnerability than CVE-2012-2784.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=25715064c2ef4978672a91f8c856f3e8809a7c459" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=25715064c2ef4978672a91f8c856f3e8809a7c459</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers prev="1" num="0.10.3" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2779" published="2012-09-10" name="CVE-2012-2779" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to an invalid "gop header" and decoding in a "half initialized context."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=229e4c133287955d5f3f837520a3602709b21950" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=229e4c133287955d5f3f837520a3602709b21950</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers prev="1" num="0.10.3" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2782" published="2012-09-10" name="CVE-2012-2782" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the decode_slice_header function in libavcodec/h264.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to a "rejected resolution change."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=9a57a37b7041581c10629c8241260a5d7bfbc1e7" source="CONFIRM" patch="1">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=9a57a37b7041581c10629c8241260a5d7bfbc1e7</ref>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2783" published="2012-09-10" name="CVE-2012-2783" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in libavcodec/vp56.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to "freeing the returned frame."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=d85b3c4fff4c4b255232fcc01edbd57f19d60998" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=d85b3c4fff4c4b255232fcc01edbd57f19d60998</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers prev="1" num="0.10.3" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2784" published="2012-09-10" name="CVE-2012-2784" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to "width/height changing in CAVS," a different vulnerability than CVE-2012-2777.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=25715064c2ef4978672a91f8c856f3e8809a7c45" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=25715064c2ef4978672a91f8c856f3e8809a7c45</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2785" published="2012-09-10" name="CVE-2012-2785" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors, related to (1) "some subframes only encode some channels" or (2) a large order value.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=d462949974668ffb013467d12dc4934b9106fe19" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=d462949974668ffb013467d12dc4934b9106fe19</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=326f7a68bbd429c63fd2f19f4050658982b5b081" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=326f7a68bbd429c63fd2f19f4050658982b5b081</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2786" published="2012-09-10" name="CVE-2012-2786" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the decode_wdlt function in libavcodec/dfa.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to an "out of array write."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=d1c95d2ce39560e251fdb14f4af91b04fd7b845c" source="CONFIRM" patch="1">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=d1c95d2ce39560e251fdb14f4af91b04fd7b845c</ref>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2787" published="2012-09-10" name="CVE-2012-2787" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the decode_frame function in libavcodec/indeo4.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the "setup width/height."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=01bf2ad7351fdaa2e21b6bdf963d22d6ffccb920" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=01bf2ad7351fdaa2e21b6bdf963d22d6ffccb920</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2788" published="2012-09-10" name="CVE-2012-2788" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to an "out of array read" when a "packet is shrunk."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=c41ac870470c614185e1752c11f892809022248a" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=c41ac870470c614185e1752c11f892809022248a</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2789" published="2012-09-10" name="CVE-2012-2789" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to a large number of vector coded coefficients (num_vec_coeffs).</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=97a5addfcf0029d0f5538ed70cb38cae4108a618" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=97a5addfcf0029d0f5538ed70cb38cae4108a618</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2790" published="2012-09-10" name="CVE-2012-2790" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the "number of decoded samples in first sub-block in BGMC mode."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=2837d8dc276760db1821b81df3f794a90bfa56e6" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=2837d8dc276760db1821b81df3f794a90bfa56e6</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2791" published="2012-09-10" name="CVE-2012-2791" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2) ff_ivi_decode_blocks function in ivi_common.c in libavcodec/ in FFmpeg before 0.11 have unknown impact and attack vectors, related to the "transform size."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=0846719dd11ab3f7a7caee13e7af71f71d913389" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=0846719dd11ab3f7a7caee13e7af71f71d913389</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2792" published="2012-09-10" name="CVE-2012-2792" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the decode_init function in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the samples per frame.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=d442c4462a2692e27a24e1a9d0eb6f18725c7bd8" source="CONFIRM" patch="1">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=d442c4462a2692e27a24e1a9d0eb6f18725c7bd8</ref>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2793" published="2012-09-10" name="CVE-2012-2793" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the lag_decode_zero_run_line function in libavcodec/lagarith.c in FFmpeg before 0.11 has unknown impact and attack vectors related to "too many zeros."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=83c7803f55b3231faeb93c1a634399a70fae9480" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=83c7803f55b3231faeb93c1a634399a70fae9480</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2794" published="2012-09-10" name="CVE-2012-2794" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the decode_mb_info function in libavcodec/indeo5.c in FFmpeg before 0.11 has unknown impact and attack vectors in which the "allocated tile size ... mismatches parameters."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=5ad7335ebac2b38bb2a1c8df51a500b78461c05a" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=5ad7335ebac2b38bb2a1c8df51a500b78461c05a</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2795" published="2012-09-10" name="CVE-2012-2795" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors related to (1) size of "mclms arrays," (2) "a get_bits(0) in decode_ac_filter," and (3) "too many bits in decode_channel_residues()."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=b3a43515827f3d22a881c33b87384f01c86786fd" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=b3a43515827f3d22a881c33b87384f01c86786fd</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=a0abefb0af64a311b15141062c77dd577ba590a3" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=a0abefb0af64a311b15141062c77dd577ba590a3</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=2a7063de547b1d8fb1cef523469390fb59fb2c50" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=2a7063de547b1d8fb1cef523469390fb59fb2c50</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2796" published="2012-09-10" name="CVE-2012-2796" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the vc1_decode_frame function in libavcodec/vc1dec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to inconsistencies in "coded slice positions and interlacing" that trigger "out of array writes."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=5e59a77cec804a9b44c60ea22c17beba6453ef23" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=5e59a77cec804a9b44c60ea22c17beba6453ef23</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2797" published="2012-09-10" name="CVE-2012-2797" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the decode_frame_mp3on4 function in libavcodec/mpegaudiodec.c in FFmpeg before 0.11 has unknown impact and attack vectors related to a calculation that prevents a frame from being "large enough."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=cca9528524c7a4b91451f4322bd50849af5d057e" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=cca9528524c7a4b91451f4322bd50849af5d057e</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2798" published="2012-09-10" name="CVE-2012-2798" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to an "out of array write."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=72b9537d8886f679494651df517dfed9b420cf1f" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=72b9537d8886f679494651df517dfed9b420cf1f</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2799" published="2012-09-10" name="CVE-2012-2799" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the "put bit buffer when num_saved_bits is reset."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=64bd7f8e4db1742e86c5ed02bd530688b74063e3" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=64bd7f8e4db1742e86c5ed02bd530688b74063e3</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2800" published="2012-09-10" name="CVE-2012-2800" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the ff_ivi_process_empty_tile function in libavcodec/ivi_common.c in FFmpeg before 0.11 has unknown impact and attack vectors in which the "tile size ... mismatches parameters" and triggers "writing into a too small array."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=f0bf9e9c2a65e9a2b9d9e4e94f99acb191dc7ae7" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=f0bf9e9c2a65e9a2b9d9e4e94f99acb191dc7ae7</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2801" published="2012-09-10" name="CVE-2012-2801" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to dimensions and "out of array writes."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=1df49142bab1b7bccd11392aa9e819e297d21a6e" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=1df49142bab1b7bccd11392aa9e819e297d21a6e</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2802" published="2012-09-10" name="CVE-2012-2802" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the "number of output channels" and "out of array writes."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=2c22701c371c2f3dea21fcdbb97c981939fb77af" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=2c22701c371c2f3dea21fcdbb97c981939fb77af</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2803" published="2012-09-10" name="CVE-2012-2803" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to resetting the data size value.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=951cbea56fdc03ef96d07fbd7e5bed755d42ac8a" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=951cbea56fdc03ef96d07fbd7e5bed755d42ac8a</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2804" published="2012-09-10" name="CVE-2012-2804" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in libavcodec/indeo3.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to "reallocation code" and the luma height and width.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55355" source="BID">55355</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/4" source="MLIST">[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/3" source="MLIST">[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?</ref>
-      <ref url="http://secunia.com/advisories/50468" source="SECUNIA" adv="1">50468</ref>
-      <ref url="http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=4a80ebe491609e04110a1dd540a0ca79d3be3d04" source="CONFIRM">http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=4a80ebe491609e04110a1dd540a0ca79d3be3d04</ref>
-      <ref url="http://ffmpeg.org/security.html" source="CONFIRM">http://ffmpeg.org/security.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ffmpeg" name="ffmpeg">
-        <vers num="0.10" />
-        <vers num="0.10.3" />
-        <vers prev="1" num="0.10.4" />
-        <vers num="0.3" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" edition="pre1" />
-        <vers num="0.4.9_pre1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.4.5" />
-        <vers num="0.5.4.6" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.5" />
-        <vers num="0.7.6" />
-        <vers num="0.7.7" />
-        <vers num="0.7.8" />
-        <vers num="0.7.9" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.11" />
-        <vers num="0.8.2" />
-        <vers num="0.8.5" />
-        <vers num="0.8.5.3" />
-        <vers num="0.8.5.4" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2806" published="2012-08-13" name="CVE-2012-2806" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the get_sos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large component count in the header of a JPEG image.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=826849" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=826849</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=759802" source="MISC">https://bugzilla.mozilla.org/show_bug.cgi?id=759802</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76952" source="XF">libjpegturbo-getsos-bo(76952)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/17/3" source="MLIST">[oss-security] 20120717 libjpeg-turbo: Heap-based buffer overflow when decompressing corrupt JPEG images</ref>
-      <ref url="http://secunia.com/advisories/49883" source="SECUNIA" adv="1">49883</ref>
-      <ref url="http://osvdb.org/84040" source="OSVDB">84040</ref>
-      <ref url="http://libjpeg-turbo.svn.sourceforge.net/viewvc/libjpeg-turbo?view=revision&amp;revision=830" source="CONFIRM">http://libjpeg-turbo.svn.sourceforge.net/viewvc/libjpeg-turbo?view=revision&amp;revision=830</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="d.r.commander" name="libjpeg-turbo">
-        <vers num="1.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2807" published="2012-06-27" name="CVE-2012-2807" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15375990" source="SUSE">openSUSE-SU-2012:0975</ref>
-      <ref url="https://hermes.opensuse.org/messages/15075728" source="SUSE">openSUSE-SU-2012:0813</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2521" source="DEBIAN">DSA-2521</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=129930" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=129930</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2812" published="2012-07-13" name="CVE-2012-2812" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.ubuntu.com/usn/USN-1513-1" source="UBUNTU">USN-1513-1</ref>
-      <ref url="http://sourceforge.net/mailarchive/message.php?msg_id=29534027" source="MLIST" adv="1">[libexif-devel] 20120712 libexif project security advisory July 12, 2012</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE">SUSE-SU-2012:0903</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE">SUSE-SU-2012:0902</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="curtis_galloway" name="libexif">
-        <vers num="0.6.14" />
-        <vers num="0.6.15" />
-        <vers num="0.6.16" />
-        <vers num="0.6.18" />
-        <vers num="0.6.19" />
-        <vers prev="1" num="0.6.20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2813" published="2012-07-13" name="CVE-2012-2813" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.ubuntu.com/usn/USN-1513-1" source="UBUNTU">USN-1513-1</ref>
-      <ref url="http://sourceforge.net/mailarchive/message.php?msg_id=29534027" source="MLIST" adv="1">[libexif-devel] 20120712 libexif project security advisory July 12, 2012</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE">SUSE-SU-2012:0903</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="curtis_galloway" name="libexif">
-        <vers num="0.6.14" />
-        <vers num="0.6.15" />
-        <vers num="0.6.16" />
-        <vers num="0.6.18" />
-        <vers num="0.6.19" />
-        <vers prev="1" num="0.6.20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2814" published="2012-07-13" name="CVE-2012-2814" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.ubuntu.com/usn/USN-1513-1" source="UBUNTU">USN-1513-1</ref>
-      <ref url="http://sourceforge.net/mailarchive/message.php?msg_id=29534027" source="MLIST" adv="1">[libexif-devel] 20120712 libexif project security advisory July 12, 2012</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE">SUSE-SU-2012:0903</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE">SUSE-SU-2012:0902</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="curtis_galloway" name="libexif">
-        <vers num="0.6.20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2815" published="2012-06-27" name="CVE-2012-2815" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Google Chrome before 20.0.1132.43 allows remote attackers to obtain potentially sensitive information from a fragment identifier by leveraging access to an IFRAME element associated with a different domain.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15075728" source="SUSE">openSUSE-SU-2012:0813</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15662" source="OVAL">oval:org.mitre.oval:def:15662</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE">APPLE-SA-2012-07-25-1</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=118633" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=118633</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2816" published="2012-06-27" name="CVE-2012-2816" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Google Chrome before 20.0.1132.43 on Windows does not properly isolate sandboxed processes, which might allow remote attackers to cause a denial of service (process interference) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15075728" source="SUSE">openSUSE-SU-2012:0813</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15591" source="OVAL">oval:org.mitre.oval:def:15591</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=119250" source="CONFIRM" adv="1">http://code.google.com/p/chromium/issues/detail?id=119250</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=119150" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=119150</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2817" published="2012-06-27" name="CVE-2012-2817" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to tables that have sections.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15075728" source="SUSE">openSUSE-SU-2012:0813</ref>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15264" source="OVAL">oval:org.mitre.oval:def:15264</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=120222" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=120222</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2818" published="2012-06-27" name="CVE-2012-2818" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the layout of documents that use the Cascading Style Sheets (CSS) counters feature.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15075728" source="SUSE">openSUSE-SU-2012:0813</ref>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14771" source="OVAL">oval:org.mitre.oval:def:14771</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=120944" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=120944</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2819" published="2012-06-27" name="CVE-2012-2819" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle uploads to floating-point textures, which allows remote attackers to cause a denial of service (assertion failure and application crash) or possibly have unspecified other impact via a crafted web page, as demonstrated by certain WebGL performance tests, aka rdar problem 11520387.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15075728" source="SUSE">openSUSE-SU-2012:0813</ref>
-      <ref url="https://chromiumcodereview.appspot.com/10444013" source="CONFIRM">https://chromiumcodereview.appspot.com/10444013</ref>
-      <ref url="https://bugs.webkit.org/show_bug.cgi?id=85942" source="CONFIRM">https://bugs.webkit.org/show_bug.cgi?id=85942</ref>
-      <ref url="http://trac.webkit.org/changeset/118410" source="CONFIRM">http://trac.webkit.org/changeset/118410</ref>
-      <ref url="http://trac.webkit.org/changeset/117191" source="CONFIRM">http://trac.webkit.org/changeset/117191</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14938" source="OVAL">oval:org.mitre.oval:def:14938</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=120977" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=120977</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2820" published="2012-06-27" name="CVE-2012-2820" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Google Chrome before 20.0.1132.43 does not properly implement SVG filters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15075728" source="SUSE">openSUSE-SU-2012:0813</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15468" source="OVAL">oval:org.mitre.oval:def:15468</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=121926" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=121926</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2821" published="2012-06-27" name="CVE-2012-2821" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text, which has unspecified impact and remote attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15075728" source="SUSE">openSUSE-SU-2012:0813</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15565" source="OVAL">oval:org.mitre.oval:def:15565</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=122925" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=122925</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2822" published="2012-06-27" name="CVE-2012-2822" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The PDF functionality in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15166" source="OVAL">oval:org.mitre.oval:def:15166</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2823" published="2012-06-27" name="CVE-2012-2823" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG resources.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15075728" source="SUSE">openSUSE-SU-2012:0813</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15204" source="OVAL">oval:org.mitre.oval:def:15204</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=124356" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=124356</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2824" published="2012-06-27" name="CVE-2012-2824" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG painting.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15666" source="OVAL">oval:org.mitre.oval:def:15666</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=125374" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=125374</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2825" published="2012-06-27" name="CVE-2012-2825" modified="2012-07-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15075728" source="SUSE">openSUSE-SU-2012:0813</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=127417" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=127417</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2826" published="2012-06-27" name="CVE-2012-2826" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Google Chrome before 20.0.1132.43 does not properly implement texture conversion, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15075728" source="SUSE">openSUSE-SU-2012:0813</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15511" source="OVAL">oval:org.mitre.oval:def:15511</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=128688" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=128688</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2827" published="2012-06-27" name="CVE-2012-2827" modified="2012-06-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the UI in Google Chrome before 20.0.1132.43 on Mac OS X allows attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=129826" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=129826</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2828" published="2012-06-27" name="CVE-2012-2828" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple integer overflows in the PDF functionality in Google Chrome before 20.0.1132.43 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15287" source="OVAL">oval:org.mitre.oval:def:15287</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=129857" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=129857</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2829" published="2012-06-27" name="CVE-2012-2829" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15075728" source="SUSE">openSUSE-SU-2012:0813</ref>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15144" source="OVAL">oval:org.mitre.oval:def:15144</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=129947" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=129947</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2830" published="2012-06-27" name="CVE-2012-2830" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Google Chrome before 20.0.1132.43 does not properly set array values, which allows remote attackers to cause a denial of service (incorrect pointer use) or possibly have unspecified other impact via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15075728" source="SUSE">openSUSE-SU-2012:0813</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15483" source="OVAL">oval:org.mitre.oval:def:15483</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=129951" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=129951</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2831" published="2012-06-27" name="CVE-2012-2831" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG references.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15075728" source="SUSE">openSUSE-SU-2012:0813</ref>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14708" source="OVAL">oval:org.mitre.oval:def:14708</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=130356" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=130356</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2832" published="2012-06-27" name="CVE-2012-2832" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The image-codec implementation in the PDF functionality in Google Chrome before 20.0.1132.43 does not initialize an unspecified pointer, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15455" source="OVAL">oval:org.mitre.oval:def:15455</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=131553" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=131553</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2833" published="2012-06-27" name="CVE-2012-2833" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Buffer overflow in the JS API in the PDF functionality in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15584" source="OVAL">oval:org.mitre.oval:def:15584</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=132156" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=132156</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2834" published="2012-06-27" name="CVE-2012-2834" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Integer overflow in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted data in the Matroska container format.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15075728" source="SUSE">openSUSE-SU-2012:0813</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15444" source="OVAL">oval:org.mitre.oval:def:15444</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=132779" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=132779</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers prev="1" num="20.0.1132.42" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2836" published="2012-07-13" name="CVE-2012-2836" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.ubuntu.com/usn/USN-1513-1" source="UBUNTU">USN-1513-1</ref>
-      <ref url="http://sourceforge.net/mailarchive/message.php?msg_id=29534027" source="MLIST" adv="1">[libexif-devel] 20120712 libexif project security advisory July 12, 2012</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE">SUSE-SU-2012:0903</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE">SUSE-SU-2012:0902</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="curtis_galloway" name="libexif">
-        <vers num="0.6.14" />
-        <vers num="0.6.15" />
-        <vers num="0.6.16" />
-        <vers num="0.6.18" />
-        <vers num="0.6.19" />
-        <vers prev="1" num="0.6.20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2837" published="2012-07-13" name="CVE-2012-2837" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.ubuntu.com/usn/USN-1513-1" source="UBUNTU">USN-1513-1</ref>
-      <ref url="http://sourceforge.net/mailarchive/message.php?msg_id=29534027" source="MLIST" adv="1">[libexif-devel] 20120712 libexif project security advisory July 12, 2012</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE">SUSE-SU-2012:0903</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE">SUSE-SU-2012:0902</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="curtis_galloway" name="libexif">
-        <vers num="0.6.14" />
-        <vers num="0.6.15" />
-        <vers num="0.6.16" />
-        <vers num="0.6.18" />
-        <vers num="0.6.19" />
-        <vers prev="1" num="0.6.20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2840" published="2012-07-13" name="CVE-2012-2840" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.ubuntu.com/usn/USN-1513-1" source="UBUNTU">USN-1513-1</ref>
-      <ref url="http://sourceforge.net/mailarchive/message.php?msg_id=29534027" source="MLIST" adv="1">[libexif-devel] 20120712 libexif project security advisory July 12, 2012</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE">SUSE-SU-2012:0903</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="curtis_galloway" name="libexif">
-        <vers num="0.6.14" />
-        <vers num="0.6.15" />
-        <vers num="0.6.16" />
-        <vers num="0.6.18" />
-        <vers num="0.6.19" />
-        <vers prev="1" num="0.6.20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2841" published="2012-07-13" name="CVE-2012-2841" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.ubuntu.com/usn/USN-1513-1" source="UBUNTU">USN-1513-1</ref>
-      <ref url="http://sourceforge.net/mailarchive/message.php?msg_id=29534027" source="MLIST" adv="1">[libexif-devel] 20120712 libexif project security advisory July 12, 2012</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE">SUSE-SU-2012:0903</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE">SUSE-SU-2012:0902</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="curtis_galloway" name="libexif">
-        <vers num="0.6.20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2842" published="2012-07-12" name="CVE-2012-2842" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to counter handling.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15664" source="OVAL">oval:org.mitre.oval:def:15664</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-update.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-update.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=129898" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=129898</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers num="20.0.1132.42" />
-        <vers num="20.0.1132.43" />
-        <vers num="20.0.1132.45" />
-        <vers num="20.0.1132.46" />
-        <vers num="20.0.1132.47" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.54" />
-        <vers num="20.0.1132.55" />
-        <vers prev="1" num="20.0.1132.56" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2843" published="2012-07-12" name="CVE-2012-2843" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to layout height tracking.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15569" source="OVAL">oval:org.mitre.oval:def:15569</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-update.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-update.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=130595" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=130595</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers num="20.0.1132.42" />
-        <vers num="20.0.1132.43" />
-        <vers num="20.0.1132.45" />
-        <vers num="20.0.1132.46" />
-        <vers num="20.0.1132.47" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.54" />
-        <vers num="20.0.1132.55" />
-        <vers prev="1" num="20.0.1132.56" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2844" published="2012-07-12" name="CVE-2012-2844" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The PDF functionality in Google Chrome before 20.0.1132.57 does not properly handle JavaScript code, which allows remote attackers to cause a denial of service (incorrect object access) or possibly have unspecified other impact via a crafted document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15039" source="OVAL">oval:org.mitre.oval:def:15039</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-update.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-update.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=133450" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=133450</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers num="20.0.1132.21" />
-        <vers num="20.0.1132.22" />
-        <vers num="20.0.1132.23" />
-        <vers num="20.0.1132.24" />
-        <vers num="20.0.1132.25" />
-        <vers num="20.0.1132.26" />
-        <vers num="20.0.1132.27" />
-        <vers num="20.0.1132.28" />
-        <vers num="20.0.1132.29" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.30" />
-        <vers num="20.0.1132.31" />
-        <vers num="20.0.1132.32" />
-        <vers num="20.0.1132.33" />
-        <vers num="20.0.1132.34" />
-        <vers num="20.0.1132.35" />
-        <vers num="20.0.1132.36" />
-        <vers num="20.0.1132.37" />
-        <vers num="20.0.1132.38" />
-        <vers num="20.0.1132.39" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.40" />
-        <vers num="20.0.1132.41" />
-        <vers num="20.0.1132.42" />
-        <vers num="20.0.1132.43" />
-        <vers num="20.0.1132.45" />
-        <vers num="20.0.1132.46" />
-        <vers num="20.0.1132.47" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.54" />
-        <vers num="20.0.1132.55" />
-        <vers prev="1" num="20.0.1132.56" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2845" published="2012-07-13" name="CVE-2012-2845" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Integer overflow in the jpeg_data_load_data function in jpeg-data.c in libjpeg in exif 0.6.20 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain potentially sensitive information via a crafted JPEG file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:107" source="MANDRIVA">MDVSA-2012:107</ref>
-      <ref url="http://sourceforge.net/mailarchive/message.php?msg_id=29534027" source="MLIST" adv="1">[libexif-devel] 20120712 libexif project security advisory July 12, 2012</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="curtis_galloway" name="exif">
-        <vers num="0.6.20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2846" published="2012-08-06" name="CVE-2012-2846" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Google Chrome before 21.0.1180.57 on Linux does not properly isolate renderer processes, which allows remote attackers to cause a denial of service (cross-process interference) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=125225" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=125225</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers prev="1" num="21.0.1180.56" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2847" published="2012-08-06" name="CVE-2012-2847" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not request user confirmation before continuing a large series of downloads, which allows user-assisted remote attackers to cause a denial of service (resource consumption) via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15735" source="OVAL">oval:org.mitre.oval:def:15735</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=127522" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=127522</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers prev="1" num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers prev="1" num="21.0.1180.59" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2848" published="2012-08-06" name="CVE-2012-2848" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The drag-and-drop implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows user-assisted remote attackers to bypass intended file access restrictions via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15658" source="OVAL">oval:org.mitre.oval:def:15658</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=127525" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=127525</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers prev="1" num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers prev="1" num="21.0.1180.59" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2849" published="2012-08-06" name="CVE-2012-2849" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Off-by-one error in the GIF decoder in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15653" source="OVAL">oval:org.mitre.oval:def:15653</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=128163" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=128163</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers prev="1" num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers prev="1" num="21.0.1180.59" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2850" published="2012-08-06" name="CVE-2012-2850" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allow remote attackers to have an unknown impact via a crafted document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15630" source="OVAL">oval:org.mitre.oval:def:15630</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=132860" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=132860</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=131690" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=131690</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=131621" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=131621</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=131252" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=131252</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=131237" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=131237</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=131068" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=131068</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=130611" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=130611</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=130592" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=130592</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=130251" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=130251</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers prev="1" num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers prev="1" num="21.0.1180.59" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2851" published="2012-08-06" name="CVE-2012-2851" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple integer overflows in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15705" source="OVAL">oval:org.mitre.oval:def:15705</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=132861" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=132861</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=132694" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=132694</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=132585" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=132585</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers prev="1" num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers prev="1" num="21.0.1180.59" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2852" published="2012-08-06" name="CVE-2012-2852" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not properly handle object linkage, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15744" source="OVAL">oval:org.mitre.oval:def:15744</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=134028" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=134028</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers prev="1" num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers prev="1" num="21.0.1180.59" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2853" published="2012-08-06" name="CVE-2012-2853" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The webRequest API in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not properly interact with the Chrome Web Store, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15439" source="OVAL">oval:org.mitre.oval:def:15439</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=134101" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=134101</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers prev="1" num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers prev="1" num="21.0.1180.59" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2854" published="2012-08-06" name="CVE-2012-2854" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to obtain potentially sensitive information about pointer values by leveraging access to a WebUI renderer process.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15698" source="OVAL">oval:org.mitre.oval:def:15698</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=134519" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=134519</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers prev="1" num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers prev="1" num="21.0.1180.59" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2855" published="2012-08-06" name="CVE-2012-2855" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15038" source="OVAL">oval:org.mitre.oval:def:15038</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=134888" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=134888</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers prev="1" num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers prev="1" num="21.0.1180.59" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2856" published="2012-08-06" name="CVE-2012-2856" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15053" source="OVAL">oval:org.mitre.oval:def:15053</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=135264" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=135264</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=134954" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=134954</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers prev="1" num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers prev="1" num="21.0.1180.59" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2857" published="2012-08-06" name="CVE-2012-2857" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the Cascading Style Sheets (CSS) DOM implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15336" source="OVAL">oval:org.mitre.oval:def:15336</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=136235" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=136235</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers prev="1" num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers prev="1" num="21.0.1180.59" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2858" published="2012-08-06" name="CVE-2012-2858" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Buffer overflow in the WebP decoder in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted WebP image.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15679" source="OVAL">oval:org.mitre.oval:def:15679</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=136894" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=136894</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers prev="1" num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers prev="1" num="21.0.1180.59" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2859" published="2012-08-06" name="CVE-2012-2859" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Google Chrome before 21.0.1180.57 on Linux does not properly handle tabs, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=137541" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=137541</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers prev="1" num="21.0.1180.56" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2860" published="2012-08-06" name="CVE-2012-2860" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The date-picker implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15709" source="OVAL">oval:org.mitre.oval:def:15709</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=137671" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=137671</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers prev="1" num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers prev="1" num="21.0.1180.59" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2862" published="2012-08-09" name="CVE-2012-2862" modified="2012-09-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the PDF functionality in Google Chrome before 21.0.1180.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14788" source="OVAL">oval:org.mitre.oval:def:14788</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/08/stable-channel-update.html" source="CONFIRM">http://googlechromereleases.blogspot.com/2012/08/stable-channel-update.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=137957" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=137957</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=137721" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=137721</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=136643" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=136643</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers num="21.0.1180.59" />
-        <vers num="21.0.1180.60" />
-        <vers num="21.0.1180.61" />
-        <vers num="21.0.1180.62" />
-        <vers num="21.0.1180.63" />
-        <vers num="21.0.1180.64" />
-        <vers num="21.0.1180.68" />
-        <vers num="21.0.1180.69" />
-        <vers num="21.0.1180.70" />
-        <vers num="21.0.1180.71" />
-        <vers num="21.0.1180.72" />
-        <vers num="21.0.1180.73" />
-        <vers prev="1" num="21.0.1180.74" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2863" published="2012-08-09" name="CVE-2012-2863" modified="2012-09-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The PDF functionality in Google Chrome before 21.0.1180.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14823" source="OVAL">oval:org.mitre.oval:def:14823</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/08/stable-channel-update.html" source="CONFIRM">http://googlechromereleases.blogspot.com/2012/08/stable-channel-update.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=137361" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=137361</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=136968" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=136968</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers num="21.0.1180.59" />
-        <vers num="21.0.1180.60" />
-        <vers num="21.0.1180.61" />
-        <vers num="21.0.1180.62" />
-        <vers num="21.0.1180.63" />
-        <vers num="21.0.1180.64" />
-        <vers num="21.0.1180.68" />
-        <vers num="21.0.1180.69" />
-        <vers num="21.0.1180.70" />
-        <vers num="21.0.1180.71" />
-        <vers num="21.0.1180.72" />
-        <vers num="21.0.1180.73" />
-        <vers prev="1" num="21.0.1180.74" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2864" published="2012-08-22" name="CVE-2012-2864" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, allows remote attackers to execute arbitrary code via unspecified vectors that trigger an "array overflow."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://googlechromereleases.blogspot.com/2012/08/stable-channel-update-for-chrome-os.html" source="CONFIRM">http://googlechromereleases.blogspot.com/2012/08/stable-channel-update-for-chrome-os.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=141901" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=141901</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome_os">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.10" />
-        <vers num="21.0.1180.11" />
-        <vers num="21.0.1180.13" />
-        <vers num="21.0.1180.14" />
-        <vers num="21.0.1180.15" />
-        <vers num="21.0.1180.17" />
-        <vers num="21.0.1180.18" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.3" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.4" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.5" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.6" />
-        <vers num="21.0.1180.7" />
-        <vers num="21.0.1180.79" />
-        <vers num="21.0.1180.8" />
-        <vers num="21.0.1180.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2865" published="2012-08-31" name="CVE-2012-2865" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=121347" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=121347</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers num="21.0.1180.59" />
-        <vers num="21.0.1180.60" />
-        <vers num="21.0.1180.61" />
-        <vers num="21.0.1180.62" />
-        <vers num="21.0.1180.63" />
-        <vers num="21.0.1180.64" />
-        <vers num="21.0.1180.68" />
-        <vers num="21.0.1180.69" />
-        <vers num="21.0.1180.70" />
-        <vers num="21.0.1180.71" />
-        <vers num="21.0.1180.72" />
-        <vers num="21.0.1180.73" />
-        <vers num="21.0.1180.74" />
-        <vers num="21.0.1180.75" />
-        <vers num="21.0.1180.76" />
-        <vers num="21.0.1180.77" />
-        <vers num="21.0.1180.78" />
-        <vers num="21.0.1180.79" />
-        <vers num="21.0.1180.80" />
-        <vers num="21.0.1180.81" />
-        <vers num="21.0.1180.82" />
-        <vers num="21.0.1180.83" />
-        <vers num="21.0.1180.84" />
-        <vers num="21.0.1180.85" />
-        <vers num="21.0.1180.86" />
-        <vers num="21.0.1180.87" />
-        <vers prev="1" num="21.0.1180.88" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2866" published="2012-08-31" name="CVE-2012-2866" modified="2012-09-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Google Chrome before 21.0.1180.89 does not properly perform a cast of an unspecified variable during handling of run-in elements, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=134897" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=134897</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers num="21.0.1180.59" />
-        <vers num="21.0.1180.60" />
-        <vers num="21.0.1180.61" />
-        <vers num="21.0.1180.62" />
-        <vers num="21.0.1180.63" />
-        <vers num="21.0.1180.64" />
-        <vers num="21.0.1180.68" />
-        <vers num="21.0.1180.69" />
-        <vers num="21.0.1180.70" />
-        <vers num="21.0.1180.71" />
-        <vers num="21.0.1180.72" />
-        <vers num="21.0.1180.73" />
-        <vers num="21.0.1180.74" />
-        <vers num="21.0.1180.75" />
-        <vers num="21.0.1180.76" />
-        <vers num="21.0.1180.77" />
-        <vers num="21.0.1180.78" />
-        <vers num="21.0.1180.79" />
-        <vers num="21.0.1180.80" />
-        <vers num="21.0.1180.81" />
-        <vers num="21.0.1180.82" />
-        <vers num="21.0.1180.83" />
-        <vers num="21.0.1180.84" />
-        <vers num="21.0.1180.85" />
-        <vers num="21.0.1180.86" />
-        <vers num="21.0.1180.87" />
-        <vers prev="1" num="21.0.1180.88" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2867" published="2012-08-31" name="CVE-2012-2867" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The SPDY implementation in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=135485" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=135485</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers num="21.0.1180.59" />
-        <vers num="21.0.1180.60" />
-        <vers num="21.0.1180.61" />
-        <vers num="21.0.1180.62" />
-        <vers num="21.0.1180.63" />
-        <vers num="21.0.1180.64" />
-        <vers num="21.0.1180.68" />
-        <vers num="21.0.1180.69" />
-        <vers num="21.0.1180.70" />
-        <vers num="21.0.1180.71" />
-        <vers num="21.0.1180.72" />
-        <vers num="21.0.1180.73" />
-        <vers num="21.0.1180.74" />
-        <vers num="21.0.1180.75" />
-        <vers num="21.0.1180.76" />
-        <vers num="21.0.1180.77" />
-        <vers num="21.0.1180.78" />
-        <vers num="21.0.1180.79" />
-        <vers num="21.0.1180.80" />
-        <vers num="21.0.1180.81" />
-        <vers num="21.0.1180.82" />
-        <vers num="21.0.1180.83" />
-        <vers num="21.0.1180.84" />
-        <vers num="21.0.1180.85" />
-        <vers num="21.0.1180.86" />
-        <vers num="21.0.1180.87" />
-        <vers prev="1" num="21.0.1180.88" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2868" published="2012-08-31" name="CVE-2012-2868" modified="2012-09-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving improper interaction between worker processes and an XMLHttpRequest (aka XHR) object.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=136881" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=136881</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers num="21.0.1180.59" />
-        <vers num="21.0.1180.60" />
-        <vers num="21.0.1180.61" />
-        <vers num="21.0.1180.62" />
-        <vers num="21.0.1180.63" />
-        <vers num="21.0.1180.64" />
-        <vers num="21.0.1180.68" />
-        <vers num="21.0.1180.69" />
-        <vers num="21.0.1180.70" />
-        <vers num="21.0.1180.71" />
-        <vers num="21.0.1180.72" />
-        <vers num="21.0.1180.73" />
-        <vers num="21.0.1180.74" />
-        <vers num="21.0.1180.75" />
-        <vers num="21.0.1180.76" />
-        <vers num="21.0.1180.77" />
-        <vers num="21.0.1180.78" />
-        <vers num="21.0.1180.79" />
-        <vers num="21.0.1180.80" />
-        <vers num="21.0.1180.81" />
-        <vers num="21.0.1180.82" />
-        <vers num="21.0.1180.83" />
-        <vers num="21.0.1180.84" />
-        <vers num="21.0.1180.85" />
-        <vers num="21.0.1180.86" />
-        <vers num="21.0.1180.87" />
-        <vers prev="1" num="21.0.1180.88" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2869" published="2012-08-31" name="CVE-2012-2869" modified="2012-09-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Google Chrome before 21.0.1180.89 does not properly load URLs, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a "stale buffer."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=137778" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=137778</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers num="21.0.1180.59" />
-        <vers num="21.0.1180.60" />
-        <vers num="21.0.1180.61" />
-        <vers num="21.0.1180.62" />
-        <vers num="21.0.1180.63" />
-        <vers num="21.0.1180.64" />
-        <vers num="21.0.1180.68" />
-        <vers num="21.0.1180.69" />
-        <vers num="21.0.1180.70" />
-        <vers num="21.0.1180.71" />
-        <vers num="21.0.1180.72" />
-        <vers num="21.0.1180.73" />
-        <vers num="21.0.1180.74" />
-        <vers num="21.0.1180.75" />
-        <vers num="21.0.1180.76" />
-        <vers num="21.0.1180.77" />
-        <vers num="21.0.1180.78" />
-        <vers num="21.0.1180.79" />
-        <vers num="21.0.1180.80" />
-        <vers num="21.0.1180.81" />
-        <vers num="21.0.1180.82" />
-        <vers num="21.0.1180.83" />
-        <vers num="21.0.1180.84" />
-        <vers num="21.0.1180.85" />
-        <vers num="21.0.1180.86" />
-        <vers num="21.0.1180.87" />
-        <vers prev="1" num="21.0.1180.88" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2870" published="2012-08-31" name="CVE-2012-2870" modified="2012-09-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service (application crash) via a crafted XSLT expression that is not properly identified during XPath navigation, related to (1) the xsltCompileLocationPathPattern function in libxslt/pattern.c and (2) the xsltGenerateIdFunction function in libxslt/functions.c.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/pattern.c?r1=118654&amp;r2=150123" source="CONFIRM" patch="1">http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/pattern.c?r1=118654&amp;r2=150123</ref>
-      <ref url="http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/functions.c?r1=75684&amp;r2=149998" source="CONFIRM" patch="1">http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/functions.c?r1=75684&amp;r2=149998</ref>
-      <ref url="https://chromiumcodereview.appspot.com/10830177" source="CONFIRM">https://chromiumcodereview.appspot.com/10830177</ref>
-      <ref url="https://chromiumcodereview.appspot.com/10823168" source="CONFIRM">https://chromiumcodereview.appspot.com/10823168</ref>
-      <ref url="http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/pattern.c?view=log" source="CONFIRM">http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/pattern.c?view=log</ref>
-      <ref url="http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/functions.c?view=log" source="CONFIRM">http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/functions.c?view=log</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=140368" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=140368</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=138672" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=138672</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers num="21.0.1180.59" />
-        <vers num="21.0.1180.60" />
-        <vers num="21.0.1180.61" />
-        <vers num="21.0.1180.62" />
-        <vers num="21.0.1180.63" />
-        <vers num="21.0.1180.64" />
-        <vers num="21.0.1180.68" />
-        <vers num="21.0.1180.69" />
-        <vers num="21.0.1180.70" />
-        <vers num="21.0.1180.71" />
-        <vers num="21.0.1180.72" />
-        <vers num="21.0.1180.73" />
-        <vers num="21.0.1180.74" />
-        <vers num="21.0.1180.75" />
-        <vers num="21.0.1180.76" />
-        <vers num="21.0.1180.77" />
-        <vers num="21.0.1180.78" />
-        <vers num="21.0.1180.79" />
-        <vers num="21.0.1180.80" />
-        <vers num="21.0.1180.81" />
-        <vers num="21.0.1180.82" />
-        <vers num="21.0.1180.83" />
-        <vers num="21.0.1180.84" />
-        <vers num="21.0.1180.85" />
-        <vers num="21.0.1180.86" />
-        <vers num="21.0.1180.87" />
-        <vers prev="1" num="21.0.1180.88" />
-      </prod>
-      <prod vendor="xmlsoft" name="libxslt">
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.20" />
-        <vers num="1.1.21" />
-        <vers num="1.1.22" />
-        <vers num="1.1.23" />
-        <vers num="1.1.24" />
-        <vers prev="1" num="1.1.26" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2871" published="2012-08-31" name="CVE-2012-2871" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document, related to the _xmlNs data structure in include/libxml/tree.h.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/704.html
-
-'CWE-704: Incorrect Type Conversion or Cast'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://chromiumcodereview.appspot.com/10824157" source="CONFIRM">https://chromiumcodereview.appspot.com/10824157</ref>
-      <ref url="http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxml/src/include/libxml/tree.h?view=log" source="CONFIRM">http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxml/src/include/libxml/tree.h?view=log</ref>
-      <ref url="http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxml/src/include/libxml/tree.h?r1=56276&amp;r2=149930" source="CONFIRM">http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxml/src/include/libxml/tree.h?r1=56276&amp;r2=149930</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=138673" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=138673</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers num="21.0.1180.59" />
-        <vers num="21.0.1180.60" />
-        <vers num="21.0.1180.61" />
-        <vers num="21.0.1180.62" />
-        <vers num="21.0.1180.63" />
-        <vers num="21.0.1180.64" />
-        <vers num="21.0.1180.68" />
-        <vers num="21.0.1180.69" />
-        <vers num="21.0.1180.70" />
-        <vers num="21.0.1180.71" />
-        <vers num="21.0.1180.72" />
-        <vers num="21.0.1180.73" />
-        <vers num="21.0.1180.74" />
-        <vers num="21.0.1180.75" />
-        <vers num="21.0.1180.76" />
-        <vers num="21.0.1180.77" />
-        <vers num="21.0.1180.78" />
-        <vers num="21.0.1180.79" />
-        <vers num="21.0.1180.80" />
-        <vers num="21.0.1180.81" />
-        <vers num="21.0.1180.82" />
-        <vers num="21.0.1180.83" />
-        <vers num="21.0.1180.84" />
-        <vers num="21.0.1180.85" />
-        <vers num="21.0.1180.86" />
-        <vers num="21.0.1180.87" />
-        <vers prev="1" num="21.0.1180.88" />
-      </prod>
-      <prod vendor="xmlsoft" name="libxml2">
-        <vers prev="1" num="2.9.0" edition="rc1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2872" published="2012-08-31" name="CVE-2012-2872" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in an SSL interstitial page in Google Chrome before 21.0.1180.89 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=142956" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=142956</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers num="21.0.1180.49" />
-        <vers num="21.0.1180.50" />
-        <vers num="21.0.1180.51" />
-        <vers num="21.0.1180.52" />
-        <vers num="21.0.1180.53" />
-        <vers num="21.0.1180.54" />
-        <vers num="21.0.1180.55" />
-        <vers num="21.0.1180.56" />
-        <vers num="21.0.1180.57" />
-        <vers num="21.0.1180.59" />
-        <vers num="21.0.1180.60" />
-        <vers num="21.0.1180.61" />
-        <vers num="21.0.1180.62" />
-        <vers num="21.0.1180.63" />
-        <vers num="21.0.1180.64" />
-        <vers num="21.0.1180.68" />
-        <vers num="21.0.1180.69" />
-        <vers num="21.0.1180.70" />
-        <vers num="21.0.1180.71" />
-        <vers num="21.0.1180.72" />
-        <vers num="21.0.1180.73" />
-        <vers num="21.0.1180.74" />
-        <vers num="21.0.1180.75" />
-        <vers num="21.0.1180.76" />
-        <vers num="21.0.1180.77" />
-        <vers num="21.0.1180.78" />
-        <vers num="21.0.1180.79" />
-        <vers num="21.0.1180.80" />
-        <vers num="21.0.1180.81" />
-        <vers num="21.0.1180.82" />
-        <vers num="21.0.1180.83" />
-        <vers num="21.0.1180.84" />
-        <vers num="21.0.1180.85" />
-        <vers num="21.0.1180.86" />
-        <vers num="21.0.1180.87" />
-        <vers prev="1" num="21.0.1180.88" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2901" published="2012-05-21" name="CVE-2012-2901" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Profile List in the Joomla Content Editor (JCE) component before 2.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the search parameter to administrator/index.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75670" source="XF">jce-joomla-index-xss(75670)</ref>
-      <ref url="http://www.securityfocus.com/bid/53559" source="BID">53559</ref>
-      <ref url="http://www.joomlacontenteditor.net/news/item/jce-21-released?category_id=32" source="CONFIRM">http://www.joomlacontenteditor.net/news/item/jce-21-released?category_id=32</ref>
-      <ref url="http://secunia.com/secunia_research/2012-14/" source="MISC" adv="1">http://secunia.com/secunia_research/2012-14/</ref>
-      <ref url="http://secunia.com/advisories/49206" source="SECUNIA" adv="1">49206</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ryan_demmer" name="joomla_content_editor">
-        <vers num="2.0" />
-        <vers prev="1" num="2.0.21" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2902" published="2012-05-21" name="CVE-2012-2902" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the Joomla Content Editor (JCE) component before 2.1 for Joomla!, when chunking is set to greater than zero, allows remote authors to execute arbitrary PHP code by uploading a PHP file with a double extension as demonstrated by .jpg.pht.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/434.html 'Unrestricted Upload of File with Dangerous Type'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75671" source="XF">jce-joomla-file-file-upload(75671)</ref>
-      <ref url="http://www.securityfocus.com/bid/51002" source="BID">51002</ref>
-      <ref url="http://www.joomlacontenteditor.net/news/item/jce-21-released?category_id=32" source="CONFIRM">http://www.joomlacontenteditor.net/news/item/jce-21-released?category_id=32</ref>
-      <ref url="http://secunia.com/secunia_research/2012-15/" source="MISC" adv="1">http://secunia.com/secunia_research/2012-15/</ref>
-      <ref url="http://secunia.com/advisories/49206" source="SECUNIA" adv="1">49206</ref>
-      <ref url="http://osvdb.org/81980" source="OSVDB">81980</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ryan_demmer" name="joomla_content_editor">
-        <vers num="2.0" />
-        <vers prev="1" num="2.0.21" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2903" published="2012-05-21" name="CVE-2012-2903" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to group.php, or the (2) target_language or (3) target_flag parameter to translate.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75703" source="XF">phpaddressbook-multiplescripts-xss(75703)</ref>
-      <ref url="http://www.securityfocus.com/bid/53598" source="BID">53598</ref>
-      <ref url="http://www.darksecurity.de/index.php?/215-SSCHADV2012-013-PHP-Address-Book-7.0.0-Multiple-security-vulnerabilities.html" source="MISC">http://www.darksecurity.de/index.php?/215-SSCHADV2012-013-PHP-Address-Book-7.0.0-Multiple-security-vulnerabilities.html</ref>
-      <ref url="http://sourceforge.net/tracker/?func=detail&amp;aid=3527242&amp;group_id=157964&amp;atid=805929" source="MISC">http://sourceforge.net/tracker/?func=detail&amp;aid=3527242&amp;group_id=157964&amp;atid=805929</ref>
-      <ref url="http://secunia.com/advisories/49212" source="SECUNIA" adv="1">49212</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="chatelao" name="php_address_book">
-        <vers num="1.0" />
-        <vers num="1.2" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.4" />
-        <vers num="2.6" />
-        <vers num="3.0" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.10" />
-        <vers num="3.2.11" />
-        <vers num="3.2.12" />
-        <vers num="3.2.13" />
-        <vers num="3.2.14" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" />
-        <vers num="3.2.8" />
-        <vers num="3.2.9" />
-        <vers num="3.3" />
-        <vers num="3.3.1" />
-        <vers num="3.3.10" />
-        <vers num="3.3.12" />
-        <vers num="3.3.13" />
-        <vers num="3.3.14" />
-        <vers num="3.3.15" />
-        <vers num="3.3.16" />
-        <vers num="3.3.17" />
-        <vers num="3.3.18" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers num="3.3.4" />
-        <vers num="3.3.5" />
-        <vers num="3.3.6" />
-        <vers num="3.3.7" />
-        <vers num="3.3.8" />
-        <vers num="3.3.9" />
-        <vers num="3.4" />
-        <vers num="3.4.1" />
-        <vers num="3.4.2" />
-        <vers num="3.4.3" />
-        <vers num="3.4.4" />
-        <vers num="3.4.5" />
-        <vers num="3.4.6" />
-        <vers num="3.4.7" />
-        <vers num="3.4.8" />
-        <vers num="3.4.9" />
-        <vers num="4.0" />
-        <vers num="4.0.2" />
-        <vers num="4.1.1" />
-        <vers num="4.1.3" />
-        <vers num="4.1.4" />
-        <vers num="5.0" edition="beta" />
-        <vers num="5.1" />
-        <vers num="5.2" />
-        <vers num="5.3" />
-        <vers num="5.4" />
-        <vers num="5.4.1" />
-        <vers num="5.4.2" />
-        <vers num="5.4.3" />
-        <vers num="5.4.4" />
-        <vers num="5.4.5" />
-        <vers num="5.4.6" />
-        <vers num="5.4.7" />
-        <vers num="5.4.9" />
-        <vers num="5.5" />
-        <vers num="5.6" />
-        <vers num="5.7" />
-        <vers num="5.7.1" />
-        <vers num="5.7.2" />
-        <vers num="5.7.3" />
-        <vers num="5.7.4" />
-        <vers num="5.7.5" />
-        <vers num="5.8.1" />
-        <vers num="6.0" />
-        <vers num="6.1" />
-        <vers prev="1" num="6.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2904" published="2012-05-21" name="CVE-2012-2904" modified="2012-05-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">player.swf in LongTail JW Player 5.9 allows remote attackers to conduct cross-site scripting (XSS) attacks to inject arbitrary web script or HTML via multiple "javascript:" sequences in the debug parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75672" source="XF">jwplayer-player-debug-xss(75672)</ref>
-      <ref url="http://www.wooyun.org/bugs/wooyun-2010-07166" source="MISC">http://www.wooyun.org/bugs/wooyun-2010-07166</ref>
-      <ref url="http://www.securityfocus.com/bid/53554" source="BID">53554</ref>
-      <ref url="http://www.longtailvideo.com/support/forums/jw-player/bug-reports/26699/xss-exists-in-debug-functionality" source="CONFIRM">http://www.longtailvideo.com/support/forums/jw-player/bug-reports/26699/xss-exists-in-debug-functionality</ref>
-      <ref url="http://secunia.com/advisories/49130" source="SECUNIA" adv="1">49130</ref>
-      <ref url="http://seclists.org/fulldisclosure/2012/May/132" source="FULLDISC">20120516 JW player xss security flaw</ref>
-      <ref url="http://developer.longtailvideo.com/trac/ticket/1585" source="CONFIRM">http://developer.longtailvideo.com/trac/ticket/1585</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="longtailvideo" name="jw_player">
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2905" published="2012-05-21" name="CVE-2012-2905" modified="2012-05-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Artiphp CMS 5.5.0 Neo (r422) stores database backups with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75690" source="XF">artiphp-database-info-disclosure(75690)</ref>
-      <ref url="http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5091.php" source="MISC">http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5091.php</ref>
-      <ref url="http://www.exploit-db.com/exploits/18889" source="EXPLOIT-DB">18889</ref>
-      <ref url="http://secunia.com/advisories/49195" source="SECUNIA" adv="1">49195</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="artiphp" name="artiphp_cms">
-        <vers num="5.5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2906" published="2012-05-21" name="CVE-2012-2906" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in artpublic/recommandation/index.php in Artiphp CMS 5.5.0 Neo (r422) allow remote attackers to inject arbitrary web script or HTML via the (1) add_img_name_post, (2) asciiart_post, (3) expediteur, (4) titre_sav, or (5) z39d27af885b32758ac0e7d4014a61561 parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75689" source="XF">artiphp-index-xss(75689)</ref>
-      <ref url="http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5090.php" source="MISC">http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5090.php</ref>
-      <ref url="http://www.securityfocus.com/bid/53586" source="BID">53586</ref>
-      <ref url="http://secunia.com/advisories/49195" source="SECUNIA" adv="1">49195</ref>
-      <ref url="http://packetstormsecurity.org/files/112804/Artiphp-CMS-5.5.0-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112804/Artiphp-CMS-5.5.0-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="artiphp" name="artiphp_cms">
-        <vers num="5.5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2907" published="2012-05-21" name="CVE-2012-2907" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the aberdeen_breadcrumb function in template.php in the Aberdeen theme 6.x-1.x before 6.x-1.11 for Drupal, when set to append the content title to the breadcrumb, allows remote attackers to inject arbitrary web script or HTML via the content title in a breadcrumb.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75712" source="XF">aberdeen-breadcrumb-xss(75712)</ref>
-      <ref url="http://www.securityfocus.com/bid/53581" source="BID">53581</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/27/10" source="MLIST">[oss-security] 20120627 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49150" source="SECUNIA" adv="1">49150</ref>
-      <ref url="http://drupalcode.org/project/aberdeen.git/commitdiff/1994e8e" source="CONFIRM">http://drupalcode.org/project/aberdeen.git/commitdiff/1994e8e</ref>
-      <ref url="http://drupal.org/node/1585890" source="MISC" adv="1">http://drupal.org/node/1585890</ref>
-      <ref url="http://drupal.org/node/1585878" source="CONFIRM">http://drupal.org/node/1585878</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ishmael_sanchez" name="aberdeen">
-        <vers num="6.x-1.10" />
-        <vers num="6.x-1.8" />
-        <vers num="6.x-1.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2908" published="2012-05-21" name="CVE-2012-2908" modified="2012-05-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) bbcodeexample, (2) buttonimage, or (3) bbcodetag parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75575" source="XF">viscacha-bbcodes-sql-injection(75575)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=525" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=525</ref>
-      <ref url="http://www.securityfocus.com/bid/53496" source="BID">53496</ref>
-      <ref url="http://www.exploit-db.com/exploits/18873" source="EXPLOIT-DB">18873</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="viscacha" name="viscacha">
-        <vers num="0.8.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2909" published="2012-05-21" name="CVE-2012-2909" modified="2012-05-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Viscacha 0.8.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) text field in the Private Messages System, (2) Bad Word field in Zensur, or (3) Portal or (4) Topic field in Kommentar.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75577" source="XF">viscachacms-admin-xss(75577)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=525" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=525</ref>
-      <ref url="http://www.securityfocus.com/bid/53496" source="BID">53496</ref>
-      <ref url="http://www.exploit-db.com/exploits/18873" source="EXPLOIT-DB">18873</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="viscacha" name="viscacha">
-        <vers num="0.8.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2910" published="2012-05-21" name="CVE-2012-2910" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in SiliSoftware phpThumb() 1.7.11 allow remote attackers to inject arbitrary web script or HTML via the (1) dir parameter to demo/phpThumb.demo.random.php or (2) title parameter to demo/phpThumb.demo.showpic.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75709" source="XF">silisoftware-phpthumb-multiple-xss(75709)</ref>
-      <ref url="http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5088.php" source="MISC">http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5088.php</ref>
-      <ref url="http://www.securityfocus.com/bid/53572" source="BID">53572</ref>
-      <ref url="http://packetstormsecurity.org/files/112797/SiliSoftware-phpThumb-1.7.11-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112797/SiliSoftware-phpThumb-1.7.11-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="silisoftware" name="phpthumb()">
-        <vers num="1.7.11" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2911" published="2012-05-21" name="CVE-2012-2911" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in backupDB.php in SiliSoftware backupDB() 1.2.7a allows remote attackers to inject arbitrary web script or HTML via the onlyDB parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75710" source="XF">silisoftwarebackupdb-backupdb-xss(75710)</ref>
-      <ref url="http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5089.php" source="MISC">http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5089.php</ref>
-      <ref url="http://www.securityfocus.com/bid/53575" source="BID">53575</ref>
-      <ref url="http://packetstormsecurity.org/files/112801/SiliSoftware-backupDB-1.2.7a-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112801/SiliSoftware-backupDB-1.2.7a-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="silisoftware" name="backupdb()">
-        <vers num="1.2.7a" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2912" published="2012-05-21" name="CVE-2012-2912" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the LeagueManager plugin 3.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter in the show-league page or (2) season parameter in the team page to wp-admin/admin.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75629" source="XF">leaguemanager-admin-xss(75629)</ref>
-      <ref url="http://www.securityfocus.com/bid/53525" source="BID">53525</ref>
-      <ref url="http://packetstormsecurity.org/files/112698/WordPress-LeagueManager-3.7-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112698/WordPress-LeagueManager-3.7-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kolja_schleich" name="leaguemanager">
-        <vers num="3.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2913" published="2012-05-21" name="CVE-2012-2913" modified="2012-05-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) leaflet_layer.php or (2) leaflet_marker.php, as reachable through wp-admin/admin.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75628" source="XF">leaflet-admin-xss(75628)</ref>
-      <ref url="http://www.securityfocus.com/bid/53526" source="BID">53526</ref>
-      <ref url="http://packetstormsecurity.org/files/112699/WordPress-Leaflet-0.0.1-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112699/WordPress-Leaflet-0.0.1-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mapsmarker" name="leaflet_maps_marker_plugin">
-        <vers num="0.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2914" published="2012-05-21" name="CVE-2012-2914" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in captchademo.php in Unijimpe Captcha allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75708" source="XF">captcha-captchademo-xss(75708)</ref>
-      <ref url="http://www.securityfocus.com/bid/53585" source="BID">53585</ref>
-      <ref url="http://packetstormsecurity.org/files/112785/Unijimpe-Captcha-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112785/Unijimpe-Captcha-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="unijimpe" name="captcha">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2915" published="2012-05-21" name="CVE-2012-2915" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long string in a Value tag in a SymbolicSchematicData definition tag in PAC Design (.pac) file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53566" source="BID">53566</ref>
-      <ref url="http://secunia.com/advisories/48741" source="SECUNIA" adv="1">48741</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="lattice_semiconductor" name="pac-designer">
-        <vers num="6.2.1344" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2916" published="2012-05-21" name="CVE-2012-2916" modified="2012-05-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in sabre_class_admin.php in the SABRE plugin before 2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the active_option parameter to wp-admin/tools.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://plugins.trac.wordpress.org/changeset?old_path=%2Fsabre&amp;old=534490&amp;new_path=%2Fsabre&amp;new=534490" source="CONFIRM" patch="1">http://plugins.trac.wordpress.org/changeset?old_path=%2Fsabre&amp;old=534490&amp;new_path=%2Fsabre&amp;new=534490</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75615" source="XF">sabre-tools-xss(75615)</ref>
-      <ref url="http://www.securityfocus.com/bid/53528" source="BID">53528</ref>
-      <ref url="http://wordpress.org/extend/plugins/sabre/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/sabre/changelog/</ref>
-      <ref url="http://packetstormsecurity.org/files/112692/WordPress-SABRE-1.2.0-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112692/WordPress-SABRE-1.2.0-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dlo" name="simple_anti_bot_registration_engine_plugin">
-        <vers num="0.1.1" />
-        <vers num="0.2.1" />
-        <vers num="0.2.2" />
-        <vers num="0.4.0" />
-        <vers num="0.4.1" />
-        <vers num="0.4.2" />
-        <vers num="0.6.0" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.7.0" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.8.0" />
-        <vers num="0.9.0" />
-        <vers num="1.0.0" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers prev="1" num="1.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2917" published="2012-05-21" name="CVE-2012-2917" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Share and Follow plugin 1.80.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the CDN API Key (cnd-key) in a share-and-follow-menu page to wp-admin/admin.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75616" source="XF">shareandfollow-admin-xss(75616)</ref>
-      <ref url="http://www.securityfocus.com/bid/53533" source="BID">53533</ref>
-      <ref url="http://packetstormsecurity.org/files/112691/WordPress-Share-And-Follow-1.80.3-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112691/WordPress-Share-And-Follow-1.80.3-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="andrew_killen" name="share_and_follow">
-        <vers num="1.80.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2918" published="2012-05-21" name="CVE-2012-2918" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows remote attackers to inject arbitrary web script or HTML via the v parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75476" source="XF">chevereto-index-xss(75476)</ref>
-      <ref url="http://www.securityfocus.com/bid/53448" source="BID">53448</ref>
-      <ref url="http://packetstormsecurity.org/files/112585/Chevreto-Upload-Script-Cross-Site-Scripting-User-Enumeration.html" source="MISC">http://packetstormsecurity.org/files/112585/Chevreto-Upload-Script-Cross-Site-Scripting-User-Enumeration.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="chevereto" name="chevereto">
-        <vers num="1.91" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2919" published="2012-05-21" name="CVE-2012-2919" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) in the v parameter.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75477" source="XF">chevereto-upload-info-disclosure(75477)</ref>
-      <ref url="http://www.securityfocus.com/bid/53448" source="BID">53448</ref>
-      <ref url="http://packetstormsecurity.org/files/112585/Chevreto-Upload-Script-Cross-Site-Scripting-User-Enumeration.html" source="MISC">http://packetstormsecurity.org/files/112585/Chevreto-Upload-Script-Cross-Site-Scripting-User-Enumeration.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="chevereto" name="chevereto">
-        <vers num="1.91" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2920" published="2012-05-21" name="CVE-2012-2920" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the userphoto_options_page function in user-photo.php in the User Photo plugin before 0.9.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to wp-admin/options-general.php.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75496" source="XF">userphoto-optionsgeneral-xss(75496)</ref>
-      <ref url="http://www.securityfocus.com/bid/53449" source="BID">53449</ref>
-      <ref url="http://wordpress.org/extend/plugins/user-photo/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/user-photo/changelog/</ref>
-      <ref url="http://secunia.com/advisories/49100" source="SECUNIA" adv="1">49100</ref>
-      <ref url="http://plugins.trac.wordpress.org/changeset?old_path=%2Fuser-photo&amp;old=541880&amp;new_path=%2Fuser-photo&amp;new=541880" source="CONFIRM">http://plugins.trac.wordpress.org/changeset?old_path=%2Fuser-photo&amp;old=541880&amp;new_path=%2Fuser-photo&amp;new=541880</ref>
-      <ref url="http://osvdb.org/81806" source="OSVDB">81806</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="user_photo" name="user_photo">
-        <vers num="0.7.0.1" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.7.4" />
-        <vers num="0.7.4b" />
-        <vers num="0.8" />
-        <vers num="0.8.0.1" />
-        <vers num="0.8.0.2" />
-        <vers num="0.8.0.3" />
-        <vers num="0.8.0.4" />
-        <vers num="0.8.0.5" />
-        <vers num="0.8.1" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="0.9.4" />
-        <vers prev="1" num="0.9.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2921" published="2012-05-21" name="CVE-2012-2921" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII encoded document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://code.google.com/p/feedparser/source/detail?r=703&amp;path=/trunk/feedparser/feedparser.py" source="CONFIRM">https://code.google.com/p/feedparser/source/detail?r=703&amp;path=/trunk/feedparser/feedparser.py</ref>
-      <ref url="https://code.google.com/p/feedparser/source/browse/trunk/NEWS?spec=svn706&amp;r=706" source="CONFIRM">https://code.google.com/p/feedparser/source/browse/trunk/NEWS?spec=svn706&amp;r=706</ref>
-      <ref url="http://www.securityfocus.com/bid/53654" source="BID">53654</ref>
-      <ref url="http://secunia.com/advisories/49256" source="SECUNIA">49256</ref>
-      <ref url="http://osvdb.org/81701" source="OSVDB">81701</ref>
-      <ref url="http://freecode.com/projects/feedparser/releases/344371" source="CONFIRM">http://freecode.com/projects/feedparser/releases/344371</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mark_pilgrim" name="feedparser">
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.1" />
-        <vers num="3.2" />
-        <vers num="3.3" />
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.1" />
-        <vers prev="1" num="5.1.1" />
-        <vers num="5.1.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2922" published="2012-05-21" name="CVE-2012-2922" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The request_path function in includes/bootstrap.inc in Drupal 7.14 and earlier allows remote attackers to obtain sensitive information via the q[] parameter to index.php, which reveals the installation path in an error message.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75531" source="XF">drupal-index-path-disclosure(75531)</ref>
-      <ref url="http://www.securityfocus.com/bid/53454" source="BID">53454</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/02/8" source="MLIST">[oss-security] 20120802 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49131" source="SECUNIA" adv="1">49131</ref>
-      <ref url="http://osvdb.org/81817" source="OSVDB">81817</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-05/0055.html" source="BUGTRAQ">20120510 Re: Drupal 7.14 &lt;= Full Path Disclosure Vulnerability</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-05/0053.html" source="BUGTRAQ">20120510 Drupal 7.14 &lt;= Full Path Disclosure Vulnerability (Update)</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-05/0052.html" source="BUGTRAQ">20120510 Drupal 7.14 &lt;= Full Path Disclosure Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="drupal" name="drupal">
-        <vers num="5.0" edition="beta1" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="dev" />
-        <vers num="5.0" edition="rc1" />
-        <vers num="5.0" edition="rc2" />
-        <vers num="5.1" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="5.13" />
-        <vers num="5.14" />
-        <vers num="5.15" />
-        <vers num="5.16" />
-        <vers num="5.17" />
-        <vers num="5.18" />
-        <vers num="5.19" />
-        <vers num="5.2" />
-        <vers num="5.20" />
-        <vers num="5.21" />
-        <vers num="5.22" />
-        <vers num="5.23" />
-        <vers num="5.3" />
-        <vers num="5.4" />
-        <vers num="5.5" />
-        <vers num="5.6" />
-        <vers num="5.7" />
-        <vers num="5.8" />
-        <vers num="5.9" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="beta4" />
-        <vers num="6.0" edition="dev" />
-        <vers num="6.0" edition="rc1" />
-        <vers num="6.0" edition="rc2" />
-        <vers num="6.0" edition="rc3" />
-        <vers num="6.0" edition="rc4" />
-        <vers num="6.1" />
-        <vers num="6.10" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="6.13" />
-        <vers num="6.14" />
-        <vers num="6.15" />
-        <vers num="6.16" />
-        <vers num="6.17" />
-        <vers num="6.18" />
-        <vers num="6.2" />
-        <vers num="6.3" />
-        <vers num="6.4" />
-        <vers num="6.5" />
-        <vers num="6.6" />
-        <vers num="6.7" />
-        <vers num="6.8" />
-        <vers num="6.9" />
-        <vers num="7.0" edition="alpha1" />
-        <vers num="7.0" edition="alpha2" />
-        <vers num="7.0" edition="alpha3" />
-        <vers num="7.0" edition="alpha4" />
-        <vers num="7.0" edition="alpha5" />
-        <vers num="7.0" edition="alpha6" />
-        <vers num="7.0" edition="alpha7" />
-        <vers num="7.0" edition="dev" />
-        <vers num="7.1" />
-        <vers num="7.10" />
-        <vers num="7.11" />
-        <vers num="7.12" />
-        <vers prev="1" num="7.14" />
-        <vers num="7.2" />
-        <vers num="7.3" />
-        <vers num="7.4" />
-        <vers num="7.5" />
-        <vers num="7.6" />
-        <vers num="7.7" />
-        <vers num="7.8" />
-        <vers num="7.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2923" published="2012-05-21" name="CVE-2012-2923" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53472" source="BID">53472</ref>
-      <ref url="http://www.exploit-db.com/exploits/18858" source="EXPLOIT-DB">18858</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hypermethod" name="elearning_server">
-        <vers num="4g" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2924" published="2012-05-21" name="CVE-2012-2924" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53472" source="BID">53472</ref>
-      <ref url="http://www.exploit-db.com/exploits/18858" source="EXPLOIT-DB">18858</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hypermethod" name="elearning_server">
-        <vers num="4g" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2925" published="2012-05-21" name="CVE-2012-2925" modified="2012-05-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75501" source="XF">simplephpagenda-engine-sql-injection(75501)</ref>
-      <ref url="http://www.exploit-db.com/exploits/18845" source="EXPLOIT-DB">18845</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="simple_php_agenda" name="simple_php_agenda">
-        <vers num="2.2.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2926" published="2012-05-22" name="CVE-2012-2926" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7.12; Bamboo before 3.3.4 and 3.4.x before 3.4.5; and Crowd before 2.0.9, 2.1 before 2.1.2, 2.2 before 2.2.9, 2.3 before 2.3.7, and 2.4 before 2.4.1 do not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2012-05-17" source="CONFIRM" patch="1" adv="1">http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2012-05-17</ref>
-      <ref url="http://confluence.atlassian.com/display/FISHEYE/FishEye+and+Crucible+Security+Advisory+2012-05-17" source="CONFIRM" patch="1" adv="1">http://confluence.atlassian.com/display/FISHEYE/FishEye+and+Crucible+Security+Advisory+2012-05-17</ref>
-      <ref url="http://confluence.atlassian.com/display/DOC/Confluence+Security+Advisory+2012-05-17" source="CONFIRM" patch="1" adv="1">http://confluence.atlassian.com/display/DOC/Confluence+Security+Advisory+2012-05-17</ref>
-      <ref url="http://confluence.atlassian.com/display/CROWD/Crowd+Security+Advisory+2012-05-17" source="CONFIRM" patch="1" adv="1">http://confluence.atlassian.com/display/CROWD/Crowd+Security+Advisory+2012-05-17</ref>
-      <ref url="http://confluence.atlassian.com/display/BAMBOO/Bamboo+Security+Advisory+2012-05-17" source="CONFIRM" patch="1" adv="1">http://confluence.atlassian.com/display/BAMBOO/Bamboo+Security+Advisory+2012-05-17</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75697" source="XF">jira-xml-dos(75697)</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75682" source="XF">fisheye-crucible-xml-dos(75682)</ref>
-      <ref url="http://www.securityfocus.com/bid/53595" source="BID">53595</ref>
-      <ref url="http://secunia.com/advisories/49146" source="SECUNIA" adv="1">49146</ref>
-      <ref url="http://osvdb.org/81993" source="OSVDB">81993</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="atlassian" name="bamboo">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="2.0" edition="beta" />
-        <vers num="2.0" edition="beta1" />
-        <vers num="2.0" edition="beta2" />
-        <vers num="2.0" edition="beta3" />
-        <vers num="2.0" edition="beta4" />
-        <vers num="2.0" edition="beta5" />
-        <vers num="2.0" edition="beta6" />
-        <vers num="2.0" edition="beta8" />
-        <vers num="2.0" edition="beta9" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.4" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-        <vers num="2.5.5" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.7" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.2" />
-        <vers num="3.2.2" />
-        <vers num="3.3.1" />
-        <vers num="3.3.2" />
-        <vers prev="1" num="3.3.3" />
-        <vers num="3.4" />
-        <vers num="3.4.1" />
-        <vers num="3.4.2" />
-        <vers num="3.4.3" />
-        <vers num="3.4.4" />
-      </prod>
-      <prod vendor="atlassian" name="confluence">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.3" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.3" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" />
-        <vers num="1.3.4" />
-        <vers num="1.3.5" />
-        <vers num="1.3.6" />
-        <vers num="1.4" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="2.10" />
-        <vers num="2.10.1" />
-        <vers num="2.10.2" />
-        <vers num="2.10.3" />
-        <vers num="2.10.4" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.7" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.8" edition="beta" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.9" />
-        <vers num="2.9.1" />
-        <vers num="2.9.2" />
-        <vers num="2.9.3" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.2" />
-        <vers num="3.2.1" />
-        <vers num="3.3" />
-        <vers num="3.3.1" />
-        <vers num="3.3.3" />
-        <vers num="3.4" />
-        <vers num="3.4.1" />
-        <vers num="3.4.2" />
-        <vers num="3.4.3" />
-        <vers num="3.4.5" />
-        <vers num="3.4.6" />
-        <vers num="3.4.7" />
-        <vers num="3.4.8" />
-        <vers num="3.4.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.11" />
-        <vers prev="1" num="3.5.13" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.9" />
-        <vers num="4.0" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.2" />
-        <vers num="4.1.3" />
-        <vers num="4.1.4" />
-        <vers num="4.1.5" />
-        <vers num="4.1.6" />
-        <vers num="4.1.7" />
-        <vers num="4.1.9" />
-      </prod>
-      <prod vendor="atlassian" name="crowd">
-        <vers num="0.2" edition="beta" />
-        <vers num="0.3" edition="beta" />
-        <vers num="0.3.2" edition="beta" />
-        <vers num="0.3.3" />
-        <vers num="0.4" edition="beta" />
-        <vers num="0.4.1" edition="beta" />
-        <vers num="0.4.2" edition="beta" />
-        <vers num="0.4.3" edition="beta" />
-        <vers num="0.4.4" edition="beta" />
-        <vers num="0.4.5" edition="beta" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.4" />
-        <vers num="1.3" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.4" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.6" />
-        <vers num="1.6.1" />
-        <vers num="1.6.3" />
-        <vers num="2.0" edition="beta" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers prev="1" num="2.0.7" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta4" />
-        <vers num="2.1.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.4" />
-        <vers num="2.2.7" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.6" />
-        <vers num="2.4" />
-      </prod>
-      <prod vendor="atlassian" name="crucible">
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.5.0" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.2.1" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5.a" />
-        <vers num="1.6.6" />
-        <vers num="2.0" edition="beta2" />
-        <vers num="2.0" edition="beta3" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.3" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-        <vers num="2.5.4" />
-        <vers num="2.5.5" />
-        <vers num="2.5.6" />
-        <vers prev="1" num="2.5.7" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.6.7" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.11" />
-        <vers num="2.7.12" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-      </prod>
-      <prod vendor="atlassian" name="fisheye">
-        <vers num="1.3" />
-        <vers num="1.4" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.5.0" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5.a" />
-        <vers num="1.6.6" />
-        <vers num="2.0" edition="beta" />
-        <vers num="2.0" edition="beta2" />
-        <vers num="2.0" edition="beta3" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.3" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-        <vers num="2.5.4" />
-        <vers num="2.5.5" />
-        <vers num="2.5.6" />
-        <vers prev="1" num="2.5.7" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.6.7" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.11" />
-        <vers num="2.7.12" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-      </prod>
-      <prod vendor="atlassian" name="jira">
-        <vers num="2.1" edition="" />
-        <vers num="2.1" edition=":standard" />
-        <vers num="2.1" edition=":professional" />
-        <vers num="2.1" edition=":enterprise" />
-        <vers num="2.2" edition="" />
-        <vers num="2.2" edition=":enterprise" />
-        <vers num="2.2" edition=":standard" />
-        <vers num="2.2" edition=":professional" />
-        <vers num="2.2.1" edition="" />
-        <vers num="2.2.1" edition=":enterprise" />
-        <vers num="2.2.1" edition=":professional" />
-        <vers num="2.2.1" edition=":standard" />
-        <vers num="2.3" edition="" />
-        <vers num="2.3" edition=":professional" />
-        <vers num="2.3" edition=":enterprise" />
-        <vers num="2.3" edition=":standard" />
-        <vers num="2.4.1" edition="" />
-        <vers num="2.4.1" edition=":standard" />
-        <vers num="2.4.1" edition=":professional" />
-        <vers num="2.4.1" edition=":enterprise" />
-        <vers num="2.5.1" edition="" />
-        <vers num="2.5.1" edition=":standard" />
-        <vers num="2.5.1" edition=":professional" />
-        <vers num="2.5.1" edition=":enterprise" />
-        <vers num="2.5.2" edition="" />
-        <vers num="2.5.2" edition=":standard" />
-        <vers num="2.5.2" edition=":professional" />
-        <vers num="2.5.2" edition=":enterprise" />
-        <vers num="2.5.3" edition="" />
-        <vers num="2.5.3" edition=":enterprise" />
-        <vers num="2.5.3" edition=":standard" />
-        <vers num="2.5.3" edition=":professional" />
-        <vers num="2.6" edition="" />
-        <vers num="2.6" edition=":enterprise" />
-        <vers num="2.6" edition=":professional" />
-        <vers num="2.6" edition=":standard" />
-        <vers num="2.6.1" edition="" />
-        <vers num="2.6.1" edition=":enterprise" />
-        <vers num="2.6.1" edition=":professional" />
-        <vers num="2.6.1" edition=":standard" />
-        <vers num="3.0" edition="" />
-        <vers num="3.0" edition=":professional" />
-        <vers num="3.0" edition=":standard" />
-        <vers num="3.0" edition=":enterprise" />
-        <vers num="3.0.1" edition="" />
-        <vers num="3.0.1" edition=":enterprise" />
-        <vers num="3.0.1" edition=":standard" />
-        <vers num="3.0.1" edition=":professional" />
-        <vers num="3.0.2" edition="" />
-        <vers num="3.0.2" edition=":enterprise" />
-        <vers num="3.0.2" edition=":professional" />
-        <vers num="3.0.2" edition=":standard" />
-        <vers num="3.0.3" edition="" />
-        <vers num="3.0.3" edition=":professional" />
-        <vers num="3.0.3" edition=":standard" />
-        <vers num="3.0.3" edition=":enterprise" />
-        <vers num="3.1" edition="" />
-        <vers num="3.1" edition=":enterprise" />
-        <vers num="3.1" edition=":standard" />
-        <vers num="3.1" edition=":professional" />
-        <vers num="3.1.1" edition="" />
-        <vers num="3.1.1" edition=":professional" />
-        <vers num="3.1.1" edition=":standard" />
-        <vers num="3.1.1" edition=":enterprise" />
-        <vers num="3.10" edition="" />
-        <vers num="3.10" edition=":enterprise" />
-        <vers num="3.10" edition=":standard" />
-        <vers num="3.10" edition=":professional" />
-        <vers num="3.10.1" edition="" />
-        <vers num="3.10.1" edition=":enterprise" />
-        <vers num="3.10.1" edition=":professional" />
-        <vers num="3.10.1" edition=":standard" />
-        <vers num="3.10.2" edition="" />
-        <vers num="3.10.2" edition=":enterprise" />
-        <vers num="3.10.2" edition=":professional" />
-        <vers num="3.10.2" edition=":standard" />
-        <vers num="3.11" edition="" />
-        <vers num="3.11" edition=":enterprise" />
-        <vers num="3.11" edition=":standard" />
-        <vers num="3.11" edition=":professional" />
-        <vers num="3.12" edition="" />
-        <vers num="3.12" edition=":enterprise" />
-        <vers num="3.12" edition=":standard" />
-        <vers num="3.12" edition=":professional" />
-        <vers num="3.12.1" edition="" />
-        <vers num="3.12.1" edition=":professional" />
-        <vers num="3.12.1" edition=":enterprise" />
-        <vers num="3.12.1" edition=":standard" />
-        <vers num="3.12.2" edition="" />
-        <vers num="3.12.2" edition=":enterprise" />
-        <vers num="3.12.2" edition=":professional" />
-        <vers num="3.12.2" edition=":standard" />
-        <vers num="3.12.3" edition="" />
-        <vers num="3.12.3" edition=":standard" />
-        <vers num="3.12.3" edition=":professional" />
-        <vers num="3.12.3" edition=":enterprise" />
-        <vers num="3.13" edition="" />
-        <vers num="3.13" edition=":standard" />
-        <vers num="3.13" edition=":enterprise" />
-        <vers num="3.13" edition=":professional" />
-        <vers num="3.13.1" edition="" />
-        <vers num="3.13.1" edition=":enterprise" />
-        <vers num="3.13.1" edition=":standard" />
-        <vers num="3.13.1" edition=":professional" />
-        <vers num="3.13.2" />
-        <vers num="3.13.3" />
-        <vers num="3.13.4" />
-        <vers num="3.13.5" />
-        <vers num="3.2" edition="" />
-        <vers num="3.2" edition=":professional" />
-        <vers num="3.2" edition=":standard" />
-        <vers num="3.2" edition=":enterprise" />
-        <vers num="3.2.1" edition="" />
-        <vers num="3.2.1" edition=":standard" />
-        <vers num="3.2.1" edition=":enterprise" />
-        <vers num="3.2.1" edition=":professional" />
-        <vers num="3.2.2" edition="" />
-        <vers num="3.2.2" edition=":professional" />
-        <vers num="3.2.2" edition=":standard" />
-        <vers num="3.2.2" edition=":enterprise" />
-        <vers num="3.2.3" edition="" />
-        <vers num="3.2.3" edition=":standard" />
-        <vers num="3.2.3" edition=":enterprise" />
-        <vers num="3.2.3" edition=":professional" />
-        <vers num="3.3" edition="" />
-        <vers num="3.3" edition=":professional" />
-        <vers num="3.3" edition=":enterprise" />
-        <vers num="3.3" edition=":standard" />
-        <vers num="3.3.1" edition="" />
-        <vers num="3.3.1" edition=":enterprise" />
-        <vers num="3.3.1" edition=":professional" />
-        <vers num="3.3.1" edition=":standard" />
-        <vers num="3.3.2" edition="" />
-        <vers num="3.3.2" edition=":enterprise" />
-        <vers num="3.3.2" edition=":standard" />
-        <vers num="3.3.2" edition=":professional" />
-        <vers num="3.3.3" edition="" />
-        <vers num="3.3.3" edition=":enterprise" />
-        <vers num="3.3.3" edition=":standard" />
-        <vers num="3.3.3" edition=":professional" />
-        <vers num="3.4.1" edition="" />
-        <vers num="3.4.1" edition=":enterprise" />
-        <vers num="3.4.1" edition=":standard" />
-        <vers num="3.4.1" edition=":professional" />
-        <vers num="3.4.2" edition="" />
-        <vers num="3.4.2" edition=":professional" />
-        <vers num="3.4.2" edition=":standard" />
-        <vers num="3.4.2" edition=":enterprise" />
-        <vers num="3.4.3" edition="" />
-        <vers num="3.4.3" edition=":enterprise" />
-        <vers num="3.4.3" edition=":standard" />
-        <vers num="3.4.3" edition=":professional" />
-        <vers num="3.5" edition="" />
-        <vers num="3.5" edition=":enterprise" />
-        <vers num="3.5" edition=":standard" />
-        <vers num="3.5" edition=":professional" />
-        <vers num="3.5.1" edition="" />
-        <vers num="3.5.1" edition=":professional" />
-        <vers num="3.5.1" edition=":enterprise" />
-        <vers num="3.5.1" edition=":standard" />
-        <vers num="3.5.2" edition="" />
-        <vers num="3.5.2" edition=":enterprise" />
-        <vers num="3.5.2" edition=":standard" />
-        <vers num="3.5.2" edition=":professional" />
-        <vers num="3.5.3" edition="" />
-        <vers num="3.5.3" edition=":standard" />
-        <vers num="3.5.3" edition=":enterprise" />
-        <vers num="3.5.3" edition=":professional" />
-        <vers num="3.6" edition="" />
-        <vers num="3.6" edition=":standard" />
-        <vers num="3.6" edition=":professional" />
-        <vers num="3.6" edition=":enterprise" />
-        <vers num="3.6.1" edition="" />
-        <vers num="3.6.1" edition=":enterprise" />
-        <vers num="3.6.1" edition=":standard" />
-        <vers num="3.6.1" edition=":professional" />
-        <vers num="3.6.2" edition="" />
-        <vers num="3.6.2" edition=":enterprise" />
-        <vers num="3.6.2" edition=":standard" />
-        <vers num="3.6.2" edition=":professional" />
-        <vers num="3.6.2_156" />
-        <vers num="3.6.3" edition="" />
-        <vers num="3.6.3" edition=":professional" />
-        <vers num="3.6.3" edition=":enterprise" />
-        <vers num="3.6.3" edition=":standard" />
-        <vers num="3.6.4" edition="" />
-        <vers num="3.6.4" edition=":enterprise" />
-        <vers num="3.6.4" edition=":standard" />
-        <vers num="3.6.4" edition=":professional" />
-        <vers num="3.6.5" edition="" />
-        <vers num="3.6.5" edition=":standard" />
-        <vers num="3.6.5" edition=":professional" />
-        <vers num="3.6.5" edition=":enterprise" />
-        <vers num="3.7" edition="" />
-        <vers num="3.7" edition=":enterprise" />
-        <vers num="3.7" edition=":professional" />
-        <vers num="3.7" edition=":standard" />
-        <vers num="3.7.1" edition="" />
-        <vers num="3.7.1" edition=":standard" />
-        <vers num="3.7.1" edition=":enterprise" />
-        <vers num="3.7.1" edition=":professional" />
-        <vers num="3.7.2" edition="" />
-        <vers num="3.7.2" edition=":professional" />
-        <vers num="3.7.2" edition=":standard" />
-        <vers num="3.7.2" edition=":enterprise" />
-        <vers num="3.7.3" edition="" />
-        <vers num="3.7.3" edition=":enterprise" />
-        <vers num="3.7.3" edition=":professional" />
-        <vers num="3.7.3" edition=":standard" />
-        <vers num="3.7.4" edition="" />
-        <vers num="3.7.4" edition=":standard" />
-        <vers num="3.7.4" edition=":professional" />
-        <vers num="3.7.4" edition=":enterprise" />
-        <vers num="3.8" edition="" />
-        <vers num="3.8" edition=":professional" />
-        <vers num="3.8" edition=":enterprise" />
-        <vers num="3.8" edition=":standard" />
-        <vers num="3.8.1" edition="" />
-        <vers num="3.8.1" edition=":standard" />
-        <vers num="3.8.1" edition=":enterprise" />
-        <vers num="3.8.1" edition=":professional" />
-        <vers num="3.9" edition="" />
-        <vers num="3.9" edition=":professional" />
-        <vers num="3.9" edition=":enterprise" />
-        <vers num="3.9" edition=":standard" />
-        <vers num="3.9.1" edition="" />
-        <vers num="3.9.1" edition=":enterprise" />
-        <vers num="3.9.1" edition=":professional" />
-        <vers num="3.9.1" edition=":standard" />
-        <vers num="3.9.2" edition="" />
-        <vers num="3.9.2" edition=":standard" />
-        <vers num="3.9.2" edition=":enterprise" />
-        <vers num="3.9.2" edition=":professional" />
-        <vers num="3.9.3" edition="" />
-        <vers num="3.9.3" edition=":standard" />
-        <vers num="3.9.3" edition=":professional" />
-        <vers num="3.9.3" edition=":enterprise" />
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.2" />
-        <vers num="4.3" />
-        <vers num="4.4" />
-        <vers prev="1" num="5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2927" published="2012-05-22" name="CVE-2012-2927" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2012-05-17" source="CONFIRM" patch="1" adv="1">http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2012-05-17</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75697" source="XF">jira-xml-dos(75697)</ref>
-      <ref url="http://www.securityfocus.com/bid/53595" source="BID">53595</ref>
-      <ref url="http://secunia.com/advisories/49166" source="SECUNIA" adv="1">49166</ref>
-      <ref url="http://osvdb.org/81993" source="OSVDB">81993</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tm_software" name="tempo">
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.4.1" />
-        <vers num="2.5.1" />
-        <vers num="2.6.1" />
-        <vers num="2.7.1" />
-        <vers num="2.8.1" />
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.1" />
-        <vers num="4.2" />
-        <vers num="4.3" />
-        <vers num="4.4" />
-        <vers num="4.4.2" />
-        <vers num="4.5" />
-        <vers num="4.5.2" />
-        <vers num="5.0" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.2" />
-        <vers num="5.2.1" />
-        <vers num="5.2.2" />
-        <vers num="5.2.3" />
-        <vers num="5.3" />
-        <vers num="5.3.1" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.3.1" />
-        <vers num="5.4" />
-        <vers num="5.4.1" />
-        <vers num="5.4.2" />
-        <vers num="6.0.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.1.0" />
-        <vers num="6.1.1" edition="jira42" />
-        <vers num="6.2.0" />
-        <vers num="6.2.1-jira42" />
-        <vers num="6.2.2" edition="jira42" />
-        <vers num="6.2.3" edition="jira42" />
-        <vers num="6.2.4" edition="jira42" />
-        <vers num="6.2.5" edition="jira42" />
-        <vers num="6.2.6" edition="jira42" />
-        <vers num="6.2.7" edition="jira42" />
-        <vers num="6.3.1" edition="jira42" />
-        <vers num="6.4" edition="jira42" />
-        <vers num="6.4.2" />
-        <vers prev="1" num="6.4.3" />
-        <vers num="6.5" />
-        <vers num="7.0" />
-        <vers num="7.0.0" edition="rc1" />
-        <vers num="7.0.0" edition="rc2" />
-        <vers num="7.0.2" />
-      </prod>
-      <prod vendor="tm_software" name="tempo6.3.0">
-        <vers num="jira42" />
-      </prod>
-      <prod vendor="tm_software" name="tempo6.3.2">
-        <vers num="jira42" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2928" published="2012-05-22" name="CVE-2012-2928" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75697" source="XF">jira-xml-dos(75697)</ref>
-      <ref url="http://www.securityfocus.com/bid/53595" source="BID">53595</ref>
-      <ref url="http://secunia.com/advisories/49166" source="SECUNIA" adv="1">49166</ref>
-      <ref url="http://osvdb.org/81993" source="OSVDB">81993</ref>
-      <ref url="http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2012-05-17" source="CONFIRM">http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2012-05-17</ref>
-      <ref url="http://confluence.atlassian.com/display/DOC/Confluence+Security+Advisory+2012-05-17" source="CONFIRM" adv="1">http://confluence.atlassian.com/display/DOC/Confluence+Security+Advisory+2012-05-17</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="atlassian" name="confluence">
-        <vers num="4.1.9" />
-      </prod>
-      <prod vendor="atlassian" name="jira">
-        <vers prev="1" num="5.0.0" />
-      </prod>
-      <prod vendor="gliffy" name="gliffy">
-        <vers num="1.0.1" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.5" />
-        <vers num="3.5.2" />
-        <vers num="3.6" />
-        <vers num="3.6.1" />
-        <vers prev="1" num="3.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2935" published="2012-05-27" name="CVE-2012-2935" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Checkout/pages/main.php in OSCommerce Online Merchant 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the value_title parameter, a different vulnerability than CVE-2012-1059.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/osCommerce/oscommerce/commit/a5aeb0448cc333cc4b801c0e01981b218fd9c7df" source="CONFIRM">https://github.com/osCommerce/oscommerce/commit/a5aeb0448cc333cc4b801c0e01981b218fd9c7df</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75900" source="XF">oscommerce-main-xss(75900)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oscommerce" name="online_merchant">
-        <vers num="2.2" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers prev="1" num="3.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2936" published="2012-05-27" name="CVE-2012-2936" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) page parameter to (a) admin/admin_comments.php or (b) admin/admin_links.php; or list parameter in a (3) move or (4) minimize action to (c) admin/admin_index.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75764" source="XF">pliggcms-multiple1-xss(75764)</ref>
-      <ref url="http://www.securityfocus.com/bid/53625" source="BID">53625</ref>
-      <ref url="http://secunia.com/secunia_research/2012-18/" source="MISC" adv="1">http://secunia.com/secunia_research/2012-18/</ref>
-      <ref url="http://secunia.com/advisories/45431" source="SECUNIA" adv="1">45431</ref>
-      <ref url="http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&amp;revision=2461" source="CONFIRM">http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&amp;revision=2461</ref>
-      <ref url="http://osvdb.org/82045" source="OSVDB">82045</ref>
-      <ref url="http://osvdb.org/82044" source="OSVDB">82044</ref>
-      <ref url="http://forums.pligg.com/downloads.php?do=file&amp;id=15" source="CONFIRM">http://forums.pligg.com/downloads.php?do=file&amp;id=15</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pligg" name="pligg_cms">
-        <vers num="1.0.0" edition="rc1" />
-        <vers num="1.0.0" edition="rc2" />
-        <vers num="1.0.0" edition="rc3" />
-        <vers num="1.0.0" edition="rc4" />
-        <vers num="1.0.0" edition="rc5" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.1.0" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.2.0" />
-        <vers prev="1" num="1.2.1" />
-        <vers num="9.5" />
-        <vers num="9.9" />
-        <vers num="9.9.0" edition="beta" />
-        <vers num="9.9.5" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2937" published="2012-05-27" name="CVE-2012-2937" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) list parameter in a move action to admin/admin_index.php, (2) display parameter in a minimize action to admin/admin_index.php, (3) enabled[] parameter to admin/admin_users.php, or (4) msg_id to the module.php in the simple_messaging module.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75765" source="XF">pliggcms-multiple-sql-injection(75765)</ref>
-      <ref url="http://www.securityfocus.com/bid/53625" source="BID">53625</ref>
-      <ref url="http://secunia.com/secunia_research/2012-19/" source="MISC" adv="1">http://secunia.com/secunia_research/2012-19/</ref>
-      <ref url="http://secunia.com/advisories/45431" source="SECUNIA" adv="1">45431</ref>
-      <ref url="http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&amp;revision=2461" source="CONFIRM">http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&amp;revision=2461</ref>
-      <ref url="http://osvdb.org/82050" source="OSVDB">82050</ref>
-      <ref url="http://osvdb.org/82049" source="OSVDB">82049</ref>
-      <ref url="http://osvdb.org/82048" source="OSVDB">82048</ref>
-      <ref url="http://forums.pligg.com/downloads.php?do=file&amp;id=15" source="CONFIRM">http://forums.pligg.com/downloads.php?do=file&amp;id=15</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pligg" name="pligg_cms">
-        <vers num="1.0.0" edition="rc1" />
-        <vers num="1.0.0" edition="rc2" />
-        <vers num="1.0.0" edition="rc3" />
-        <vers num="1.0.0" edition="rc4" />
-        <vers num="1.0.0" edition="rc5" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.1.0" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.2.0" />
-        <vers prev="1" num="1.2.1" />
-        <vers num="9.5" />
-        <vers num="9.9" />
-        <vers num="9.9.0" edition="beta" />
-        <vers num="9.9.5" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2938" published="2012-05-27" name="CVE-2012-2938" modified="2012-05-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Travelon Express 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the holiday name field to (1) holiday_add.php or (2) holiday_view.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75541" source="XF">travelonexpress-multiple-xss(75541)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=530" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=530</ref>
-      <ref url="http://www.securityfocus.com/bid/53500" source="BID">53500</ref>
-      <ref url="http://www.exploit-db.com/exploits/18871" source="EXPLOIT-DB">18871</ref>
-      <ref url="http://osvdb.org/81888" source="OSVDB">81888</ref>
-      <ref url="http://osvdb.org/81887" source="OSVDB">81887</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="itechscripts" name="travelon_express">
-        <vers num="6.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2939" published="2012-05-27" name="CVE-2012-2939" modified="2012-05-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using (1) airline-edit.php, (2) hotel-image-add.php, or (3) hotel-add.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75542" source="XF">travelonexpress-multiple-file-upload(75542)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=530" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=530</ref>
-      <ref url="http://www.securityfocus.com/bid/53500" source="BID">53500</ref>
-      <ref url="http://www.osvdb.org/81889" source="OSVDB">81889</ref>
-      <ref url="http://www.exploit-db.com/exploits/18871" source="EXPLOIT-DB">18871</ref>
-      <ref url="http://iel-sayed.blogspot.com/2012/05/travelon-express-cms-v622-multiple-web.html" source="MISC">http://iel-sayed.blogspot.com/2012/05/travelon-express-cms-v622-multiple-web.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="itechscripts" name="travelon_express">
-        <vers num="6.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2940" published="2012-05-27" name="CVE-2012-2940" modified="2012-05-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted (1) PNG, (2) WMF, (3) PSD, (4) TGA, (5) TTF, (6) BMP, (7) TIFF, or (8) PCX file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75733" source="XF">realdraw-mutliple-files-dos(75733)</ref>
-      <ref url="http://www.securityfocus.com/bid/53636" source="BID">53636</ref>
-      <ref url="http://www.exploit-db.com/exploits/18902" source="EXPLOIT-DB">18902</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mediachance" name="real-draw_pro">
-        <vers num="5.2.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2941" published="2012-05-27" name="CVE-2012-2941" modified="2012-05-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in search/ in Yandex.Server 2010 9.0 Enterprise allows remote attackers to inject arbitrary web script or HTML via the text parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75788" source="XF">yandexserver-text-xss(75788)</ref>
-      <ref url="http://www.securityfocus.com/bid/53622" source="BID">53622</ref>
-      <ref url="http://packetstormsecurity.org/files/112945/Yandex.Server-2010-9.0-Enterprise-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112945/Yandex.Server-2010-9.0-Enterprise-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="yandex" name="yandex.server_2010">
-        <vers num="9.0" edition="" />
-        <vers num="9.0" edition=":enterprise" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2942" published="2012-05-27" name="CVE-2012-2942" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="5.1" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="4.9" CVSS_base_score="5.1">
-    <desc>
-      <descript source="cve">Buffer overflow in the trash buffer in the header capture functionality in HAProxy before 1.4.21, when global.tune.bufsize is set to a value greater than the default and header rewriting is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75777" source="XF">haproxy-trash-bo(75777)</ref>
-      <ref url="http://www.securityfocus.com/bid/53647" source="BID">53647</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/28/1" source="MLIST">[oss-security] 20120528 Duplicate CVE identifiers (CVE-2012-2391 and CVE-2012-2942) assigned to HAProxy issue</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/23/15" source="MLIST">[oss-security] 20120523 Re: CVE request: haproxy trash buffer overflow flaw</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/05/23/12" source="MLIST">[oss-security] 20120523 CVE request: haproxy trash buffer overflow flaw</ref>
-      <ref url="http://secunia.com/advisories/49261" source="SECUNIA" adv="1">49261</ref>
-      <ref url="http://haproxy.1wt.eu/git?p=haproxy-1.4.git;a=commit;h=30297cb17147a8d339eb160226bcc08c91d9530b" source="CONFIRM" adv="1">http://haproxy.1wt.eu/git?p=haproxy-1.4.git;a=commit;h=30297cb17147a8d339eb160226bcc08c91d9530b</ref>
-      <ref url="http://haproxy.1wt.eu/download/1.4/src/CHANGELOG" source="CONFIRM">http://haproxy.1wt.eu/download/1.4/src/CHANGELOG</ref>
-      <ref url="http://haproxy.1wt.eu/#news" source="CONFIRM">http://haproxy.1wt.eu/#news</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="haproxy" name="haproxy">
-        <vers prev="1" num="1.4.20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2943" published="2012-05-27" name="CVE-2012-2943" modified="2012-05-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75768" source="XF">cryptographp-cfg-response-splitting(75768)</ref>
-      <ref url="http://www.securityfocus.com/bid/53609" source="BID">53609</ref>
-      <ref url="http://packetstormsecurity.org/files/112859/Cryptographp-Local-File-Inclusion-HTTP-Response-Splitting.html" source="MISC">http://packetstormsecurity.org/files/112859/Cryptographp-Local-File-Inclusion-HTTP-Response-Splitting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="captcha" name="cryptographp">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2944" published="2012-06-01" name="CVE-2012-2944" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (electric-power outage) via a long string containing non-printable characters.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15514634" source="SUSE">openSUSE-SU-2012:1069</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75980" source="XF">networkupstools-addchar-bo(75980)</ref>
-      <ref url="http://www.securityfocus.com/bid/53743" source="BID">53743</ref>
-      <ref url="http://www.osvdb.org/82409" source="OSVDB">82409</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:087" source="MANDRIVA">MDVSA-2012:087</ref>
-      <ref url="http://trac.networkupstools.org/projects/nut/changeset/3633" source="CONFIRM">http://trac.networkupstools.org/projects/nut/changeset/3633</ref>
-      <ref url="http://secunia.com/advisories/49348" source="SECUNIA" adv="1">49348</ref>
-      <ref url="http://networkupstools.org/docs/user-manual.chunked/apis01.html" source="CONFIRM">http://networkupstools.org/docs/user-manual.chunked/apis01.html</ref>
-      <ref url="http://alioth.debian.org/tracker/?func=detail&amp;aid=313636" source="CONFIRM">http://alioth.debian.org/tracker/?func=detail&amp;aid=313636</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="networkupstools" name="nut">
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.6.0" edition="pre1" />
-        <vers num="2.6.0-1" />
-        <vers num="2.6.1" />
-        <vers num="2.6.1-1" />
-        <vers num="2.6.3-1" />
-        <vers prev="1" num="2.6.3-3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2947" published="2012-06-02" name="CVE-2012-2947" modified="2012-08-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:N/A:P)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">chan_iax2.c in the IAX2 channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1, when a certain mohinterpret setting is enabled, allows remote attackers to cause a denial of service (daemon crash) by placing a call on hold.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027102" source="SECTRACK">1027102</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2493" source="DEBIAN">DSA-2493</ref>
-      <ref url="http://secunia.com/advisories/49303" source="SECUNIA">49303</ref>
-      <ref url="http://downloads.asterisk.org/pub/security/AST-2012-007.html" source="CONFIRM" adv="1">http://downloads.asterisk.org/pub/security/AST-2012-007.html</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-05/0144.html" source="BUGTRAQ">20120529 AST-2012-007: Remote crash vulnerability in IAX2 channel driver.</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="digium" name="certified_asterisk">
-        <vers num="1.8.11" edition="cert" />
-        <vers num="1.8.11" edition="cert1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2948" published="2012-06-02" name="CVE-2012-2948" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by closing a connection in off-hook mode.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75937" source="XF">asterisk-scd-dos(75937)</ref>
-      <ref url="http://www.securitytracker.com/id?1027103" source="SECTRACK">1027103</ref>
-      <ref url="http://www.securityfocus.com/bid/53723" source="BID">53723</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2493" source="DEBIAN">DSA-2493</ref>
-      <ref url="http://secunia.com/advisories/49303" source="SECUNIA">49303</ref>
-      <ref url="http://downloads.asterisk.org/pub/security/AST-2012-008.html" source="CONFIRM">http://downloads.asterisk.org/pub/security/AST-2012-008.html</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-05/0145.html" source="BUGTRAQ">20120529 AST-2012-008: Skinny Channel Driver Remote Crash Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="asterisk" name="certified_asterisk">
-        <vers num="1.8.11" edition="cert" />
-        <vers num="1.8.11" edition="cert1" />
-      </prod>
-      <prod vendor="asterisk" name="open_source">
-        <vers num="1.8.0" edition="beta1" />
-        <vers num="1.8.0" edition="beta2" />
-        <vers num="1.8.0" edition="beta3" />
-        <vers num="1.8.0" edition="beta4" />
-        <vers num="1.8.0" edition="beta5" />
-        <vers num="1.8.0" edition="rc1" />
-        <vers num="1.8.0" edition="rc2" />
-        <vers num="1.8.0" edition="rc3" />
-        <vers num="1.8.0" edition="rc4" />
-        <vers num="1.8.0" edition="rc5" />
-        <vers num="1.8.1" edition="rc1" />
-        <vers num="1.8.10.0" edition="rc1" />
-        <vers num="1.8.10.0" edition="rc2" />
-        <vers num="1.8.10.0" edition="rc3" />
-        <vers num="1.8.10.0" edition="rc4" />
-        <vers num="1.8.11.0" edition="rc2" />
-        <vers num="1.8.11.0" edition="rc3" />
-        <vers num="1.8.12" />
-        <vers prev="1" num="1.8.12.0" edition="rc1" />
-        <vers prev="1" num="1.8.12.0" edition="rc2" />
-        <vers prev="1" num="1.8.12.0" edition="rc3" />
-        <vers num="1.8.2" edition="rc1" />
-        <vers num="1.8.3" edition="rc1" />
-        <vers num="1.8.5" edition="rc1" />
-        <vers num="1.8.5.0" />
-        <vers num="1.8.6.0" edition="rc1" />
-        <vers num="1.8.6.0" edition="rc2" />
-        <vers num="1.8.6.0" edition="rc3" />
-        <vers num="1.8.7.0" edition="rc1" />
-        <vers num="1.8.7.0" edition="rc2" />
-        <vers num="1.8.8.0" edition="rc1" />
-        <vers num="1.8.8.0" edition="rc2" />
-        <vers num="1.8.8.0" edition="rc3" />
-        <vers num="1.8.8.0" edition="rc4" />
-        <vers num="1.8.8.0" edition="rc5" />
-        <vers num="1.8.9.0" edition="rc1" />
-        <vers num="1.8.9.0" edition="rc2" />
-        <vers num="1.8.9.0" edition="rc3" />
-        <vers num="10.0.0" edition="beta1" />
-        <vers num="10.0.0" edition="beta2" />
-        <vers num="10.0.0" edition="rc1" />
-        <vers num="10.0.0" edition="rc2" />
-        <vers num="10.0.0" edition="rc3" />
-        <vers num="10.1.0" edition="rc1" />
-        <vers num="10.1.0" edition="rc2" />
-        <vers num="10.2.0" edition="rc1" />
-        <vers num="10.2.0" edition="rc2" />
-        <vers num="10.2.0" edition="rc3" />
-        <vers num="10.2.0" edition="rc4" />
-        <vers num="10.3" />
-        <vers num="10.3.0" edition="rc2" />
-        <vers num="10.3.0" edition="rc3" />
-        <vers prev="1" num="10.4.0" edition="rc1" />
-        <vers prev="1" num="10.4.0" edition="rc2" />
-        <vers prev="1" num="10.4.0" edition="rc3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2949" published="2012-05-29" name="CVE-2012-2949" modified="2012-05-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The ZTE sync_agent program for Android 2.3.4 on the Score M device uses a hardcoded ztex1609523 password to control access to commands, which allows remote attackers to gain privileges via a crafted application.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.reuters.com/article/2012/05/18/us-zte-phone-idUSBRE84H08J20120518" source="MISC">http://www.reuters.com/article/2012/05/18/us-zte-phone-idUSBRE84H08J20120518</ref>
-      <ref url="http://www.pcmag.com/article2/0,2817,2404639,00.asp" source="MISC">http://www.pcmag.com/article2/0,2817,2404639,00.asp</ref>
-      <ref url="http://blog.mylookout.com/blog/2012/05/21/zte-security-vulnerability" source="MISC">http://blog.mylookout.com/blog/2012/05/21/zte-security-vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="zte" name="score_m">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2951" published="2012-05-29" name="CVE-2012-2951" modified="2012-05-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in plog-rss.php in Plogger allows remote attackers to execute arbitrary SQL commands via the id parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75789" source="XF">plogger-id-sql-injection(75789)</ref>
-      <ref url="http://www.securityfocus.com/bid/53644" source="BID">53644</ref>
-      <ref url="http://packetstormsecurity.org/files/112947/Plogger-Photo-Gallery-SQL-Injection.html" source="MISC">http://packetstormsecurity.org/files/112947/Plogger-Photo-Gallery-SQL-Injection.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="plogger" name="plogger">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2952" published="2012-05-29" name="CVE-2012-2952" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in add_ons.php in Jaow 2.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the add_ons parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75866" source="XF">jaow-addons-sql-injection(75866)</ref>
-      <ref url="http://www.securityfocus.com/bid/53677" source="BID">53677</ref>
-      <ref url="http://www.jaow.net/Article-97" source="MISC">http://www.jaow.net/Article-97</ref>
-      <ref url="http://www.exploit-db.com/exploits/18921" source="EXPLOIT-DB">18921</ref>
-      <ref url="http://secunia.com/advisories/49266" source="SECUNIA" adv="1">49266</ref>
-      <ref url="http://osvdb.org/82231" source="OSVDB">82231</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="jaow" name="jaow">
-        <vers num="2.1" />
-        <vers num="2.3" />
-        <vers num="2.4" />
-        <vers prev="1" num="2.4.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2953" published="2012-07-23" name="CVE-2012-2953" modified="2012-07-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;suid=20120720_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;suid=20120720_00</ref>
-      <ref url="http://www.securityfocus.com/bid/54426" source="BID" adv="1">54426</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="web_gateway">
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2955" published="2012-07-20" name="CVE-2012-2955" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allow remote attackers to inject arbitrary web script or HTML via the query string.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76798" source="XF">lotus-protector-xss(76798)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21605626" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21605626</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="lotus_protector_for_mail_security">
-        <vers num="2.1" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.8" />
-      </prod>
-      <prod vendor="ibm" name="proventia_network_mail_security_system">
-        <vers num="ms3004" />
-      </prod>
-      <prod vendor="ibm" name="proventia_network_mail_security_system_firmware">
-        <vers num="2.5" />
-        <vers num="2.5.0.2" />
-        <vers num="2.5.1" />
-        <vers num="2.6" />
-        <vers num="2.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2957" published="2012-07-23" name="CVE-2012-2957" modified="2012-07-24" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file inclusion" issue.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;suid=20120720_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;suid=20120720_00</ref>
-      <ref url="http://www.securityfocus.com/bid/54429" source="BID">54429</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="web_gateway">
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2959" published="2012-06-11" name="CVE-2012-2959" modified="2012-06-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="5.1" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="4.9" CVSS_base_score="5.1">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in password-manager/changePasswords.do in BMC Identity Management Suite 7.5.00.103 allows remote attackers to hijack the authentication of administrators for requests that change passwords.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/221180" source="CERT-VN">VU#221180</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bmc" name="identity_management_suite">
-        <vers num="7.5.00.103" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2960" published="2012-08-08" name="CVE-2012-2960" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbitrary web script or HTML via a crafted file.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/960468" source="CERT-VN">VU#960468</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="arcsight_connector_appliance">
-        <vers num="c1400" />
-        <vers num="c3400" />
-        <vers num="c5400" />
-      </prod>
-      <prod vendor="hp" name="arcsight_logger_appliance">
-        <vers num="l7400-san" />
-      </prod>
-      <prod vendor="hp" name="arcsight_connector_appliance_firmware">
-        <vers num="6.0.0.60023.2" />
-        <vers num="6.2.0.6244.0" />
-      </prod>
-      <prod vendor="hp" name="arcsight_logger_appliance_firmware">
-        <vers num="5.2.0.6288.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2961" published="2012-07-23" name="CVE-2012-2961" modified="2012-07-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;suid=20120720_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;suid=20120720_00</ref>
-      <ref url="http://www.securityfocus.com/bid/54425" source="BID" adv="1">54425</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="web_gateway">
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2962" published="2012-07-30" name="CVE-2012-2962" modified="2012-07-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/404051" source="CERT-VN">VU#404051</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77148" source="XF">scrutinizer-statusfilter-sql-injection(77148)</ref>
-      <ref url="http://www.sonicwall.com/shared/download/Dell_SonicWALL_Scrutinizer_Service_Bulletin_for_SQL_injection_vulnerability_CVE.pdf" source="CONFIRM" adv="1">http://www.sonicwall.com/shared/download/Dell_SonicWALL_Scrutinizer_Service_Bulletin_for_SQL_injection_vulnerability_CVE.pdf</ref>
-      <ref url="http://www.securityfocus.com/bid/54625" source="BID">54625</ref>
-      <ref url="http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html" source="CONFIRM">http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html</ref>
-      <ref url="http://www.osvdb.org/84232" source="OSVDB">84232</ref>
-      <ref url="http://www.exploit-db.com/exploits/20033" source="EXPLOIT-DB">20033</ref>
-      <ref url="http://secunia.com/advisories/50052" source="SECUNIA" adv="1">50052</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dell" name="sonicwall_scrutinizer">
-        <vers num="8.6.2" edition="-" />
-        <vers num="8.6.2" edition="-:free" />
-        <vers num="9.0.0" edition="-" />
-        <vers num="9.0.0" edition="-:free" />
-        <vers num="9.0.1" edition="-" />
-        <vers num="9.0.1" edition="-:free" />
-        <vers prev="1" num="9.5.0" edition="-" />
-        <vers prev="1" num="9.5.0" edition="-:free" />
-      </prod>
-      <prod vendor="dell" name="sonicwall_scrutinizer_with_flow_analytics_module">
-        <vers num="8.6.2" edition="-" />
-        <vers num="8.6.2" edition="-:pay" />
-        <vers num="9.0.0" edition="-" />
-        <vers num="9.0.0" edition="-:pay" />
-        <vers num="9.0.1" edition="-" />
-        <vers num="9.0.1" edition="-:pay" />
-        <vers prev="1" num="9.5.0" edition="-" />
-        <vers prev="1" num="9.5.0" edition="-:pay" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2963" published="2012-08-12" name="CVE-2012-2963" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The administrative interface in the embedded web server on the BreakingPoint Storm appliance before 3.0 does not require authentication for the gwt/BugReport script, which allows remote attackers to obtain sensitive information by downloading a .tgz file.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/520430" source="CERT-VN">VU#520430</ref>
-      <ref url="http://www.secureworks.com/research/advisories/SWRX-2012-005/" source="MISC">http://www.secureworks.com/research/advisories/SWRX-2012-005/</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8GANCC" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8GANCC</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="breakingpointsystems" name="breakingpoint_storm_appliance">
-        <vers num="-" />
-      </prod>
-      <prod vendor="breakingpointsystems" name="breakingpoint_storm_appliance_ctm">
-        <vers num="1.2" />
-        <vers num="1.4" />
-        <vers num="1.5" />
-        <vers prev="1" num="2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2964" published="2012-08-12" name="CVE-2012-2964" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a session from a GUI administrative client, which allows remote attackers to obtain sensitive information by sniffing the network for XML documents.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8GANCC" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8GANCC</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/520430" source="CERT-VN">VU#520430</ref>
-      <ref url="http://www.secureworks.com/research/advisories/SWRX-2012-006/" source="MISC">http://www.secureworks.com/research/advisories/SWRX-2012-006/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="breakingpointsystems" name="breakingpoint_storm_appliance">
-        <vers num="-" />
-      </prod>
-      <prod vendor="breakingpointsystems" name="breakingpoint_storm_appliance_ctm">
-        <vers num="1.2" />
-        <vers num="1.4" />
-        <vers num="1.5" />
-        <vers prev="1" num="2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2965" published="2012-08-12" name="CVE-2012-2965" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/309979" source="CERT-VN">VU#309979</ref>
-      <ref url="http://en.securitylab.ru/lab/PT-2012-05" source="MISC">http://en.securitylab.ru/lab/PT-2012-05</ref>
-      <ref url="http://en.securitylab.ru/lab/" source="MISC">http://en.securitylab.ru/lab/</ref>
-      <ref url="http://caucho.com/resin-4.0/changes/changes.xtp" source="MISC">http://caucho.com/resin-4.0/changes/changes.xtp</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="caucho" name="resin">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.11" />
-        <vers num="2.1.12" />
-        <vers num="2.1.13" />
-        <vers num="2.1.14" />
-        <vers num="2.1.15" />
-        <vers num="2.1.16" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.1.9" />
-        <vers num="2.1.snap" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.19" />
-        <vers num="3.0.2" edition="beta" />
-        <vers num="3.0.20" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.10" />
-        <vers num="4.0.11" />
-        <vers num="4.0.12" />
-        <vers num="4.0.13" />
-        <vers num="4.0.14" />
-        <vers num="4.0.15" />
-        <vers num="4.0.16" />
-        <vers num="4.0.17" />
-        <vers num="4.0.18" />
-        <vers num="4.0.19" />
-        <vers num="4.0.2" />
-        <vers num="4.0.20" />
-        <vers num="4.0.21" />
-        <vers num="4.0.22" />
-        <vers num="4.0.23" />
-        <vers num="4.0.24" />
-        <vers num="4.0.25" />
-        <vers num="4.0.26" />
-        <vers num="4.0.27" />
-        <vers prev="1" num="4.0.28" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" />
-        <vers num="4.0.8" />
-        <vers num="4.0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2966" published="2012-08-12" name="CVE-2012-2966" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/309979" source="CERT-VN">VU#309979</ref>
-      <ref url="http://en.securitylab.ru/lab/PT-2012-05" source="MISC">http://en.securitylab.ru/lab/PT-2012-05</ref>
-      <ref url="http://en.securitylab.ru/lab/" source="MISC">http://en.securitylab.ru/lab/</ref>
-      <ref url="http://caucho.com/resin-4.0/changes/changes.xtp" source="MISC">http://caucho.com/resin-4.0/changes/changes.xtp</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="caucho" name="resin">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.11" />
-        <vers num="2.1.12" />
-        <vers num="2.1.13" />
-        <vers num="2.1.14" />
-        <vers num="2.1.15" />
-        <vers num="2.1.16" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.1.9" />
-        <vers num="2.1.snap" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.19" />
-        <vers num="3.0.2" edition="beta" />
-        <vers num="3.0.20" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.10" />
-        <vers num="4.0.11" />
-        <vers num="4.0.12" />
-        <vers num="4.0.13" />
-        <vers num="4.0.14" />
-        <vers num="4.0.15" />
-        <vers num="4.0.16" />
-        <vers num="4.0.17" />
-        <vers num="4.0.18" />
-        <vers num="4.0.19" />
-        <vers num="4.0.2" />
-        <vers num="4.0.20" />
-        <vers num="4.0.21" />
-        <vers num="4.0.22" />
-        <vers num="4.0.23" />
-        <vers num="4.0.24" />
-        <vers num="4.0.25" />
-        <vers num="4.0.26" />
-        <vers num="4.0.27" />
-        <vers prev="1" num="4.0.28" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" />
-        <vers num="4.0.8" />
-        <vers num="4.0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2967" published="2012-08-12" name="CVE-2012-2967" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/309979" source="CERT-VN">VU#309979</ref>
-      <ref url="http://en.securitylab.ru/lab/PT-2012-05" source="MISC">http://en.securitylab.ru/lab/PT-2012-05</ref>
-      <ref url="http://en.securitylab.ru/lab/" source="MISC">http://en.securitylab.ru/lab/</ref>
-      <ref url="http://caucho.com/resin-4.0/changes/changes.xtp" source="MISC">http://caucho.com/resin-4.0/changes/changes.xtp</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="caucho" name="resin">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.11" />
-        <vers num="2.1.12" />
-        <vers num="2.1.13" />
-        <vers num="2.1.14" />
-        <vers num="2.1.15" />
-        <vers num="2.1.16" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.1.9" />
-        <vers num="2.1.snap" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.19" />
-        <vers num="3.0.2" edition="beta" />
-        <vers num="3.0.20" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.10" />
-        <vers num="4.0.11" />
-        <vers num="4.0.12" />
-        <vers num="4.0.13" />
-        <vers num="4.0.14" />
-        <vers num="4.0.15" />
-        <vers num="4.0.16" />
-        <vers num="4.0.17" />
-        <vers num="4.0.18" />
-        <vers num="4.0.19" />
-        <vers num="4.0.2" />
-        <vers num="4.0.20" />
-        <vers num="4.0.21" />
-        <vers num="4.0.22" />
-        <vers num="4.0.23" />
-        <vers num="4.0.24" />
-        <vers num="4.0.25" />
-        <vers num="4.0.26" />
-        <vers num="4.0.27" />
-        <vers prev="1" num="4.0.28" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" />
-        <vers num="4.0.8" />
-        <vers num="4.0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2968" published="2012-08-12" name="CVE-2012-2968" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbitrary directories via a .. (dot dot) in a pathname within an HTTP request.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/309979" source="CERT-VN">VU#309979</ref>
-      <ref url="http://en.securitylab.ru/lab/PT-2012-05" source="MISC">http://en.securitylab.ru/lab/PT-2012-05</ref>
-      <ref url="http://en.securitylab.ru/lab/" source="MISC">http://en.securitylab.ru/lab/</ref>
-      <ref url="http://caucho.com/resin-4.0/changes/changes.xtp" source="MISC">http://caucho.com/resin-4.0/changes/changes.xtp</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="caucho" name="resin">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.11" />
-        <vers num="2.1.12" />
-        <vers num="2.1.13" />
-        <vers num="2.1.14" />
-        <vers num="2.1.15" />
-        <vers num="2.1.16" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.1.9" />
-        <vers num="2.1.snap" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.19" />
-        <vers num="3.0.2" edition="beta" />
-        <vers num="3.0.20" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.10" />
-        <vers num="4.0.11" />
-        <vers num="4.0.12" />
-        <vers num="4.0.13" />
-        <vers num="4.0.14" />
-        <vers num="4.0.15" />
-        <vers num="4.0.16" />
-        <vers num="4.0.17" />
-        <vers num="4.0.18" />
-        <vers num="4.0.19" />
-        <vers num="4.0.2" />
-        <vers num="4.0.20" />
-        <vers num="4.0.21" />
-        <vers num="4.0.22" />
-        <vers num="4.0.23" />
-        <vers num="4.0.24" />
-        <vers num="4.0.25" />
-        <vers num="4.0.26" />
-        <vers num="4.0.27" />
-        <vers prev="1" num="4.0.28" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" />
-        <vers num="4.0.8" />
-        <vers num="4.0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2969" published="2012-08-12" name="CVE-2012-2969" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/309979" source="CERT-VN">VU#309979</ref>
-      <ref url="http://en.securitylab.ru/lab/PT-2012-05" source="MISC">http://en.securitylab.ru/lab/PT-2012-05</ref>
-      <ref url="http://en.securitylab.ru/lab/" source="MISC">http://en.securitylab.ru/lab/</ref>
-      <ref url="http://caucho.com/resin-4.0/changes/changes.xtp" source="MISC">http://caucho.com/resin-4.0/changes/changes.xtp</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="caucho" name="resin">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.11" />
-        <vers num="2.1.12" />
-        <vers num="2.1.13" />
-        <vers num="2.1.14" />
-        <vers num="2.1.15" />
-        <vers num="2.1.16" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.1.9" />
-        <vers num="2.1.snap" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.19" />
-        <vers num="3.0.2" edition="beta" />
-        <vers num="3.0.20" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.10" />
-        <vers num="4.0.11" />
-        <vers num="4.0.12" />
-        <vers num="4.0.13" />
-        <vers num="4.0.14" />
-        <vers num="4.0.15" />
-        <vers num="4.0.16" />
-        <vers num="4.0.17" />
-        <vers num="4.0.18" />
-        <vers num="4.0.19" />
-        <vers num="4.0.2" />
-        <vers num="4.0.20" />
-        <vers num="4.0.21" />
-        <vers num="4.0.22" />
-        <vers num="4.0.23" />
-        <vers num="4.0.24" />
-        <vers num="4.0.25" />
-        <vers num="4.0.26" />
-        <vers num="4.0.27" />
-        <vers prev="1" num="4.0.28" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" />
-        <vers num="4.0.8" />
-        <vers num="4.0.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2970" published="2012-07-09" name="CVE-2012-2970" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The Synel SY-780/A Time &amp; Attendance terminal allows remote attackers to cause a denial of service (device hang) via network traffic to port (1) 1641, (2) 3734, or (3) 3735.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/154307" source="CERT-VN">VU#154307</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="synel" name="sy-780/a_time_&amp;_attendance_terminal">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2974" published="2012-07-19" name="CVE-2012-2974" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The web interface on the SMC SMC8024L2 switch allows remote attackers to bypass authentication and obtain administrative access via a direct request to a .html file under (1) status/, (2) system/, (3) ports/, (4) trunks/, (5) vlans/, (6) qos/, (7) rstp/, (8) dot1x/, (9) security/, (10) igmps/, or (11) snmp/.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/377915" source="CERT-VN">VU#377915</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="smc" name="smc8024l2_switch">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2975" published="2012-09-11" name="CVE-2012-2975" modified="2012-09-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the traffic overview page on the F5 ASM appliance 10.0.0 through 11.2.0 HF2 allows remote attackers to inject arbitrary web script or HTML via crafted requests that are later listed on a summary page.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/143395" source="CERT-VN">VU#143395</ref>
-      <ref url="https://support.f5.com/kb/en-us/solutions/public/13000/800/sol13838.html" source="MISC">https://support.f5.com/kb/en-us/solutions/public/13000/800/sol13838.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="f5" name="application_security_manager_appliance">
-        <vers num="10.0.0" />
-        <vers num="11.2.0" edition="hf2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2976" published="2012-07-23" name="CVE-2012-2976" modified="2012-07-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related to an "injection" issue.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;suid=20120720_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;suid=20120720_00</ref>
-      <ref url="http://www.securityfocus.com/bid/54427" source="BID">54427</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="web_gateway">
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2977" published="2012-07-23" name="CVE-2012-2977" modified="2012-07-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwords via crafted input to an application script.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;suid=20120720_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;suid=20120720_00</ref>
-      <ref url="http://www.securityfocus.com/bid/54430" source="BID">54430</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="web_gateway">
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2978" published="2012-07-27" name="CVE-2012-2978" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/624931" source="CERT-VN">VU#624931</ref>
-      <ref url="http://www.nlnetlabs.nl/downloads/CVE-2012-2978.txt" source="CONFIRM" adv="1">http://www.nlnetlabs.nl/downloads/CVE-2012-2978.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nlnetlabs" name="nsd">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.2.0" />
-        <vers num="3.2.1" />
-        <vers num="3.2.10" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" />
-        <vers num="3.2.8" />
-        <vers num="3.2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2980" published="2012-08-21" name="CVE-2012-2980" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:N/A:N)" CVSS_score="7.1" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="8.6" CVSS_base_score="7.1">
-    <desc>
-      <descript source="cve">The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&amp;T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remote attackers to obtain sensitive information via a crafted application, as demonstrated by PIN numbers, telephone numbers, and text messages.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/251635" source="CERT-VN">VU#251635</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8R5LD6" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8R5LD6</ref>
-      <ref url="http://www.htc.com/www/help/app-security-fix/" source="MISC">http://www.htc.com/www/help/app-security-fix/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="att" name="status">
-        <vers num="-" />
-      </prod>
-      <prod vendor="htc" name="chacha">
-        <vers num="-" />
-      </prod>
-      <prod vendor="htc" name="desire">
-        <vers num="-" />
-      </prod>
-      <prod vendor="htc" name="merge">
-        <vers num="-" />
-      </prod>
-      <prod vendor="samsung" name="galaxy_s">
-        <vers num="-" />
-      </prod>
-      <prod vendor="sprint" name="evo_shift_4g">
-        <vers num="-" />
-      </prod>
-      <prod vendor="t-mobile" name="g2">
-        <vers num="-" />
-      </prod>
-      <prod vendor="t-mobile" name="mytouch_3g_slide">
-        <vers num="-" />
-      </prod>
-      <prod vendor="t-mobile" name="mytouch_4g_slide">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2981" published="2012-09-11" name="CVE-2012-2981" modified="2012-09-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary Perl code via a crafted file associated with the type (aka monitor type name) parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/788478" source="CERT-VN" patch="1">VU#788478</ref>
-      <ref url="https://github.com/webmin/webmin/commit/ed7365064c189b8f136a9f952062249167d1bd9e" source="CONFIRM" patch="1">https://github.com/webmin/webmin/commit/ed7365064c189b8f136a9f952062249167d1bd9e</ref>
-      <ref url="http://www.americaninfosec.com/research/dossiers/AISG-12-000.pdf" source="MISC">http://www.americaninfosec.com/research/dossiers/AISG-12-000.pdf</ref>
-      <ref url="http://americaninfosec.com/research/index.html" source="MISC">http://americaninfosec.com/research/index.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gentoo" name="webmin">
-        <vers num="1.140" />
-        <vers num="1.150" />
-        <vers num="1.160" />
-        <vers num="1.170" />
-        <vers num="1.180" />
-        <vers num="1.200" />
-        <vers num="1.210" />
-        <vers num="1.220" />
-        <vers num="1.230" />
-        <vers num="1.240" />
-        <vers num="1.260" />
-        <vers num="1.270" />
-        <vers num="1.280" />
-        <vers num="1.290" />
-        <vers num="1.300" />
-        <vers num="1.310" />
-        <vers num="1.320" />
-        <vers num="1.330" />
-        <vers num="1.340" />
-        <vers num="1.370" />
-        <vers num="1.380" />
-        <vers num="1.390" />
-        <vers num="1.400" />
-        <vers num="1.410" />
-        <vers num="1.420" />
-        <vers num="1.430" />
-        <vers num="1.440" />
-        <vers num="1.450" />
-        <vers num="1.470" />
-        <vers num="1.480" />
-        <vers num="1.500" />
-        <vers num="1.510" />
-        <vers num="1.520" />
-        <vers num="1.530" />
-        <vers num="1.550" />
-        <vers num="1.560" />
-        <vers num="1.570" />
-        <vers num="1.580" />
-        <vers prev="1" num="1.590" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2982" published="2012-09-11" name="CVE-2012-2982" modified="2012-09-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/788478" source="CERT-VN" patch="1">VU#788478</ref>
-      <ref url="https://github.com/webmin/webmin/commit/1f1411fe7404ec3ac03e803cfa7e01515e71a213" source="CONFIRM" patch="1">https://github.com/webmin/webmin/commit/1f1411fe7404ec3ac03e803cfa7e01515e71a213</ref>
-      <ref url="http://www.americaninfosec.com/research/dossiers/AISG-12-001.pdf" source="MISC">http://www.americaninfosec.com/research/dossiers/AISG-12-001.pdf</ref>
-      <ref url="http://americaninfosec.com/research/index.html" source="MISC">http://americaninfosec.com/research/index.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gentoo" name="webmin">
-        <vers num="1.140" />
-        <vers num="1.150" />
-        <vers num="1.160" />
-        <vers num="1.170" />
-        <vers num="1.180" />
-        <vers num="1.200" />
-        <vers num="1.210" />
-        <vers num="1.220" />
-        <vers num="1.230" />
-        <vers num="1.240" />
-        <vers num="1.260" />
-        <vers num="1.270" />
-        <vers num="1.280" />
-        <vers num="1.290" />
-        <vers num="1.300" />
-        <vers num="1.310" />
-        <vers num="1.320" />
-        <vers num="1.330" />
-        <vers num="1.340" />
-        <vers num="1.370" />
-        <vers num="1.380" />
-        <vers num="1.390" />
-        <vers num="1.400" />
-        <vers num="1.410" />
-        <vers num="1.420" />
-        <vers num="1.430" />
-        <vers num="1.440" />
-        <vers num="1.450" />
-        <vers num="1.470" />
-        <vers num="1.480" />
-        <vers num="1.500" />
-        <vers num="1.510" />
-        <vers num="1.520" />
-        <vers num="1.530" />
-        <vers num="1.550" />
-        <vers num="1.560" />
-        <vers num="1.570" />
-        <vers num="1.580" />
-        <vers prev="1" num="1.590" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2983" published="2012-09-11" name="CVE-2012-2983" modified="2012-09-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allows remote attackers to read arbitrary files via the file field.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/788478" source="CERT-VN" patch="1">VU#788478</ref>
-      <ref url="https://github.com/webmin/webmin/commit/4cd7bad70e23e4e19be8ccf7b9f245445b2b3b80" source="CONFIRM">https://github.com/webmin/webmin/commit/4cd7bad70e23e4e19be8ccf7b9f245445b2b3b80</ref>
-      <ref url="http://www.americaninfosec.com/research/dossiers/AISG-12-002.pdf" source="MISC">http://www.americaninfosec.com/research/dossiers/AISG-12-002.pdf</ref>
-      <ref url="http://americaninfosec.com/research/index.html" source="MISC">http://americaninfosec.com/research/index.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gentoo" name="webmin">
-        <vers num="1.140" />
-        <vers num="1.150" />
-        <vers num="1.160" />
-        <vers num="1.170" />
-        <vers num="1.180" />
-        <vers num="1.200" />
-        <vers num="1.210" />
-        <vers num="1.220" />
-        <vers num="1.230" />
-        <vers num="1.240" />
-        <vers num="1.260" />
-        <vers num="1.270" />
-        <vers num="1.280" />
-        <vers num="1.290" />
-        <vers num="1.300" />
-        <vers num="1.310" />
-        <vers num="1.320" />
-        <vers num="1.330" />
-        <vers num="1.340" />
-        <vers num="1.370" />
-        <vers num="1.380" />
-        <vers num="1.390" />
-        <vers num="1.400" />
-        <vers num="1.410" />
-        <vers num="1.420" />
-        <vers num="1.430" />
-        <vers num="1.440" />
-        <vers num="1.450" />
-        <vers num="1.470" />
-        <vers num="1.480" />
-        <vers num="1.500" />
-        <vers num="1.510" />
-        <vers num="1.520" />
-        <vers num="1.530" />
-        <vers num="1.550" />
-        <vers num="1.560" />
-        <vers num="1.570" />
-        <vers num="1.580" />
-        <vers prev="1" num="1.590" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-2984" published="2012-08-24" name="CVE-2012-2984" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in monitor/m_overview.ink in Websense Content Gateway before 7.7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) menu or (2) item parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/318779" source="CERT-VN">VU#318779</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="websense" name="websense_content_content_gateway">
-        <vers prev="1" num="7.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-2985" published="2012-08-21" name="CVE-2012-2985" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in InsertDocument.aspx in CuteSoft Cute Editor 6.4 allows remote authenticated users to inject arbitrary web script or HTML via the _UploadID parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/247235" source="CERT-VN">VU#247235</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cutesoft_components" name="cute_editor">
-        <vers num="6.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2986" published="2012-08-20" name="CVE-2012-2986" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="7.7" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="5.1" CVSS_base_score="7.7">
-    <desc>
-      <descript source="cve">lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) first, (2) third, or (3) fourth parameter.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4361.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/441363" source="CERT-VN">VU#441363</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="san/iq">
-        <vers num="9.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-2990" published="2012-08-24" name="CVE-2012-2990" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The MASetupCaller ActiveX control before 1.4.2012.508 in MASetupCaller.dll in MarkAny ContentSAFER, as distributed in Samsung KIES before 2.3.2.12074_13_13, does not properly implement unspecified methods, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a crafted HTML document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/663809" source="CERT-VN" patch="1">VU#663809</ref>
-      <ref url="http://www.krcert.or.kr/kor/data/secNoticeView.jsp?p_bulletin_writing_sequence=931" source="MISC">http://www.krcert.or.kr/kor/data/secNoticeView.jsp?p_bulletin_writing_sequence=931</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="samsung" name="kies">
-        <vers prev="1" num="2.3.2.12074" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-2993" published="2012-09-17" name="CVE-2012-2993" modified="2012-09-17">
-    <desc>
-      <descript source="cve">Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL server for the (1) POP3, (2) IMAP, or (3) SMTP protocol via an arbitrary valid certificate.</descript>
-    </desc>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/389795" source="CERT-VN">VU#389795</ref>
-    </refs>
-  </entry>
-  <entry type="CVE" seq="2012-2994" published="2012-09-17" name="CVE-2012-2994" modified="2012-09-17">
-    <desc>
-      <descript source="cve">The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number, which makes it easier for remote attackers to obtain access via a brute-force attack.</descript>
-    </desc>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/591667" source="CERT-VN">VU#591667</ref>
-    </refs>
-  </entry>
-  <entry type="CVE" seq="2012-2995" published="2012-09-17" name="CVE-2012-2995" modified="2012-09-17">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394 allow remote attackers to inject arbitrary web script or HTML via (1) the wrsApprovedURL parameter to addRuleAttrWrsApproveUrl.imss or (2) the src parameter to initUpdSchPage.imss.</descript>
-    </desc>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/471364" source="CERT-VN">VU#471364</ref>
-    </refs>
-  </entry>
-  <entry type="CVE" seq="2012-2996" published="2012-09-17" name="CVE-2012-2996" modified="2012-09-17">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in saveAccountSubTab.imss in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394 allows remote attackers to hijack the authentication of administrators for requests that create admin accounts via a saveAuth action.</descript>
-    </desc>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/471364" source="CERT-VN">VU#471364</ref>
-    </refs>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3003" published="2012-06-08" name="CVE-2012-3003" modified="2012-06-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Open redirect vulnerability in an unspecified web application in Siemens WinCC 7.0 SP3 before Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a GET request.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-158-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-158-01.pdf</ref>
-      <ref url="http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-223158.pdf" source="CONFIRM" adv="1">http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-223158.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="siemens" name="wincc">
-        <vers num="7.0" edition="sp3" />
-        <vers num="7.0" edition="sp3:update_1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3004" published="2012-09-08" name="CVE-2012-3004" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse (1) realwin.dll or (2) keyhook.dll file in the current working directory.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426 Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-251-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-251-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realflex" name="flexview">
-        <vers prev="1" num="3.1.85" />
-      </prod>
-      <prod vendor="realflex" name="realwin">
-        <vers num="1.06" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers prev="1" num="2.1.12" />
-      </prod>
-      <prod vendor="realflex" name="realwindemo">
-        <vers prev="1" num="2.1.12" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3005" published="2012-07-26" name="CVE-2012-3005" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-177-02.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-177-02.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="invensys" name="foxboro_control_software">
-        <vers num="3.1" />
-        <vers num="4.0" />
-      </prod>
-      <prod vendor="invensys" name="infusion_ce/fe/scada">
-        <vers prev="1" num="2.5" />
-      </prod>
-      <prod vendor="invensys" name="intouch">
-        <vers prev="1" num="2012" />
-      </prod>
-      <prod vendor="invensys" name="intouch/wonderware_application_server">
-        <vers num="10.0" />
-        <vers num="10.5" />
-        <vers prev="1" num="2012" />
-      </prod>
-      <prod vendor="invensys" name="wonderware_historian">
-        <vers prev="1" num="10.0" edition="sp1" />
-      </prod>
-      <prod vendor="invensys" name="wonderware_inbatch">
-        <vers prev="1" num="9.5" edition="sp1" />
-      </prod>
-      <prod vendor="invensys" name="wonderware_information_server">
-        <vers num="3.1" />
-        <vers num="4.0" edition="sp1" />
-        <vers prev="1" num="4.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3006" published="2012-06-19" name="CVE-2012-3006" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:C/I:C/A:C)" CVSS_score="7.1" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.1">
-    <desc>
-      <descript source="cve">The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof (1) HTTPS or (2) SSH servers by predicting a key value.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-167-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-167-01.pdf</ref>
-      <ref url="https://freedom-to-tinker.com/blog/nadiah/new-research-theres-no-need-panic-over-factorable-keys-just-mind-your-ps-and-qs" source="MISC">https://freedom-to-tinker.com/blog/nadiah/new-research-theres-no-need-panic-over-factorable-keys-just-mind-your-ps-and-qs</ref>
-      <ref url="http://www.innominate.com/data/downloads/software/innominate_security_advisory_20120614_001.pdf" source="CONFIRM" adv="1">http://www.innominate.com/data/downloads/software/innominate_security_advisory_20120614_001.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="innominate" name="eagle_mguard">
-        <vers num="bd-301010" />
-        <vers num="hw-201000" />
-      </prod>
-      <prod vendor="innominate" name="mguard_blade">
-        <vers num="hw-104020" />
-        <vers num="hw-104050" />
-      </prod>
-      <prod vendor="innominate" name="mguard_delta">
-        <vers prev="1" num="bd-201000" />
-        <vers prev="1" num="hw-103050" />
-      </prod>
-      <prod vendor="innominate" name="mguard_industrial_rs">
-        <vers num="bd-501000" />
-        <vers num="bd-501010" />
-        <vers num="bd-501020" />
-        <vers num="hw-105000" />
-      </prod>
-      <prod vendor="innominate" name="mguard_pci">
-        <vers num="bd-111010" />
-        <vers num="bd-111020" />
-        <vers num="hw-102020" />
-        <vers num="hw-102050" />
-      </prod>
-      <prod vendor="innominate" name="mguard_smart">
-        <vers num="bd-101010" />
-        <vers prev="1" num="bd-101020" />
-        <vers num="hw-101020" />
-        <vers prev="1" num="hw-101050" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3007" published="2012-07-04" name="CVE-2012-3007" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform software suite, as used in InTouch/Wonderware Application Server IT before 10.5 and WAS before 3.5, DASABCIP before 4.1 SP2, DASSiDirect before 3.0, DAServer Runtime Components before 3.0 SP2, and other products, allows remote attackers to cause a denial of service (daemon crash or hang) via a long Unicode string.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-171-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-171-01.pdf</ref>
-      <ref url="http://www.securityfocus.com/bid/53563" source="BID">53563</ref>
-      <ref url="http://secunia.com/advisories/49173" source="SECUNIA">49173</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="invensys" name="dasabcip">
-        <vers prev="1" num="4.1" edition="sp1" />
-      </prod>
-      <prod vendor="invensys" name="daserver_runtime_components">
-        <vers prev="1" num="3.0" edition="sp1" />
-      </prod>
-      <prod vendor="invensys" name="dassidirect">
-        <vers prev="1" num="2.0" />
-      </prod>
-      <prod vendor="invensys" name="intouch/wonderware_application_server">
-        <vers prev="1" num="10.0" />
-      </prod>
-      <prod vendor="invensys" name="wonderware_application_server">
-        <vers num="3.0" />
-        <vers num="3.0.200" edition="sp2" />
-        <vers prev="1" num="3.1" edition="sp1" />
-        <vers prev="1" num="3.1" edition="sp2" />
-        <vers num="3.1.201" edition="sp2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3008" published="2012-07-20" name="CVE-2012-3008" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:C/I:C/A:C)" CVSS_score="8.5" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="6.8" CVSS_base_score="8.5">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-201-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-201-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="osisoft" name="pi_opc_da_interface">
-        <vers num="2.3.16.16" />
-        <vers prev="1" num="2.3.17.18" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3009" published="2012-08-16" name="CVE-2012-3009" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:C/I:C/A:C)" CVSS_score="8.5" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="6.8" CVSS_base_score="8.5">
-    <desc>
-      <descript source="cve">Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-227-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-227-01.pdf</ref>
-      <ref url="http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-312568.pdf" source="CONFIRM" adv="1">http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-312568.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="siemens" name="comos">
-        <vers num="10.0" />
-        <vers prev="1" num="9.1" />
-        <vers num="9.2" edition="03" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3012" published="2012-09-05" name="CVE-2012-3012" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The Arbiter Power Sentinel 1133A device with firmware before 11Jun2012 Rev 421 allows remote attackers to cause a denial of service (Ethernet outage) via unspecified Ethernet traffic that fills a buffer, as demonstrated by a port scan.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-01.pdf</ref>
-      <ref url="http://www.arbiter.com/news/index.php?id=261" source="CONFIRM">http://www.arbiter.com/news/index.php?id=261</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="arbiter" name="power_sentinel">
-        <vers num="1133a" />
-      </prod>
-      <prod vendor="arbiter" name="power_sentinel_1133a_firmware">
-        <vers prev="1" num="11jun2012" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3013" published="2012-09-06" name="CVE-2012-3013" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices have default passwords for unspecified Web Based Management accounts, which makes it easier for remote attackers to obtain administrative access via a TCP session.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdf</ref>
-      <ref url="http://www.wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdf" source="CONFIRM" adv="1">http://www.wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wago" name="wago_i/o_system_758_industrial_pc_device">
-        <vers num="758-870" />
-        <vers num="758-874" />
-        <vers num="758-875" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3014" published="2012-09-04" name="CVE-2012-3014" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="7.7" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="5.1" CVSS_base_score="7.7">
-    <desc>
-      <descript source="cve">The Management Software application in GarrettCom Magnum MNS-6K before 4.4.0, and 14.x before 14.4.0, has a hardcoded password for an administrative account, which allows local users to gain privileges via unspecified vectors.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per http://www.us-cert.gov/control_systems/pdf/ICSA-12-243-01.pdf 
-
-"An attacker with access to an established user account could remotely log into the affected system and elevate privileges to the administrative level, thereby circumventing the physical connect safeguards in place for administrative functions."</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-243-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-243-01.pdf</ref>
-      <ref url="http://www.garrettcom.com/techsupport/6k_dl/6k440_rn.pdf" source="MISC" adv="1">http://www.garrettcom.com/techsupport/6k_dl/6k440_rn.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="garrettcom" name="magnum_managed_networks_software-6k">
-        <vers num="4.2" />
-        <vers num="4.2.1" />
-        <vers num="4.3.0" />
-        <vers prev="1" num="4.3.1" />
-      </prod>
-      <prod vendor="garrettcom" name="magnum_managed_networks_software-6k_secure">
-        <vers num="14.2" />
-        <vers num="14.2.1" />
-        <vers num="14.3.0" />
-        <vers num="14.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3015" published="2012-07-26" name="CVE-2012-3015" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local users to gain privileges via a Trojan horse DLL in a STEP7 project folder.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-205-02.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-205-02.pdf</ref>
-      <ref url="http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-110665.pdf" source="CONFIRM" adv="1">http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-110665.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="siemens" name="simatic_pcs7">
-        <vers prev="1" num="7.1" edition="sp3" />
-      </prod>
-      <prod vendor="siemens" name="simatic_step_7">
-        <vers prev="1" num="5.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3016" published="2012-07-31" name="CVE-2012-3016" modified="2012-07-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service (defect-mode transition and service outage) via crafted ICMP packets.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-212-02.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-212-02.pdf</ref>
-      <ref url="http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-589272.pdf" source="CONFIRM" patch="1" adv="1">http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-589272.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="siemens" name="simatic_s7-400_cpu_412-2_pn">
-        <vers num="" />
-      </prod>
-      <prod vendor="siemens" name="simatic_s7-400_cpu_414-3_pn/dp">
-        <vers num="" />
-      </prod>
-      <prod vendor="siemens" name="simatic_s7-400_cpu_414f-3_pn/dp">
-        <vers num="" />
-      </prod>
-      <prod vendor="siemens" name="simatic_s7-400_cpu_416-3_pn/dp">
-        <vers num="" />
-      </prod>
-      <prod vendor="siemens" name="simatic_s7-400_cpu_416f-3_pn/dp">
-        <vers num="" />
-      </prod>
-      <prod vendor="siemens" name="simatic_s7-400_cpu_firmware">
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3017" published="2012-07-31" name="CVE-2012-3017" modified="2012-07-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service (defect-mode transition and service outage) via (1) malformed HTTP traffic or (2) malformed IP packets.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-212-02.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-212-02.pdf</ref>
-      <ref url="http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-617264.pdf" source="CONFIRM" adv="1">http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-617264.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="siemens" name="simatic_s7-400_cpu_414-3_pn/dp">
-        <vers num="" />
-      </prod>
-      <prod vendor="siemens" name="simatic_s7-400_cpu_416-3_pn/dp">
-        <vers num="" />
-      </prod>
-      <prod vendor="siemens" name="simatic_s7-400_cpu_416f-3_pn/dp">
-        <vers num="" />
-      </prod>
-      <prod vendor="siemens" name="simatic_s7-400_cpu_firmware">
-        <vers num="5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3018" published="2012-07-31" name="CVE-2012-3018" modified="2012-07-31" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="4.4" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.4" CVSS_base_score="4.4">
-    <desc>
-      <descript source="cve">The lockout-recovery feature in the Security Configurator component in ICONICS GENESIS32 9.22 and earlier and BizViz 9.22 and earlier uses an improper encryption algorithm for generation of an authentication code, which allows local users to bypass intended access restrictions and obtain administrative access by predicting a challenge response.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-212-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-212-01.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="iconics" name="bizviz">
-        <vers num="8.05" />
-        <vers num="9.0" />
-        <vers num="9.01" />
-        <vers num="9.1" />
-        <vers num="9.13" />
-        <vers num="9.2" />
-        <vers num="9.20" />
-        <vers num="9.21" />
-        <vers prev="1" num="9.22" />
-      </prod>
-      <prod vendor="iconics" name="genesis32">
-        <vers num="8.05" />
-        <vers num="9.0" />
-        <vers num="9.01" />
-        <vers num="9.1" />
-        <vers num="9.13" />
-        <vers num="9.2" />
-        <vers num="9.20" />
-        <vers num="9.21" />
-        <vers prev="1" num="9.22" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3020" published="2012-08-06" name="CVE-2012-3020" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The Siemens Synco OZW Web Server devices OZW672.*, OZW772.*, and OZW775 with firmware before 4 have an unspecified default password, which makes it easier for remote attackers to obtain administrative access via a network session.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-      <sec_prot other="1" />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-214-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-214-01.pdf</ref>
-      <ref url="http://support.automation.siemens.com/WW/view/en/41929231/130000" source="MISC">http://support.automation.siemens.com/WW/view/en/41929231/130000</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="siemens" name="synco_ozw_web_server">
-        <vers num="ozw672.01" />
-        <vers num="ozw672.04" />
-        <vers num="ozw672.16" />
-        <vers num="ozw772.01" />
-        <vers num="ozw772.04" />
-        <vers num="ozw772.16" />
-        <vers num="ozw772.250" />
-        <vers num="ozw775" />
-      </prod>
-      <prod vendor="siemens" name="synco_ozw_web_server_firmware">
-        <vers prev="1" num="3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3024" published="2012-08-16" name="CVE-2012-3024" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-228-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-228-01.pdf</ref>
-      <ref url="http://www.tridium.com/cs/tridium_news/security_patch_36" source="CONFIRM" patch="1" adv="1">http://www.tridium.com/cs/tridium_news/security_patch_36</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tridium" name="niagra_ax_framework">
-        <vers num="3.5" />
-        <vers prev="1" num="3.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3025" published="2012-08-16" name="CVE-2012-3025" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-228-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-228-01.pdf</ref>
-      <ref url="http://www.tridium.com/cs/tridium_news/security_patch_36" source="CONFIRM" patch="1" adv="1">http://www.tridium.com/cs/tridium_news/security_patch_36</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tridium" name="niagra_ax_framework">
-        <vers num="3.5" />
-        <vers prev="1" num="3.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3051" published="2012-09-16" name="CVE-2012-3051" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="6.1" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="6.5" CVSS_base_score="6.1">
-    <desc>
-      <descript source="cve">Cisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (process crash or packet loss) via a large number of ARP packets, aka Bug ID CSCtr44822.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/switches/datacenter/sw/5_x/nx-os/release/notes/52_nx-os_release_note.html" source="CONFIRM">http://www.cisco.com/en/US/docs/switches/datacenter/sw/5_x/nx-os/release/notes/52_nx-os_release_note.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="nexus_7000">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nexus_7000_10-slot">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nexus_7000_18-slot">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nexus_7000_9-slot">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="nx-os">
-        <vers num="5.2" />
-        <vers num="6.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3052" published="2012-09-16" name="CVE-2012-3052" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html" source="CONFIRM">http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="vpn_client">
-        <vers num="5.0" />
-        <vers num="5.0.01" />
-        <vers num="5.0.01.0600" />
-        <vers num="5.0.02.0090" />
-        <vers num="5.0.03.0530" />
-        <vers num="5.0.03.0560" />
-        <vers num="5.0.04.0300" />
-        <vers num="5.0.05.0290" />
-        <vers num="5.0.06.0160" />
-        <vers num="5.0.07.0290" />
-        <vers num="5.0.07.0410" />
-        <vers num="5.0.07.0440" />
-        <vers num="5.0.2" />
-        <vers num="5.0.2.0090" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.0.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3053" published="2012-06-29" name="CVE-2012-3053" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in the Cisco WebEx Advanced Recording Format (ARF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted ARF file, aka Bug ID CSCtz72985.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex" source="CISCO" adv="1">20120627 Buffer Overflow Vulnerabilities in the Cisco WebEx Player</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="webex_advanced_recording_format_player">
-        <vers prev="1" num="27.11.26" />
-        <vers prev="1" num="27.21.10" />
-        <vers prev="1" num="27.25.10" />
-        <vers prev="1" num="27.32.1" />
-        <vers prev="1" num="28.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3054" published="2012-06-29" name="CVE-2012-3054" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz72977.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex" source="CISCO" adv="1">20120627 Buffer Overflow Vulnerabilities in the Cisco WebEx Player</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="webex_recording_format_player">
-        <vers prev="1" num="27.11.26" />
-        <vers prev="1" num="27.21.10" />
-        <vers prev="1" num="27.25.10" />
-        <vers prev="1" num="27.32.1" />
-        <vers prev="1" num="28.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3055" published="2012-06-29" name="CVE-2012-3055" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted DHT chunk in a JPEG image within a WRF file, aka Bug ID CSCtz72953.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex" source="CISCO" adv="1">20120627 Buffer Overflow Vulnerabilities in the Cisco WebEx Player</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="webex_recording_format_player">
-        <vers prev="1" num="27.11.26" />
-        <vers prev="1" num="27.21.10" />
-        <vers prev="1" num="27.25.10" />
-        <vers prev="1" num="27.32.1" />
-        <vers prev="1" num="28.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3056" published="2012-06-29" name="CVE-2012-3056" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted WRF file, aka Bug ID CSCtz72946.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex" source="CISCO">20120627 Buffer Overflow Vulnerabilities in the Cisco WebEx Player</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="webex_recording_format_player">
-        <vers prev="1" num="27.11.26" />
-        <vers prev="1" num="27.21.10" />
-        <vers prev="1" num="27.25.10" />
-        <vers prev="1" num="27.32.1" />
-        <vers prev="1" num="28.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3057" published="2012-06-29" name="CVE-2012-3057" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted size field in audio data within a WRF file, aka Bug ID CSCtz00755.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex" source="CISCO" adv="1">20120627 Buffer Overflow Vulnerabilities in the Cisco WebEx Player</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="webex_recording_format_player">
-        <vers prev="1" num="27.11.26" />
-        <vers prev="1" num="27.21.10" />
-        <vers prev="1" num="27.25.10" />
-        <vers prev="1" num="27.32.1" />
-        <vers prev="1" num="28.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3058" published="2012-06-20" name="CVE-2012-3058" modified="2012-06-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(4.1), 8.5 before 8.5(1.11), and 8.6 before 8.6(1.3) allow remote attackers to cause a denial of service (device reload) via IPv6 transit traffic that triggers syslog message 110003, aka Bug ID CSCua27134.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-asaipv6" source="CISCO" adv="1">20120620 Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module Denial of Service Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="adaptive_security_appliance_software">
-        <vers num="8.4" />
-        <vers num="8.4(1)" />
-        <vers num="8.4(1.11)" />
-        <vers num="8.4(2)" />
-        <vers num="8.4(2.11)" />
-        <vers num="8.5" />
-        <vers num="8.5(1)" />
-        <vers num="8.5(1.4)" />
-        <vers num="8.6" />
-      </prod>
-      <prod vendor="cisco" name="5500_series_adaptive_security_appliance">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6500">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6503-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6504-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6506-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6509-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6509-neb-a">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6509-v-e">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6513">
-        <vers num="-" />
-      </prod>
-      <prod vendor="cisco" name="catalyst_6513-e">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3060" published="2012-09-16" name="CVE-2012-3060" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Cisco Unity Connection (UC) 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of service (CPU consumption) via malformed UDP packets, aka Bug ID CSCtz76269.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/web/software/282074295/93949/cucm-readme-862asu2-Rev2.pdf" source="CONFIRM">http://www.cisco.com/web/software/282074295/93949/cucm-readme-862asu2-Rev2.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="unity_connection">
-        <vers num="8.6" />
-        <vers num="9.0" />
-        <vers num="9.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3063" published="2012-06-20" name="CVE-2012-3063" modified="2012-06-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:C/I:C/A:C)" CVSS_score="7.1" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.1">
-    <desc>
-      <descript source="cve">Cisco Application Control Engine (ACE) before A4(2.3) and A5 before A5(1.1), when multicontext mode is enabled, does not properly share a management IP address among multiple contexts, which allows remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances, and read or modify configuration settings, via a login attempt to a context, aka Bug ID CSCts30631, a different vulnerability than CVE-2012-3058.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ace" source="CISCO" adv="1">20120620 Cisco Application Control Engine Administrator IP Address Overlap Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="application_control_engine_software">
-        <vers num="a1(7)" />
-        <vers num="a1(7a)" />
-        <vers num="a1(7b)" />
-        <vers num="a1(8)" />
-        <vers num="a1(8a)" />
-        <vers num="a3(1.0)" />
-        <vers num="a3(2.1)" />
-        <vers num="a3(2.2)" />
-        <vers num="a3(2.3)" />
-        <vers num="a3(2.4)" />
-        <vers num="a3(2.5)" />
-        <vers num="a3(2.6)" />
-        <vers num="a3(2.7)" />
-        <vers num="a4(1.0)" />
-        <vers num="a4(1.1)" />
-        <vers prev="1" num="a4(2.0)" />
-        <vers num="a4(2.1)" />
-        <vers num="a4(2.2)" />
-        <vers num="a5(1.0)" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3073" published="2012-07-12" name="CVE-2012-3073" modified="2012-07-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to cause a denial of service (networking outage or process crash) via (1) malformed IP packets, (2) a high rate of TCP connection requests, or (3) a high rate of TCP connection terminations, aka Bug IDs CSCti21830, CSCti21851, CSCtj19100, CSCtj19086, CSCtj19078, CSCty11219, CSCty11299, CSCty11323, and CSCty11338.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctsman" source="CISCO" adv="1">20120711 Multiple Vulnerabilities in Cisco TelePresence Manager</ref>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs" source="CISCO" adv="1">20120711 Multiple Vulnerabilities in Cisco TelePresence Recording Server</ref>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctms" source="CISCO" adv="1">20120711 Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="telepresence_manager">
-        <vers num="1.1.0.0" />
-        <vers num="1.1.0.0(209)" />
-        <vers num="1.2.0.0" />
-        <vers num="1.2.0.0(200)" />
-        <vers num="1.3.2(466)" />
-        <vers num="1.4.0(279)" />
-        <vers num="1.5.1(420)" />
-        <vers num="1.5.2(423)" />
-        <vers num="1.6.0(220)" />
-        <vers num="1.6.2(64)" />
-        <vers num="1.6.3(113)" />
-        <vers num="1.6.5(167)" />
-        <vers num="1.7.1(732)" />
-        <vers num="1.7.2(256)" />
-        <vers num="1.7.3.1" />
-        <vers num="1.7.4" />
-        <vers num="1.7.5(62)" />
-        <vers num="1.8.0(582)" />
-        <vers prev="1" num="1.8.1(682)" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_multipoint_switch_software">
-        <vers num="1.0.4.0" />
-        <vers num="1.0.4.0(21)" />
-        <vers num="1.1.0" />
-        <vers num="1.1.0(254)" />
-        <vers num="1.1.1" />
-        <vers num="1.1.1(30)" />
-        <vers num="1.1.2" />
-        <vers num="1.1.2(6)" />
-        <vers num="1.5.0" />
-        <vers num="1.5.0(222)" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1(2)" />
-        <vers num="1.5.2" />
-        <vers num="1.5.2(21)" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.12" />
-        <vers num="1.5.4" />
-        <vers num="1.5.4(4)" />
-        <vers num="1.5.5" />
-        <vers num="1.5.5(1)" />
-        <vers num="1.5.6" />
-        <vers num="1.5.6(1)" />
-        <vers num="1.6.0" />
-        <vers num="1.6.0(108)" />
-        <vers num="1.6.1" />
-        <vers num="1.6.1(2)" />
-        <vers num="1.6.2" />
-        <vers num="1.6.2(3)" />
-        <vers num="1.6.3" />
-        <vers num="1.6.3(2)" />
-        <vers num="1.6.4" />
-        <vers num="1.6.4(3)" />
-        <vers num="1.7.0" />
-        <vers num="1.7.0.1(5)" />
-        <vers num="1.7.1(15)" />
-        <vers num="1.7.2(75)" />
-        <vers num="1.7.3(2)" />
-        <vers num="1.8.0" />
-        <vers prev="1" num="1.8.0(1026)" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_recording_server">
-        <vers num="1.6.1(2)" />
-        <vers num="1.6.2(31)" />
-        <vers num="1.6.3(4)" />
-        <vers num="1.7.0(190)" />
-        <vers num="1.7.1(22)" />
-        <vers num="1.7.2.1" />
-        <vers num="1.7.3(3)" />
-        <vers prev="1" num="1.8.0(160)" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_software">
-        <vers num="1.2.3(1101)" />
-        <vers num="1.3.2(1393)" />
-        <vers num="1.4.7(2229)" />
-        <vers num="1.5.1(2082)" />
-        <vers num="1.5.10(3648)" />
-        <vers num="1.5.11(3659)" />
-        <vers num="1.5.12(3701)" />
-        <vers num="1.5.13(3717)" />
-        <vers num="1.5.3(2115)" />
-        <vers num="1.6.0(3954)" />
-        <vers num="1.6.2(4023)" />
-        <vers num="1.6.3(4042)" />
-        <vers num="1.6.4(4072)" />
-        <vers num="1.6.5(4097)" />
-        <vers num="1.6.6(4109)" />
-        <vers num="1.6.7(4212)" />
-        <vers num="1.6.8(4222)" />
-        <vers num="1.7.0.1(4764)" />
-        <vers num="1.7.0.2(4719)" />
-        <vers num="1.7.1(4864)" />
-        <vers num="1.7.2(4937)" />
-        <vers num="1.7.2.1(2)" />
-        <vers num="1.7.4(270)" />
-        <vers num="1.7.5(42)" />
-        <vers num="1.7.6(4)" />
-        <vers num="1.8.0(55)" />
-        <vers num="1.8.0u)" />
-        <vers num="1.8.1(34)" />
-        <vers num="1.8.14)" />
-        <vers num="1.8.2(11)" />
-        <vers num="1.8.3(4)" />
-        <vers num="1.9.0(46)" />
-        <vers prev="1" num="1.9.0.1(3)" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_multipoint_switch">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_1300_65">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_3000">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_3010">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_3200">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_3210">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_t3">
-        <vers num="" edition=":custom" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_tx1300_47">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_tx1310_65">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_tx9000">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_tx9200">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3074" published="2012-07-12" name="CVE-2012-3074" modified="2012-07-16" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="8.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="6.5" CVSS_base_score="8.3">
-    <desc>
-      <descript source="cve">An unspecified API on Cisco TelePresence Immersive Endpoint Devices before 1.9.1 allows remote attackers to execute arbitrary commands by leveraging certain adjacency and sending a malformed request on TCP port 61460, aka Bug ID CSCtz38382.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts" source="CISCO" adv="1">20120711 Multiple Vulnerabilities in Cisco TelePresence Immersive Endpoint Devices</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="telepresence_system_software">
-        <vers num="1.2.3(1101)" />
-        <vers num="1.3.2(1393)" />
-        <vers num="1.4.7(2229)" />
-        <vers num="1.5.1(2082)" />
-        <vers num="1.5.10(3648)" />
-        <vers num="1.5.11(3659)" />
-        <vers num="1.5.12(3701)" />
-        <vers num="1.5.13(3717)" />
-        <vers num="1.5.3(2115)" />
-        <vers num="1.6.0(3954)" />
-        <vers num="1.6.2(4023)" />
-        <vers num="1.6.3(4042)" />
-        <vers num="1.6.4(4072)" />
-        <vers num="1.6.5(4097)" />
-        <vers num="1.6.6(4109)" />
-        <vers num="1.6.7(4212)" />
-        <vers num="1.6.8(4222)" />
-        <vers num="1.7.0.1(4764)" />
-        <vers num="1.7.0.2(4719)" />
-        <vers num="1.7.1(4864)" />
-        <vers num="1.7.2(4937)" />
-        <vers num="1.7.2.1(2)" />
-        <vers num="1.7.4(270)" />
-        <vers num="1.7.5(42)" />
-        <vers num="1.7.6(4)" />
-        <vers num="1.8.0(55)" />
-        <vers num="1.8.0u)" />
-        <vers num="1.8.1(34)" />
-        <vers num="1.8.14)" />
-        <vers num="1.8.2(11)" />
-        <vers num="1.8.3(4)" />
-        <vers num="1.9.0(46)" />
-        <vers prev="1" num="1.9.0.1(3)" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_1300_65">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_3000">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_3010">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_3200">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_3210">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_t3">
-        <vers num="" edition=":custom" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_tx1300_47">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_tx1310_65">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_tx9000">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_tx9200">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3075" published="2012-07-12" name="CVE-2012-3075" modified="2012-07-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authenticated users to execute arbitrary commands via a malformed request on TCP port 443, aka Bug ID CSCtn99724.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts" source="CISCO" adv="1">20120711 Multiple Vulnerabilities in Cisco TelePresence Immersive Endpoint Devices</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="telepresence_system_software">
-        <vers num="1.2.3(1101)" />
-        <vers num="1.3.2(1393)" />
-        <vers num="1.4.7(2229)" />
-        <vers num="1.5.1(2082)" />
-        <vers num="1.5.10(3648)" />
-        <vers num="1.5.11(3659)" />
-        <vers num="1.5.12(3701)" />
-        <vers num="1.5.13(3717)" />
-        <vers num="1.5.3(2115)" />
-        <vers num="1.6.0(3954)" />
-        <vers num="1.6.2(4023)" />
-        <vers num="1.6.3(4042)" />
-        <vers num="1.6.4(4072)" />
-        <vers num="1.6.5(4097)" />
-        <vers num="1.6.6(4109)" />
-        <vers num="1.6.7(4212)" />
-        <vers num="1.6.8(4222)" />
-        <vers num="1.7.0.1(4764)" />
-        <vers num="1.7.0.2(4719)" />
-        <vers num="1.7.1(4864)" />
-        <vers prev="1" num="1.7.2(4937)" />
-        <vers num="1.7.2.1(2)" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_1300_65">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_3000">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_3010">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_3200">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_3210">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_t3">
-        <vers num="" edition=":custom" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_tx1300_47">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_tx1310_65">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_tx9000">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="telepresence_system_tx9200">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3076" published="2012-07-12" name="CVE-2012-3076" modified="2012-07-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">The administrative web interface on Cisco TelePresence Recording Server before 1.8.0 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Bug ID CSCth85804.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs" source="CISCO" adv="1">20120711 Multiple Vulnerabilities in Cisco TelePresence Recording Server</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="telepresence_recording_server">
-        <vers num="1.6.1(2)" />
-        <vers num="1.6.2(31)" />
-        <vers num="1.6.3(4)" />
-        <vers num="1.7.0(190)" />
-        <vers num="1.7.1(22)" />
-        <vers num="1.7.2.1" />
-        <vers prev="1" num="1.7.3(3)" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3079" published="2012-09-16" name="CVE-2012-3079" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Cisco IOS 12.2 allows remote attackers to cause a denial of service (CPU consumption) by establishing many IPv6 neighbors, aka Bug ID CSCtn78957.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXI_rebuilds.html" source="CONFIRM">http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXI_rebuilds.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3088" published="2012-09-16" name="CVE-2012-3088" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a crafted request, aka Bug ID CSCua13166.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html" source="CONFIRM">http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="anyconnect_secure_mobility_client">
-        <vers num="3.1.0" />
-        <vers num="3.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3094" published="2012-09-16" name="CVE-2012-3094" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The VPN downloader in the download_install component in Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495 on Linux accepts arbitrary X.509 server certificates without user interaction, which allows remote attackers to obtain sensitive information via vectors involving an invalid certificate, aka Bug ID CSCua11967.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html" source="CONFIRM">http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="anyconnect_secure_mobility_client">
-        <vers num="3.1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3096" published="2012-09-16" name="CVE-2012-3096" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Cisco Unity Connection (UC) 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial of service (resource consumption and administration outage) via extended use of the product, aka Bug ID CSCtd79132.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/voice_ip_comm/connection/7x/release/notes/715cucrn.html" source="CONFIRM">http://www.cisco.com/en/US/docs/voice_ip_comm/connection/7x/release/notes/715cucrn.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="unity_connection">
-        <vers num="7.1" />
-        <vers num="8.0" />
-        <vers num="8.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3105" published="2012-06-05" name="CVE-2012-3105" modified="2012-06-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The glBufferData function in the WebGL implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not properly mitigate an unspecified flaw in an NVIDIA driver, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a related issue to CVE-2011-3101.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=744888" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=744888</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-34.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-34.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers prev="1" num="2.9" edition="beta1" />
-        <vers prev="1" num="2.9" edition="beta2" />
-        <vers prev="1" num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3106" published="2012-07-17" name="CVE-2012-3106" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
-
-'Outside In Technology is a suite of software development kits (SDKs). It does not have any particular associated protocol. If the hosting software passes data received over the network to Outside In Technology code, the CVSS score would increase to 6.8.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.5.0" />
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3107" published="2012-07-17" name="CVE-2012-3107" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
-
-'Outside In Technology is a suite of software development kits (SDKs). It does not have any particular associated protocol. If the hosting software passes data received over the network to Outside In Technology code, the CVSS score would increase to 6.8.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.5.0" />
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3108" published="2012-07-17" name="CVE-2012-3108" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
-
-'Outside In Technology is a suite of software development kits (SDKs). It does not have any particular associated protocol. If the hosting software passes data received over the network to Outside In Technology code, the CVSS score would increase to 6.8.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.5.0" />
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3109" published="2012-07-17" name="CVE-2012-3109" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
-
-'Outside In Technology is a suite of software development kits (SDKs). It does not have any particular associated protocol. If the hosting software passes data received over the network to Outside In Technology code, the CVSS score would increase to 6.8.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3110" published="2012-07-17" name="CVE-2012-3110" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
-
-'Outside In Technology is a suite of software development kits (SDKs). It does not have any particular associated protocol. If the hosting software passes data received over the network to Outside In Technology code, the CVSS score would increase to 6.8.'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="8.3.5.0" />
-        <vers num="8.3.7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3111" published="2012-07-17" name="CVE-2012-3111" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect integrity, related to TECH.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3112" published="2012-07-17" name="CVE-2012-3112" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect integrity via unknown vectors related to Solaris Management Console.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027274" source="SECTRACK">1027274</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3113" published="2012-07-17" name="CVE-2012-3113" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:N)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0.20 allows remote authenticated users to affect confidentiality and integrity, related to EPERF.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="9.0.20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3114" published="2012-07-17" name="CVE-2012-3114" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote attackers to affect integrity via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="supply_chain_products_suite">
-        <vers num="5.5.06" />
-        <vers num="6.0.0" />
-        <vers num="6.1.0" />
-        <vers num="6.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3115" published="2012-07-17" name="CVE-2012-3115" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle MapViewer component in Oracle Fusion Middleware 10.1.3.1, 11.1.1.5, and 11.1.1.6 allows remote attackers to affect integrity via unknown vectors related to Install.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers num="10.1.3.1" />
-        <vers num="11.1.1.5.0" />
-        <vers num="11.1.1.6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3116" published="2012-07-17" name="CVE-2012-3116" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="1.9" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.4" CVSS_base_score="1.9">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows local users to affect confidentiality via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="supply_chain_products_suite">
-        <vers num="5.5.06" />
-        <vers num="6.0.0" />
-        <vers num="6.1.0" />
-        <vers num="6.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3117" published="2012-07-17" name="CVE-2012-3117" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote authenticated users to affect confidentiality via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="supply_chain_products_suite">
-        <vers num="5.5.06" />
-        <vers num="6.0.0" />
-        <vers num="6.1.0" />
-        <vers num="6.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3118" published="2012-07-17" name="CVE-2012-3118" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeoleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 allows remote authenticated users to affect confidentiality, related to PANPROC.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="8.52" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3119" published="2012-07-17" name="CVE-2012-3119" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0.20 allows remote authenticated users to affect confidentiality via unknown vectors related to Candidate Gateway.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="peoplesoft_products">
-        <vers num="9.0.20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3120" published="2012-07-17" name="CVE-2012-3120" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 8 allows remote attackers to affect availability, related to TCP/IP.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027274" source="SECTRACK">1027274</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3121" published="2012-07-17" name="CVE-2012-3121" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 9 and 10 allows remote attackers to affect availability via unknown vectors related to in.tnamed.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027274" source="SECTRACK">1027274</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3122" published="2012-07-17" name="CVE-2012-3122" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:P/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="1.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 8 and 9 allows local users to affect confidentiality and integrity via unknown vectors related to sort.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027274" source="SECTRACK">1027274</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.8" />
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3123" published="2012-07-17" name="CVE-2012-3123" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality, related to Apache HTTP Server.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027274" source="SECTRACK">1027274</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3124" published="2012-07-17" name="CVE-2012-3124" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect availability, related to Kernel/KSSL.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027274" source="SECTRACK">1027274</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3125" published="2012-07-17" name="CVE-2012-3125" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:C)" CVSS_score="7.1" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="8.6" CVSS_base_score="7.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 allows remote attackers to affect availability, related to TCP/IP.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027274" source="SECTRACK">1027274</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-        <vers num="5.8" />
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3126" published="2012-07-17" name="CVE-2012-3126" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="6.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="1.9" CVSS_base_score="6.2">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Products Suite 3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Apache Tomcat Agent.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027274" source="SECTRACK">1027274</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="sun_products_suite">
-        <vers num="3.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3127" published="2012-07-17" name="CVE-2012-3127" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:N/A:C)" CVSS_score="5.4" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="4.9" CVSS_base_score="5.4">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect availability, related to SCTP.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027274" source="SECTRACK">1027274</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3128" published="2012-07-17" name="CVE-2012-3128" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="3.7" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="1.9" CVSS_base_score="3.7">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle SPARC T-Series Servers running System Firmware 8.2.0 and 8.1.4.e or earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Integrated Lights Out Manager.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="netra_sparc_t3-1">
-        <vers num="-" />
-      </prod>
-      <prod vendor="oracle" name="netra_sparc_t3-1b">
-        <vers num="-" />
-      </prod>
-      <prod vendor="oracle" name="netra_sparc_t4-1">
-        <vers num="-" />
-      </prod>
-      <prod vendor="oracle" name="netra_sparc_t4-1b">
-        <vers num="-" />
-      </prod>
-      <prod vendor="oracle" name="netra_sparc_t4-2">
-        <vers num="-" />
-      </prod>
-      <prod vendor="oracle" name="sparc_t3-1">
-        <vers num="-" />
-      </prod>
-      <prod vendor="oracle" name="sparc_t3-1b">
-        <vers num="-" />
-      </prod>
-      <prod vendor="oracle" name="sparc_t3-2">
-        <vers num="-" />
-      </prod>
-      <prod vendor="oracle" name="sparc_t3-4">
-        <vers num="-" />
-      </prod>
-      <prod vendor="oracle" name="sparc_t4-1">
-        <vers num="-" />
-      </prod>
-      <prod vendor="oracle" name="sparc_t4-1b">
-        <vers num="-" />
-      </prod>
-      <prod vendor="oracle" name="sparc_t4-2">
-        <vers num="-" />
-      </prod>
-      <prod vendor="oracle" name="sparc_t4-4">
-        <vers num="-" />
-      </prod>
-      <prod vendor="oracle" name="sparc_t-series_server_firmware">
-        <vers prev="1" num="8.1.4e" />
-        <vers num="8.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3129" published="2012-07-17" name="CVE-2012-3129" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="5.1" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="4.9" CVSS_base_score="5.1">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality, integrity, and availability, related to Gnome PDF viewer.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027274" source="SECTRACK">1027274</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3130" published="2012-07-17" name="CVE-2012-3130" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect integrity via unknown vectors related to pkg.depotd.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027274" source="SECTRACK">1027274</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.11" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3131" published="2012-07-17" name="CVE-2012-3131" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Oracle Sun Solaris 9, 10, and 11 allows remote attackers to affect confidentiality, related to Network/NFS.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027274" source="SECTRACK">1027274</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sun" name="sunos">
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3132" published="2012-08-10" name="CVE-2012-3132" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to execute arbitrary SQL commands via vectors involving CREATE INDEX with a CTXSYS.CONTEXT INDEXTYPE and DBMS_STATS.GATHER_TABLE_STATS.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://blogs.oracle.com/security/entry/security_alert_cve_2012_3132" source="MISC" adv="1">https://blogs.oracle.com/security/entry/security_alert_cve_2012_3132</ref>
-      <ref url="http://www.teamshatter.com/topics/general/team-shatter-exclusive/ctxsys-context-privilege-escalation/" source="MISC">http://www.teamshatter.com/topics/general/team-shatter-exclusive/ctxsys-context-privilege-escalation/</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/alert-cve-2012-3132-1721017.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/alert-cve-2012-3132-1721017.html</ref>
-      <ref url="http://www.networkworld.com/news/2012/072712-black-hat-shark-bitten-security-researcher-261203.html" source="MISC">http://www.networkworld.com/news/2012/072712-black-hat-shark-bitten-security-researcher-261203.html</ref>
-      <ref url="http://www.darkreading.com/database-security/167901020/security/news/240004776/hacking-oracle-database-indexes.html" source="MISC">http://www.darkreading.com/database-security/167901020/security/news/240004776/hacking-oracle-database-indexes.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="10.2.0.3" />
-        <vers num="10.2.0.4" />
-        <vers num="10.2.0.5" />
-        <vers num="11.1.0.7" />
-        <vers num="11.2.0.2" />
-        <vers num="11.2.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3134" published="2012-07-17" name="CVE-2012-3134" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect availability via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="database_server">
-        <vers num="11.1.0.7" />
-        <vers num="11.2.0.2" />
-        <vers num="11.2.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3135" published="2012-07-17" name="CVE-2012-3135" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.3 and before, and 27.7.2 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027264" source="SECTRACK">1027264</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="fusion_middleware">
-        <vers prev="1" num="27.7.2" />
-        <vers num="28.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3136" published="2012-08-30" name="CVE-2012-3136" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" source="CONFIRM" adv="1">http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jdk">
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-        <vers prev="1" num="1.7.0" edition="update5" />
-        <vers prev="1" num="1.7.0" edition="update6" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-        <vers prev="1" num="1.7.0" edition="update5" />
-        <vers prev="1" num="1.7.0" edition="update6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3231" published="2012-06-27" name="CVE-2012-3231" modified="2012-06-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding a file to execute arbitrary code via a do_addfile action to inc/browser/action.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23094" source="MISC">https://www.htbridge.com/advisory/HTB23094</ref>
-      <ref url="http://www.securityfocus.com/bid/54109" source="BID">54109</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="webatall" name="web@all">
-        <vers num="2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3232" published="2012-06-29" name="CVE-2012-3232" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote attackers to inject arbitrary web script or HTML via the _text[title] parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23094" source="MISC">https://www.htbridge.com/advisory/HTB23094</ref>
-      <ref url="http://www.securityfocus.com/bid/54109" source="BID">54109</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="webatall" name="web@all">
-        <vers num="2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3233" published="2012-09-15" name="CVE-2012-3233" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in __swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs/download.php in Kayako Fusion 4.40.1148, and possibly before 4.50.1581, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23095" source="MISC">https://www.htbridge.com/advisory/HTB23095</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/78314" source="XF">kayakofusion-download-xss(78314)</ref>
-      <ref url="http://www.securityfocus.com/bid/55417" source="BID">55417</ref>
-      <ref url="http://wiki.kayako.com/display/DOCS/4.50.1619" source="MISC">http://wiki.kayako.com/display/DOCS/4.50.1619</ref>
-      <ref url="http://wiki.kayako.com/display/DOCS/4.50.1581" source="MISC">http://wiki.kayako.com/display/DOCS/4.50.1581</ref>
-      <ref url="http://secunia.com/advisories/50366" source="SECUNIA" adv="1">50366</ref>
-      <ref url="http://osvdb.org/85189" source="OSVDB">85189</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-09/0022.html" source="BUGTRAQ">20120905 Cross-Site Scripting (XSS) in Kayako Fusion</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kayako" name="fusion">
-        <vers num="4.40.1148" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3234" published="2012-09-12" name="CVE-2012-3234" modified="2012-09-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame sizes in RealAudio files, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) or possibly have unspecified other impact via a crafted file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://service.real.com/realplayer/security/09072012_player/en/" source="CONFIRM" adv="1">http://service.real.com/realplayer/security/09072012_player/en/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="realnetworks" name="realplayer">
-        <vers num="10.0" />
-        <vers num="10.5" />
-        <vers num="11.0" />
-        <vers num="11.0.1" />
-        <vers num="11.0.2" />
-        <vers num="11.0.2.1744" />
-        <vers num="11.0.2.2315" />
-        <vers num="11.0.3" />
-        <vers num="11.0.4" />
-        <vers num="11.0.5" />
-        <vers num="11.1" />
-        <vers num="11.1.3" />
-        <vers num="11_build_6.0.14.748" />
-        <vers num="12.0.0.1444" />
-        <vers num="12.0.0.1548" />
-        <vers num="12.0.0.1701" edition="" />
-        <vers num="12.0.0.1701" edition=":mac" />
-        <vers num="14.0.0" />
-        <vers num="14.0.1" />
-        <vers num="14.0.1.609" />
-        <vers num="14.0.2" />
-        <vers num="14.0.3" />
-        <vers num="14.0.4" />
-        <vers num="14.0.5" />
-        <vers num="15.0.2.72" />
-        <vers num="15.0.3.37" />
-        <vers prev="1" num="15.0.5.109" />
-        <vers num="2.1.2" edition="" />
-        <vers num="2.1.2" edition=":enterprise" />
-        <vers num="2.1.3" edition="" />
-        <vers num="2.1.3" edition=":enterprise" />
-        <vers num="2.1.4" edition="" />
-        <vers num="2.1.4" edition=":enterprise" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="7" />
-        <vers num="8" />
-      </prod>
-      <prod vendor="realnetworks" name="realplayer_sp">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.5" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3236" published="2012-07-12" name="CVE-2012-3236" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed XTENSION header of a .fit file, as demonstrated using a long string.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.gnome.org/browse/gimp/commit/plug-ins/file-fits/fits-io.c?id=ace45631595e8781a1420842582d67160097163c" source="CONFIRM" patch="1">http://git.gnome.org/browse/gimp/commit/plug-ins/file-fits/fits-io.c?id=ace45631595e8781a1420842582d67160097163c</ref>
-      <ref url="https://bugzilla.gnome.org/show_bug.cgi?id=676804" source="CONFIRM">https://bugzilla.gnome.org/show_bug.cgi?id=676804</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76658" source="XF">gimp-fit-dos(76658)</ref>
-      <ref url="http://www.securityfocus.com/bid/54246" source="BID">54246</ref>
-      <ref url="http://www.reactionpenetrationtesting.co.uk/FIT-file-handling-dos.html" source="MISC">http://www.reactionpenetrationtesting.co.uk/FIT-file-handling-dos.html</ref>
-      <ref url="http://www.exploit-db.com/exploits/19482" source="EXPLOIT-DB">19482</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00000.html" source="SUSE">openSUSE-SU-2012:1080</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-06/0192.html" source="BUGTRAQ">20120629 GIMP FIT File Format DoS</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnu" name="gimp">
-        <vers num="2.2.0" />
-        <vers num="2.3.0" />
-        <vers num="2.3.3" />
-        <vers num="2.4.0" />
-        <vers num="2.5.0" />
-        <vers num="2.6.0" />
-        <vers num="2.6.11" />
-        <vers num="2.6.8" />
-        <vers num="2.7.0" />
-        <vers prev="1" num="2.8.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3238" published="2012-07-09" name="CVE-2012-3238" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment (optional)" field.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.astaro.com/en-uk/blog/up2date/8305" source="CONFIRM" patch="1">http://www.astaro.com/en-uk/blog/up2date/8305</ref>
-      <ref url="http://security.inshell.net/advisory/27" source="MISC">http://security.inshell.net/advisory/27</ref>
-      <ref url="http://archives.neohapsis.com/archives/fulldisclosure/2012-06/0206.html" source="FULLDISC">20120610 [CVE-2012-3238] Astaro Security Gateway &lt;= v8.304 Persistent Cross-Site Scripting Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="astaro" name="security_gateway_software">
-        <vers prev="1" num="8.3" />
-      </prod>
-      <prod vendor="sophos" name="unified_threat_management_software">
-        <vers prev="1" num="8.3" />
-      </prod>
-      <prod vendor="astaro" name="security_gateway">
-        <vers num="" />
-      </prod>
-      <prod vendor="sophos" name="unified_threat_management">
-        <vers num="110" />
-        <vers num="120" />
-        <vers num="220" />
-        <vers num="320" />
-        <vers num="425" />
-        <vers num="525" />
-        <vers num="625" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3240" published="2012-07-17" name="CVE-2012-3240" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator privileges via a crafted REST request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.eucalyptus.com/eucalyptus-cloud/security/esa-03" source="CONFIRM" adv="1">http://www.eucalyptus.com/eucalyptus-cloud/security/esa-03</ref>
-      <ref url="http://secunia.com/advisories/49916" source="SECUNIA" adv="1">49916</ref>
-      <ref url="http://secunia.com/advisories/49912" source="SECUNIA" adv="1">49912</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="eucalyptus" name="eucalyptus">
-        <vers num="2.0.3" />
-        <vers num="3.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3241" published="2012-07-17" name="CVE-2012-3241" modified="2012-07-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, which allows remote attackers to execute arbitrary VMware Broker API commands.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.eucalyptus.com/eucalyptus-cloud/security/esa-04" source="CONFIRM" adv="1">http://www.eucalyptus.com/eucalyptus-cloud/security/esa-04</ref>
-      <ref url="http://secunia.com/advisories/49916" source="SECUNIA" adv="1">49916</ref>
-      <ref url="http://secunia.com/advisories/49912" source="SECUNIA" adv="1">49912</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="eucalyptus" name="eucalyptus">
-        <vers num="2.0.3" />
-        <vers num="3.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3247" published="2012-08-16" name="CVE-2012-3247" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="4.9" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="3.9" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">Unspecified vulnerability on the HP Integrity Server BL860c i2, BL870c i2, and BL890c i2 with firmware before 26.31 and the HP Integrity Server rx2800 i2 with firmware before 26.30 allows local users to cause a denial of service via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03450553" source="HP" adv="1">HPSBHF02804</ref>
-      <ref url="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03450553" source="HP" adv="1">SSRT100631</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="integrity">
-        <vers num="bl860c_i2" />
-        <vers num="bl870c_i2" />
-        <vers num="rx2800_i2" />
-      </prod>
-      <prod vendor="hp" name="itegrity">
-        <vers num="bl890c_i2" />
-      </prod>
-      <prod vendor="hp" name="integrity_firmware">
-        <vers prev="1" num="26.29" />
-        <vers prev="1" num="26.30" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3248" published="2012-08-16" name="CVE-2012-3248" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">HP Fortify Software Security Center 3.1, 3.3, 3.4, and 3.5 allows remote attackers to obtain sensitive information via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03447824" source="HP" adv="1">HPSBMU02801</ref>
-      <ref url="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03447824" source="HP" adv="1">SSRT100879</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="fortify_software_security_center">
-        <vers num="3.1" />
-        <vers num="3.3" />
-        <vers num="3.4" />
-        <vers num="3.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3249" published="2012-08-16" name="CVE-2012-3249" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">HP Fortify Software Security Center 3.1, 3.3, 3.4, and 3.5 allows remote authenticated users to obtain sensitive information via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03447895" source="HP" adv="1">SSRT100923</ref>
-      <ref url="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03447895" source="HP">HPSBMU02802</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="fortify_software_security_center">
-        <vers num="3.1" />
-        <vers num="3.3" />
-        <vers num="3.4" />
-        <vers num="3.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3250" published="2012-08-16" name="CVE-2012-3250" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in HP Service Manager Server 7.11, 9.21, and 9.30, and HP Service Center Server 6.28, allows remote attackers to cause a denial of service via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03447828" source="HP" adv="1">SSRT100921</ref>
-      <ref url="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03447828" source="HP" adv="1">HPSBMU02800</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="service_center_server">
-        <vers num="6.2.8" />
-      </prod>
-      <prod vendor="hp" name="service_manager_server">
-        <vers num="7.11" />
-        <vers num="9.21" />
-        <vers num="9.30" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3251" published="2012-08-16" name="CVE-2012-3251" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in HP Service Manager Web Tier 7.11, 9.21, and 9.30, and HP Service Center Web Tier 6.28, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03450382" source="HP" adv="1">HPSBMU02803</ref>
-      <ref url="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03450382" source="HP" adv="1">SSRT100926</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="service_center_web_tier">
-        <vers num="6.28" />
-      </prod>
-      <prod vendor="hp" name="service_manager_web_tier">
-        <vers num="7.11" />
-        <vers num="9.21" />
-        <vers num="9.30" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3252" published="2012-08-20" name="CVE-2012-3252" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in HP Serviceguard A.11.19 and A.11.20 allows remote attackers to cause a denial of service via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03457976" source="HP" adv="1">SSRT100789</ref>
-      <ref url="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03457976" source="HP" adv="1">HPSBUX02806</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="serviceguard">
-        <vers num="a.11.19" />
-        <vers num="a.11.20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3253" published="2012-08-30" name="CVE-2012-3253" modified="2012-08-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in HP Intelligent Management Center (IMC) before 5.0 E0101P05 allow remote attackers to execute arbitrary code via crafted input, as demonstrated by an integer overflow and heap-based buffer overflow in img.exe for a crafted message packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://zerodayinitiative.com/advisories/ZDI-12-164/" source="MISC">http://zerodayinitiative.com/advisories/ZDI-12-164/</ref>
-      <ref url="http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03473459" source="HP" adv="1">SSRT100361</ref>
-      <ref url="http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03473459" source="HP" adv="1">HPSB3C02808</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="intelligent_management_center">
-        <vers prev="1" num="5.0" edition="e0101" />
-        <vers prev="1" num="5.0" edition="e0101h03" />
-        <vers prev="1" num="5.0" edition="e0101h04" />
-        <vers prev="1" num="5.0" edition="e0101l01" />
-        <vers prev="1" num="5.0" edition="e0101l02" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3254" published="2012-08-30" name="CVE-2012-3254" modified="2012-08-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in HP iNode Management Center before iNode PC 5.1 E0304 allow remote attackers to execute arbitrary code via crafted input, as demonstrated by a stack-based buffer overflow in iNodeMngChecker.exe for a crafted 0x0A0BF007 packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://zerodayinitiative.com/advisories/ZDI-12-163/" source="MISC">http://zerodayinitiative.com/advisories/ZDI-12-163/</ref>
-      <ref url="http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03473527" source="HP" adv="1">SSRT100377</ref>
-      <ref url="http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03473527" source="HP" adv="1">HPSB3C02809</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="inode_management_center_pc">
-        <vers num="5.0" edition="e0101" />
-        <vers prev="1" num="5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3255" published="2012-09-08" name="CVE-2012-3255" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03475750" source="HP" adv="1">SSRT100937</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03475750" source="HP" adv="1">HPSBMU02811</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="business_availability_center">
-        <vers num="8.07" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3256" published="2012-09-08" name="CVE-2012-3256" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03475750" source="HP" adv="1">HPSBMU02811</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03475750" source="HP" adv="1">SSRT100937</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="business_availability_center">
-        <vers num="8.07" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3257" published="2012-09-08" name="CVE-2012-3257" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:P/I:P/A:P)" CVSS_score="4.6" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.9" CVSS_base_score="4.6">
-    <desc>
-      <descript source="cve">HP Business Availability Center (BAC) 8.07 allows remote authenticated users to hijack web sessions via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03475750" source="HP" adv="1">SSRT100937</ref>
-      <ref url="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03475750" source="HP" adv="1">HPSBMU02811</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="business_availability_center">
-        <vers num="8.07" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3287" published="2012-06-13" name="CVE-2012-3287" modified="2012-06-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Poul-Henning Kamp md5crypt has insufficient algorithmic complexity and a consequently short runtime, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack, as demonstrated by an attack using GPU hardware.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://phk.freebsd.dk/sagas/md5crypt_eol.html" source="CONFIRM" adv="1">http://phk.freebsd.dk/sagas/md5crypt_eol.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="poul-henning_kamp" name="md5crypt">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3288" published="2012-06-14" name="CVE-2012-3288" modified="2012-06-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denial of service (memory corruption) on the host OS via a crafted Checkpoint file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0011.html" source="CONFIRM" adv="1">http://www.vmware.com/security/advisories/VMSA-2012-0011.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="fusion">
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-      </prod>
-      <prod vendor="vmware" name="player">
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-      </prod>
-      <prod vendor="vmware" name="workstation">
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.1.2" />
-        <vers num="7.1.3" />
-        <vers num="7.1.4" />
-        <vers num="7.1.4.16648" />
-        <vers num="7.1.5" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="8.0.2" />
-        <vers num="8.0.3" />
-      </prod>
-      <prod vendor="vmware" name="esx">
-        <vers num="3.5" edition="update1" />
-        <vers num="3.5" edition="update2" />
-        <vers num="3.5" edition="update3" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-      </prod>
-      <prod vendor="vmware" name="esxi">
-        <vers num="3.5" edition="1" />
-        <vers num="4.0" edition="1" />
-        <vers num="4.0" edition="2" />
-        <vers num="4.0" edition="3" />
-        <vers num="4.0" edition="4" />
-        <vers num="4.1" edition="1" />
-        <vers num="4.1" edition="2" />
-        <vers num="5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3289" published="2012-06-14" name="CVE-2012-3289" modified="2012-06-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service (guest OS crash) via crafted traffic from a remote virtual device.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.vmware.com/security/advisories/VMSA-2012-0011.html" source="CONFIRM" adv="1">http://www.vmware.com/security/advisories/VMSA-2012-0011.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vmware" name="player">
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-      </prod>
-      <prod vendor="vmware" name="workstation">
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="8.0.2" />
-        <vers num="8.0.3" />
-      </prod>
-      <prod vendor="vmware" name="esx">
-        <vers num="3.5" edition="update1" />
-        <vers num="3.5" edition="update2" />
-        <vers num="3.5" edition="update3" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-      </prod>
-      <prod vendor="vmware" name="esxi">
-        <vers num="3.5" edition="1" />
-        <vers num="4.0" edition="1" />
-        <vers num="4.0" edition="2" />
-        <vers num="4.0" edition="3" />
-        <vers num="4.0" edition="4" />
-        <vers num="4.1" edition="1" />
-        <vers num="4.1" edition="2" />
-        <vers num="5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3290" published="2012-06-07" name="CVE-2012-3290" modified="2012-06-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in Google Chrome before 20.0.1132.22 on the Acer AC700; Samsung Series 5, 5 550, and Chromebox 3; and Cr-48 Chromebook platforms have unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://googlechromereleases.blogspot.com/2012/06/beta-channel-update-for-chromebooks.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/06/beta-channel-update-for-chromebooks.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="acer" name="ac700_chromebook">
-        <vers num="-" />
-      </prod>
-      <prod vendor="google" name="cr-48_chromebook">
-        <vers num="-" />
-      </prod>
-      <prod vendor="samsung" name="chromebox_3">
-        <vers num="-" />
-      </prod>
-      <prod vendor="samsung" name="series_5_550_chromebook">
-        <vers num="-" />
-      </prod>
-      <prod vendor="samsung" name="series_5_chromebook">
-        <vers num="-" />
-      </prod>
-      <prod vendor="google" name="chrome_os">
-        <vers num="20.0.1132.0" />
-        <vers num="20.0.1132.1" />
-        <vers num="20.0.1132.10" />
-        <vers num="20.0.1132.11" />
-        <vers num="20.0.1132.12" />
-        <vers num="20.0.1132.13" />
-        <vers num="20.0.1132.14" />
-        <vers num="20.0.1132.15" />
-        <vers num="20.0.1132.16" />
-        <vers num="20.0.1132.17" />
-        <vers num="20.0.1132.18" />
-        <vers num="20.0.1132.19" />
-        <vers num="20.0.1132.2" />
-        <vers num="20.0.1132.20" />
-        <vers prev="1" num="20.0.1132.21" />
-        <vers num="20.0.1132.3" />
-        <vers num="20.0.1132.4" />
-        <vers num="20.0.1132.5" />
-        <vers num="20.0.1132.6" />
-        <vers num="20.0.1132.7" />
-        <vers num="20.0.1132.8" />
-        <vers num="20.0.1132.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3291" published="2012-06-07" name="CVE-2012-3291" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.infradead.org/openconnect/changelog.html" source="CONFIRM">http://www.infradead.org/openconnect/changelog.html</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079747.html" source="FEDORA">FEDORA-2012-6758</ref>
-      <ref url="http://git.infradead.org/users/dwmw2/openconnect.git/commitdiff/14cae65318d3ef1f7d449e463b72b6934e82f1c2" source="CONFIRM">http://git.infradead.org/users/dwmw2/openconnect.git/commitdiff/14cae65318d3ef1f7d449e463b72b6934e82f1c2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="infradead" name="openconnect">
-        <vers num="1.00" />
-        <vers num="1.10" />
-        <vers num="1.20" />
-        <vers num="1.30" />
-        <vers num="1.40" />
-        <vers num="2.00" />
-        <vers num="2.01" />
-        <vers num="2.10" />
-        <vers num="2.11" />
-        <vers num="2.12" />
-        <vers num="2.20" />
-        <vers num="2.21" />
-        <vers num="2.22" />
-        <vers num="2.23" />
-        <vers num="2.24" />
-        <vers num="2.25" />
-        <vers num="2.26" />
-        <vers num="3.00" />
-        <vers num="3.01" />
-        <vers num="3.02" />
-        <vers num="3.11" />
-        <vers num="3.12" />
-        <vers num="3.13" />
-        <vers num="3.14" />
-        <vers num="3.15" />
-        <vers num="3.16" />
-        <vers prev="1" num="3.17" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3292" published="2012-06-07" name="CVE-2012-3292" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="7.6" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="4.9" CVSS_base_score="7.6">
-    <desc>
-      <descript source="cve">The GridFTP in Globus Toolkit (GT) before 5.2.2, when certain autoconf macros are defined, does not properly check the return value from the getpwnam_r function, which might allow remote attackers to gain privileges by logging in with a user that does not exist, which causes GridFTP to run as the last user in the password file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.debian.org/security/2012/dsa-2523" source="DEBIAN">DSA-2523</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081797.html" source="FEDORA">FEDORA-2012-8445</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081791.html" source="FEDORA">FEDORA-2012-8461</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081787.html" source="FEDORA">FEDORA-2012-8488</ref>
-      <ref url="http://jira.globus.org/browse/GT-195" source="CONFIRM">http://jira.globus.org/browse/GT-195</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="globus" name="globus_toolkit">
-        <vers num="2.0" />
-        <vers num="2.2" />
-        <vers num="2.4.3" />
-        <vers num="3.0.2" />
-        <vers num="3.2.1" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" />
-        <vers num="4.0.8" />
-        <vers num="4.2.0" />
-        <vers num="4.2.1" />
-        <vers num="5.0.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.2.0" />
-        <vers prev="1" num="5.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3293" published="2012-08-21" name="CVE-2012-3293" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a cross-frame scripting (XFS) issue.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77179" source="XF">was-ac-xss(77179)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg27022958" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg27022958</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21606096" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg21606096</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1PM60839" source="AIXAPAR">PM60839</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="websphere_application_server">
-        <vers num="6.1.0" />
-        <vers num="6.1.0.0" />
-        <vers num="6.1.0.1" />
-        <vers num="6.1.0.11" />
-        <vers num="6.1.0.12" />
-        <vers num="6.1.0.15" />
-        <vers num="6.1.0.17" />
-        <vers num="6.1.0.19" />
-        <vers num="6.1.0.2" />
-        <vers num="6.1.0.21" />
-        <vers num="6.1.0.23" />
-        <vers num="6.1.0.25" />
-        <vers num="6.1.0.27" />
-        <vers num="6.1.0.29" />
-        <vers num="6.1.0.3" />
-        <vers num="6.1.0.31" />
-        <vers num="6.1.0.33" />
-        <vers num="6.1.0.35" />
-        <vers num="6.1.0.37" />
-        <vers num="6.1.0.39" />
-        <vers num="6.1.0.41" />
-        <vers num="6.1.0.43" />
-        <vers num="6.1.0.5" />
-        <vers num="6.1.0.7" />
-        <vers num="6.1.0.9" />
-        <vers num="7.0" />
-        <vers num="7.0.0.1" />
-        <vers num="7.0.0.11" />
-        <vers num="7.0.0.13" />
-        <vers num="7.0.0.15" />
-        <vers num="7.0.0.17" />
-        <vers num="7.0.0.19" />
-        <vers num="7.0.0.2" />
-        <vers num="7.0.0.21" />
-        <vers num="7.0.0.23" />
-        <vers num="7.0.0.3" />
-        <vers num="7.0.0.4" />
-        <vers num="7.0.0.5" />
-        <vers num="7.0.0.6" />
-        <vers num="7.0.0.7" />
-        <vers num="7.0.0.8" />
-        <vers num="7.0.0.9" />
-        <vers num="8.0.0.0" />
-        <vers num="8.0.0.1" />
-        <vers num="8.0.0.2" />
-        <vers num="8.0.0.3" />
-        <vers num="8.5.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3294" published="2012-08-17" name="CVE-2012-3294" modified="2012-08-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier, and WebSphere MQ - Managed File Transfer 7.5, allow remote attackers to hijack the authentication of arbitrary users for requests that (1) add user accounts via the /wmqfteconsole/Filespaces URI, (2) modify permissions via the /wmqfteconsole/FileSpacePermisssions URI, or (3) add MQ Message Descriptor (MQMD) user accounts via the /wmqfteconsole/UploadUsers URI.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77180" source="XF">wmq-fte-csrf(77180)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21607482" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21607482</ref>
-      <ref url="http://www.exploit-db.com/exploits/20477/" source="EXPLOIT-DB">20477</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IC85516" source="AIXAPAR">IC85516</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="websphere_mq">
-        <vers num="7.0" edition="" />
-        <vers num="7.0" edition=":file_transfer" />
-        <vers num="7.0.0.1" edition="" />
-        <vers num="7.0.0.1" edition=":file_transfer" />
-        <vers num="7.0.1.0" edition="" />
-        <vers num="7.0.1.0" edition=":file_transfer" />
-        <vers num="7.0.2.0" edition="" />
-        <vers num="7.0.2.0" edition=":file_transfer" />
-        <vers num="7.0.2.2" edition="" />
-        <vers num="7.0.2.2" edition=":file_transfer" />
-        <vers prev="1" num="7.0.4" edition="" />
-        <vers prev="1" num="7.0.4" edition=":file_transfer" />
-        <vers num="7.0.4.0" edition="" />
-        <vers num="7.0.4.0" edition=":file_transfer" />
-      </prod>
-      <prod vendor="ibm" name="websphere_mq_managed_file_transfer">
-        <vers num="7.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3295" published="2012-08-29" name="CVE-2012-3295" modified="2012-08-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">IBM WebSphere MQ 7.1, when an SVRCONN channel is used, allows remote attackers to bypass the security-configuration setup step and obtain queue-manager access via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77279" source="XF">wmq-svrconn-security-bypass(77279)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21595523" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21595523</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1PM56593" source="AIXAPAR">PM56593</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="websphere_mq">
-        <vers num="7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3296" published="2012-08-17" name="CVE-2012-3296" modified="2012-08-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Help link in the login panel in IBM Power Hardware Management Console (HMC) 7R7.1.0 before SP4, 7R7.2.0 before SP2, and 7R7.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77288" source="XF">hmc-login-panel-xss(77288)</ref>
-      <ref url="http://www.ibm.com/support/fixcentral/firmware/readme?fixid=MH01258" source="CONFIRM">http://www.ibm.com/support/fixcentral/firmware/readme?fixid=MH01258</ref>
-      <ref url="http://www.ibm.com/support/fixcentral/firmware/readme?fixid=MH01257" source="CONFIRM">http://www.ibm.com/support/fixcentral/firmware/readme?fixid=MH01257</ref>
-      <ref url="http://www.ibm.com/support/fixcentral/firmware/readme?fixid=MH01253" source="CONFIRM">http://www.ibm.com/support/fixcentral/firmware/readme?fixid=MH01253</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1MB03494" source="AIXAPAR">MB03494</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1MB03489" source="AIXAPAR">MB03489</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1MB03488" source="AIXAPAR">MB03488</ref>
-      <ref url="http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_the_help_link_on_the_power_hmc_login_panel_is_susceptible_to_reflected_cross_site_scripting_cve_2012_329617" source="CONFIRM" adv="1">http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_the_help_link_on_the_power_hmc_login_panel_is_susceptible_to_reflected_cross_site_scripting_cve_2012_329617</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="power_hardware_management_console">
-        <vers num="7r7.1.0" edition="sp0" />
-        <vers num="7r7.1.0" edition="sp1" />
-        <vers num="7r7.1.0" edition="sp2" />
-        <vers num="7r7.1.0" edition="sp3" />
-        <vers num="7r7.2.0" edition="sp0" />
-        <vers num="7r7.2.0" edition="sp1" />
-        <vers num="7r7.3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3301" published="2012-08-21" name="CVE-2012-3301" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8.5.x before 8.5.4 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input involving (1) Mozilla Firefox 3.0.9 and earlier or (2) unspecified browsers.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77400" source="XF">lotus-domino-response-splitting(77400)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21608160" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21608160</ref>
-      <ref url="http://websecurity.com.ua/5839/" source="MISC">http://websecurity.com.ua/5839/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="lotus_domino">
-        <vers num="8.5.0" />
-        <vers num="8.5.0.1" />
-        <vers num="8.5.1.1" />
-        <vers num="8.5.1.2" />
-        <vers num="8.5.1.3" />
-        <vers num="8.5.1.4" />
-        <vers num="8.5.1.5" />
-        <vers num="8.5.2.0" />
-        <vers num="8.5.2.1" />
-        <vers num="8.5.2.2" />
-        <vers num="8.5.2.3" />
-        <vers num="8.5.2.4" />
-        <vers num="8.5.3.0" />
-        <vers num="8.5.3.1" />
-        <vers num="8.5.3.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3302" published="2012-08-21" name="CVE-2012-3302" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 allow remote attackers to inject arbitrary web script or HTML via (1) a URL accessed during use of the Mail template in the WebMail UI or (2) a URL accessed during use of Domino Help through the Domino HTTP server.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77401" source="XF">lotus-domino-xss(77401)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21608160" source="CONFIRM" adv="1">http://www-01.ibm.com/support/docview.wss?uid=swg21608160</ref>
-      <ref url="http://websecurity.com.ua/5839/" source="MISC">http://websecurity.com.ua/5839/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="lotus_domino">
-        <vers num="7.0.1" />
-        <vers num="7.0.1.1" />
-        <vers num="7.0.2" />
-        <vers num="7.0.2.2" />
-        <vers num="7.0.3.0" />
-        <vers num="7.0.3.1" />
-        <vers num="7.0.4.0" />
-        <vers num="7.0.4.1" />
-        <vers num="7.0.4.2" />
-        <vers num="8.5.0" />
-        <vers num="8.5.0.1" />
-        <vers num="8.5.1.1" />
-        <vers num="8.5.1.2" />
-        <vers num="8.5.1.3" />
-        <vers num="8.5.1.4" />
-        <vers num="8.5.1.5" />
-        <vers num="8.5.2.0" />
-        <vers num="8.5.2.1" />
-        <vers num="8.5.2.2" />
-        <vers num="8.5.2.3" />
-        <vers num="8.5.2.4" />
-        <vers num="8.5.3.0" />
-        <vers num="8.5.3.1" />
-        <vers num="8.5.3.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3308" published="2012-08-17" name="CVE-2012-3308" modified="2012-08-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21599114" source="CONFIRM" patch="1">http://www.ibm.com/support/docview.wss?uid=swg21599114</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77567" source="XF">ibm-sametime-xss(77567)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21607903" source="CONFIRM">http://www.ibm.com/support/docview.wss?uid=swg21607903</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="sametime">
-        <vers num="8.0.2.0" />
-        <vers num="8.0.2.1" />
-        <vers num="8.5.0.0" />
-        <vers num="8.5.1.0" />
-        <vers num="8.5.1.1" />
-        <vers num="8.5.2.0" />
-        <vers num="8.5.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3309" published="2012-08-29" name="CVE-2012-3309" modified="2012-08-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering (aka csrf_status) feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77745" source="XF">infosphere-gaurdium-csrf(77745)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21609223" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21609223</ref>
-      <ref url="http://en.securitylab.ru/lab/PT-2012-15" source="MISC">http://en.securitylab.ru/lab/PT-2012-15</ref>
-      <ref url="http://en.securitylab.ru/lab/" source="MISC">http://en.securitylab.ru/lab/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="infosphere_guardium">
-        <vers num="8.00" />
-        <vers num="8.01" />
-        <vers prev="1" num="8.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3312" published="2012-08-29" name="CVE-2012-3312" modified="2012-08-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77785" source="XF">infosphere-gaurdium-savepassword-info-disc(77785)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21609224" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21609224</ref>
-      <ref url="http://en.securitylab.ru/lab/PT-2012-15" source="MISC">http://en.securitylab.ru/lab/PT-2012-15</ref>
-      <ref url="http://en.securitylab.ru/lab/" source="MISC">http://en.securitylab.ru/lab/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="infosphere_guardium">
-        <vers num="8.00" />
-        <vers num="8.01" />
-        <vers prev="1" num="8.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3313" published="2012-09-10" name="CVE-2012-3313" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77787" source="XF">ibm-maximo-xss-iv15530(77787)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21610081" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21610081</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IV15530" source="AIXAPAR">IV15530</ref>
-      <ref url="http://secunia.com/advisories/50551" source="SECUNIA" adv="1">50551</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="change_and_configuration_management_database">
-        <vers num="6.0" />
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_asset_management">
-        <vers num="6.2.0.0" />
-        <vers num="7.1.0.0" />
-        <vers num="7.5.0.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_service_desk">
-        <vers num="6.2" />
-      </prod>
-      <prod vendor="ibm" name="smartcloud_control_desk">
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_asset_management_for_it">
-        <vers num="6.0" />
-        <vers num="6.2" />
-        <vers num="7.0" />
-        <vers num="7.1" />
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_service_request_manager">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3325" published="2012-08-30" name="CVE-2012-3325" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.5, and 8.5.x Full Profile before 8.5.0.1, when the PM44303 fix is installed, does not properly validate credentials, which allows remote authenticated users to obtain administrative access via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77959" source="XF">was-pm44303-security-bypass(77959)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=swg21609067" source="CONFIRM" adv="1">http://www.ibm.com/support/docview.wss?uid=swg21609067</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1PM71296" source="AIXAPAR">PM71296</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="websphere_application_server">
-        <vers num="6.1" />
-        <vers num="6.1.0" />
-        <vers num="6.1.0.0" />
-        <vers num="6.1.0.1" />
-        <vers num="6.1.0.11" />
-        <vers num="6.1.0.12" />
-        <vers num="6.1.0.15" />
-        <vers num="6.1.0.17" />
-        <vers num="6.1.0.19" />
-        <vers num="6.1.0.2" />
-        <vers num="6.1.0.21" />
-        <vers num="6.1.0.23" />
-        <vers num="6.1.0.25" />
-        <vers num="6.1.0.27" />
-        <vers num="6.1.0.29" />
-        <vers num="6.1.0.3" />
-        <vers num="6.1.0.31" />
-        <vers num="6.1.0.33" />
-        <vers num="6.1.0.35" />
-        <vers num="6.1.0.37" />
-        <vers num="6.1.0.39" />
-        <vers num="6.1.0.41" />
-        <vers num="6.1.0.43" />
-        <vers num="6.1.0.5" />
-        <vers num="6.1.0.7" />
-        <vers num="6.1.0.9" />
-        <vers num="6.1.1" />
-        <vers num="6.1.13" />
-        <vers num="6.1.14" />
-        <vers num="6.1.3" />
-        <vers num="6.1.5" />
-        <vers num="6.1.6" />
-        <vers num="6.1.7" />
-        <vers num="7.0" />
-        <vers num="7.0.0.1" />
-        <vers num="7.0.0.11" />
-        <vers num="7.0.0.13" />
-        <vers num="7.0.0.15" />
-        <vers num="7.0.0.17" />
-        <vers num="7.0.0.19" />
-        <vers num="7.0.0.2" />
-        <vers num="7.0.0.21" />
-        <vers num="7.0.0.23" />
-        <vers num="7.0.0.3" />
-        <vers num="7.0.0.4" />
-        <vers num="7.0.0.5" />
-        <vers num="7.0.0.6" />
-        <vers num="7.0.0.7" />
-        <vers num="7.0.0.8" />
-        <vers num="7.0.0.9" />
-        <vers num="8.0.0.0" />
-        <vers num="8.0.0.1" />
-        <vers num="8.0.0.2" />
-        <vers num="8.0.0.3" />
-        <vers num="8.0.0.4" />
-        <vers num="8.5.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3326" published="2012-09-10" name="CVE-2012-3326" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77960" source="XF">ibm-maximo-xss-iv20344(77960)</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg21610081" source="CONFIRM">http://www-01.ibm.com/support/docview.wss?uid=swg21610081</ref>
-      <ref url="http://www-01.ibm.com/support/docview.wss?uid=swg1IV20344" source="AIXAPAR">IV20344</ref>
-      <ref url="http://secunia.com/advisories/50551" source="SECUNIA" adv="1">50551</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="change_and_configuration_management_database">
-        <vers num="6.0" />
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_asset_management">
-        <vers num="7.5.0.0" />
-      </prod>
-      <prod vendor="ibm" name="maximo_service_desk">
-        <vers num="6.2" />
-      </prod>
-      <prod vendor="ibm" name="smartcloud_control_desk">
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_asset_management_for_it">
-        <vers num="6.0" />
-        <vers num="6.2" />
-        <vers num="7.0" />
-        <vers num="7.1" />
-        <vers num="7.2" />
-      </prod>
-      <prod vendor="ibm" name="tivoli_service_request_manager">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3343" published="2012-06-08" name="CVE-2012-3343" modified="2012-06-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in Microdasys before 3.5.1-B708, as used in Bloxx Web Filtering before 5.0.14 and other products, allows remote attackers to hijack the authentication of arbitrary users for requests that trigger error pages containing XSS sequences, a different vulnerability than CVE-2012-2564.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/722963" source="CERT-VN">VU#722963</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8R9LBY" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8R9LBY</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bloxx" name="web_filtering">
-        <vers prev="1" num="5.0.13" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3345" published="2012-06-15" name="CVE-2012-3345" modified="2012-06-15" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:N/I:C/A:C)" CVSS_score="5.6" CVSS_impact_subscore="9.2" CVSS_exploit_subscore="1.9" CVSS_base_score="5.6">
-    <desc>
-      <descript source="cve">ioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporary file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/15/3" source="MLIST">[oss-security] 20120614 CVE-2012-3345: symlink attack in ioquake3 >= r1773, &lt; r2253</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ioquake3" name="ioquake3_engine">
-        <vers prev="1" num="r2252" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3347" published="2012-06-13" name="CVE-2012-3347" modified="2012-06-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and then upload and execute arbitrary JSP code via a JBoss remote-deployment mechanism, a different vulnerability than CVE-2012-1828.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MAPG-8RQL83" source="CONFIRM">http://www.kb.cert.org/vuls/id/MAPG-8RQL83</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/773035" source="CERT-VN">VU#773035</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="efstechnology" name="autoform_pdm_archive">
-        <vers num="6.9" />
-        <vers prev="1" num="6.920" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3350" published="2012-07-12" name="CVE-2012-3350" modified="2012-07-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23096" source="MISC">https://www.htbridge.com/advisory/HTB23096</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76774" source="XF">webmatic-referer-sql-injection(76774)</ref>
-      <ref url="http://www.securityfocus.com/bid/54287" source="BID">54287</ref>
-      <ref url="http://www.exploit-db.com/exploits/19629" source="EXPLOIT-DB">19629</ref>
-      <ref url="http://osvdb.org/83538" source="OSVDB">83538</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0026.html" source="BUGTRAQ">20120704 Blind SQL Injection in Webmatic</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wafer" name="webmatic">
-        <vers num="3.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3355" published="2012-07-17" name="CVE-2012-3355" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="3.6" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.9" CVSS_base_score="3.6">
-    <desc>
-      <descript source="cve">(1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users to execute arbitrary code via a symlink attack on a temporary HTML template file in the /tmp/context directory.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15351848" source="SUSE">openSUSE-SU-2012:0954</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=835076" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=835076</ref>
-      <ref url="https://bugzilla.gnome.org/show_bug.cgi?id=678661" source="MISC">https://bugzilla.gnome.org/show_bug.cgi?id=678661</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76538" source="XF">rhythmbox-template-symlink(76538)</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1503-1" source="UBUNTU">USN-1503-1</ref>
-      <ref url="http://www.securityfocus.com/bid/54186" source="BID">54186</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/25/7" source="MLIST">[oss-security] 20120625 Re: CVE 2011-* Request -- rhythmbox (context plug-in): Insecure temporary directory use by loading template files for 'Album', 'Lyrics', and 'Artist' tabs</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/25/5" source="MLIST">[oss-security] 20120625 CVE 2011-* Request -- rhythmbox (context plug-in): Insecure temporary directory use by loading template files for 'Album', 'Lyrics', and 'Artist' tabs</ref>
-      <ref url="http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-3355.html" source="MISC">http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-3355.html</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=616673" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=616673</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnome" name="rhythmbox">
-        <vers num="0.10.0" />
-        <vers num="0.10.0.90" />
-        <vers num="0.10.1" />
-        <vers num="0.11.0" />
-        <vers num="0.11.1" />
-        <vers num="0.11.2" />
-        <vers num="0.11.3" />
-        <vers num="0.11.4" />
-        <vers num="0.11.5" />
-        <vers num="0.11.6" />
-        <vers num="0.12.0" />
-        <vers num="0.12.1" />
-        <vers num="0.12.2" />
-        <vers num="0.12.3" />
-        <vers num="0.12.4" />
-        <vers num="0.12.5" />
-        <vers num="0.12.6" />
-        <vers num="0.12.7" />
-        <vers num="0.12.8" />
-        <vers num="0.13.0" />
-        <vers num="0.13.1" />
-        <vers num="0.13.2" />
-        <vers prev="1" num="0.13.3" />
-        <vers num="0.5.0" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.5.88" />
-        <vers num="0.6.0" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.6.4" />
-        <vers num="0.6.5" />
-        <vers num="0.6.6" />
-        <vers num="0.6.7" />
-        <vers num="0.6.8" />
-        <vers num="0.7.0" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.2" />
-        <vers num="0.8.3" />
-        <vers num="0.8.4" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.7" />
-        <vers num="0.8.8" />
-        <vers num="0.9.0" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="0.9.3.1" />
-        <vers num="0.9.4" />
-        <vers num="0.9.4.1" />
-        <vers num="0.9.5" />
-        <vers num="0.9.6" />
-        <vers num="0.9.6.90" />
-        <vers num="0.9.7" />
-        <vers num="0.9.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3356" published="2012-07-22" name="CVE-2012-3356" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not properly perform authorization, which allows remote attackers to bypass intended access restrictions via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://lwn.net/Articles/505096/" source="SUSE">openSUSE-SU-2012:0831</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76614" source="XF">viewvc-svnra-security-bypass(76614)</ref>
-      <ref url="http://www.securityfocus.com/bid/54197" source="BID">54197</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/25/8" source="MLIST">[oss-security] 20120625 Re: CVE Request: viewvc</ref>
-      <ref url="http://viewvc.tigris.org/source/browse/viewvc?view=rev&amp;revision=2760" source="CONFIRM">http://viewvc.tigris.org/source/browse/viewvc?view=rev&amp;revision=2760</ref>
-      <ref url="http://viewvc.tigris.org/source/browse/viewvc?view=rev&amp;revision=2759" source="CONFIRM">http://viewvc.tigris.org/source/browse/viewvc?view=rev&amp;revision=2759</ref>
-      <ref url="http://viewvc.tigris.org/source/browse/viewvc?view=rev&amp;revision=2757" source="CONFIRM">http://viewvc.tigris.org/source/browse/viewvc?view=rev&amp;revision=2757</ref>
-      <ref url="http://viewvc.tigris.org/source/browse/viewvc?view=rev&amp;revision=2756" source="CONFIRM">http://viewvc.tigris.org/source/browse/viewvc?view=rev&amp;revision=2756</ref>
-      <ref url="http://viewvc.tigris.org/source/browse/viewvc?view=rev&amp;revision=2755" source="CONFIRM">http://viewvc.tigris.org/source/browse/viewvc?view=rev&amp;revision=2755</ref>
-      <ref url="http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.1.15/CHANGES" source="CONFIRM">http://viewvc.tigris.org/source/browse/*checkout*/viewvc/tags/1.1.15/CHANGES</ref>
-      <ref url="http://viewvc.tigris.org/issues/show_bug.cgi?id=353" source="CONFIRM">http://viewvc.tigris.org/issues/show_bug.cgi?id=353</ref>
-      <ref url="http://osvdb.org/83225" source="OSVDB">83225</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="viewvc" name="viewvc">
-        <vers num="0.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="0.9.4" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.10" />
-        <vers num="1.0.11" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers prev="1" num="1.1.14" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3357" published="2012-07-22" name="CVE-2012-3357" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The SVN revision view (lib/vclib/svn/svn_repos.py) in ViewVC before 1.1.15 does not properly handle log messages when a readable path is copied from an unreadable path, which allows remote attackers to obtain sensitive information, related to a "log msg leak."</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://lwn.net/Articles/505096/" source="SUSE">openSUSE-SU-2012:0831</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76615" source="XF">viewvc-svnra-info-disclosure(76615)</ref>
-      <ref url="http://www.securityfocus.com/bid/54199" source="BID">54199</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/25/8" source="MLIST">[oss-security] 20120625 Re: CVE Request: viewvc</ref>
-      <ref url="http://viewvc.tigris.org/source/browse/viewvc?view=rev&amp;revision=2758" source="CONFIRM">http://viewvc.tigris.org/source/browse/viewvc?view=rev&amp;revision=2758</ref>
-      <ref url="http://osvdb.org/83227" source="OSVDB">83227</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="viewvc" name="viewvc">
-        <vers num="0.8" />
-        <vers num="0.9" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="0.9.4" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.10" />
-        <vers num="1.0.11" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers prev="1" num="1.1.14" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3358" published="2012-07-18" name="CVE-2012-3358" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted (1) tile number or (2) tile length in a JPEG 2000 image file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76850" source="XF">openjpeg-jpeg2000-bo(76850)</ref>
-      <ref url="http://www.securityfocus.com/bid/54373" source="BID">54373</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/11/1" source="MLIST">[oss-security] 20120711 Openjpeg: heap-buffer overflow when processing JPEG2000 image files</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:104" source="MANDRIVA">MDVSA-2012:104</ref>
-      <ref url="http://secunia.com/advisories/49913" source="SECUNIA" adv="1">49913</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1068.html" source="REDHAT">RHSA-2012:1068</ref>
-      <ref url="http://osvdb.org/83741" source="OSVDB">83741</ref>
-      <ref url="http://code.google.com/p/openjpeg/source/detail?r=1727" source="CONFIRM">http://code.google.com/p/openjpeg/source/detail?r=1727</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openjpeg" name="openjpeg">
-        <vers num="1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3360" published="2012-07-22" name="CVE-2012-3360" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:P)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows remote authenticated users to write arbitrary files to the disk image via a .. (dot dot) in the path attribute of a file element.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/openstack/nova/commit/b0feaffdb2b1c51182b8dce41b367f3449af5dd9" source="CONFIRM" patch="1">https://github.com/openstack/nova/commit/b0feaffdb2b1c51182b8dce41b367f3449af5dd9</ref>
-      <ref url="https://lists.launchpad.net/openstack/msg14089.html" source="MLIST">[openstack] 20120603 [OSSA 2012-008] Arbitrary file injection/corruption through directory traversal issues (CVE-2012-3360, CVE-2012-3361)</ref>
-      <ref url="https://github.com/openstack/nova/commit/2427d4a99bed35baefd8f17ba422cb7aae8dcca7" source="CONFIRM">https://github.com/openstack/nova/commit/2427d4a99bed35baefd8f17ba422cb7aae8dcca7</ref>
-      <ref url="https://bugs.launchpad.net/nova/+bug/1015531" source="CONFIRM">https://bugs.launchpad.net/nova/+bug/1015531</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1497-1" source="UBUNTU">USN-1497-1</ref>
-      <ref url="http://www.securityfocus.com/bid/54277" source="BID">54277</ref>
-      <ref url="http://secunia.com/advisories/49802" source="SECUNIA" adv="1">49802</ref>
-      <ref url="http://secunia.com/advisories/49763" source="SECUNIA" adv="1">49763</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083984.html" source="FEDORA">FEDORA-2012-10420</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openstack" name="essex">
-        <vers num="2012.1" />
-      </prod>
-      <prod vendor="openstack" name="folsom">
-        <vers num="2012.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3361" published="2012-07-22" name="CVE-2012-3361" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:P)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/openstack/nova/commit/b0feaffdb2b1c51182b8dce41b367f3449af5dd9" source="CONFIRM" patch="1">https://github.com/openstack/nova/commit/b0feaffdb2b1c51182b8dce41b367f3449af5dd9</ref>
-      <ref url="https://github.com/openstack/nova/commit/2427d4a99bed35baefd8f17ba422cb7aae8dcca7" source="CONFIRM" patch="1">https://github.com/openstack/nova/commit/2427d4a99bed35baefd8f17ba422cb7aae8dcca7</ref>
-      <ref url="https://review.openstack.org/#/c/9268/" source="CONFIRM">https://review.openstack.org/#/c/9268/</ref>
-      <ref url="https://lists.launchpad.net/openstack/msg14089.html" source="MLIST">[openstack] 20120603 [OSSA 2012-008] Arbitrary file injection/corruption through directory traversal issues (CVE-2012-3360, CVE-2012-3361)</ref>
-      <ref url="https://bugs.launchpad.net/nova/+bug/1015531" source="CONFIRM">https://bugs.launchpad.net/nova/+bug/1015531</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1497-1" source="UBUNTU">USN-1497-1</ref>
-      <ref url="http://www.securityfocus.com/bid/54278" source="BID">54278</ref>
-      <ref url="http://secunia.com/advisories/49802" source="SECUNIA" adv="1">49802</ref>
-      <ref url="http://secunia.com/advisories/49763" source="SECUNIA" adv="1">49763</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083984.html" source="FEDORA">FEDORA-2012-10420</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083969.html" source="FEDORA">FEDORA-2012-10418</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openstack" name="diablo">
-        <vers num="2011.3" />
-      </prod>
-      <prod vendor="openstack" name="essex">
-        <vers num="2012.1" />
-      </prod>
-      <prod vendor="openstack" name="folsom">
-        <vers num="2012.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3362" published="2012-07-12" name="CVE-2012-3362" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via an adduser admin action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/27/1" source="MLIST">[oss-security] 20120627 Re: CVE request: CSRF in eXtplorer</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/26/1" source="MLIST">[oss-security] 20120626 Re: CVE request: CSRF in eXtplorer</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/25/1" source="MLIST">[oss-security] 20120624 Re: CVE request: CSRF in eXtplorer</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/24/1" source="MLIST">[oss-security] 20120624 CVE request: CSRF in eXtplorer</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2510" source="DEBIAN">DSA-2510</ref>
-      <ref url="http://www.autosectools.com/Advisories/eXtplorer.2.1.RC3_Cross-site.Request.Forgery_174.html" source="MISC">http://www.autosectools.com/Advisories/eXtplorer.2.1.RC3_Cross-site.Request.Forgery_174.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="extplorer" name="extplorer">
-        <vers prev="1" num="2.1.0" edition="rc3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3365" published="2012-07-20" name="CVE-2012-3365" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15376003" source="SUSE">openSUSE-SU-2012:0976</ref>
-      <ref url="http://www.php.net/ChangeLog-5.php" source="CONFIRM">http://www.php.net/ChangeLog-5.php</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00022.html" source="SUSE">SUSE-SU-2012:1034</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00021.html" source="SUSE">SUSE-SU-2012:1033</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="1.0" />
-        <vers num="2.0" />
-        <vers num="2.0b10" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.18" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta_4_patch1" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" />
-        <vers num="4.1.0" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="4.2.0" />
-        <vers num="4.2.1" />
-        <vers num="4.2.2" />
-        <vers num="4.2.3" />
-        <vers num="4.3.0" />
-        <vers num="4.3.1" />
-        <vers num="4.3.10" />
-        <vers num="4.3.11" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.3.4" />
-        <vers num="4.3.5" />
-        <vers num="4.3.6" />
-        <vers num="4.3.7" />
-        <vers num="4.3.8" />
-        <vers num="4.3.9" />
-        <vers num="4.4.0" />
-        <vers num="4.4.1" />
-        <vers num="4.4.2" />
-        <vers num="4.4.3" />
-        <vers num="4.4.4" />
-        <vers num="4.4.5" />
-        <vers num="4.4.6" />
-        <vers num="4.4.7" />
-        <vers num="4.4.8" />
-        <vers num="4.4.9" />
-        <vers num="5.0.0" edition="beta1" />
-        <vers num="5.0.0" edition="beta2" />
-        <vers num="5.0.0" edition="beta3" />
-        <vers num="5.0.0" edition="beta4" />
-        <vers num="5.0.0" edition="rc1" />
-        <vers num="5.0.0" edition="rc2" />
-        <vers num="5.0.0" edition="rc3" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.3" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.1.0" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers num="5.2.0" />
-        <vers num="5.2.1" />
-        <vers num="5.2.10" />
-        <vers num="5.2.11" />
-        <vers num="5.2.12" />
-        <vers num="5.2.13" />
-        <vers num="5.2.14" />
-        <vers num="5.2.15" />
-        <vers num="5.2.16" />
-        <vers num="5.2.17" />
-        <vers num="5.2.2" />
-        <vers num="5.2.3" />
-        <vers num="5.2.4" />
-        <vers num="5.2.5" />
-        <vers num="5.2.6" />
-        <vers num="5.2.7" />
-        <vers num="5.2.8" />
-        <vers num="5.2.9" />
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.10" />
-        <vers num="5.3.11" />
-        <vers num="5.3.12" />
-        <vers num="5.3.13" />
-        <vers prev="1" num="5.3.14" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers num="5.3.8" />
-        <vers num="5.3.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3366" published="2012-07-03" name="CVE-2012-3366" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="9.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.0" CVSS_base_score="9.0">
-    <desc>
-      <descript source="cve">The Trigger plugin in bcfg2 1.2.x before 1.2.3 allows remote attackers with root access to the client to execute arbitrary commands via shell metacharacters in the UUID field to the server process (bcfg2-server).</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/Bcfg2/bcfg2/commit/a524967e8d5c4c22e49cd619aed20c87a316c0be" source="CONFIRM" patch="1">https://github.com/Bcfg2/bcfg2/commit/a524967e8d5c4c22e49cd619aed20c87a316c0be</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76616" source="XF">bcfg2-trigger-command-execution(76616)</ref>
-      <ref url="http://www.securityfocus.com/bid/54217" source="BID">54217</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2503" source="DEBIAN">DSA-2503</ref>
-      <ref url="http://secunia.com/advisories/49690" source="SECUNIA" adv="1">49690</ref>
-      <ref url="http://secunia.com/advisories/49629" source="SECUNIA" adv="1">49629</ref>
-      <ref url="http://permalink.gmane.org/gmane.comp.sysutils.bcfg2.devel/4539" source="MLIST">[bcfg-dev] 20120612 Major security flaw in Trigger plugin</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="anl" name="bcfg2">
-        <vers num="1.2.0" edition="rc2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3367" published="2012-08-13" name="CVE-2012-3367" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:P)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority (CA) certificate.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://fedorahosted.org/pki/changeset/2430" source="CONFIRM" patch="1">https://fedorahosted.org/pki/changeset/2430</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=836268" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=836268</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77102" source="XF">rhcs-certificate-manager-sec-bypass(77102)</ref>
-      <ref url="http://www.securitytracker.com/id?1027284" source="SECTRACK">1027284</ref>
-      <ref url="http://www.securityfocus.com/bid/54608" source="BID">54608</ref>
-      <ref url="http://secunia.com/advisories/50013" source="SECUNIA" adv="1">50013</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1103.html" source="REDHAT">RHSA-2012:1103</ref>
-      <ref url="http://osvdb.org/84098" source="OSVDB">84098</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="redhat" name="certificate_system">
-        <vers num="7.1" />
-        <vers num="7.2" />
-        <vers num="7.3" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers prev="1" num="8.1" />
-      </prod>
-      <prod vendor="redhat" name="dogtag_certificate_system">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3368" published="2012-07-03" name="CVE-2012-3368" modified="2012-07-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:N/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://sourceforge.net/tracker/download.php?group_id=36489&amp;atid=417357&amp;file_id=441195&amp;aid=3517812" source="CONFIRM" patch="1">http://sourceforge.net/tracker/download.php?group_id=36489&amp;atid=417357&amp;file_id=441195&amp;aid=3517812</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=835849" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=835849</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=812551" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=812551</ref>
-      <ref url="http://sourceforge.net/tracker/?func=detail&amp;aid=3517812&amp;group_id=36489&amp;atid=417357" source="CONFIRM">http://sourceforge.net/tracker/?func=detail&amp;aid=3517812&amp;group_id=36489&amp;atid=417357</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=625302" source="CONFIRM">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=625302</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="redhat" name="dtach">
-        <vers num="0.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3371" published="2012-07-17" name="CVE-2012-3371" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:P)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service (excessive database lookup calls and server hang) via a request with many repeated IDs in the os:scheduler_hints section.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/openstack/nova/commit/034762e8060dcf0a11cb039b9d426b0d0bb1801d" source="CONFIRM" patch="1">https://github.com/openstack/nova/commit/034762e8060dcf0a11cb039b9d426b0d0bb1801d</ref>
-      <ref url="https://lists.launchpad.net/openstack/msg14452.html" source="MLIST">[openstack] 20120711 [OSSA 2012-009] Scheduler denial of service through scheduler_hints (CVE-2012-3371)</ref>
-      <ref url="https://bugs.launchpad.net/nova/+bug/1017795" source="CONFIRM">https://bugs.launchpad.net/nova/+bug/1017795</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1501-1" source="UBUNTU">USN-1501-1</ref>
-      <ref url="http://www.securityfocus.com/bid/54388" source="BID">54388</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/11/13" source="MLIST">[oss-security] 20120711 [OSSA 2012-009] Scheduler denial of service through scheduler_hints  (CVE-2012-3371)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openstack" name="compute">
-        <vers num="2012.2" />
-      </prod>
-      <prod vendor="openstack" name="essex">
-        <vers num="2012.1" />
-      </prod>
-      <prod vendor="openstack" name="folsom">
-        <vers num="2012.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3372" published="2012-07-09" name="CVE-2012-3372" modified="2012-07-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">** DISPUTED ** The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Cyberoam_SSL_CA certificate in a list of trusted root certification authorities.  NOTE: the vendor disputes the significance of this issue because the appliance "does not allow import or export of the foresaid private key."</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://media.torproject.org/misc/2012-07-03-cyberoam-CVE-2012-3372.txt" source="MISC">https://media.torproject.org/misc/2012-07-03-cyberoam-CVE-2012-3372.txt</ref>
-      <ref url="https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372" source="MISC">https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372</ref>
-      <ref url="http://www.theregister.co.uk/2012/07/07/cyberoam_tor_ssl_spying_flap/" source="MISC">http://www.theregister.co.uk/2012/07/07/cyberoam_tor_ssl_spying_flap/</ref>
-      <ref url="http://blog.cyberoam.com/2012/07/ssl-bridging-cyberoam-approach/" source="MISC">http://blog.cyberoam.com/2012/07/ssl-bridging-cyberoam-approach/</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0021.html" source="BUGTRAQ">20120703 Cyberoam advisory</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="elitecore" name="cyberoam_unified_threat_management">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3374" published="2012-07-07" name="CVE-2012-3374" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://hg.pidgin.im/pidgin/main/rev/ded93865ef42" source="CONFIRM" patch="1">http://hg.pidgin.im/pidgin/main/rev/ded93865ef42</ref>
-      <ref url="http://www.pidgin.im/news/security/index.php?id=64" source="CONFIRM" adv="1">http://www.pidgin.im/news/security/index.php?id=64</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:105" source="MANDRIVA">MDVSA-2012:105</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pidgin" name="pidgin">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.10.0" />
-        <vers num="2.10.1" />
-        <vers num="2.10.2" />
-        <vers num="2.10.3" />
-        <vers prev="1" num="2.10.4" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-        <vers num="2.5.4" />
-        <vers num="2.5.5" />
-        <vers num="2.5.6" />
-        <vers num="2.5.7" />
-        <vers num="2.5.8" />
-        <vers num="2.5.9" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.11" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-        <vers num="2.8.0" />
-        <vers num="2.9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3376" published="2012-07-12" name="CVE-2012-3376" modified="2012-07-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out the same BlockPool twice from a NodeName, which might allow remote clients to read arbitrary blocks, write to blocks to which they only have read access, and have other unspecified impacts.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/54358" source="BID">54358</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0049.html" source="BUGTRAQ">20120706 [CVE-2012-3376] Apache Hadoop HDFS information disclosure vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="hadoop">
-        <vers num="2.0.0" edition="alpha" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3377" published="2012-07-12" name="CVE-2012-3377" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the Ogg_DecodePacket function in the OGG demuxer (modules/demux/ogg.c) in VideoLAN VLC media player before 2.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted OGG file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.videolan.org/?p=vlc/vlc-2.0.git;a=commitdiff;h=16e9e126333fb7acb47d363366fee3deadc8331e" source="CONFIRM" patch="1">http://git.videolan.org/?p=vlc/vlc-2.0.git;a=commitdiff;h=16e9e126333fb7acb47d363366fee3deadc8331e</ref>
-      <ref url="http://www.securitytracker.com/id?1027224" source="SECTRACK">1027224</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/06/2" source="MLIST">[oss-security] 20120706 Re: CVE request: VLC / Asterisk</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/06/1" source="MLIST">[oss-security] 20120706 CVE request: VLC / Asterisk</ref>
-      <ref url="http://secunia.com/advisories/49835" source="SECUNIA" adv="1">49835</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15299" source="OVAL">oval:org.mitre.oval:def:15299</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="videolan" name="vlc_media_player">
-        <vers num="0.1.99a" />
-        <vers num="0.1.99b" />
-        <vers num="0.1.99c" />
-        <vers num="0.1.99d" />
-        <vers num="0.1.99e" />
-        <vers num="0.1.99f" />
-        <vers num="0.1.99g" />
-        <vers num="0.1.99h" />
-        <vers num="0.1.99i" />
-        <vers num="0.2.0" />
-        <vers num="0.2.50" />
-        <vers num="0.2.60" />
-        <vers num="0.2.61" />
-        <vers num="0.2.62" />
-        <vers num="0.2.63" />
-        <vers num="0.2.70" />
-        <vers num="0.2.71" />
-        <vers num="0.2.72" />
-        <vers num="0.2.73" />
-        <vers num="0.2.80" />
-        <vers num="0.2.81" />
-        <vers num="0.2.82" />
-        <vers num="0.2.83" />
-        <vers num="0.2.90" />
-        <vers num="0.2.91" />
-        <vers num="0.2.92" />
-        <vers num="0.3.0" />
-        <vers num="0.3.1" />
-        <vers num="0.4.0" />
-        <vers num="0.4.1" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.3-ac3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.5.0" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.6.0" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-        <vers num="0.7.0" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.8.0" />
-        <vers num="0.8.1" />
-        <vers num="0.8.1337" />
-        <vers num="0.8.2" />
-        <vers num="0.8.4" />
-        <vers num="0.8.4a" />
-        <vers num="0.8.5" />
-        <vers num="0.8.6" />
-        <vers num="0.8.6a" />
-        <vers num="0.8.6b" />
-        <vers num="0.8.6c" />
-        <vers num="0.8.6d" />
-        <vers num="0.8.6e" />
-        <vers num="0.8.6f" />
-        <vers num="0.8.6g" />
-        <vers num="0.8.6h" />
-        <vers num="0.8.6i" />
-        <vers num="0.9.0" />
-        <vers num="0.9.1" />
-        <vers num="0.9.10" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="0.9.4" />
-        <vers num="0.9.5" />
-        <vers num="0.9.6" />
-        <vers num="0.9.8a" />
-        <vers num="0.9.9" />
-        <vers num="0.9.9a" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.10.1" />
-        <vers num="1.1.11" />
-        <vers num="1.1.13" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.4.1" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.6.1" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="2.0.0" />
-        <vers prev="1" num="2.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3378" published="2012-08-31" name="CVE-2012-3378" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:N/I:P/A:P)" CVSS_score="3.3" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.4" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">The register_application function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack on a temporary socket file in /tmp/at-spi2.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.gnome.org/show_bug.cgi?id=678348" source="CONFIRM">https://bugzilla.gnome.org/show_bug.cgi?id=678348</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/06/3" source="MLIST">[oss-security] 20120706 Re: Three CVE requests: at-spi2-atk, as31, naxsi</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/05/1" source="MLIST">[oss-security] 20120705 Three CVE requests: at-spi2-atk, as31, naxsi</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678026" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678026</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnome" name="at-spi2-atk">
-        <vers num="2.5.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-3379" reject="1" published="2012-08-31" name="CVE-2012-3379" modified="2012-08-31">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-0808.  Reason: This candidate is a duplicate of CVE-2012-0808.  Notes: All CVE users should reference CVE-2012-0808 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3380" published="2012-08-31" name="CVE-2012-3380" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://code.google.com/p/naxsi/source/detail?r=307" source="MISC" patch="1">http://code.google.com/p/naxsi/source/detail?r=307</ref>
-      <ref url="http://www.osvdb.org/83617" source="OSVDB">83617</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/06/3" source="MLIST">[oss-security] 20120706 Re: Three CVE requests: at-spi2-atk, as31, naxsi</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/05/1" source="MLIST">[oss-security] 20120705 Three CVE requests: at-spi2-atk, as31, naxsi</ref>
-      <ref url="http://secunia.com/advisories/49811" source="SECUNIA" adv="1">49811</ref>
-      <ref url="http://code.google.com/p/naxsi/" source="CONFIRM">http://code.google.com/p/naxsi/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="naxsi_project" name="naxsi">
-        <vers prev="1" num="0.46" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3381" published="2012-08-16" name="CVE-2012-3381" modified="2012-08-17" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="4.4" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.4" CVSS_base_score="4.4">
-    <desc>
-      <descript source="cve">sfcb in sblim-sfcb places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=838160" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=838160</ref>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=770234" source="CONFIRM">https://bugzilla.novell.com/show_bug.cgi?id=770234</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/06/8" source="MLIST">[oss-security] 20120706 Re: CVE Request: sblim-sfcb: insecure LD_LIBRARY_PATH usage</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/06/7" source="MLIST">[oss-security] 20120706 CVE Request: sblim-sfcb: insecure LD_LIBRARY_PATH usage</ref>
-      <ref url="http://sourceforge.net/tracker/index.php?func=detail&amp;aid=3541554&amp;group_id=128809&amp;atid=712784" source="CONFIRM">http://sourceforge.net/tracker/index.php?func=detail&amp;aid=3541554&amp;group_id=128809&amp;atid=712784</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="standards_based_linux_instrumentation" name="sblim-sfcb">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3382" published="2012-07-12" name="CVE-2012-3382" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs in Mono 2.10.8 and earlier allows remote attackers to inject arbitrary web script or HTML via a file with a crafted name and a forbidden extension, which is not properly handled in an error message.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/mono/mono/commit/d16d4623edb210635bec3ca3786481b82cde25a2" source="CONFIRM" patch="1">https://github.com/mono/mono/commit/d16d4623edb210635bec3ca3786481b82cde25a2</ref>
-      <ref url="https://hermes.opensuse.org/messages/15374367" source="SUSE">openSUSE-SU-2012:0974</ref>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=769799" source="MISC">https://bugzilla.novell.com/show_bug.cgi?id=769799</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/06/11" source="MLIST">[oss-security] 20120706 Re: CVE Request: XSS in a Mono System.web error page</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mono" name="mono">
-        <vers prev="1" num="2.10.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3383" published="2012-07-22" name="CVE-2012-3383" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">The map_meta_cap function in wp-includes/capabilities.php in WordPress 3.4.x before 3.4.2, when the multisite feature is enabled, does not properly assign the unfiltered_html capability, which allows remote authenticated users to bypass intended access restrictions and conduct cross-site scripting (XSS) attacks by leveraging the Administrator or Editor role and composing crafted text.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/08/1" source="MLIST">[oss-security] 20120707 Re: CVE #'s for WordPress 3.4.1 release</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/02/1" source="MLIST">[oss-security] 20120702 CVE #'s for WordPress 3.4.1 release</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/09/12/17" source="MLIST">[oss-security] 20120912 Re: CVEs for wordpress 3.4.2 release</ref>
-      <ref url="http://core.trac.wordpress.org/changeset?reponame=&amp;new=21153%40branches%2F3.4&amp;old=21076%40trunk#file16" source="MISC">http://core.trac.wordpress.org/changeset?reponame=&amp;new=21153%40branches%2F3.4&amp;old=21076%40trunk#file16</ref>
-      <ref url="http://core.trac.wordpress.org/changeset?old_path=%2Ftags%2F3.4.1&amp;old=21780&amp;new_path=%2Ftags%2F3.4.2&amp;new=21780#file23" source="CONFIRM">http://core.trac.wordpress.org/changeset?old_path=%2Ftags%2F3.4.1&amp;old=21780&amp;new_path=%2Ftags%2F3.4.2&amp;new=21780#file23</ref>
-      <ref url="http://codex.wordpress.org/Version_3.4.2" source="CONFIRM">http://codex.wordpress.org/Version_3.4.2</ref>
-      <ref url="http://codex.wordpress.org/Version_3.4.1" source="CONFIRM">http://codex.wordpress.org/Version_3.4.1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wordpress" name="wordpress">
-        <vers num="3.4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3384" published="2012-07-22" name="CVE-2012-3384" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/08/1" source="MLIST">[oss-security] 20120707 Re: CVE #'s for WordPress 3.4.1 release</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/02/1" source="MLIST">[oss-security] 20120702 CVE #'s for WordPress 3.4.1 release</ref>
-      <ref url="http://codex.wordpress.org/Version_3.4.1" source="CONFIRM">http://codex.wordpress.org/Version_3.4.1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wordpress" name="wordpress">
-        <vers num="0.71" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" edition="a" />
-        <vers num="1.3" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.1" />
-        <vers num="1.5.1.2" />
-        <vers num="1.5.1.3" />
-        <vers num="1.5.2" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.2" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.5" />
-        <vers num="2.7" />
-        <vers num="2.7.1" />
-        <vers num="2.8" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" edition="a" />
-        <vers num="2.8.5" />
-        <vers num="2.8.5.1" />
-        <vers num="2.8.5.2" />
-        <vers num="2.8.6" />
-        <vers num="2.9" />
-        <vers num="2.9.1" />
-        <vers num="2.9.1.1" />
-        <vers num="2.9.2" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.2" />
-        <vers num="3.2.1" />
-        <vers num="3.3" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers prev="1" num="3.4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3385" published="2012-07-22" name="CVE-2012-3385" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/08/1" source="MLIST">[oss-security] 20120707 Re: CVE #'s for WordPress 3.4.1 release</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/02/1" source="MLIST">[oss-security] 20120702 CVE #'s for WordPress 3.4.1 release</ref>
-      <ref url="http://codex.wordpress.org/Version_3.4.1" source="CONFIRM">http://codex.wordpress.org/Version_3.4.1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wordpress" name="wordpress">
-        <vers num="0.71" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" edition="a" />
-        <vers num="1.3" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.1" />
-        <vers num="1.5.1.2" />
-        <vers num="1.5.1.3" />
-        <vers num="1.5.2" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.2" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.5" />
-        <vers num="2.7" />
-        <vers num="2.7.1" />
-        <vers num="2.8" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" edition="a" />
-        <vers num="2.8.5" />
-        <vers num="2.8.5.1" />
-        <vers num="2.8.5.2" />
-        <vers num="2.8.6" />
-        <vers num="2.9" />
-        <vers num="2.9.1" />
-        <vers num="2.9.1.1" />
-        <vers num="2.9.2" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.2" />
-        <vers num="3.2.1" />
-        <vers num="3.3" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers prev="1" num="3.4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3386" published="2012-08-07" name="CVE-2012-3386" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="4.4" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.4" CVSS_base_score="4.4">
-    <desc>
-      <descript source="cve">The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://lists.gnu.org/archive/html/automake/2012-07/msg00023.html" source="MLIST" patch="1">[automake] 20120709 CVE-2012-3386 Automake security fix for 'make distcheck'</ref>
-      <ref url="https://lists.gnu.org/archive/html/automake/2012-07/msg00022.html" source="MLIST" patch="1">[automake] 20120709 GNU Automake 1.12.2 released (fixes a SECURITY VULNERABILITY!)</ref>
-      <ref url="https://lists.gnu.org/archive/html/automake/2012-07/msg00021.html" source="MLIST" patch="1">[automake] 20120709 GNU Automake 1.11.6 released (fixes a SECURITY VULNERABILITY!)</ref>
-      <ref url="http://git.savannah.gnu.org/cgit/automake.git/commit/?id=784b3e6ccc7c72a1c95c340cbbe8897d6b689d76" source="CONFIRM" patch="1">http://git.savannah.gnu.org/cgit/automake.git/commit/?id=784b3e6ccc7c72a1c95c340cbbe8897d6b689d76</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:103" source="MANDRIVA">MDVSA-2012:103</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnu" name="automake">
-        <vers num="1.0" />
-        <vers num="1.10" />
-        <vers num="1.10.0.3" />
-        <vers num="1.10.1" />
-        <vers num="1.10.2" />
-        <vers num="1.10.3" />
-        <vers num="1.11.1" />
-        <vers num="1.11.2" />
-        <vers num="1.11.3" />
-        <vers num="1.11.4" />
-        <vers prev="1" num="1.11.5" />
-        <vers num="1.12" />
-        <vers num="1.12.1" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="1.4" edition="p1" />
-        <vers num="1.4" edition="p2" />
-        <vers num="1.4" edition="p3" />
-        <vers num="1.4" edition="p4" />
-        <vers num="1.4" edition="p5" />
-        <vers num="1.4" edition="p6" />
-        <vers num="1.5" />
-        <vers num="1.6" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.7" />
-        <vers num="1.7.1" />
-        <vers num="1.7.2" />
-        <vers num="1.7.3" />
-        <vers num="1.7.4" />
-        <vers num="1.7.5" />
-        <vers num="1.7.6" />
-        <vers num="1.7.7" />
-        <vers num="1.7.8" />
-        <vers num="1.7.9" />
-        <vers num="1.8" />
-        <vers num="1.8.1" />
-        <vers num="1.8.2" />
-        <vers num="1.8.3" />
-        <vers num="1.8.4" />
-        <vers num="1.8.5" />
-        <vers num="1.9" />
-        <vers num="1.9.1" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.4" />
-        <vers num="1.9.5" />
-        <vers num="1.9.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3387" published="2012-07-23" name="CVE-2012-3387" modified="2012-07-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Moodle 2.3.x before 2.3.1 uses only a client-side check for whether references are permitted in a file upload, which allows remote authenticated users to bypass intended alias (aka shortcut) restrictions via a client that omits this check.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/07/17/1" source="MLIST">[oss-security] 20120717 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-33948" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-33948</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3388" published="2012-07-23" name="CVE-2012-3388" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature, which might allow remote authenticated users to bypass an intended capability check via unspecified vectors that trigger caching of a user record.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/07/17/1" source="MLIST">[oss-security] 20120717 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-33916" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-33916</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3389" published="2012-07-23" name="CVE-2012-3389" modified="2012-07-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in mod/lti/typessettings.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) lti_typename or (2) lti_toolurl parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/07/17/1" source="MLIST">[oss-security] 20120717 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-31692" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-31692</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3390" published="2012-07-23" name="CVE-2012-3390" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:N/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">lib/filelib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly restrict file access after a block has been hidden, which allows remote authenticated users to obtain sensitive information by reading a file that is embedded in a block.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/07/17/1" source="MLIST" patch="1">[oss-security] 20120717 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git;a=commit;h=c58c05ad4f22c6ee1e136a7d4caaddd809a7134d" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git;a=commit;h=c58c05ad4f22c6ee1e136a7d4caaddd809a7134d</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3391" published="2012-07-23" name="CVE-2012-3391" modified="2012-07-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">mod/forum/rsslib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly implement the requirement for posting before reading a Q&amp;A forum, which allows remote authenticated users to bypass intended access restrictions by leveraging the student role and reading the RSS feed for a forum.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/07/17/1" source="MLIST">[oss-security] 20120717 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=refs%2Fheads%2FMOODLE_22_STABLE&amp;st=commit&amp;s=MDL-32199" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=refs%2Fheads%2FMOODLE_22_STABLE&amp;st=commit&amp;s=MDL-32199</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3392" published="2012-07-23" name="CVE-2012-3392" modified="2012-07-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:P)" CVSS_score="5.5" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.0" CVSS_base_score="5.5">
-    <desc>
-      <descript source="cve">mod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not consider whether a forum is optional, which allows remote authenticated users to bypass forum-subscription requirements by leveraging the student role and unsubscribing from all forums.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/07/17/1" source="MLIST">[oss-security] 20120717 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=refs%2Fheads%2FMOODLE_22_STABLE&amp;st=commit&amp;s=MDL-31460" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=refs%2Fheads%2FMOODLE_22_STABLE&amp;st=commit&amp;s=MDL-31460</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3393" published="2012-07-23" name="CVE-2012-3393" modified="2012-07-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in repository/lib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 allows remote authenticated administrators to inject arbitrary web script or HTML by renaming a repository.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/07/17/1" source="MLIST">[oss-security] 20120717 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=refs%2Fheads%2FMOODLE_22_STABLE&amp;st=commit&amp;s=MDL-33808" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=refs%2Fheads%2FMOODLE_22_STABLE&amp;st=commit&amp;s=MDL-33808</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3394" published="2012-07-23" name="CVE-2012-3394" modified="2012-07-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">auth/ldap/ntlmsso_attempt.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 redirects users from an https LDAP login URL to an http URL, which allows remote attackers to obtain sensitive information by sniffing the network.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.moodle.org/gw?p=moodle.git;a=commit;h=9d8d2ee6192e8b7ebb6713bd6215e06f94e2a9f7" source="CONFIRM" patch="1">http://git.moodle.org/gw?p=moodle.git;a=commit;h=9d8d2ee6192e8b7ebb6713bd6215e06f94e2a9f7</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/07/17/1" source="MLIST">[oss-security] 20120717 Moodle security notifications public</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3395" published="2012-07-23" name="CVE-2012-3395" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in mod/feedback/complete.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to execute arbitrary SQL commands via crafted form data.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/07/17/1" source="MLIST">[oss-security] 20120717 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=9d8d2ee6192e8b7ebb6713bd6215e06f94e2a9f7&amp;st=commit&amp;s=MDL-27675" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=9d8d2ee6192e8b7ebb6713bd6215e06f94e2a9f7&amp;st=commit&amp;s=MDL-27675</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3396" published="2012-07-23" name="CVE-2012-3396" modified="2012-07-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in cohort/edit_form.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the idnumber field.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-2365.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/07/17/1" source="MLIST">[oss-security] 20120717 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-34045" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-34045</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3397" published="2012-07-23" name="CVE-2012-3397" modified="2012-07-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">lib/modinfolib.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 does not check for a group-membership requirement when determining whether an activity is unavailable or hidden, which allows remote authenticated users to bypass intended access restrictions by selecting an activity that is configured for a group of other users.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/07/17/1" source="MLIST">[oss-security] 20120717 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-33466" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=HEAD&amp;st=commit&amp;s=MDL-33466</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3398" published="2012-07-23" name="CVE-2012-3398" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service (CPU consumption) by using the advanced-search feature on a database activity that has many records.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/407.html 'CWE-407: Algorithmic Complexity'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://openwall.com/lists/oss-security/2012/07/17/1" source="MLIST">[oss-security] 20120717 Moodle security notifications public</ref>
-      <ref url="http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=refs%2Fheads%2FMOODLE_22_STABLE&amp;st=commit&amp;s=MDL-32126" source="CONFIRM">http://git.moodle.org/gw?p=moodle.git&amp;a=search&amp;h=refs%2Fheads%2FMOODLE_22_STABLE&amp;st=commit&amp;s=MDL-32126</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moodle" name="moodle">
-        <vers num="1.9" />
-        <vers num="1.9.1" />
-        <vers num="1.9.10" />
-        <vers num="1.9.11" />
-        <vers num="1.9.12" />
-        <vers num="1.9.13" />
-        <vers num="1.9.14" />
-        <vers num="1.9.15" />
-        <vers num="1.9.16" />
-        <vers num="1.9.17" />
-        <vers num="1.9.18" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.4" />
-        <vers num="1.9.5" />
-        <vers num="1.9.6" />
-        <vers num="1.9.7" />
-        <vers num="1.9.8" />
-        <vers num="1.9.9" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3399" published="2012-07-12" name="CVE-2012-3399" modified="2012-07-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76667" source="XF">basilic-diff-command-execution(76667)</ref>
-      <ref url="http://www.securityfocus.com/bid/54234" source="BID">54234</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/10/1" source="MLIST">[oss-security] 20120709 Re: CVE-request: Basilic 1.5.14 diff.php remote code execution vulnerability</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/09/4" source="MLIST">[oss-security] 20120710 CVE-request: Basilic 1.5.14 diff.php remote code execution vulnerability</ref>
-      <ref url="http://www.exploit-db.com/exploits/19631" source="EXPLOIT-DB">19631</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0043.html" source="BUGTRAQ">20120706 Re: Basilic RCE bug</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0002.html" source="BUGTRAQ">20120630 Basilic RCE bug</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="artis.imag" name="basilic">
-        <vers num="1.5.14" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3401" published="2012-08-13" name="CVE-2012-3401" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.c) in LibTIFF 4.0.2 and earlier does not properly initialize the T2P context struct pointer in certain error conditions, which allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=837577" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=837577</ref>
-      <ref url="https://bugzilla.redhat.com/attachment.cgi?id=596457" source="MISC">https://bugzilla.redhat.com/attachment.cgi?id=596457</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77088" source="XF">libtiff-t2preadtiffinit-bo(77088)</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1511-1" source="UBUNTU">USN-1511-1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/19/4" source="MLIST">[oss-security] 20120719 Re: tiff2pdf: Heap-based buffer overflow due to improper initialization of T2P context struct pointer</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/19/1" source="MLIST">[oss-security] 20120719 tiff2pdf: Heap-based buffer overflow due to improper initialization of T2P context struct pointer</ref>
-      <ref url="http://secunia.com/advisories/50007" source="SECUNIA" adv="1">50007</ref>
-      <ref url="http://secunia.com/advisories/49938" source="SECUNIA" adv="1">49938</ref>
-      <ref url="http://osvdb.org/84090" source="OSVDB">84090</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-08/msg00011.html" source="SUSE">openSUSE-SU-2012:0955</ref>
-      <ref url="http://libjpeg-turbo.svn.sourceforge.net/viewvc/libjpeg-turbo?view=revision&amp;revision=830" source="MISC">http://libjpeg-turbo.svn.sourceforge.net/viewvc/libjpeg-turbo?view=revision&amp;revision=830</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="libtiff" name="libtiff">
-        <vers num="3.4" edition="beta18" />
-        <vers num="3.4" edition="beta24" />
-        <vers num="3.4" edition="beta28" />
-        <vers num="3.4" edition="beta29" />
-        <vers num="3.4" edition="beta31" />
-        <vers num="3.4" edition="beta32" />
-        <vers num="3.4" edition="beta34" />
-        <vers num="3.4" edition="beta35" />
-        <vers num="3.4" edition="beta36" />
-        <vers num="3.4" edition="beta37" />
-        <vers num="3.5.1" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" edition="beta" />
-        <vers num="3.5.7" edition="alpha" />
-        <vers num="3.5.7" edition="alpha2" />
-        <vers num="3.5.7" edition="alpha3" />
-        <vers num="3.5.7" edition="alpha4" />
-        <vers num="3.5.7" edition="beta" />
-        <vers num="3.6.0" edition="beta" />
-        <vers num="3.6.0" edition="beta2" />
-        <vers num="3.6.1" />
-        <vers num="3.7.0" edition="alpha" />
-        <vers num="3.7.0" edition="beta" />
-        <vers num="3.7.0" edition="beta2" />
-        <vers num="3.7.1" />
-        <vers num="3.7.2" />
-        <vers num="3.7.3" />
-        <vers num="3.7.4" />
-        <vers num="3.8.0" />
-        <vers num="3.8.1" />
-        <vers num="3.8.2" />
-        <vers num="3.9" />
-        <vers num="3.9.0" edition="beta" />
-        <vers num="3.9.1" />
-        <vers num="3.9.2" />
-        <vers num="3.9.2-5.2.1" />
-        <vers num="3.9.3" />
-        <vers num="3.9.4" />
-        <vers num="4.0" edition="alpha" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0.1" />
-        <vers prev="1" num="4.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3402" published="2012-08-25" name="CVE-2012-3402" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Integer overflow in plug-ins/common/psd.c in the Adobe Photoshop PSD plugin in GIMP 2.2.13 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted channels header value in a PSD image file, which triggers a heap-based buffer overflow, a different vulnerability than CVE-2009-3909.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=838941" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=838941</ref>
-      <ref url="https://bugzilla.redhat.com/attachment.cgi?id=603059&amp;action=diff" source="MISC">https://bugzilla.redhat.com/attachment.cgi?id=603059&amp;action=diff</ref>
-      <ref url="http://www.securitytracker.com/id?1027411" source="SECTRACK">1027411</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/20/6" source="MLIST">[oss-security] 20120820 The Gimp PSD plug-in CVE-2012-3402 issue</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1181.html" source="REDHAT">RHSA-2012:1181</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gimp" name="gimp">
-        <vers num="2.0" />
-        <vers num="2.2" />
-        <vers prev="1" num="2.2.13" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3403" published="2012-08-25" name="CVE-2012-3403" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file, which triggers an "invalid free."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=839020" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=839020</ref>
-      <ref url="http://www.securitytracker.com/id?1027411" source="SECTRACK">1027411</ref>
-      <ref url="http://www.securityfocus.com/bid/55101" source="BID">55101</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/20/7" source="MLIST">[oss-security] 20120820 The Gimp CEL plug-in CVE-2012-3403 issue</ref>
-      <ref url="http://secunia.com/advisories/50296" source="SECUNIA" adv="1">50296</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1181.html" source="REDHAT">RHSA-2012:1181</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1180.html" source="REDHAT">RHSA-2012:1180</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00000.html" source="SUSE">openSUSE-SU-2012:1080</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00020.html" source="SUSE">SUSE-SU-2012:1029</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gimp" name="gimp">
-        <vers num="2.2" />
-        <vers num="2.2.14" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.10" />
-        <vers num="2.6.11" />
-        <vers num="2.6.12" />
-        <vers num="2.6.13" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.6.7" />
-        <vers num="2.6.8" />
-        <vers num="2.6.9" />
-        <vers prev="1" num="2.8.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3408" published="2012-08-06" name="CVE-2012-3408" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:N/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">lib/puppet/network/authstore.rb in Puppet before 2.7.18, and Puppet Enterprise before 2.5.2, supports use of IP addresses in certnames without warning of potential risks, which might allow remote attackers to spoof an agent by acquiring a previously used IP address.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/puppetlabs/puppet/commit/ab9150baa1b738467a33b01df1d90e076253fbbd" source="CONFIRM" patch="1">https://github.com/puppetlabs/puppet/commit/ab9150baa1b738467a33b01df1d90e076253fbbd</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=839166" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=839166</ref>
-      <ref url="http://puppetlabs.com/security/cve/cve-2012-3408/" source="CONFIRM" adv="1">http://puppetlabs.com/security/cve/cve-2012-3408/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="puppetlabs" name="puppet">
-        <vers prev="1" num="2.5.1" edition="-" />
-        <vers prev="1" num="2.5.1" edition="-:enterprise" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.11" />
-        <vers num="2.7.12" />
-        <vers num="2.7.13" />
-        <vers num="2.7.14" />
-        <vers num="2.7.16" />
-        <vers prev="1" num="2.7.17" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3410" published="2012-08-27" name="CVE-2012-3410" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="4.6" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.9" CVSS_base_score="4.6">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd, which is not properly handled when expanding the /dev/fd prefix.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681278" source="MISC" patch="1">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681278</ref>
-      <ref url="ftp://ftp.gnu.org/pub/gnu/bash/bash-4.2-patches/bash42-033" source="CONFIRM" patch="1">ftp://ftp.gnu.org/pub/gnu/bash/bash-4.2-patches/bash42-033</ref>
-      <ref url="https://hermes.opensuse.org/messages/15227834" source="SUSE">openSUSE-SU-2012:0898</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77551" source="XF">bash-devfd-bo(77551)</ref>
-      <ref url="http://www.securityfocus.com/bid/54937" source="BID">54937</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/12/4" source="MLIST">[oss-security] 20120712 Re: CVE Request: Overflow fix in bash 4.2 patch 33</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/11/22" source="MLIST">[oss-security] 20120712 Re: CVE Request: Overflow fix in bash 4.2 patch 33</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/11/11" source="MLIST">[oss-security] 20120711 CVE Request: Overflow fix in bash 4.2 patch 33</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:128" source="MANDRIVA">MDVSA-2012:128</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnu" name="bash">
-        <vers num="4.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3413" published="2012-08-07" name="CVE-2012-3413" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6 through 4.8 does not disable JavaScript, Java, and Plugins, which allows remote attackers to inject arbitrary web script or HTML via a crafted email.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://projects.kde.org/projects/kde/kdepim/repository/revisions/dbb2f72f4745e00f53031965a9c10b2d6862bd54" source="CONFIRM">https://projects.kde.org/projects/kde/kdepim/repository/revisions/dbb2f72f4745e00f53031965a9c10b2d6862bd54</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/17/11" source="MLIST">[oss-security] 20120717 Re: CVE Request: KDE Pim</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/16/3" source="MLIST">[oss-security] 20120716 Re: CVE Request: KDE Pim</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/13/4" source="MLIST">[oss-security] 20120713 Re: CVE Request: KDE Pim</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/13/3" source="MLIST">[oss-security] 20120713 CVE Request: KDE Pim</ref>
-      <ref url="http://ubuntu.com/usn/usn-1512-1" source="UBUNTU">USN-1512-1</ref>
-      <ref url="http://secunia.com/advisories/50008" source="SECUNIA" adv="1">50008</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084262.html" source="FEDORA">FEDORA-2012-10411</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083946.html" source="FEDORA">FEDORA-2012-10410</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kde" name="kde_pim">
-        <vers num="4.6" />
-        <vers num="4.8" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3416" published="2012-08-25" name="CVE-2012-3416" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77748" source="XF">condor-reverse-dns-security-bypass(77748)</ref>
-      <ref url="http://www.securitytracker.com/id?1027395" source="SECTRACK">1027395</ref>
-      <ref url="http://www.securityfocus.com/bid/55032" source="BID">55032</ref>
-      <ref url="http://secunia.com/advisories/50294" source="SECUNIA" adv="1">50294</ref>
-      <ref url="http://secunia.com/advisories/50246" source="SECUNIA" adv="1">50246</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1169.html" source="REDHAT">RHSA-2012:1169</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1168.html" source="REDHAT">RHSA-2012:1168</ref>
-      <ref url="http://research.cs.wisc.edu/condor/security/vulnerabilities/CONDOR-2012-0002.html" source="CONFIRM">http://research.cs.wisc.edu/condor/security/vulnerabilities/CONDOR-2012-0002.html</ref>
-      <ref url="http://osvdb.org/84766" source="OSVDB">84766</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="condor_project" name="condor">
-        <vers num="6.5.4" />
-        <vers num="6.8.0" />
-        <vers num="6.8.1" />
-        <vers num="6.8.2" />
-        <vers num="6.8.3" />
-        <vers num="6.8.4" />
-        <vers num="6.8.5" />
-        <vers num="6.8.6" />
-        <vers num="6.8.7" />
-        <vers num="6.8.8" />
-        <vers num="6.8.9" />
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.0.3" />
-        <vers num="7.0.4" />
-        <vers num="7.0.5" />
-        <vers num="7.0.6" />
-        <vers num="7.00" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.1.0" />
-        <vers num="7.1.1" />
-        <vers num="7.1.2" />
-        <vers num="7.1.3" />
-        <vers num="7.1.4" />
-        <vers num="7.2.0" />
-        <vers num="7.2.1" />
-        <vers num="7.2.2" />
-        <vers num="7.2.3" />
-        <vers num="7.2.4" />
-        <vers num="7.3.0" />
-        <vers num="7.3.1" />
-        <vers num="7.3.2" />
-        <vers num="7.4.0" />
-        <vers num="7.4.1" />
-        <vers num="7.8.0" />
-        <vers prev="1" num="7.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3417" published="2012-08-13" name="CVE-2012-3417" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="4.9" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">The good_client function in rquotad (rquota_svc.c) in Linux DiskQuota (aka quota) before 3.17 invokes the hosts_ctl function the first time without a host name, which might allow remote attackers to bypass TCP Wrappers rules in hosts.deny.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://linuxquota.git.sourceforge.net/git/gitweb.cgi?p=linuxquota/linuxquota;a=commitdiff;h=0abbfe92536fa5854eb65572de0cf131f80e2387" source="CONFIRM" patch="1">http://linuxquota.git.sourceforge.net/git/gitweb.cgi?p=linuxquota/linuxquota;a=commitdiff;h=0abbfe92536fa5854eb65572de0cf131f80e2387</ref>
-      <ref url="https://hermes.opensuse.org/messages/15509723" source="SUSE">openSUSE-SU-2012:1058</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=566717" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=566717</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/19/5" source="MLIST">[oss-security] 20120719 Re: CVE Request: quota: incorrect use of tcp_wrappers</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/19/2" source="MLIST">[oss-security] 20120719 CVE Request: quota: incorrect use of tcp_wrappers</ref>
-      <ref url="http://sourceforge.net/tracker/?func=detail&amp;aid=2743481&amp;group_id=18136&amp;atid=118136" source="CONFIRM">http://sourceforge.net/tracker/?func=detail&amp;aid=2743481&amp;group_id=18136&amp;atid=118136</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="jan_kara" name="linux_diskquota">
-        <vers num="2.0" />
-        <vers num="3.01" edition="pre2" />
-        <vers num="3.01" edition="pre3" />
-        <vers num="3.01" edition="pre4" />
-        <vers num="3.01" edition="pre5" />
-        <vers num="3.01" edition="pre6" />
-        <vers num="3.01" edition="pre7" />
-        <vers num="3.01" edition="pre8" />
-        <vers num="3.01" edition="pre9" />
-        <vers num="3.02" />
-        <vers num="3.03" />
-        <vers num="3.04" />
-        <vers num="3.05" />
-        <vers num="3.06" />
-        <vers num="3.07" />
-        <vers num="3.08" />
-        <vers num="3.09" />
-        <vers num="3.10" />
-        <vers num="3.11" />
-        <vers num="3.12" />
-        <vers num="3.13" />
-        <vers num="3.14" />
-        <vers num="3.15" />
-        <vers prev="1" num="3.16" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3418" published="2012-08-27" name="CVE-2012-3418" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a PDU with the numcreds field value greater than the number of actual elements to the __pmDecodeCreds function in p_creds.c; (2) the string byte number value to the __pmDecodeNameList function in p_pmns.c; (3) the numids value to the __pmDecodeIDList function in p_pmns.c; (4) unspecified vectors to the __pmDecodeProfile function in p_profile.c; the (5) status number value or (6) string number value to the __pmDecodeNameList function in p_pmns.c; (7) certain input to the __pmDecodeResult function in p_result.c; (8) the name length field (namelen) to the DecodeNameReq function in p_pmns.c; (9) a crafted PDU_FETCH request to the __pmDecodeFetch function in p_fetch.c; (10) the namelen field in the __pmDecodeInstanceReq function in p_instance.c; (11) the buflen field to the __pmDecodeText function in p_text.c; (12) PDU_INSTANCE packets to the __pmDecodeInstance in p_instance.c; or the (13) c_numpmid or (14) v_numval fields to the __pmDecodeLogControl function in p_lcontrol.c, which triggers integer overflows, heap-based buffer overflows, and/or buffer over-reads.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commitdiff;h=f0eaefe046b1061797f45b0c20bb2ac371b504a5" source="CONFIRM" patch="1">http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commitdiff;h=f0eaefe046b1061797f45b0c20bb2ac371b504a5</ref>
-      <ref url="http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commitdiff;h=cced6012b4b93bfb640a9678589ced5416743910" source="CONFIRM" patch="1">http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commitdiff;h=cced6012b4b93bfb640a9678589ced5416743910</ref>
-      <ref url="http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commitdiff;h=bfb3ab8c6b3d75b1a6580feee76a7d0925a3633c" source="CONFIRM" patch="1">http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commitdiff;h=bfb3ab8c6b3d75b1a6580feee76a7d0925a3633c</ref>
-      <ref url="http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commitdiff;h=7eb479b91ef12bf89a15b078af2107c8c4746a4a" source="CONFIRM" patch="1">http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commitdiff;h=7eb479b91ef12bf89a15b078af2107c8c4746a4a</ref>
-      <ref url="http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commit;h=e4faa1f0ba29151340920d975fc7639adf8371d5" source="CONFIRM" patch="1">http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commit;h=e4faa1f0ba29151340920d975fc7639adf8371d5</ref>
-      <ref url="http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commit;h=babd6c5c527f87ec838c13a1b4eba612af6ea27c" source="CONFIRM" patch="1">http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commit;h=babd6c5c527f87ec838c13a1b4eba612af6ea27c</ref>
-      <ref url="http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commit;h=b441980d53be1835b25f0cd6bcc0062da82032dd" source="CONFIRM" patch="1">http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commit;h=b441980d53be1835b25f0cd6bcc0062da82032dd</ref>
-      <ref url="https://hermes.opensuse.org/messages/15540172" source="SUSE">openSUSE-SU-2012:1081</ref>
-      <ref url="https://hermes.opensuse.org/messages/15540133" source="SUSE">openSUSE-SU-2012:1079</ref>
-      <ref url="https://hermes.opensuse.org/messages/15471040" source="SUSE">openSUSE-SU-2012:1036</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=841698" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=841698</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=841284" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=841284</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=841249" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=841249</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=841240" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=841240</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=841183" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=841183</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=841180" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=841180</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=841159" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=841159</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=841126" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=841126</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=841112" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=841112</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=840920" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=840920</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=840822" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=840822</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/16/1" source="MLIST">[oss-security] 20120816 pcp: Multiple security flaws</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2533" source="DEBIAN">DSA-2533</ref>
-      <ref url="http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commitdiff;h=9f4e392c97ce42744ec73f82268ce6c815fdca0e" source="CONFIRM">http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commitdiff;h=9f4e392c97ce42744ec73f82268ce6c815fdca0e</ref>
-      <ref url="http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commitdiff;h=49c679c44425915a8d6aa4af5f90b35384843c12" source="CONFIRM">http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commitdiff;h=49c679c44425915a8d6aa4af5f90b35384843c12</ref>
-      <ref url="http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commit;h=f190942b552aa80d59bbe718866aa00b8e3fd5cc" source="CONFIRM">http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commit;h=f190942b552aa80d59bbe718866aa00b8e3fd5cc</ref>
-      <ref url="http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob;f=CHANGELOG;h=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5;hb=fe51067ae869a4d59f350ac319b09edcb77ac8e6" source="CONFIRM">http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob;f=CHANGELOG;h=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5;hb=fe51067ae869a4d59f350ac319b09edcb77ac8e6</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html" source="FEDORA">FEDORA-2012-12076</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html" source="FEDORA">FEDORA-2012-12024</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sgi" name="performance_co-pilot">
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.11" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers prev="1" num="3.6.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3419" published="2012-08-27" name="CVE-2012-3419" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15540172" source="SUSE">openSUSE-SU-2012:1081</ref>
-      <ref url="https://hermes.opensuse.org/messages/15540133" source="SUSE">openSUSE-SU-2012:1079</ref>
-      <ref url="https://hermes.opensuse.org/messages/15471040" source="SUSE">openSUSE-SU-2012:1036</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=841702" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=841702</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/16/1" source="MLIST">[oss-security] 20120816 pcp: Multiple security flaws</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2533" source="DEBIAN">DSA-2533</ref>
-      <ref url="http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob;f=CHANGELOG;h=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5;hb=fe51067ae869a4d59f350ac319b09edcb77ac8e6" source="CONFIRM">http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob;f=CHANGELOG;h=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5;hb=fe51067ae869a4d59f350ac319b09edcb77ac8e6</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html" source="FEDORA">FEDORA-2012-12076</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html" source="FEDORA">FEDORA-2012-12024</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sgi" name="performance_co-pilot">
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers prev="1" num="3.6.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3420" published="2012-08-27" name="CVE-2012-3420" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or daemon crash) via a large number of PDUs with (1) a crafted context number to the DoFetch function in pmcd/src/dofetch.c or (2) a negative type value to the __pmGetPDU function in libpcp/src/pdu.c.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15540172" source="SUSE">openSUSE-SU-2012:1081</ref>
-      <ref url="https://hermes.opensuse.org/messages/15540133" source="SUSE">openSUSE-SU-2012:1079</ref>
-      <ref url="https://hermes.opensuse.org/messages/15471040" source="SUSE">openSUSE-SU-2012:1036</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=841704" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=841704</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=841319" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=841319</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=841298" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=841298</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/16/1" source="MLIST">[oss-security] 20120816 pcp: Multiple security flaws</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2533" source="DEBIAN">DSA-2533</ref>
-      <ref url="http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commit;h=a7dc844d3586ea79887655a97c4252a79751fdae" source="CONFIRM">http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commit;h=a7dc844d3586ea79887655a97c4252a79751fdae</ref>
-      <ref url="http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commit;h=68fb968b4ee635bb301dc9ab64e633b0d66d27b4" source="CONFIRM">http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commit;h=68fb968b4ee635bb301dc9ab64e633b0d66d27b4</ref>
-      <ref url="http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob;f=CHANGELOG;h=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5;hb=fe51067ae869a4d59f350ac319b09edcb77ac8e6" source="CONFIRM">http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob;f=CHANGELOG;h=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5;hb=fe51067ae869a4d59f350ac319b09edcb77ac8e6</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html" source="FEDORA">FEDORA-2012-12076</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html" source="FEDORA">FEDORA-2012-12024</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sgi" name="performance_co-pilot">
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.11" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers prev="1" num="3.6.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3421" published="2012-08-27" name="CVE-2012-3421" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service (pmcd hang) by sending individual bytes of a PDU separately, related to an "event-driven programming flaw."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15540172" source="SUSE">openSUSE-SU-2012:1081</ref>
-      <ref url="https://hermes.opensuse.org/messages/15540133" source="SUSE">openSUSE-SU-2012:1079</ref>
-      <ref url="https://hermes.opensuse.org/messages/15471040" source="SUSE">openSUSE-SU-2012:1036</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=841706" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=841706</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/16/1" source="MLIST">[oss-security] 20120816 pcp: Multiple security flaws</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2533" source="DEBIAN">DSA-2533</ref>
-      <ref url="http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commit;h=9ba85dca940de976176ce196fd5e3c4170936354" source="CONFIRM">http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=commit;h=9ba85dca940de976176ce196fd5e3c4170936354</ref>
-      <ref url="http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob;f=CHANGELOG;h=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5;hb=fe51067ae869a4d59f350ac319b09edcb77ac8e6" source="CONFIRM">http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob;f=CHANGELOG;h=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5;hb=fe51067ae869a4d59f350ac319b09edcb77ac8e6</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html" source="FEDORA">FEDORA-2012-12076</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html" source="FEDORA">FEDORA-2012-12024</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sgi" name="performance_co-pilot">
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.11" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.1.9" />
-        <vers num="2.2" />
-        <vers prev="1" num="3.6.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3422" published="2012-08-07" name="CVE-2012-3422" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instance_to_id_map hash is empty, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted web page, which causes an uninitialized memory location to be read.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=840592" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=840592</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1521-1" source="UBUNTU">USN-1521-1</ref>
-      <ref url="http://secunia.com/advisories/50089" source="SECUNIA" adv="1">50089</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1132.html" source="REDHAT">RHSA-2012:1132</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00005.html" source="SUSE">openSUSE-SU-2012:0982</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00004.html" source="SUSE">openSUSE-SU-2012:0981</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00003.html" source="SUSE">SUSE-SU-2012:0979</ref>
-      <ref url="http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.1/NEWS" source="CONFIRM">http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.1/NEWS</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="redhat" name="icedtea-web">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers prev="1" num="1.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3423" published="2012-08-07" name="CVE-2012-3423" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The IcedTea-Web plugin before 1.2.1 does not properly handle NPVariant NPStrings without NUL terminators, which allows remote attackers to cause a denial of service (crash), obtain sensitive information from memory, or execute arbitrary code via a crafted Java applet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/d7375e2a9076" source="CONFIRM" patch="1">http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/d7375e2a9076</ref>
-      <ref url="http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/d65bd94e0ba9" source="CONFIRM" patch="1">http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/d65bd94e0ba9</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=841345" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=841345</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1521-1" source="UBUNTU">USN-1521-1</ref>
-      <ref url="http://secunia.com/advisories/50089" source="SECUNIA" adv="1">50089</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1132.html" source="REDHAT">RHSA-2012:1132</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00005.html" source="SUSE">openSUSE-SU-2012:0982</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00004.html" source="SUSE">openSUSE-SU-2012:0981</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00003.html" source="SUSE">SUSE-SU-2012:0979</ref>
-      <ref url="http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.1/NEWS" source="CONFIRM">http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.1/NEWS</ref>
-      <ref url="http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=863" source="CONFIRM" adv="1">http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=863</ref>
-      <ref url="http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=518" source="CONFIRM">http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=518</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="redhat" name="icedtea-web">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers prev="1" num="1.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3424" published="2012-08-08" name="CVE-2012-3424" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The decode_credentials method in actionpack/lib/action_controller/metal/http_authentication.rb in Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts Digest Authentication strings to symbols, which allows remote attackers to cause a denial of service by leveraging access to an application that uses a with_http_digest helper method, as demonstrated by the authenticate_or_request_with_http_digest method.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://groups.google.com/group/rubyonrails-security/msg/244d32f2fa25147d?hl=en&amp;dmode=source&amp;output=gplain" source="MLIST">[rubyonrails-security] 20120726 Ruby on Rails DoS Vulnerability in authenticate_or_request_with_http_digest (CVE-2012-3424)</ref>
-      <ref url="http://weblog.rubyonrails.org/2012/7/26/ann-rails-3-2-7-has-been-released/" source="CONFIRM">http://weblog.rubyonrails.org/2012/7/26/ann-rails-3-2-7-has-been-released/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rubyonrails" name="ruby_on_rails">
-        <vers num="3.0.0" edition="beta" />
-        <vers num="3.0.0" edition="beta2" />
-        <vers num="3.0.0" edition="beta3" />
-        <vers num="3.0.0" edition="beta4" />
-        <vers num="3.0.0" edition="rc" />
-        <vers num="3.0.0" edition="rc2" />
-        <vers num="3.0.1" edition="pre" />
-        <vers num="3.0.10" edition="rc1" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" edition="rc1" />
-        <vers num="3.0.13" edition="rc1" />
-        <vers num="3.0.14" />
-        <vers num="3.0.2" edition="pre" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" edition="rc" />
-        <vers num="3.0.4" edition="rc1" />
-        <vers num="3.0.5" edition="rc1" />
-        <vers num="3.0.6" edition="rc1" />
-        <vers num="3.0.6" edition="rc2" />
-        <vers num="3.0.7" edition="rc1" />
-        <vers num="3.0.7" edition="rc2" />
-        <vers num="3.0.8" edition="rc1" />
-        <vers num="3.0.8" edition="rc2" />
-        <vers num="3.0.8" edition="rc3" />
-        <vers num="3.0.8" edition="rc4" />
-        <vers num="3.0.9" edition="rc1" />
-        <vers num="3.0.9" edition="rc2" />
-        <vers num="3.0.9" edition="rc3" />
-        <vers num="3.0.9" edition="rc4" />
-        <vers num="3.0.9" edition="rc5" />
-        <vers num="3.1.0" edition="beta1" />
-        <vers num="3.1.0" edition="rc1" />
-        <vers num="3.1.0" edition="rc2" />
-        <vers num="3.1.0" edition="rc3" />
-        <vers num="3.1.0" edition="rc4" />
-        <vers num="3.1.0" edition="rc5" />
-        <vers num="3.1.0" edition="rc6" />
-        <vers num="3.1.0" edition="rc7" />
-        <vers num="3.1.0" edition="rc8" />
-        <vers num="3.1.1" edition="rc1" />
-        <vers num="3.1.1" edition="rc2" />
-        <vers num="3.1.1" edition="rc3" />
-        <vers num="3.1.2" edition="rc1" />
-        <vers num="3.1.2" edition="rc2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" edition="rc1" />
-        <vers num="3.1.5" edition="rc1" />
-        <vers num="3.1.6" />
-        <vers num="3.2.0" edition="rc1" />
-        <vers num="3.2.0" edition="rc2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" edition="rc1" />
-        <vers num="3.2.3" edition="rc1" />
-        <vers num="3.2.3" edition="rc2" />
-        <vers num="3.2.4" edition="rc1" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3425" published="2012-08-13" name="CVE-2012-3425" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large avail_in field value in a PNG image.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/24/5" source="MLIST">[oss-security] 20120724 Re: CVE Request: libpng: Out-of heap-based buffer read by inflating certain PNG images</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/24/3" source="MLIST">[oss-security] 20120724 CVE Request: libpng: Out-of heap-based buffer read by inflating certain PNG images</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-08/msg00004.html" source="SUSE">openSUSE-SU-2012:0934</ref>
-      <ref url="http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=blob;f=CHANGES;hb=a4b640865ae47986bbe71ecc0e7d5181dcb0bac8" source="MISC">http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=blob;f=CHANGES;hb=a4b640865ae47986bbe71ecc0e7d5181dcb0bac8</ref>
-      <ref url="http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=blob;f=CHANGES;h=73e2ffd6a1471f2144d0ce7165d7323cb109f10f;hb=refs/heads/libpng15" source="MISC">http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=blob;f=CHANGES;h=73e2ffd6a1471f2144d0ce7165d7323cb109f10f;hb=refs/heads/libpng15</ref>
-      <ref url="http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=blob;f=CHANGES;h=2da5a7a8b690e257f94353b5b49d493cdc385322;hb=refs/heads/libpng14" source="MISC">http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=blob;f=CHANGES;h=2da5a7a8b690e257f94353b5b49d493cdc385322;hb=refs/heads/libpng14</ref>
-      <ref url="http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=blob;f=CHANGES;h=284de253b1561b976291ba7405acd71ae71ff597;hb=refs/heads/libpng10" source="MISC">http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=blob;f=CHANGES;h=284de253b1561b976291ba7405acd71ae71ff597;hb=refs/heads/libpng10</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668082" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668082</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="libpng" name="libpng">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.10" />
-        <vers num="1.0.11" />
-        <vers num="1.0.12" />
-        <vers num="1.0.13" />
-        <vers num="1.0.14" />
-        <vers num="1.0.15" />
-        <vers num="1.0.16" />
-        <vers num="1.0.17" />
-        <vers num="1.0.18" />
-        <vers num="1.0.19" />
-        <vers num="1.0.2" />
-        <vers num="1.0.20" />
-        <vers num="1.0.21" />
-        <vers num="1.0.22" />
-        <vers num="1.0.23" />
-        <vers num="1.0.24" />
-        <vers num="1.0.25" />
-        <vers num="1.0.26" />
-        <vers num="1.0.27" />
-        <vers num="1.0.28" />
-        <vers num="1.0.29" />
-        <vers num="1.0.3" />
-        <vers num="1.0.30" />
-        <vers num="1.0.31" />
-        <vers num="1.0.32" />
-        <vers num="1.0.33" />
-        <vers num="1.0.34" />
-        <vers num="1.0.35" />
-        <vers num="1.0.37" />
-        <vers num="1.0.38" />
-        <vers num="1.0.39" />
-        <vers num="1.0.40" />
-        <vers num="1.0.41" />
-        <vers num="1.0.42" />
-        <vers num="1.0.43" />
-        <vers num="1.0.44" />
-        <vers num="1.0.45" />
-        <vers num="1.0.46" />
-        <vers num="1.0.47" />
-        <vers num="1.0.48" />
-        <vers num="1.0.5" />
-        <vers num="1.0.50" />
-        <vers num="1.0.51" />
-        <vers num="1.0.52" />
-        <vers num="1.0.53" />
-        <vers num="1.0.54" />
-        <vers num="1.0.55" edition="rc01" />
-        <vers num="1.0.56" edition="devel" />
-        <vers num="1.0.57" edition="rc01" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.10" />
-        <vers num="1.2.11" />
-        <vers num="1.2.12" />
-        <vers num="1.2.13" />
-        <vers num="1.2.14" />
-        <vers num="1.2.15" />
-        <vers num="1.2.16" />
-        <vers num="1.2.17" />
-        <vers num="1.2.18" />
-        <vers num="1.2.19" />
-        <vers num="1.2.2" />
-        <vers num="1.2.20" />
-        <vers num="1.2.21" />
-        <vers num="1.2.22" />
-        <vers num="1.2.23" />
-        <vers num="1.2.24" />
-        <vers num="1.2.25" />
-        <vers num="1.2.26" />
-        <vers num="1.2.27" />
-        <vers num="1.2.28" />
-        <vers num="1.2.29" />
-        <vers num="1.2.3" />
-        <vers num="1.2.30" />
-        <vers num="1.2.31" />
-        <vers num="1.2.32" />
-        <vers num="1.2.33" />
-        <vers num="1.2.34" />
-        <vers num="1.2.35" />
-        <vers num="1.2.36" />
-        <vers num="1.2.37" />
-        <vers num="1.2.38" />
-        <vers num="1.2.39" />
-        <vers num="1.2.4" />
-        <vers num="1.2.40" />
-        <vers num="1.2.41" />
-        <vers num="1.2.42" />
-        <vers num="1.2.43" edition="devel" />
-        <vers num="1.2.44" />
-        <vers num="1.2.45" edition="devel" />
-        <vers num="1.2.46" edition="devel" />
-        <vers num="1.2.47" edition="beta" />
-        <vers num="1.2.48" edition="betas" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers num="1.2.8" />
-        <vers num="1.2.9" />
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.5.0" edition="beta" />
-        <vers num="1.5.1" edition="beta" />
-        <vers num="1.5.10" edition="beta" />
-        <vers num="1.5.2" edition="beta" />
-        <vers num="1.5.3" edition="beta" />
-        <vers num="1.5.4" edition="beta" />
-        <vers num="1.5.5" edition="beta" />
-        <vers num="1.5.6" edition="beta" />
-        <vers num="1.5.7" edition="beta" />
-        <vers num="1.5.8" edition="beta" />
-        <vers num="1.5.9" edition="beta" />
-      </prod>
-      <prod vendor="redhat" name="libpng">
-        <vers num="1.2.2-16" />
-        <vers num="1.2.2-20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3426" published="2012-07-31" name="CVE-2012-3426" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:N)" CVSS_score="4.9" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="6.8" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by (1) creating new tokens through token chaining, (2) leveraging possession of a token for a disabled user account, or (3) leveraging possession of a token for an account with a changed password.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://launchpad.net/keystone/essex/2012.1.1/+download/keystone-2012.1.1.tar.gz" source="CONFIRM" patch="1">https://launchpad.net/keystone/essex/2012.1.1/+download/keystone-2012.1.1.tar.gz</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/27/4" source="MLIST" patch="1">[oss-security] 20120727 [OSSA 2012-010] Various Keystone token expiration issues (CVE-2012-3426)</ref>
-      <ref url="http://github.com/openstack/keystone/commit/ea03d05ed5de0c015042876100d37a6a14bf56de" source="CONFIRM" patch="1">http://github.com/openstack/keystone/commit/ea03d05ed5de0c015042876100d37a6a14bf56de</ref>
-      <ref url="http://github.com/openstack/keystone/commit/628149b3dc6b58b91fd08e6ca8d91c728ccb8626" source="CONFIRM" patch="1">http://github.com/openstack/keystone/commit/628149b3dc6b58b91fd08e6ca8d91c728ccb8626</ref>
-      <ref url="http://github.com/openstack/keystone/commit/375838cfceb88cacc312ff6564e64eb18ee6a355" source="CONFIRM" patch="1">http://github.com/openstack/keystone/commit/375838cfceb88cacc312ff6564e64eb18ee6a355</ref>
-      <ref url="https://bugs.launchpad.net/keystone/+bug/998185" source="CONFIRM">https://bugs.launchpad.net/keystone/+bug/998185</ref>
-      <ref url="https://bugs.launchpad.net/keystone/+bug/997194" source="CONFIRM">https://bugs.launchpad.net/keystone/+bug/997194</ref>
-      <ref url="https://bugs.launchpad.net/keystone/+bug/996595" source="CONFIRM">https://bugs.launchpad.net/keystone/+bug/996595</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1552-1" source="UBUNTU">USN-1552-1</ref>
-      <ref url="http://secunia.com/advisories/50494" source="SECUNIA">50494</ref>
-      <ref url="http://secunia.com/advisories/50045" source="SECUNIA">50045</ref>
-      <ref url="http://github.com/openstack/keystone/commit/d9600434da14976463a0bd03abd8e0309f0db454" source="CONFIRM">http://github.com/openstack/keystone/commit/d9600434da14976463a0bd03abd8e0309f0db454</ref>
-      <ref url="http://github.com/openstack/keystone/commit/a67b24878a6156eab17b9098fa649f0279256f5d" source="CONFIRM">http://github.com/openstack/keystone/commit/a67b24878a6156eab17b9098fa649f0279256f5d</ref>
-      <ref url="http://github.com/openstack/keystone/commit/29e74e73a6e51cffc0371b32354558391826a4aa" source="CONFIRM">http://github.com/openstack/keystone/commit/29e74e73a6e51cffc0371b32354558391826a4aa</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openstack" name="essex">
-        <vers num="" />
-      </prod>
-      <prod vendor="openstack" name="horizon">
-        <vers num="folsom-1" />
-      </prod>
-      <prod vendor="openstack" name="keystone">
-        <vers num="2012.1" />
-        <vers num="2012.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3429" published="2012-08-07" name="CVE-2012-3429" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names (DN) for LDAP queries, which allows remote DNS servers to cause a denial of service (named service hang) via a "$" character in a DN in a DNS query.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1027341" source="SECTRACK" patch="1">1027341</ref>
-      <ref url="http://git.fedorahosted.org/cgit/bind-dyndb-ldap.git/commit/?id=f345805c73c294db42452ae966c48fbc36c48006" source="CONFIRM" patch="1">http://git.fedorahosted.org/cgit/bind-dyndb-ldap.git/commit/?id=f345805c73c294db42452ae966c48fbc36c48006</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=842466" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=842466</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77391" source="XF">binddyndbldap-dnstoldapdnescape-dos(77391)</ref>
-      <ref url="http://www.securityfocus.com/bid/54787" source="BID">54787</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/02/5" source="MLIST">[oss-security] 20120802 bind-dyndb-ldap DoS CVE-2012-3429</ref>
-      <ref url="http://secunia.com/advisories/50159" source="SECUNIA" adv="1">50159</ref>
-      <ref url="http://secunia.com/advisories/50086" source="SECUNIA" adv="1">50086</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1139.html" source="REDHAT">RHSA-2012:1139</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="martin_nagy" name="bind-dyndb-ldap">
-        <vers num="0.1.0" edition="a1" />
-        <vers num="0.1.0" edition="b" />
-        <vers num="0.2.0" />
-        <vers num="1.0.0" edition="b1" />
-        <vers num="1.0.0" edition="rc1" />
-        <vers prev="1" num="1.1.0" edition="a1" />
-        <vers prev="1" num="1.1.0" edition="a2" />
-        <vers prev="1" num="1.1.0" edition="b1" />
-        <vers prev="1" num="1.1.0" edition="b2" />
-        <vers prev="1" num="1.1.0" edition="rc1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3434" published="2012-08-15" name="CVE-2012-3434" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in userperspan.php in the Count Per Day module before 3.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) datemin, or (3) datemax parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://plugins.trac.wordpress.org/changeset/571926/count-per-day" source="CONFIRM" patch="1">http://plugins.trac.wordpress.org/changeset/571926/count-per-day</ref>
-      <ref url="http://www.tomsdimension.de/wp-plugins/count-per-day" source="CONFIRM">http://www.tomsdimension.de/wp-plugins/count-per-day</ref>
-      <ref url="http://www.osvdb.org/83491" source="OSVDB">83491</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/27/2" source="MLIST">[oss-security] 20120727 Re: CVE-request: WordPress plugin Count Per Day XSS (SSCHADV2012-015)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/24/4" source="MLIST">[oss-security] 20120724 CVE-request: WordPress plugin Count Per Day XSS (SSCHADV2012-015)</ref>
-      <ref url="http://www.darksecurity.de/advisories/2012/SSCHADV2012-015.txt" source="MISC">http://www.darksecurity.de/advisories/2012/SSCHADV2012-015.txt</ref>
-      <ref url="http://secunia.com/advisories/49692" source="SECUNIA" adv="1">49692</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tom_braider" name="count_per_day">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.3" />
-        <vers num="1.4" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.10" />
-        <vers num="2.10.1" />
-        <vers num="2.11" />
-        <vers num="2.12" />
-        <vers num="2.13" />
-        <vers num="2.13.1" />
-        <vers num="2.14" />
-        <vers num="2.15" />
-        <vers num="2.15.1" />
-        <vers num="2.16" />
-        <vers num="2.16.1" />
-        <vers num="2.17" />
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.4" />
-        <vers num="2.4.2" />
-        <vers num="2.5" />
-        <vers num="2.6" />
-        <vers num="2.7" />
-        <vers num="2.8" />
-        <vers num="2.9" />
-        <vers num="3.0" />
-        <vers prev="1" num="3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3435" published="2012-08-15" name="CVE-2012-3435" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://git.zabbixzone.com/zabbix2.0/.git/commitdiff/333a3a5542ba8a2c901c24b7bf5440f41f1f4f54" source="CONFIRM" patch="1">http://git.zabbixzone.com/zabbix2.0/.git/commitdiff/333a3a5542ba8a2c901c24b7bf5440f41f1f4f54</ref>
-      <ref url="https://support.zabbix.com/browse/ZBX-5348" source="CONFIRM">https://support.zabbix.com/browse/ZBX-5348</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77195" source="XF">zabbix-popupbitem-sql-injection(77195)</ref>
-      <ref url="http://www.securityfocus.com/bid/54661" source="BID">54661</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/28/3" source="MLIST">[oss-security] 20120728 Re: Zabbix SQL injection flaw (CVE request)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/27/6" source="MLIST">[oss-security] 20120727 Zabbix SQL injection flaw (CVE request)</ref>
-      <ref url="http://www.exploit-db.com/exploits/20087" source="EXPLOIT-DB">20087</ref>
-      <ref url="http://secunia.com/advisories/49809" source="SECUNIA" adv="1">49809</ref>
-      <ref url="http://osvdb.org/84127" source="OSVDB">84127</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="zabbix" name="zabbix">
-        <vers num="1.1" edition="beta10" />
-        <vers num="1.1" edition="beta11" />
-        <vers num="1.1" edition="beta12" />
-        <vers num="1.1" edition="beta2" />
-        <vers num="1.1" edition="beta3" />
-        <vers num="1.1" edition="beta4" />
-        <vers num="1.1" edition="beta5" />
-        <vers num="1.1" edition="beta6" />
-        <vers num="1.1" edition="beta7" />
-        <vers num="1.1" edition="beta8" />
-        <vers num="1.1" edition="beta9" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.3" edition="beta" />
-        <vers num="1.3.1" edition="beta" />
-        <vers num="1.3.2" edition="beta" />
-        <vers num="1.3.3" edition="beta" />
-        <vers num="1.3.4" edition="beta" />
-        <vers num="1.3.5" edition="beta" />
-        <vers num="1.3.6" edition="beta" />
-        <vers num="1.3.7" edition="beta" />
-        <vers num="1.3.8" edition="beta" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.5" edition="beta" />
-        <vers num="1.5.1" edition="beta" />
-        <vers num="1.5.2" edition="beta" />
-        <vers num="1.5.3" edition="beta" />
-        <vers num="1.5.4" edition="beta" />
-        <vers num="1.6" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-        <vers num="1.6.8" />
-        <vers num="1.6.9" />
-        <vers num="1.7" />
-        <vers num="1.7.1" />
-        <vers num="1.7.2" />
-        <vers num="1.7.3" />
-        <vers num="1.7.4" />
-        <vers num="1.8" />
-        <vers num="1.8.1" />
-        <vers prev="1" num="1.8.15" edition="rc1" />
-        <vers num="1.8.2" />
-        <vers num="1.8.3" edition="rc1" />
-        <vers num="1.8.3" edition="rc2" />
-        <vers num="1.8.3" edition="rc3" />
-        <vers num="2.0.0" edition="rc1" />
-        <vers num="2.0.0" edition="rc2" />
-        <vers num="2.0.0" edition="rc3" />
-        <vers num="2.0.0" edition="rc4" />
-        <vers num="2.0.0" edition="rc5" />
-        <vers num="2.0.0" edition="rc6" />
-        <vers num="2.0.1" edition="rc1" />
-        <vers num="2.0.1" edition="rc2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3437" published="2012-08-07" name="CVE-2012-3437" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Magick_png_malloc function in coders/png.c in ImageMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=844101" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=844101</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77260" source="XF">imagemagick-png-dos(77260)</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1544-1" source="UBUNTU">USN-1544-1</ref>
-      <ref url="http://www.securitytracker.com/id?1027321" source="SECTRACK">1027321</ref>
-      <ref url="http://www.securityfocus.com/bid/54714" source="BID">54714</ref>
-      <ref url="http://secunia.com/advisories/50091" source="SECUNIA" adv="1">50091</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="imagemagick" name="imagemagick">
-        <vers num="6.7.8-6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3438" published="2012-08-07" name="CVE-2012-3438" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation.</descript>
-      <descript source="nvd">Per: http://xforce.iss.net/xforce/xfdb/77259
-
-'Platforms Affected: GraphicsMagick 1.3.16'
-</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=844105" source="MISC" patch="1">https://bugzilla.redhat.com/show_bug.cgi?id=844105</ref>
-      <ref url="http://graphicsmagick.hg.sourceforge.net/hgweb/graphicsmagick/graphicsmagick/rev/d6e469d02cd2" source="CONFIRM" patch="1">http://graphicsmagick.hg.sourceforge.net/hgweb/graphicsmagick/graphicsmagick/rev/d6e469d02cd2</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77259" source="XF">graphicsmagick-png-dos(77259)</ref>
-      <ref url="http://www.securityfocus.com/bid/54716" source="BID">54716</ref>
-      <ref url="http://secunia.com/advisories/50090" source="SECUNIA" adv="1">50090</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="graphicsmagick" name="graphicsmagick">
-        <vers num="1.3.16" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3440" published="2012-08-08" name="CVE-2012-3440" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:N/I:C/A:C)" CVSS_score="5.6" CVSS_impact_subscore="9.2" CVSS_exploit_subscore="1.9" CVSS_base_score="5.6">
-    <desc>
-      <descript source="cve">A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file.</descript>
-      <descript source="nvd">Additional information: https://rhn.redhat.com/errata/RHSA-2012-1149.html</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=844442" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=844442</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="todd_miller" name="sudo">
-        <vers num="1.7.2" />
-      </prod>
-      <prod vendor="redhat" name="enterprise_linux">
-        <vers num="5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3441" published="2012-08-25" name="CVE-2012-3441" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://git.icinga.org/?p=icinga-doc.git;a=commitdiff;h=619a08ca1178144b8a3a5caafff32a2d3918edab" source="CONFIRM" patch="1">https://git.icinga.org/?p=icinga-doc.git;a=commitdiff;h=619a08ca1178144b8a3a5caafff32a2d3918edab</ref>
-      <ref url="https://git.icinga.org/?p=icinga-core.git;a=commitdiff;h=dcd45fb6931c4abf710829bee21af09f842bc281" source="CONFIRM" patch="1">https://git.icinga.org/?p=icinga-core.git;a=commitdiff;h=dcd45fb6931c4abf710829bee21af09f842bc281</ref>
-      <ref url="https://git.icinga.org/?p=icinga-core.git;a=commitdiff;h=712813d3118a5b9e5a496179cab81dbe91f69d63" source="CONFIRM" patch="1">https://git.icinga.org/?p=icinga-core.git;a=commitdiff;h=712813d3118a5b9e5a496179cab81dbe91f69d63</ref>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=767319" source="MISC">https://bugzilla.novell.com/show_bug.cgi?id=767319</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/30/7" source="MLIST">[oss-security] 20120730 Re: CVE Request: icinga sample db creation scripts</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/30/6" source="MLIST">[oss-security] 20120730 CVE Request: icinga sample db creation scripts</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="icinga" name="icinga">
-        <vers num="1.7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3442" published="2012-07-31" name="CVE-2012-3442" modified="2012-08-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a data: URL.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/" source="CONFIRM" patch="1" adv="1">https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/31/2" source="MLIST">[oss-security] 20120730 Re: CVE Request: Django 1.3.1 and 1.4.0 security issues</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/31/1" source="MLIST">[oss-security] 20120730 CVE Request: Django 1.3.1 and 1.4.0 security issues</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="djangoproject" name="django">
-        <vers num="0.95" />
-        <vers num="0.96" />
-        <vers num="1.0" edition="alpha1" />
-        <vers num="1.0" edition="alpha2" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1" edition="alpha1" />
-        <vers num="1.1" edition="beta1" />
-        <vers num="1.1" edition="rc1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.2" edition="beta1" />
-        <vers num="1.2" edition="rc1" />
-        <vers num="1.2-alpha1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers prev="1" num="1.3" edition="alpha1" />
-        <vers prev="1" num="1.3" edition="beta1" />
-        <vers num="1.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3443" published="2012-07-31" name="CVE-2012-3443" modified="2012-08-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service (memory consumption) by uploading an image file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/" source="CONFIRM" patch="1" adv="1">https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/31/2" source="MLIST">[oss-security] 20120730 Re: CVE Request: Django 1.3.1 and 1.4.0 security issues</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/31/1" source="MLIST">[oss-security] 20120730 CVE Request: Django 1.3.1 and 1.4.0 security issues</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="djangoproject" name="django">
-        <vers num="0.95" />
-        <vers num="0.96" />
-        <vers num="1.0" edition="alpha1" />
-        <vers num="1.0" edition="alpha2" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1" edition="alpha1" />
-        <vers num="1.1" edition="beta1" />
-        <vers num="1.1" edition="rc1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.2" edition="beta1" />
-        <vers num="1.2" edition="rc1" />
-        <vers num="1.2-alpha1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers prev="1" num="1.3" edition="alpha1" />
-        <vers prev="1" num="1.3" edition="beta1" />
-        <vers num="1.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3444" published="2012-07-31" name="CVE-2012-3444" modified="2012-08-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service (process or thread consumption) via a large TIFF image.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/" source="CONFIRM" patch="1" adv="1">https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/31/2" source="MLIST">[oss-security] 20120730 Re: CVE Request: Django 1.3.1 and 1.4.0 security issues</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/31/1" source="MLIST">[oss-security] 20120730 CVE Request: Django 1.3.1 and 1.4.0 security issues</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="djangoproject" name="django">
-        <vers num="0.95" />
-        <vers num="0.96" />
-        <vers num="1.0" edition="alpha1" />
-        <vers num="1.0" edition="alpha2" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1" edition="alpha1" />
-        <vers num="1.1" edition="beta1" />
-        <vers num="1.1" edition="rc1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.2" edition="beta1" />
-        <vers num="1.2" edition="rc1" />
-        <vers num="1.2-alpha1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers prev="1" num="1.3" edition="alpha1" />
-        <vers prev="1" num="1.3" edition="beta1" />
-        <vers num="1.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3445" published="2012-08-07" name="CVE-2012-3445" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:P)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">The virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain* API calls with typed parameters, which might allow remote authenticated users to cause a denial of service (libvirtd crash) via an RPC command with nparams set to zero, which triggers an out-of-bounds read or a free of an invalid pointer.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.redhat.com/archives/libvir-list/2012-July/msg01650.html" source="MLIST">[libvirt] 20120730 [PATCH] daemon: Fix crash in virTypedParameterArrayClear</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=844734" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=844734</ref>
-      <ref url="http://www.securityfocus.com/bid/54748" source="BID">54748</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/31/7" source="MLIST">[oss-security] 20120731 Re: CVE Request -- libvirt: crash in virTypedParameterArrayClear</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/31/4" source="MLIST">[oss-security] 20120731 CVE Request -- libvirt: crash in virTypedParameterArrayClear</ref>
-      <ref url="http://secunia.com/advisories/50118" source="SECUNIA" adv="1">50118</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1202.html" source="REDHAT">RHSA-2012:1202</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-08/msg00023.html" source="SUSE">openSUSE-SU-2012:0991</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="redhat" name="libvirt">
-        <vers num="0.9.13" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3447" published="2012-08-20" name="CVE-2012-3447" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:P)" CVSS_score="4.9" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="6.8" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image that uses a symlink that is only readable by root.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3361.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/openstack/nova/commit/d9577ce9f266166a297488445b5b0c93c1ddb368" source="CONFIRM" patch="1">https://github.com/openstack/nova/commit/d9577ce9f266166a297488445b5b0c93c1ddb368</ref>
-      <ref url="https://github.com/openstack/nova/commit/ce4b2e27be45a85b310237615c47eb53f37bb5f3" source="CONFIRM" patch="1">https://github.com/openstack/nova/commit/ce4b2e27be45a85b310237615c47eb53f37bb5f3</ref>
-      <ref url="https://review.openstack.org/#/c/10953/" source="CONFIRM">https://review.openstack.org/#/c/10953/</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=845106" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=845106</ref>
-      <ref url="https://bugs.launchpad.net/nova/+bug/1031311" source="CONFIRM">https://bugs.launchpad.net/nova/+bug/1031311</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77539" source="XF">openstack-nova-code-execution(77539)</ref>
-      <ref url="http://www.securityfocus.com/bid/54869" source="BID">54869</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/07/1" source="MLIST">[oss-security] 20120807 [OSSA 2012-011] Compute node filesystem injection/corruption (CVE-2012-3447)</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openstack" name="folsom">
-        <vers num="" />
-      </prod>
-      <prod vendor="openstack" name="nova">
-        <vers num="2012.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3448" published="2012-08-06" name="CVE-2012-3448" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://ganglia.info/?p=549" source="CONFIRM" patch="1" adv="1">http://ganglia.info/?p=549</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=845124" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=845124</ref>
-      <ref url="https://bugs.gentoo.org/show_bug.cgi?id=428776" source="MISC">https://bugs.gentoo.org/show_bug.cgi?id=428776</ref>
-      <ref url="http://www.securityfocus.com/bid/54699" source="BID">54699</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/02/1" source="MLIST">[oss-security] 20120801 Re: CVE request: Ganglia Web 3.5.1</ref>
-      <ref url="http://secunia.com/advisories/50047" source="SECUNIA" adv="1">50047</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084202.html" source="FEDORA">FEDORA-2012-10699</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084196.html" source="FEDORA">FEDORA-2012-10727</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ganglia" name="ganglia-web">
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.2.0" />
-        <vers num="3.3.0" />
-        <vers num="3.3.1" />
-        <vers num="3.4.1" />
-        <vers num="3.4.2" />
-        <vers prev="1" num="3.5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3449" published="2012-08-07" name="CVE-2012-3449" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="3.6" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.9" CVSS_base_score="3.6">
-    <desc>
-      <descript source="cve">Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=845350" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=845350</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77417" source="XF">openvswitch-privilege-escalation(77417)</ref>
-      <ref url="http://www.securityfocus.com/bid/54794" source="BID">54794</ref>
-      <ref url="http://www.securityfocus.com/bid/54789" source="BID">54789</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/03/6" source="MLIST">[oss-security] 20120803 Re: openvswitch world writable directories (CVE-2012-3449)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/02/6" source="MLIST">[oss-security] 20120802 openvswitch world writable directories (CVE-2012-3449)</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683665" source="CONFIRM">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683665</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openvswitch" name="openvswitch">
-        <vers num="1.4.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3450" published="2012-08-06" name="CVE-2012-3450" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:N/A:P)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">pdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end of the query string during parsing of prepared statements, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted parameter value.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=769785" source="CONFIRM">https://bugzilla.novell.com/show_bug.cgi?id=769785</ref>
-      <ref url="https://bugs.php.net/bug.php?id=61755" source="CONFIRM">https://bugs.php.net/bug.php?id=61755</ref>
-      <ref url="http://www.php.net/ChangeLog-5.php" source="CONFIRM">http://www.php.net/ChangeLog-5.php</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2527" source="DEBIAN">DSA-2527</ref>
-      <ref url="http://seclists.org/bugtraq/2012/Jun/60" source="BUGTRAQ">20120610 [php&lt;=5.4.3] Parsing Bug in PHP PDO prepared statements may lead to access violation</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00021.html" source="SUSE">SUSE-SU-2012:1033</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="5.3.0" />
-        <vers num="5.3.1" />
-        <vers num="5.3.10" />
-        <vers num="5.3.11" />
-        <vers num="5.3.12" />
-        <vers prev="1" num="5.3.13" />
-        <vers num="5.3.2" />
-        <vers num="5.3.3" />
-        <vers num="5.3.4" />
-        <vers num="5.3.5" />
-        <vers num="5.3.6" />
-        <vers num="5.3.7" />
-        <vers num="5.3.8" />
-        <vers num="5.3.9" />
-        <vers num="5.4.0" />
-        <vers num="5.4.1" />
-        <vers num="5.4.2" />
-        <vers num="5.4.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3452" published="2012-08-07" name="CVE-2012-3452" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="3.3" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.4" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">gnome-screensaver 3.4.x before 3.4.4 and 3.5.x before 3.5.4, when multiple screens are used, only locks the screen with the active focus, which allows physically proximate attackers to bypass screen locking and access an unattended workstation.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.gnome.org/show_bug.cgi?id=679441" source="CONFIRM">https://bugzilla.gnome.org/show_bug.cgi?id=679441</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/03/5" source="MLIST">[oss-security] 20120803 Re: gnome-screensaver 3.4.2 locked only active screen</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/03/3" source="MLIST">[oss-security] 20120803 gnome-screensaver 3.4.2 locked only active screen</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnome" name="screensaver">
-        <vers num="3.4.0" />
-        <vers num="3.4.2" />
-        <vers num="3.4.3" />
-        <vers num="3.5.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3453" published="2012-08-07" name="CVE-2012-3453" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="3.6" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.9" CVSS_base_score="3.6">
-    <desc>
-      <descript source="cve">logol 1.5.0 uses world writable permissions for the /var/lib/logol/results directory, which allows local users to delete or overwrite arbitrary files.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/54802" source="BID">54802</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/03/8" source="MLIST">[oss-security] 20120803 CVE ASSIGNMENT: logol: creates world writable directory: /var/lib/logol/results</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683647" source="CONFIRM">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683647</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="debian" name="logol">
-        <vers num="1.5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3454" published="2012-08-07" name="CVE-2012-3454" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="3.6" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.9" CVSS_base_score="3.6">
-    <desc>
-      <descript source="cve">eXtplorer 2.1.0b6 uses world writable permissions for the /var/lib/extplorer/ftp_tmp directory, which allows local users to delete or overwrite arbitrary files.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/54801" source="BID">54801</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/03/7" source="MLIST">[oss-security] 20120803 CVE ASSIGNMENT: extplorer: creates world writable directory /var/lib/extplorer/ftp_tmp</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="extplorer" name="extplorer">
-        <vers num="2.1.0" edition="b6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3455" published="2012-08-20" name="CVE-2012-3455" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document.  NOTE: this is the same vulnerability as CVE-2012-3456, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77483" source="XF">koffice-kword-odf-bo(77483)</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1526-1" source="UBUNTU">USN-1526-1</ref>
-      <ref url="http://www.securityfocus.com/bid/54816" source="BID">54816</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/10/1" source="MLIST">[oss-security] 20120810 Re: CVE request for Calligra</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/06/6" source="MLIST">[oss-security] 20120806 Re: CVE request for Calligra</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/06/1" source="MLIST">[oss-security] 20120805 Re: CVE request for Calligra</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/04/5" source="MLIST">[oss-security] 20120804 Re: CVE request for Calligra</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/04/1" source="MLIST">[oss-security] 20120804 CVE request for Calligra</ref>
-      <ref url="http://www.kde.org/info/security/advisory-20120810-1.txt" source="CONFIRM">http://www.kde.org/info/security/advisory-20120810-1.txt</ref>
-      <ref url="http://secunia.com/advisories/50199" source="SECUNIA" adv="1">50199</ref>
-      <ref url="http://media.blackhat.com/bh-us-12/Briefings/C_Miller/BH_US_12_Miller_NFC_attack_surface_WP.pdf" source="MISC">http://media.blackhat.com/bh-us-12/Briefings/C_Miller/BH_US_12_Miller_NFC_attack_surface_WP.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kde" name="koffice">
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.3" edition="beta1" />
-        <vers num="1.3" edition="beta2" />
-        <vers num="1.3" edition="beta3" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.3.4" />
-        <vers num="1.3.5" />
-        <vers num="1.4" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.6.1" />
-        <vers prev="1" num="2.3.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3456" published="2012-08-20" name="CVE-2012-3456" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document.  NOTE: this is the same vulnerability as CVE-2012-3455, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77482" source="XF">calligra-styles-bo(77482)</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1525-1" source="UBUNTU">USN-1525-1</ref>
-      <ref url="http://www.securityfocus.com/bid/54816" source="BID">54816</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/10/1" source="MLIST">[oss-security] 20120810 Re: CVE request for Calligra</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/06/6" source="MLIST">[oss-security] 20120806 Re: CVE request for Calligra</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/06/1" source="MLIST">[oss-security] 20120805 Re: CVE request for Calligra</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/04/5" source="MLIST">[oss-security] 20120804 Re: CVE request for Calligra</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/04/1" source="MLIST">[oss-security] 20120804 CVE request for Calligra</ref>
-      <ref url="http://www.kde.org/info/security/advisory-20120810-1.txt" source="CONFIRM">http://www.kde.org/info/security/advisory-20120810-1.txt</ref>
-      <ref url="http://secunia.com/advisories/50050" source="SECUNIA" adv="1">50050</ref>
-      <ref url="http://media.blackhat.com/bh-us-12/Briefings/C_Miller/BH_US_12_Miller_NFC_attack_surface_WP.pdf" source="MISC">http://media.blackhat.com/bh-us-12/Briefings/C_Miller/BH_US_12_Miller_NFC_attack_surface_WP.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="calligra" name="calligra">
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4" edition="beta4" />
-        <vers num="2.4" edition="beta6" />
-        <vers num="2.4" edition="beta7" />
-        <vers num="2.4" edition="rc2" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers prev="1" num="2.4.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3457" published="2012-08-11" name="CVE-2012-3457" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for process_perfdata.cfg, which allows local users to obtain the Gearman shared secret by reading the file.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/54863" source="BID">54863</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/06/8" source="MLIST">[oss-security] 20120806 Re: CVE ASSIGN: pnp4nagios: process_perfdata.cfg world readable</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/06/7" source="MLIST">[oss-security] 20120806 CVE ASSIGN: pnp4nagios: process_perfdata.cfg world readable</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683879" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683879</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pnp4nagios" name="pnp4nagios">
-        <vers num="0.6.0" />
-        <vers num="0.6.1" />
-        <vers num="0.6.10" />
-        <vers num="0.6.11" />
-        <vers num="0.6.12" />
-        <vers num="0.6.13" />
-        <vers num="0.6.14" />
-        <vers num="0.6.15" />
-        <vers num="0.6.16" />
-        <vers num="0.6.2" />
-        <vers num="0.6.3" />
-        <vers num="0.6.4" />
-        <vers num="0.6.5" />
-        <vers num="0.6.6" />
-        <vers num="0.6.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3458" published="2012-09-15" name="CVE-2012-3458" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/bbangert/beaker/commit/91becae76101cf87ce8cbfabe3af2622fc328fe5" source="CONFIRM">https://github.com/bbangert/beaker/commit/91becae76101cf87ce8cbfabe3af2622fc328fe5</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=809267" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=809267</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/13/10" source="MLIST">[oss-security] 20120813 ANN: Beaker 1.6.4 released with important security update</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2541" source="DEBIAN">DSA-2541</ref>
-      <ref url="http://secunia.com/advisories/50520" source="SECUNIA" adv="1">50520</ref>
-      <ref url="http://secunia.com/advisories/50226" source="SECUNIA" adv="1">50226</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="python" name="beaker">
-        <vers prev="1" num="1.6.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3461" published="2012-08-20" name="CVE-2012-3461" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The (1) otrl_base64_otr_decode function in src/b64.c; (2) otrl_proto_data_read_flags and (3) otrl_proto_accept_data functions in src/proto.c; and (4) decode function in toolkit/parse.c in libotr before 3.2.1 allocates a zero-length buffer when decoding a base64 string, which allows remote attackers to cause a denial of service (application crash) via a message with the value "?OTR:===.", which triggers a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr;a=commitdiff;h=b17232f86f8e60d0d22caf9a2400494d3c77da58" source="CONFIRM" patch="1">http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr;a=commitdiff;h=b17232f86f8e60d0d22caf9a2400494d3c77da58</ref>
-      <ref url="http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr;a=commitdiff;h=6d4ca89cf1d3c9a8aff696c3a846ac5a51f762c1" source="CONFIRM" patch="1">http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr;a=commitdiff;h=6d4ca89cf1d3c9a8aff696c3a846ac5a51f762c1</ref>
-      <ref url="http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr;a=commitdiff;h=1902baee5d4b056850274ed0fa8c2409f1187435" source="CONFIRM" patch="1">http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr;a=commitdiff;h=1902baee5d4b056850274ed0fa8c2409f1187435</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=846377" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=846377</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77528" source="XF">libotr-base64-bo(77528)</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1541-1" source="UBUNTU">USN-1541-1</ref>
-      <ref url="http://www.securityfocus.com/bid/54907" source="BID">54907</ref>
-      <ref url="http://www.mandriva.com/security/advisories?name=MDVSA-2012:131" source="MANDRIVA">MDVSA-2012:131</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2526" source="DEBIAN">DSA-2526</ref>
-      <ref url="http://lists.cypherpunks.ca/pipermail/otr-dev/2012-July/001348.html" source="MLIST">[OTR-dev] 20120727 Re: otrl_base64_otr_decode() function...</ref>
-      <ref url="http://lists.cypherpunks.ca/pipermail/otr-dev/2012-July/001347.html" source="MLIST">[OTR-dev] 20120727 otrl_base64_otr_decode() function...</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684121" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684121</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cypherpunks" name="libotr">
-        <vers num="3.1.0" />
-        <vers prev="1" num="3.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3463" published="2012-08-10" name="CVE-2012-3463" modified="2012-08-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_tag_helper.rb in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the prompt field to the select_tag helper.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://groups.google.com/group/rubyonrails-security/msg/961e18e514527078?dmode=source&amp;output=gplain" source="MLIST" patch="1">[rubyonrails-security] 20120810 Ruby on Rails Potential XSS Vulnerability in select_tag prompt</ref>
-      <ref url="http://weblog.rubyonrails.org/2012/8/9/ann-rails-3-2-8-has-been-released/" source="CONFIRM">http://weblog.rubyonrails.org/2012/8/9/ann-rails-3-2-8-has-been-released/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rubyonrails" name="ruby_on_rails">
-        <vers num="3.0.0" edition="beta" />
-        <vers num="3.0.0" edition="beta2" />
-        <vers num="3.0.0" edition="beta3" />
-        <vers num="3.0.0" edition="beta4" />
-        <vers num="3.0.0" edition="rc" />
-        <vers num="3.0.0" edition="rc2" />
-        <vers num="3.0.1" edition="pre" />
-        <vers num="3.0.10" edition="rc1" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" edition="rc1" />
-        <vers num="3.0.13" edition="rc1" />
-        <vers num="3.0.14" />
-        <vers num="3.0.16" />
-        <vers num="3.0.2" edition="pre" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" edition="rc" />
-        <vers num="3.0.4" edition="rc1" />
-        <vers num="3.0.5" edition="rc1" />
-        <vers num="3.0.6" edition="rc1" />
-        <vers num="3.0.6" edition="rc2" />
-        <vers num="3.0.7" edition="rc1" />
-        <vers num="3.0.7" edition="rc2" />
-        <vers num="3.0.8" edition="rc1" />
-        <vers num="3.0.8" edition="rc2" />
-        <vers num="3.0.8" edition="rc3" />
-        <vers num="3.0.8" edition="rc4" />
-        <vers num="3.0.9" edition="rc1" />
-        <vers num="3.0.9" edition="rc2" />
-        <vers num="3.0.9" edition="rc3" />
-        <vers num="3.0.9" edition="rc4" />
-        <vers num="3.0.9" edition="rc5" />
-        <vers num="3.1.0" edition="beta1" />
-        <vers num="3.1.0" edition="rc1" />
-        <vers num="3.1.0" edition="rc2" />
-        <vers num="3.1.0" edition="rc3" />
-        <vers num="3.1.0" edition="rc4" />
-        <vers num="3.1.0" edition="rc5" />
-        <vers num="3.1.0" edition="rc6" />
-        <vers num="3.1.0" edition="rc7" />
-        <vers num="3.1.0" edition="rc8" />
-        <vers num="3.1.1" edition="rc1" />
-        <vers num="3.1.1" edition="rc2" />
-        <vers num="3.1.1" edition="rc3" />
-        <vers num="3.1.2" edition="rc1" />
-        <vers num="3.1.2" edition="rc2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" edition="rc1" />
-        <vers num="3.1.5" edition="rc1" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.2.0" edition="rc1" />
-        <vers num="3.2.0" edition="rc2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" edition="rc1" />
-        <vers num="3.2.3" edition="rc1" />
-        <vers num="3.2.3" edition="rc2" />
-        <vers num="3.2.4" edition="rc1" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3464" published="2012-08-10" name="CVE-2012-3464" modified="2012-08-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in activesupport/lib/active_support/core_ext/string/output_safety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a ' (quote) character.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://groups.google.com/group/rubyonrails-security/msg/8f1bbe1cef8c6caf?dmode=source&amp;output=gplain" source="MLIST">[rubyonrails-security] 20120810 Potential XSS Vulnerability in Ruby on Rails</ref>
-      <ref url="http://weblog.rubyonrails.org/2012/8/9/ann-rails-3-2-8-has-been-released/" source="CONFIRM" adv="1">http://weblog.rubyonrails.org/2012/8/9/ann-rails-3-2-8-has-been-released/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rubyonrails" name="ruby_on_rails">
-        <vers num="0.10.0" />
-        <vers num="0.10.1" />
-        <vers num="0.11.0" />
-        <vers num="0.11.1" />
-        <vers num="0.12.0" />
-        <vers num="0.12.1" />
-        <vers num="0.13.0" />
-        <vers num="0.13.1" />
-        <vers num="0.14.1" />
-        <vers num="0.14.2" />
-        <vers num="0.14.3" />
-        <vers num="0.14.4" />
-        <vers num="0.5.0" />
-        <vers num="0.5.5" />
-        <vers num="0.5.6" />
-        <vers num="0.5.7" />
-        <vers num="0.6.0" />
-        <vers num="0.6.5" />
-        <vers num="0.7.0" />
-        <vers num="0.8.0" />
-        <vers num="0.8.5" />
-        <vers num="0.9.0" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="0.9.4" />
-        <vers num="0.9.4.1" />
-        <vers num="1.0.0" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.9.5" />
-        <vers num="2.0.0" edition="rc1" />
-        <vers num="2.0.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.4" />
-        <vers num="2.1" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.9" />
-        <vers num="3.0.0" edition="beta" />
-        <vers num="3.0.0" edition="beta2" />
-        <vers num="3.0.0" edition="beta3" />
-        <vers num="3.0.0" edition="beta4" />
-        <vers num="3.0.0" edition="rc" />
-        <vers num="3.0.0" edition="rc2" />
-        <vers num="3.0.1" edition="pre" />
-        <vers num="3.0.10" edition="rc1" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" edition="rc1" />
-        <vers num="3.0.13" edition="rc1" />
-        <vers num="3.0.14" />
-        <vers prev="1" num="3.0.16" />
-        <vers num="3.0.2" edition="pre" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" edition="rc" />
-        <vers num="3.0.4" edition="rc1" />
-        <vers num="3.0.5" edition="rc1" />
-        <vers num="3.0.6" edition="rc1" />
-        <vers num="3.0.6" edition="rc2" />
-        <vers num="3.0.7" edition="rc1" />
-        <vers num="3.0.7" edition="rc2" />
-        <vers num="3.0.8" edition="rc1" />
-        <vers num="3.0.8" edition="rc2" />
-        <vers num="3.0.8" edition="rc3" />
-        <vers num="3.0.8" edition="rc4" />
-        <vers num="3.0.9" edition="rc1" />
-        <vers num="3.0.9" edition="rc2" />
-        <vers num="3.0.9" edition="rc3" />
-        <vers num="3.0.9" edition="rc4" />
-        <vers num="3.0.9" edition="rc5" />
-        <vers num="3.1.0" edition="beta1" />
-        <vers num="3.1.0" edition="rc1" />
-        <vers num="3.1.0" edition="rc2" />
-        <vers num="3.1.0" edition="rc3" />
-        <vers num="3.1.0" edition="rc4" />
-        <vers num="3.1.0" edition="rc5" />
-        <vers num="3.1.0" edition="rc6" />
-        <vers num="3.1.0" edition="rc7" />
-        <vers num="3.1.0" edition="rc8" />
-        <vers num="3.1.1" edition="rc1" />
-        <vers num="3.1.1" edition="rc2" />
-        <vers num="3.1.1" edition="rc3" />
-        <vers num="3.1.2" edition="rc1" />
-        <vers num="3.1.2" edition="rc2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" edition="rc1" />
-        <vers num="3.1.5" edition="rc1" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.2.0" edition="rc1" />
-        <vers num="3.2.0" edition="rc2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" edition="rc1" />
-        <vers num="3.2.3" edition="rc1" />
-        <vers num="3.2.3" edition="rc2" />
-        <vers num="3.2.4" edition="rc1" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3465" published="2012-08-10" name="CVE-2012-3465" modified="2012-08-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/sanitize_helper.rb in the strip_tags helper in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via malformed HTML markup.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://groups.google.com/group/rubyonrails-security/msg/7fbb5392d4d282b5?dmode=source&amp;output=gplain" source="MLIST">[rubyonrails-security] 20120810 XSS Vulnerability in strip_tags</ref>
-      <ref url="http://weblog.rubyonrails.org/2012/8/9/ann-rails-3-2-8-has-been-released/" source="CONFIRM" adv="1">http://weblog.rubyonrails.org/2012/8/9/ann-rails-3-2-8-has-been-released/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rubyonrails" name="ruby_on_rails">
-        <vers num="0.10.0" />
-        <vers num="0.10.1" />
-        <vers num="0.11.0" />
-        <vers num="0.11.1" />
-        <vers num="0.12.0" />
-        <vers num="0.12.1" />
-        <vers num="0.13.0" />
-        <vers num="0.13.1" />
-        <vers num="0.14.1" />
-        <vers num="0.14.2" />
-        <vers num="0.14.3" />
-        <vers num="0.14.4" />
-        <vers num="0.5.0" />
-        <vers num="0.5.5" />
-        <vers num="0.5.6" />
-        <vers num="0.5.7" />
-        <vers num="0.6.0" />
-        <vers num="0.6.5" />
-        <vers num="0.7.0" />
-        <vers num="0.8.0" />
-        <vers num="0.8.5" />
-        <vers num="0.9.0" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="0.9.4" />
-        <vers num="0.9.4.1" />
-        <vers num="1.0.0" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.9.5" />
-        <vers num="2.0.0" edition="rc1" />
-        <vers num="2.0.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.4" />
-        <vers num="2.1" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.9" />
-        <vers num="3.0.0" edition="beta" />
-        <vers num="3.0.0" edition="beta2" />
-        <vers num="3.0.0" edition="beta3" />
-        <vers num="3.0.0" edition="beta4" />
-        <vers num="3.0.0" edition="rc" />
-        <vers num="3.0.0" edition="rc2" />
-        <vers num="3.0.1" edition="pre" />
-        <vers num="3.0.10" edition="rc1" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" edition="rc1" />
-        <vers num="3.0.13" edition="rc1" />
-        <vers num="3.0.14" />
-        <vers prev="1" num="3.0.16" />
-        <vers num="3.0.2" edition="pre" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" edition="rc" />
-        <vers num="3.0.4" edition="rc1" />
-        <vers num="3.0.5" edition="rc1" />
-        <vers num="3.0.6" edition="rc1" />
-        <vers num="3.0.6" edition="rc2" />
-        <vers num="3.0.7" edition="rc1" />
-        <vers num="3.0.7" edition="rc2" />
-        <vers num="3.0.8" edition="rc1" />
-        <vers num="3.0.8" edition="rc2" />
-        <vers num="3.0.8" edition="rc3" />
-        <vers num="3.0.8" edition="rc4" />
-        <vers num="3.0.9" edition="rc1" />
-        <vers num="3.0.9" edition="rc2" />
-        <vers num="3.0.9" edition="rc3" />
-        <vers num="3.0.9" edition="rc4" />
-        <vers num="3.0.9" edition="rc5" />
-        <vers num="3.1.0" edition="beta1" />
-        <vers num="3.1.0" edition="rc1" />
-        <vers num="3.1.0" edition="rc2" />
-        <vers num="3.1.0" edition="rc3" />
-        <vers num="3.1.0" edition="rc4" />
-        <vers num="3.1.0" edition="rc5" />
-        <vers num="3.1.0" edition="rc6" />
-        <vers num="3.1.0" edition="rc7" />
-        <vers num="3.1.0" edition="rc8" />
-        <vers num="3.1.1" edition="rc1" />
-        <vers num="3.1.1" edition="rc2" />
-        <vers num="3.1.1" edition="rc3" />
-        <vers num="3.1.2" edition="rc1" />
-        <vers num="3.1.2" edition="rc2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" edition="rc1" />
-        <vers num="3.1.5" edition="rc1" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.2.0" edition="rc1" />
-        <vers num="3.2.0" edition="rc2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" edition="rc1" />
-        <vers num="3.2.3" edition="rc1" />
-        <vers num="3.2.3" edition="rc2" />
-        <vers num="3.2.4" edition="rc1" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3467" published="2012-08-27" name="CVE-2012-3467" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://issues.apache.org/jira/browse/QPID-3849" source="CONFIRM">https://issues.apache.org/jira/browse/QPID-3849</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=836276" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=836276</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77568" source="XF">apache-qpid-broker-sec-bypass(77568)</ref>
-      <ref url="http://www.securityfocus.com/bid/54954" source="BID">54954</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/09/6" source="MLIST">[oss-security] 20120809 CVE-2012-3467: Unauthorized access (authentication bypass) from client to broker due to use of NullAuthenticator in shadow connections</ref>
-      <ref url="http://svn.apache.org/viewvc?view=revision&amp;revision=1352992" source="CONFIRM">http://svn.apache.org/viewvc?view=revision&amp;revision=1352992</ref>
-      <ref url="http://secunia.com/advisories/50186" source="SECUNIA" adv="1">50186</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="qpid">
-        <vers num="0.14" />
-        <vers prev="1" num="0.16" />
-        <vers num="0.5" />
-        <vers num="0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3468" published="2012-08-12" name="CVE-2012-3468" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) the verify function in application/controllers/alerts.php, (2) the save_all function in application/models/settings.php, or (3) the media type to the timeline function in application/controllers/json.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/ushahidi/Ushahidi_Web/commit/fdb48d1" source="CONFIRM" patch="1">https://github.com/ushahidi/Ushahidi_Web/commit/fdb48d1</ref>
-      <ref url="https://github.com/ushahidi/Ushahidi_Web/commit/d954093" source="CONFIRM" patch="1">https://github.com/ushahidi/Ushahidi_Web/commit/d954093</ref>
-      <ref url="https://github.com/ushahidi/Ushahidi_Web/commit/4764792" source="CONFIRM" patch="1">https://github.com/ushahidi/Ushahidi_Web/commit/4764792</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/08/09/5" source="MLIST">[oss-security] 20120809 Re: CVE request for Ushahidi</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ushahidi" name="ushahidi_platform">
-        <vers num="1.0" />
-        <vers num="1.2" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.4" />
-        <vers prev="1" num="2.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3469" published="2012-08-12" name="CVE-2012-3469" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) the messages admin functionality in application/controllers/admin/messages.php, (2) application/libraries/api/MY_Checkin_Api_Object.php, (3) application/controllers/admin/messages/reporters.php, or (4) the location API in application/libraries/api/MY_Locations_Api_Object.php and application/models/location.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/ushahidi/Ushahidi_Web/commit/e0e2b66" source="CONFIRM" patch="1">https://github.com/ushahidi/Ushahidi_Web/commit/e0e2b66</ref>
-      <ref url="https://github.com/ushahidi/Ushahidi_Web/commit/a11d43c" source="CONFIRM" patch="1">https://github.com/ushahidi/Ushahidi_Web/commit/a11d43c</ref>
-      <ref url="https://github.com/ushahidi/Ushahidi_Web/commit/6f6a919" source="CONFIRM" patch="1">https://github.com/ushahidi/Ushahidi_Web/commit/6f6a919</ref>
-      <ref url="https://github.com/ushahidi/Ushahidi_Web/commit/68d9916" source="CONFIRM" patch="1">https://github.com/ushahidi/Ushahidi_Web/commit/68d9916</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/08/09/5" source="MLIST">[oss-security] 20120809 Re: CVE request for Ushahidi</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ushahidi" name="ushahidi_platform">
-        <vers num="1.0" />
-        <vers num="1.2" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.4" />
-        <vers prev="1" num="2.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3470" published="2012-08-12" name="CVE-2012-3470" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in application/libraries/api/MY_Countries_Api_Object.php in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vectors related to _get_countries functions.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/ushahidi/Ushahidi_Web/commit/3301e48" source="CONFIRM" patch="1">https://github.com/ushahidi/Ushahidi_Web/commit/3301e48</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/08/09/5" source="MLIST">[oss-security] 20120809 Re: CVE request for Ushahidi</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ushahidi" name="ushahidi_platform">
-        <vers num="1.0" />
-        <vers num="1.2" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.4" />
-        <vers prev="1" num="2.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3471" published="2012-08-12" name="CVE-2012-3471" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in the edit functions in (1) application/controllers/admin/reports.php and (2) application/controllers/members/reports.php in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via an incident id.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/ushahidi/Ushahidi_Web/commit/3f14fa0" source="CONFIRM" patch="1">https://github.com/ushahidi/Ushahidi_Web/commit/3f14fa0</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/08/09/5" source="MLIST">[oss-security] 20120809 Re: CVE request for Ushahidi</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ushahidi" name="ushahidi_platform">
-        <vers num="1.0" />
-        <vers num="1.2" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.4" />
-        <vers prev="1" num="2.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3472" published="2012-08-12" name="CVE-2012-3472" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The email API in application/libraries/api/MY_Email_Api_Object.php in the Ushahidi Platform before 2.5 does not require authentication, which allows remote attackers to list, delete, or organize messages via a GET request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/ushahidi/Ushahidi_Web/commit/4c24325" source="CONFIRM" patch="1">https://github.com/ushahidi/Ushahidi_Web/commit/4c24325</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/08/09/5" source="MLIST">[oss-security] 20120809 Re: CVE request for Ushahidi</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ushahidi" name="ushahidi_platform">
-        <vers num="1.0" />
-        <vers num="1.2" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.4" />
-        <vers prev="1" num="2.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3473" published="2012-08-12" name="CVE-2012-3473" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:N)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication, which allows remote attackers to generate reports and organize comments via API functions.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/ushahidi/Ushahidi_Web/commit/f67f4ad" source="CONFIRM" patch="1">https://github.com/ushahidi/Ushahidi_Web/commit/f67f4ad</ref>
-      <ref url="https://github.com/ushahidi/Ushahidi_Web/commit/13ca6f4" source="CONFIRM" patch="1">https://github.com/ushahidi/Ushahidi_Web/commit/13ca6f4</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/08/09/5" source="MLIST">[oss-security] 20120809 Re: CVE request for Ushahidi</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ushahidi" name="ushahidi_platform">
-        <vers num="1.0" />
-        <vers num="1.2" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.4" />
-        <vers prev="1" num="2.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3474" published="2012-08-12" name="CVE-2012-3474" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The comments API in application/libraries/api/MY_Comments_Api_Object.php in the Ushahidi Platform before 2.5 allows remote attackers to obtain sensitive information about the e-mail address, IP address, and other attributes of the author of a comment via an API function call.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/ushahidi/Ushahidi_Web/commit/529f353" source="CONFIRM" patch="1">https://github.com/ushahidi/Ushahidi_Web/commit/529f353</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/08/09/5" source="MLIST">[oss-security] 20120809 Re: CVE request for Ushahidi</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ushahidi" name="ushahidi_platform">
-        <vers num="1.0" />
-        <vers num="1.2" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.4" />
-        <vers prev="1" num="2.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3475" published="2012-08-12" name="CVE-2012-3475" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administrative privileges via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/ushahidi/Ushahidi_Web/commit/fcdad03" source="CONFIRM" patch="1">https://github.com/ushahidi/Ushahidi_Web/commit/fcdad03</ref>
-      <ref url="https://github.com/ushahidi/Ushahidi_Web/commit/7892559" source="CONFIRM" patch="1">https://github.com/ushahidi/Ushahidi_Web/commit/7892559</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/08/09/5" source="MLIST">[oss-security] 20120809 Re: CVE request for Ushahidi</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ushahidi" name="ushahidi_platform">
-        <vers num="1.0" />
-        <vers num="1.2" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.4" />
-        <vers prev="1" num="2.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3476" published="2012-08-12" name="CVE-2012-3476" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in (1) application/views/admin/layout.php and (2) themes/default/views/header.php in the Ushahidi Platform before 2.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to a site name.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/ushahidi/Ushahidi_Web/commit/00eae4f" source="CONFIRM" patch="1">https://github.com/ushahidi/Ushahidi_Web/commit/00eae4f</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/08/09/5" source="MLIST">[oss-security] 20120809 Re: CVE request for Ushahidi</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ushahidi" name="ushahidi_platform">
-        <vers num="1.0" />
-        <vers num="1.2" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.4" />
-        <vers prev="1" num="2.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3477" published="2012-08-25" name="CVE-2012-3477" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in signup_check.php in NeoInvoice allows remote attackers to execute arbitrary SQL commands via the value parameter in a username action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-08/0087.html" source="BUGTRAQ">20120812 NeoInvoice Blind SQL Injection (CVE-2012-3477)</ref>
-      <ref url="http://adamcaudill.com/2012/08/12/neoinvoice-blind-sql-injection-cve-2012-3477/" source="MISC">http://adamcaudill.com/2012/08/12/neoinvoice-blind-sql-injection-cve-2012-3477/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="thomas_hunter" name="neoinvoice">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3478" published="2012-08-31" name="CVE-2012-3478" modified="2012-09-03" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/11/3" source="MLIST">[oss-security] 20120810 Re: CVE Request: rssh command-line parsing vulnerability</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/10/7" source="MLIST">[oss-security] 20120810 CVE Request: rssh command-line parsing vulnerability</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2530" source="DEBIAN">DSA-2530</ref>
-      <ref url="http://sourceforge.net/mailarchive/message.php?msg_id=29235647" source="MLIST">[rssh-discuss] 20120508 Re: rssh security announcement</ref>
-      <ref url="http://secunia.com/advisories/50272" source="SECUNIA" adv="1">50272</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-05/0036.html" source="BUGTRAQ">20120508 rssh security announcement</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rssh" name="rssh">
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3.0" />
-        <vers prev="1" num="2.3.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3479" published="2012-08-25" name="CVE-2012-3479" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the enable-local-variables option is set to :safe, which allows user-assisted remote attackers to execute arbitrary Emacs Lisp code via a crafted file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/13/1" source="MLIST" patch="1">[oss-security] 20120813 Security flaw in GNU Emacs file-local variables</ref>
-      <ref url="http://www.slackware.com/security/viewer.php?l=slackware-security&amp;y=2012&amp;m=slackware-security.420006" source="SLACKWARE">SSA:2012-228-02</ref>
-      <ref url="http://www.securitytracker.com/id?1027375" source="SECTRACK">1027375</ref>
-      <ref url="http://www.securityfocus.com/bid/54969" source="BID">54969</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/13/2" source="MLIST">[oss-security] 20120812 Re: Security flaw in GNU Emacs file-local variables</ref>
-      <ref url="http://secunia.com/advisories/50157" source="SECUNIA" adv="1">50157</ref>
-      <ref url="http://debbugs.gnu.org/cgi/bugreport.cgi?bug=12155" source="CONFIRM">http://debbugs.gnu.org/cgi/bugreport.cgi?bug=12155</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnu" name="emacs">
-        <vers num="23.2" />
-        <vers num="23.3" />
-        <vers num="23.4" />
-        <vers num="24.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3480" published="2012-08-25" name="CVE-2012-3480" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="4.6" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.9" CVSS_base_score="4.6">
-    <desc>
-      <descript source="cve">Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related functions" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/54982" source="BID">54982</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/13/6" source="MLIST">[oss-security] 20120813 Re: CVE Request -- glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/13/4" source="MLIST">[oss-security] 20120813 CVE Request -- glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines</ref>
-      <ref url="http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html" source="MLIST">[libc-alpha] 20120812 Fix strtod integer/buffer overflow (bug 14459)</ref>
-      <ref url="http://sourceware.org/bugzilla/show_bug.cgi?id=14459" source="MISC">http://sourceware.org/bugzilla/show_bug.cgi?id=14459</ref>
-      <ref url="http://secunia.com/advisories/50201" source="SECUNIA" adv="1">50201</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1208.html" source="REDHAT">RHSA-2012:1208</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1207.html" source="REDHAT">RHSA-2012:1207</ref>
-      <ref url="http://osvdb.org/84710" source="OSVDB">84710</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html" source="FEDORA">FEDORA-2012-11927</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnu" name="glibc">
-        <vers num="2.16" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3481" published="2012-08-25" name="CVE-2012-3481" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted height and len properties in a GIF image file, which triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=847303" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=847303</ref>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=776572" source="MISC">https://bugzilla.novell.com/show_bug.cgi?id=776572</ref>
-      <ref url="http://www.securitytracker.com/id?1027411" source="SECTRACK">1027411</ref>
-      <ref url="http://www.securityfocus.com/bid/55101" source="BID">55101</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/20/8" source="MLIST">[oss-security] 20120820 The Gimp GIF plug-in CVE-2012-3481 issue</ref>
-      <ref url="http://secunia.com/advisories/50296" source="SECUNIA" adv="1">50296</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1181.html" source="REDHAT">RHSA-2012:1181</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1180.html" source="REDHAT">RHSA-2012:1180</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00000.html" source="SUSE">openSUSE-SU-2012:1080</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00023.html" source="SUSE">SUSE-SU-2012:1038</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gimp" name="gimp">
-        <vers num="2.2" />
-        <vers num="2.2.14" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.10" />
-        <vers num="2.6.11" />
-        <vers num="2.6.12" />
-        <vers num="2.6.13" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.6.7" />
-        <vers num="2.6.8" />
-        <vers num="2.6.9" />
-        <vers prev="1" num="2.8.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3483" published="2012-08-26" name="CVE-2012-3483" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="6.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="1.9" CVSS_base_score="6.2">
-    <desc>
-      <descript source="cve">Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by replacing a script file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-      <sec_prot admin="1" />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/14/1" source="MLIST">[oss-security] 20120812 Re: Tunnel Blick: Multiple Vulnerabilities to Local Root and DoS (OS X)</ref>
-      <ref url="http://git.zx2c4.com/Pwnnel-Blicker/tree/pwnnel-blicker.c" source="MISC">http://git.zx2c4.com/Pwnnel-Blicker/tree/pwnnel-blicker.c</ref>
-      <ref url="http://code.google.com/p/tunnelblick/issues/detail?id=212" source="CONFIRM">http://code.google.com/p/tunnelblick/issues/detail?id=212</ref>
-      <ref url="http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0122.html" source="FULLDISC">20120811 OS X Local Root: Silly SUID Helper in Tunnel Blick</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="tunnelblick">
-        <vers prev="1" num="3.3beta20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3484" published="2012-08-26" name="CVE-2012-3484" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">Tunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to determine whether a program can be safely executed, which allows local users to bypass intended access restrictions and gain privileges via a (1) user-mountable image or (2) network share.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-      <sec_prot admin="1" />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/14/1" source="MLIST">[oss-security] 20120812 Re: Tunnel Blick: Multiple Vulnerabilities to Local Root and DoS (OS X)</ref>
-      <ref url="http://code.google.com/p/tunnelblick/issues/detail?id=212" source="CONFIRM">http://code.google.com/p/tunnelblick/issues/detail?id=212</ref>
-      <ref url="http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0122.html" source="FULLDISC">20120811 OS X Local Root: Silly SUID Helper in Tunnel Blick</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="tunnelblick">
-        <vers prev="1" num="3.3beta20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3485" published="2012-08-26" name="CVE-2012-3485" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="7.2" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.9" CVSS_base_score="7.2">
-    <desc>
-      <descript source="cve">Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname or (2) executable file pathname, which allows local users to gain privileges via an execl system call.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-      <sec_prot admin="1" />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/14/1" source="MLIST">[oss-security] 20120812 Re: Tunnel Blick: Multiple Vulnerabilities to Local Root and DoS (OS X)</ref>
-      <ref url="http://git.zx2c4.com/Pwnnel-Blicker/tree/pwnnel-blicker-for-kids.sh" source="MISC">http://git.zx2c4.com/Pwnnel-Blicker/tree/pwnnel-blicker-for-kids.sh</ref>
-      <ref url="http://code.google.com/p/tunnelblick/issues/detail?id=212" source="CONFIRM">http://code.google.com/p/tunnelblick/issues/detail?id=212</ref>
-      <ref url="http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0122.html" source="FULLDISC">20120811 OS X Local Root: Silly SUID Helper in Tunnel Blick</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="tunnelblick">
-        <vers prev="1" num="3.3beta20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3486" published="2012-08-26" name="CVE-2012-3486" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a script upon occurrence of an OpenVPN event.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-      <sec_prot admin="1" />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/14/1" source="MLIST">[oss-security] 20120812 Re: Tunnel Blick: Multiple Vulnerabilities to Local Root and DoS (OS X)</ref>
-      <ref url="http://code.google.com/p/tunnelblick/issues/detail?id=212" source="CONFIRM">http://code.google.com/p/tunnelblick/issues/detail?id=212</ref>
-      <ref url="http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0122.html" source="FULLDISC">20120811 OS X Local Root: Silly SUID Helper in Tunnel Blick</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="tunnelblick">
-        <vers prev="1" num="3.3beta20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3487" published="2012-08-26" name="CVE-2012-3487" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="1.2" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="1.9" CVSS_base_score="1.2">
-    <desc>
-      <descript source="cve">Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a specific PID value to be assigned to a target process.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/14/1" source="MLIST">[oss-security] 20120812 Re: Tunnel Blick: Multiple Vulnerabilities to Local Root and DoS (OS X)</ref>
-      <ref url="http://code.google.com/p/tunnelblick/issues/detail?id=212" source="CONFIRM">http://code.google.com/p/tunnelblick/issues/detail?id=212</ref>
-      <ref url="http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0122.html" source="FULLDISC">20120811 OS X Local Root: Silly SUID Helper in Tunnel Blick</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="tunnelblick">
-        <vers prev="1" num="3.3beta20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3501" published="2012-08-25" name="CVE-2012-3501" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to a system command call, which allows remote attackers to cause a denial of service (daemon crash) via a URL with certain characters, as demonstrated using %0D or %0A.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/darold/squidclamav/commit/80f74451f628264d1d9a1f1c0bbcebc932ba5e00" source="CONFIRM" patch="1">https://github.com/darold/squidclamav/commit/80f74451f628264d1d9a1f1c0bbcebc932ba5e00</ref>
-      <ref url="https://bugs.gentoo.org/show_bug.cgi?id=428778" source="MISC">https://bugs.gentoo.org/show_bug.cgi?id=428778</ref>
-      <ref url="http://www.securityfocus.com/bid/54663" source="BID">54663</ref>
-      <ref url="http://www.osvdb.org/84138" source="OSVDB">84138</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/16/4" source="MLIST">[oss-security] 20120816 Re: CVE Request: SquidClamav insufficient escaping flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/16/2" source="MLIST">[oss-security] 20120816 CVE Request: SquidClamav insufficient escaping flaws</ref>
-      <ref url="http://squidclamav.darold.net/news.html" source="CONFIRM" adv="1">http://squidclamav.darold.net/news.html</ref>
-      <ref url="http://secunia.com/advisories/49057" source="SECUNIA" adv="1">49057</ref>
-      <ref url="http://freecode.com/projects/squidclamav/releases/346722" source="CONFIRM">http://freecode.com/projects/squidclamav/releases/346722</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="darold" name="squidclamav">
-        <vers num="5.0" />
-        <vers num="5.1" />
-        <vers num="5.2" />
-        <vers num="5.3" />
-        <vers num="5.4" />
-        <vers num="5.5" />
-        <vers num="5.6" />
-        <vers num="5.7" />
-        <vers num="6.0" />
-        <vers num="6.1" />
-        <vers num="6.2" />
-        <vers num="6.3" />
-        <vers num="6.4" />
-        <vers num="6.5" />
-        <vers num="6.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3502" published="2012-08-22" name="CVE-2012-3502" modified="2012-08-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http.c in the mod_proxy_http module in the Apache HTTP Server 2.4.x before 2.4.3 does not properly determine the situations that require closing a back-end connection, which allows remote attackers to obtain sensitive information in opportunistic circumstances by reading a response that was intended for a different client.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.apache.org/dist/httpd/CHANGES_2.4.3" source="CONFIRM">http://www.apache.org/dist/httpd/CHANGES_2.4.3</ref>
-      <ref url="http://mail-archives.apache.org/mod_mbox/www-announce/201208.mbox/%3C0BFFEA9B-801B-4BAA-9534-56F640268E30@apache.org%3E" source="MLIST" adv="1">[announce] 20120821 [ANNOUNCEMENT] Apache HTTP Server 2.4.3 Released</ref>
-      <ref url="http://httpd.apache.org/security/vulnerabilities_24.html" source="CONFIRM" adv="1">http://httpd.apache.org/security/vulnerabilities_24.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="http_server">
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3503" published="2012-08-25" name="CVE-2012-3503" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each default installation to have the same secret token, and allows remote attackers to authenticate to the CloudForms System Engine web interface as an arbitrary user by creating a cookie using the default secret_token.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/Katello/katello/commit/7c256fef9d75029d0ffff58ff1dcda915056d3a3" source="CONFIRM" patch="1">https://github.com/Katello/katello/commit/7c256fef9d75029d0ffff58ff1dcda915056d3a3</ref>
-      <ref url="https://github.com/Katello/katello/pull/499" source="CONFIRM">https://github.com/Katello/katello/pull/499</ref>
-      <ref url="http://www.securityfocus.com/bid/55140" source="BID">55140</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1187.html" source="REDHAT">RHSA-2012:1187</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1186.html" source="REDHAT">RHSA-2012:1186</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="katello" name="katello">
-        <vers prev="1" num="1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3507" published="2012-08-25" name="CVE-2012-3507" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in program/steps/mail/func.inc in RoundCube Webmail before 0.8.0, when using the Larry skin, allows remote attackers to inject arbitrary web script or HTML via the email message subject.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securelist.com/en/advisories/50212" source="MISC">http://www.securelist.com/en/advisories/50212</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/20/9" source="MLIST">[oss-security] 20120820 Re: CVE-request: Roundcube XSS issues</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/20/3" source="MLIST">[oss-security] 20120820 Re: CVE-request: Roundcube XSS issues</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/20/2" source="MLIST">[oss-security] 20120820 CVE-request: Roundcube XSS issues</ref>
-      <ref url="http://trac.roundcube.net/ticket/1488519" source="CONFIRM">http://trac.roundcube.net/ticket/1488519</ref>
-      <ref url="http://sourceforge.net/projects/roundcubemail/files/roundcubemail/0.8.0/" source="CONFIRM">http://sourceforge.net/projects/roundcubemail/files/roundcubemail/0.8.0/</ref>
-      <ref url="http://secunia.com/advisories/50212" source="SECUNIA" adv="1">50212</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="roundcube" name="roundcube_webmail">
-        <vers num="0.1" edition="20050811" />
-        <vers num="0.1" edition="20050820" />
-        <vers num="0.1" edition="20051007" />
-        <vers num="0.1" edition="20051021" />
-        <vers num="0.1" edition="alpha" />
-        <vers num="0.1" edition="beta" />
-        <vers num="0.1" edition="beta2" />
-        <vers num="0.1" edition="rc1" />
-        <vers num="0.1" edition="rc2" />
-        <vers num="0.1" edition="stable" />
-        <vers num="0.1.1" />
-        <vers num="0.2" edition="alpha" />
-        <vers num="0.2" edition="beta" />
-        <vers num="0.2" edition="stable" />
-        <vers num="0.2.1" />
-        <vers num="0.2.2" />
-        <vers num="0.3" edition="stable" />
-        <vers num="0.3.1" />
-        <vers num="0.4" />
-        <vers num="0.4.1" />
-        <vers num="0.5" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.6" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers prev="1" num="0.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3508" published="2012-08-25" name="CVE-2012-3508" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers to inject arbitrary web script or HTML by using "javascript:" in an href attribute in the body of an HTML-formatted email.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/roundcube/roundcubemail/commit/5ef8e4ad9d3ee8689d2b83750aa65395b7cd59ee" source="CONFIRM" patch="1">https://github.com/roundcube/roundcubemail/commit/5ef8e4ad9d3ee8689d2b83750aa65395b7cd59ee</ref>
-      <ref url="http://www.securelist.com/en/advisories/50279" source="MISC">http://www.securelist.com/en/advisories/50279</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/20/9" source="MLIST">[oss-security] 20120820 Re: CVE-request: Roundcube XSS issues</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/20/2" source="MLIST">[oss-security] 20120820 CVE-request: Roundcube XSS issues</ref>
-      <ref url="http://trac.roundcube.net/ticket/1488613" source="CONFIRM">http://trac.roundcube.net/ticket/1488613</ref>
-      <ref url="http://sourceforge.net/news/?group_id=139281&amp;id=309011" source="CONFIRM">http://sourceforge.net/news/?group_id=139281&amp;id=309011</ref>
-      <ref url="http://secunia.com/advisories/50279" source="SECUNIA" adv="1">50279</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="roundcube" name="webmail">
-        <vers num="0.8.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3509" published="2012-09-05" name="CVE-2012-3509" modified="2012-09-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service (crash) via vectors related to the "addition of CHUNK_HEADER_SIZE to the length," which triggers a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/78135" source="XF">gnu-libiberty-overflow(78135)</ref>
-      <ref url="http://www.securityfocus.com/bid/55281" source="BID">55281</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/29/3" source="MLIST">[oss-security] 20120829 CVE-2012-3509: objalloc_alloc integer overflows in libiberty</ref>
-      <ref url="http://security-tracker.debian.org/tracker/CVE-2012-3509" source="MISC">http://security-tracker.debian.org/tracker/CVE-2012-3509</ref>
-      <ref url="http://gcc.gnu.org/ml/gcc-patches/2012-08/msg01986.html" source="MLIST">[gcc-patches] 20120829 [PATCH] PR other/54411: libiberty: objalloc_alloc integer overflows (CVE-2012-3509)</ref>
-      <ref url="http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54411" source="MISC">http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54411</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnu" name="binutils">
-        <vers num="2.22" />
-      </prod>
-      <prod vendor="gnu" name="libiberty">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3514" published="2012-08-25" name="CVE-2012-3514" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55114" source="BID">55114</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/21/2" source="MLIST">[oss-security] 20120820 ocaml-xml-light: hash table collisions CPU usage DoS CVE-2012-3514</ref>
-      <ref url="http://secunia.com/advisories/50311" source="SECUNIA" adv="1">50311</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nicolas_cannasse" name="ocaml_xml-light_library">
-        <vers prev="1" num="r233" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3517" published="2012-08-25" name="CVE-2012-3517" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to cause a denial of service (daemon crash) via vectors related to failed DNS requests.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://trac.torproject.org/projects/tor/ticket/6480" source="CONFIRM" patch="1">https://trac.torproject.org/projects/tor/ticket/6480</ref>
-      <ref url="https://lists.torproject.org/pipermail/tor-announce/2012-August/000086.html" source="MLIST">[tor-announce] 20120819 Tor 0.2.2.38 is released</ref>
-      <ref url="https://gitweb.torproject.org/tor.git/commit/62637fa22405278758febb1743da9af562524d4c" source="CONFIRM">https://gitweb.torproject.org/tor.git/commit/62637fa22405278758febb1743da9af562524d4c</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=849949" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=849949</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/08/21/6" source="MLIST">[oss-security] 20120821 Re: CVE Request -- Tor 0.2.2.38: Three issues</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tor" name="tor">
-        <vers prev="1" num="0.2.2.37" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3518" published="2012-08-25" name="CVE-2012-3518" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allows remote attackers to cause a denial of service (out-of-bounds read and daemon crash) via a crafted (1) vote document or (2) consensus document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://trac.torproject.org/projects/tor/ticket/6530" source="CONFIRM">https://trac.torproject.org/projects/tor/ticket/6530</ref>
-      <ref url="https://lists.torproject.org/pipermail/tor-announce/2012-August/000086.html" source="MLIST">[tor-announce] 20120819 Tor 0.2.2.38 is released</ref>
-      <ref url="https://gitweb.torproject.org/tor.git/commit/57e35ad3d91724882c345ac709666a551a977f0f" source="CONFIRM">https://gitweb.torproject.org/tor.git/commit/57e35ad3d91724882c345ac709666a551a977f0f</ref>
-      <ref url="https://gitweb.torproject.org/tor.git/commit/55f635745afacefffdaafc72cc176ca7ab817546" source="CONFIRM">https://gitweb.torproject.org/tor.git/commit/55f635745afacefffdaafc72cc176ca7ab817546</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/08/21/6" source="MLIST">[oss-security] 20120821 Re: CVE Request -- Tor 0.2.2.38: Three issues</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tor" name="tor">
-        <vers prev="1" num="0.2.2.37" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3519" published="2012-08-25" name="CVE-2012-3519" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is chosen, which might allow remote attackers to obtain sensitive information about relay selection via a timing side-channel attack.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://trac.torproject.org/projects/tor/ticket/6537" source="CONFIRM">https://trac.torproject.org/projects/tor/ticket/6537</ref>
-      <ref url="https://lists.torproject.org/pipermail/tor-announce/2012-August/000086.html" source="MLIST">[tor-announce] 20120819 Tor 0.2.2.38 is released</ref>
-      <ref url="https://gitweb.torproject.org/tor.git/commit/d48cebc5e498b0ae673635f40fc57cdddab45d5b" source="CONFIRM">https://gitweb.torproject.org/tor.git/commit/d48cebc5e498b0ae673635f40fc57cdddab45d5b</ref>
-      <ref url="https://gitweb.torproject.org/tor.git/commit/308f6dad20675c42b29862f4269ad1fbfb00dc9a" source="CONFIRM">https://gitweb.torproject.org/tor.git/commit/308f6dad20675c42b29862f4269ad1fbfb00dc9a</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/08/21/6" source="MLIST">[oss-security] 20120821 Re: CVE Request -- Tor 0.2.2.38: Three issues</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tor" name="tor">
-        <vers prev="1" num="0.2.2.37" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3525" published="2012-08-25" name="CVE-2012-3525" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/Jabberd2/jabberd2/commit/aabcffae560d5fd00cd1d2ffce5d760353cf0a4d" source="CONFIRM" patch="1">https://github.com/Jabberd2/jabberd2/commit/aabcffae560d5fd00cd1d2ffce5d760353cf0a4d</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=850872" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=850872</ref>
-      <ref url="http://xmpp.org/resources/security-notices/server-dialback/" source="MISC" adv="1">http://xmpp.org/resources/security-notices/server-dialback/</ref>
-      <ref url="http://www.securityfocus.com/bid/55167" source="BID">55167</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/22/6" source="MLIST">[oss-security] 20120822 Re: CVE Request -- jabberd2: Prone to unsolicited XMPP Dialback attacks</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/22/5" source="MLIST">[oss-security] 20120822 CVE Request -- jabberd2: Prone to unsolicited XMPP Dialback attacks</ref>
-      <ref url="http://www.mail-archive.com/jabberd2@lists.xiaoka.com/msg01903.html" source="MLIST">[jabberd2] 20120821 Fwd: [Security] Vulnerability in XMPP Server Dialback Implementations</ref>
-      <ref url="http://secunia.com/advisories/50124" source="SECUNIA" adv="1">50124</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="jabber2" name="jabberd2">
-        <vers num="2.1.19" />
-      </prod>
-      <prod vendor="jabberd2" name="jabberd2">
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.10" />
-        <vers num="2.1.11" />
-        <vers num="2.1.12" />
-        <vers num="2.1.13" />
-        <vers num="2.1.14" />
-        <vers num="2.1.15" />
-        <vers num="2.1.16" />
-        <vers num="2.1.17" />
-        <vers num="2.1.18" />
-        <vers num="2.1.2" />
-        <vers num="2.1.20" />
-        <vers num="2.1.21" />
-        <vers num="2.1.22" />
-        <vers num="2.1.23" />
-        <vers num="2.1.24" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.1.9" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.10" />
-        <vers num="2.2.11" />
-        <vers num="2.2.12" />
-        <vers num="2.2.13" />
-        <vers num="2.2.14" />
-        <vers num="2.2.15" />
-        <vers prev="1" num="2.2.16" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2.7.1" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3526" published="2012-09-05" name="CVE-2012-3526" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The reverse proxy add forward module (mod_rpaf) 0.5 and 0.6 for the Apache HTTP Server allows remote attackers to cause a denial of service (server or application crash) via multiple X-Forwarded-For headers in a request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://zecrazytux.net/troubleshooting/apache2-segfault-debugging-tutorial" source="MISC">http://zecrazytux.net/troubleshooting/apache2-segfault-debugging-tutorial</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/22/7" source="MLIST">[oss-security] 20120822 Re: CVE Request: Apache mod RPAF denial of service</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/22/2" source="MLIST">[oss-security] 20120822 CVE Request: Apache mod RPAF denial of service</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2532" source="DEBIAN">DSA-2532</ref>
-      <ref url="http://secunia.com/advisories/50400" source="SECUNIA" adv="1">50400</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683984" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683984</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="thomas_eibner" name="mod_rpaf">
-        <vers num="0.5" />
-        <vers num="0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3527" published="2012-09-05" name="CVE-2012-3527" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:P/I:P/A:P)" CVSS_score="4.6" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.9" CVSS_base_score="4.6">
-    <desc>
-      <descript source="cve">view_help.php in the backend help system in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to unserialize arbitrary objects and possibly execute arbitrary PHP code via an unspecified parameter, related to a "missing signature (HMAC)."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77791" source="XF">typo3-viewhelp-code-exec(77791)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/22/8" source="MLIST">[oss-security] 20120822 Re: CVE request: Typo3</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/" source="CONFIRM" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/</ref>
-      <ref url="http://secunia.com/advisories/50287" source="SECUNIA" adv="1">50287</ref>
-      <ref url="http://osvdb.org/84773" source="OSVDB">84773</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="typo3">
-        <vers num="4.5" />
-        <vers num="4.5.0" />
-        <vers num="4.5.1" />
-        <vers num="4.5.10" />
-        <vers num="4.5.11" />
-        <vers num="4.5.12" />
-        <vers num="4.5.13" />
-        <vers num="4.5.14" />
-        <vers num="4.5.15" />
-        <vers num="4.5.16" />
-        <vers num="4.5.17" />
-        <vers num="4.5.18" />
-        <vers num="4.5.2" />
-        <vers num="4.5.3" />
-        <vers num="4.5.4" />
-        <vers num="4.5.5" />
-        <vers num="4.5.6" />
-        <vers num="4.5.7" />
-        <vers num="4.5.8" />
-        <vers num="4.5.9" />
-        <vers num="4.6" />
-        <vers num="4.6.0" />
-        <vers num="4.6.1" />
-        <vers num="4.6.10" />
-        <vers num="4.6.11" />
-        <vers num="4.6.2" />
-        <vers num="4.6.3" />
-        <vers num="4.6.4" />
-        <vers num="4.6.5" />
-        <vers num="4.6.6" />
-        <vers num="4.6.7" />
-        <vers num="4.6.8" />
-        <vers num="4.6.9" />
-        <vers num="4.7" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3528" published="2012-09-05" name="CVE-2012-3528" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77792" source="XF">typo3-backend-unspec-xss(77792)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/22/8" source="MLIST">[oss-security] 20120822 Re: CVE request: Typo3</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/" source="CONFIRM" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/</ref>
-      <ref url="http://secunia.com/advisories/50287" source="SECUNIA" adv="1">50287</ref>
-      <ref url="http://osvdb.org/84771" source="OSVDB">84771</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="typo3">
-        <vers num="4.5" />
-        <vers num="4.5.0" />
-        <vers num="4.5.1" />
-        <vers num="4.5.10" />
-        <vers num="4.5.11" />
-        <vers num="4.5.12" />
-        <vers num="4.5.13" />
-        <vers num="4.5.14" />
-        <vers num="4.5.15" />
-        <vers num="4.5.16" />
-        <vers num="4.5.17" />
-        <vers num="4.5.18" />
-        <vers num="4.5.2" />
-        <vers num="4.5.3" />
-        <vers num="4.5.4" />
-        <vers num="4.5.5" />
-        <vers num="4.5.6" />
-        <vers num="4.5.7" />
-        <vers num="4.5.8" />
-        <vers num="4.5.9" />
-        <vers num="4.6" />
-        <vers num="4.6.0" />
-        <vers num="4.6.1" />
-        <vers num="4.6.10" />
-        <vers num="4.6.11" />
-        <vers num="4.6.2" />
-        <vers num="4.6.3" />
-        <vers num="4.6.4" />
-        <vers num="4.6.5" />
-        <vers num="4.6.6" />
-        <vers num="4.6.7" />
-        <vers num="4.6.8" />
-        <vers num="4.6.9" />
-        <vers num="4.7" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3529" published="2012-09-05" name="CVE-2012-3529" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:N/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">The configuration module in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to obtain the encryption key via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77793" source="XF">typo3-config-module-info-disc(77793)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/22/8" source="MLIST">[oss-security] 20120822 Re: CVE request: Typo3</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/" source="CONFIRM">http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/</ref>
-      <ref url="http://secunia.com/advisories/50287" source="SECUNIA" adv="1">50287</ref>
-      <ref url="http://osvdb.org/84775" source="OSVDB">84775</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="typo3">
-        <vers num="4.5" />
-        <vers num="4.5.0" />
-        <vers num="4.5.1" />
-        <vers num="4.5.10" />
-        <vers num="4.5.11" />
-        <vers num="4.5.12" />
-        <vers num="4.5.13" />
-        <vers num="4.5.14" />
-        <vers num="4.5.15" />
-        <vers num="4.5.16" />
-        <vers num="4.5.17" />
-        <vers num="4.5.18" />
-        <vers num="4.5.2" />
-        <vers num="4.5.3" />
-        <vers num="4.5.4" />
-        <vers num="4.5.5" />
-        <vers num="4.5.6" />
-        <vers num="4.5.7" />
-        <vers num="4.5.8" />
-        <vers num="4.5.9" />
-        <vers num="4.6" />
-        <vers num="4.6.0" />
-        <vers num="4.6.1" />
-        <vers num="4.6.10" />
-        <vers num="4.6.11" />
-        <vers num="4.6.2" />
-        <vers num="4.6.3" />
-        <vers num="4.6.4" />
-        <vers num="4.6.5" />
-        <vers num="4.6.6" />
-        <vers num="4.6.7" />
-        <vers num="4.6.8" />
-        <vers num="4.6.9" />
-        <vers num="4.7" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3530" published="2012-09-05" name="CVE-2012-3530" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Incomplete blacklist vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to conduct cross-site scripting (XSS) attacks via certain HTML5 JavaScript events.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/184.html
-
-'CWE-184: Incomplete Blacklist'</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77794" source="XF">typo3-html5-xss(77794)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/22/8" source="MLIST">[oss-security] 20120822 Re: CVE request: Typo3</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/" source="CONFIRM" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/</ref>
-      <ref url="http://secunia.com/advisories/50287" source="SECUNIA" adv="1">50287</ref>
-      <ref url="http://osvdb.org/84772" source="OSVDB">84772</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="typo3">
-        <vers num="4.5" />
-        <vers num="4.5.0" />
-        <vers num="4.5.1" />
-        <vers num="4.5.10" />
-        <vers num="4.5.11" />
-        <vers num="4.5.12" />
-        <vers num="4.5.13" />
-        <vers num="4.5.14" />
-        <vers num="4.5.15" />
-        <vers num="4.5.16" />
-        <vers num="4.5.17" />
-        <vers num="4.5.18" />
-        <vers num="4.5.2" />
-        <vers num="4.5.3" />
-        <vers num="4.5.4" />
-        <vers num="4.5.5" />
-        <vers num="4.5.6" />
-        <vers num="4.5.7" />
-        <vers num="4.5.8" />
-        <vers num="4.5.9" />
-        <vers num="4.6" />
-        <vers num="4.6.0" />
-        <vers num="4.6.1" />
-        <vers num="4.6.10" />
-        <vers num="4.6.11" />
-        <vers num="4.6.2" />
-        <vers num="4.6.3" />
-        <vers num="4.6.4" />
-        <vers num="4.6.5" />
-        <vers num="4.6.6" />
-        <vers num="4.6.7" />
-        <vers num="4.6.8" />
-        <vers num="4.6.9" />
-        <vers num="4.7" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3531" published="2012-09-05" name="CVE-2012-3531" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Install Tool in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/22/8" source="MLIST">[oss-security] 20120822 Re: CVE request: Typo3</ref>
-      <ref url="http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/" source="CONFIRM" adv="1">http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="typo3" name="typo3">
-        <vers num="4.5" />
-        <vers num="4.5.0" />
-        <vers num="4.5.1" />
-        <vers num="4.5.10" />
-        <vers num="4.5.11" />
-        <vers num="4.5.12" />
-        <vers num="4.5.13" />
-        <vers num="4.5.14" />
-        <vers num="4.5.15" />
-        <vers num="4.5.16" />
-        <vers num="4.5.17" />
-        <vers num="4.5.18" />
-        <vers num="4.5.2" />
-        <vers num="4.5.3" />
-        <vers num="4.5.4" />
-        <vers num="4.5.5" />
-        <vers num="4.5.6" />
-        <vers num="4.5.7" />
-        <vers num="4.5.8" />
-        <vers num="4.5.9" />
-        <vers num="4.6" />
-        <vers num="4.6.0" />
-        <vers num="4.6.1" />
-        <vers num="4.6.10" />
-        <vers num="4.6.11" />
-        <vers num="4.6.2" />
-        <vers num="4.6.3" />
-        <vers num="4.6.4" />
-        <vers num="4.6.5" />
-        <vers num="4.6.6" />
-        <vers num="4.6.7" />
-        <vers num="4.6.8" />
-        <vers num="4.6.9" />
-        <vers num="4.7" />
-        <vers num="4.7.0" />
-        <vers num="4.7.1" />
-        <vers num="4.7.2" />
-        <vers num="4.7.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3533" published="2012-08-31" name="CVE-2012-3533" modified="2012-09-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=851672" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=851672</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77984" source="XF">ovirt-ssl-spoofing(77984)</ref>
-      <ref url="http://www.securityfocus.com/bid/55208" source="BID">55208</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/26/1" source="MLIST">[oss-security] 20120826 Re: oVirt 3.1 does not validate server certificates in python sdk and cli (CVE-2012-3533)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/24/6" source="MLIST">[oss-security] 20120824 oVirt 3.1 does not validate server certificates in python sdk and cli (CVE-2012-3533)</ref>
-      <ref url="http://secunia.com/advisories/50409" source="SECUNIA" adv="1">50409</ref>
-      <ref url="http://gerrit.ovirt.org/#/c/7249/" source="CONFIRM">http://gerrit.ovirt.org/#/c/7249/</ref>
-      <ref url="http://gerrit.ovirt.org/#/c/7209/" source="CONFIRM">http://gerrit.ovirt.org/#/c/7209/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ovirt" name="ovirt">
-        <vers num="3.1" />
-      </prod>
-      <prod vendor="ovirt" name="ovirt-engine-cli">
-        <vers prev="1" num="3.1.0.5" />
-      </prod>
-      <prod vendor="ovirt-engine-sdk" name="3.1.0.5">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3534" published="2012-08-31" name="CVE-2012-3534" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which allows remote attackers to cause a denial of service (connection and thread consumption) via a large number of connections.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77975" source="XF">gatekeeper-unspec-code-exec(77975)</ref>
-      <ref url="http://www.securityfocus.com/bid/55198" source="BID">55198</ref>
-      <ref url="http://www.osvdb.org/84862" source="OSVDB">84862</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/27/1" source="MLIST">[oss-security] 20120826 Re: Re: information request on security bug fix in GNU Gatekeeper 3.1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/25/4" source="MLIST">[oss-security] 20120825 Re: information request on security bug fix in GNU Gatekeeper 3.1</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/25/3" source="MLIST">[oss-security] 20120824 information request on security bug fix in GNU Gatekeeper 3.1</ref>
-      <ref url="http://www.gnugk.org/gnugk-3.1.html" source="CONFIRM" adv="1">http://www.gnugk.org/gnugk-3.1.html</ref>
-      <ref url="http://secunia.com/advisories/50343" source="SECUNIA" adv="1">50343</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gnugk" name="gnu_gatekeeper">
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="3.0" edition="beta" />
-        <vers prev="1" num="3.1" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3535" published="2012-09-05" name="CVE-2012-3535" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=842918" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=842918</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77994" source="XF">openjpeg-files-bo(77994)</ref>
-      <ref url="http://www.securityfocus.com/bid/55214" source="BID">55214</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/27/3" source="MLIST">[oss-security] 20120827 Re: CVE Request: Heap-based buffer overflow in openjpeg</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/27/2" source="MLIST">[oss-security] 20120827 CVE Request: Heap-based buffer overflow in openjpeg</ref>
-      <ref url="http://secunia.com/advisories/50360" source="SECUNIA" adv="1">50360</ref>
-      <ref url="http://osvdb.org/84978" source="OSVDB">84978</ref>
-      <ref url="http://code.google.com/p/openjpeg/issues/detail?id=170" source="MISC">http://code.google.com/p/openjpeg/issues/detail?id=170</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openjpeg" name="openjpeg">
-        <vers num="1.3" />
-        <vers num="1.4" />
-        <vers prev="1" num="1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3537" published="2012-09-05" name="CVE-2012-3537" modified="2012-09-06" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="4.6" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.9" CVSS_base_score="4.6">
-    <desc>
-      <descript source="cve">The Crowbar Ohai plugin (chef/cookbooks/ohai/files/default/plugins/crowbar.rb) in the Deployer Barclamp in Crowbar, possibly 1.4 and earlier, allows local users to execute arbitrary shell commands via vectors related to "insecure handling of tmp files" and predictable file names.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/SUSE-Cloud/barclamp-deployer/commit/b6454268a067fc77ff5de82057b5b53b3cc38b87" source="MISC" patch="1">https://github.com/SUSE-Cloud/barclamp-deployer/commit/b6454268a067fc77ff5de82057b5b53b3cc38b87</ref>
-      <ref url="https://github.com/SUSE-Cloud/barclamp-deployer/commit/5ea8d4ddaa4cb1ce834d36889f0fe7ac0d617bc8" source="MISC" patch="1">https://github.com/SUSE-Cloud/barclamp-deployer/commit/5ea8d4ddaa4cb1ce834d36889f0fe7ac0d617bc8</ref>
-      <ref url="https://github.com/dellcloudedge/barclamp-deployer/pull/57" source="CONFIRM">https://github.com/dellcloudedge/barclamp-deployer/pull/57</ref>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=774967" source="MISC">https://bugzilla.novell.com/show_bug.cgi?id=774967</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/78041" source="XF">crowbar-privilege-escalation(78041)</ref>
-      <ref url="http://www.securityfocus.com/bid/55240" source="BID">55240</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/27/7" source="MLIST">[oss-security] 20120827 Re: CVE request: crowbar ohai plugin: local privilege (root) escalation due to insecure tmp file handling</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/27/5" source="MLIST">[oss-security] 20120827 CVE request: crowbar ohai plugin: local privilege (root) escalation due to insecure tmp file handling</ref>
-      <ref url="http://secunia.com/advisories/50442" source="SECUNIA" adv="1">50442</ref>
-      <ref url="http://osvdb.org/84955" source="OSVDB">84955</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dell" name="crowbar">
-        <vers prev="1" num="1.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-3539" reject="1" published="2012-08-28" name="CVE-2012-3539" modified="2012-08-28">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-4681. Reason: This candidate is a duplicate of CVE-2012-4681. Notes: All CVE users should reference CVE-2012-4681 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3540" published="2012-09-05" name="CVE-2012-3540" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to auth/login/.  NOTE: this issue was originally assigned CVE-2012-3542 by mistake.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/openstack/horizon/commit/35eada8a27323c0f83c400177797927aba6bc99b" source="CONFIRM" patch="1">https://github.com/openstack/horizon/commit/35eada8a27323c0f83c400177797927aba6bc99b</ref>
-      <ref url="https://lists.launchpad.net/openstack/msg16281.html" source="MLIST">[openstack] 20120830 Re: [OSSA 2012-012] Horizon, Open redirect through 'next' parameter (CVE-2012-3540)</ref>
-      <ref url="https://lists.launchpad.net/openstack/msg16278.html" source="MLIST">[openstack] 20120830 [OSSA 2012-012] Horizon, Open redirect through 'next' parameter (CVE-2012-3542)</ref>
-      <ref url="https://bugs.launchpad.net/horizon/+bug/1039077" source="CONFIRM">https://bugs.launchpad.net/horizon/+bug/1039077</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/78196" source="XF">openstackdashboard-next-open-redirect(78196)</ref>
-      <ref url="http://www.securityfocus.com/bid/55329" source="BID">55329</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/30/5" source="MLIST">[oss-security] 20120830 Re: [Openstack] [OSSA 2012-012] Horizon, Open redirect through 'next' parameter (CVE-2012-3540)</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/30/4" source="MLIST">[oss-security] 20120830 [OSSA 2012-012] Horizon, Open redirect through 'next' parameter (CVE-2012-3542)</ref>
-      <ref url="http://secunia.com/advisories/50480" source="SECUNIA" adv="1">50480</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openstack" name="horizon">
-        <vers num="2012.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3542" published="2012-09-05" name="CVE-2012-3542" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user's default tenant to the administrative API.  NOTE: this identifier was originally incorrectly assigned to an open redirect issue, but the correct identifier for that issue is CVE-2012-3540.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/openstack/keystone/commit/c13d0ba606f7b2bdc609a7f388334e5efec3f3aa" source="CONFIRM" patch="1">https://github.com/openstack/keystone/commit/c13d0ba606f7b2bdc609a7f388334e5efec3f3aa</ref>
-      <ref url="https://github.com/openstack/keystone/commit/5438d3b5a219d7c8fa67e66e538d325a61617155" source="CONFIRM" patch="1">https://github.com/openstack/keystone/commit/5438d3b5a219d7c8fa67e66e538d325a61617155</ref>
-      <ref url="https://lists.launchpad.net/openstack/msg16282.html" source="MLIST">[openstack] 20120830 [OSSA 2012-013] Keystone, Lack of authorization for adding users to tenants (CVE-2012-3542)</ref>
-      <ref url="https://bugs.launchpad.net/keystone/+bug/1040626" source="CONFIRM">https://bugs.launchpad.net/keystone/+bug/1040626</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1552-1" source="UBUNTU">USN-1552-1</ref>
-      <ref url="http://www.securityfocus.com/bid/55326" source="BID">55326</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/30/6" source="MLIST">[oss-security] 20120830 [OSSA 2012-013] Keystone, Lack of authorization for adding users to tenants (CVE-2012-3542)</ref>
-      <ref url="http://secunia.com/advisories/50494" source="SECUNIA" adv="1">50494</ref>
-      <ref url="http://secunia.com/advisories/50467" source="SECUNIA" adv="1">50467</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="openstack" name="essex">
-        <vers num="2012.1" />
-      </prod>
-      <prod vendor="openstack" name="horizon">
-        <vers num="folsom-3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3548" published="2012-08-30" name="CVE-2012-3548" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a small value for a certain length field in a capture file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7666" source="CONFIRM" patch="1">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7666</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=849926" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=849926</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/08/29/4" source="MLIST">[oss-security] 20120829 Re: CVE Request -- wireshark (X >= 1.6.8): DoS (excessive CPU use and infinite loop) in DRDA dissector</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.10" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-        <vers num="1.6.8" />
-        <vers num="1.6.9" />
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-        <vers num="1.8.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3551" published="2012-09-05" name="CVE-2012-3551" modified="2012-09-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in crowbar_framework/app/views/support/index.html.haml in the Crowbar barclamp in Crowbar, possibly 1.4 and earlier, allows remote attackers to inject arbitrary web script or HTML via the file parameter to /utils.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/SUSE-Cloud/barclamp-crowbar/commit/a82ed926c6e3ba2b0cada213c35e4b00f34ea629" source="MISC" patch="1">https://github.com/SUSE-Cloud/barclamp-crowbar/commit/a82ed926c6e3ba2b0cada213c35e4b00f34ea629</ref>
-      <ref url="https://github.com/SUSE-Cloud/barclamp-crowbar/commit/90e905b7668a1cc884fb70040f96c7a0a287de48" source="MISC" patch="1">https://github.com/SUSE-Cloud/barclamp-crowbar/commit/90e905b7668a1cc884fb70040f96c7a0a287de48</ref>
-      <ref url="https://bugzilla.novell.com/show_bug.cgi?id=771840" source="MISC">https://bugzilla.novell.com/show_bug.cgi?id=771840</ref>
-      <ref url="http://www.securityfocus.com/bid/55315" source="BID">55315</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/31/1" source="MLIST">[oss-security] 20120830 Re: CVE request: crowbar XSS</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dell" name="crowbar">
-        <vers prev="1" num="1.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3553" published="2012-06-19" name="CVE-2012-3553" modified="2012-06-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">chan_skinny.c in the Skinny (aka SCCP) channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related issue to CVE-2012-2948.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/476.html
-
-'CWE-476: NULL Pointer Dereference'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://downloads.asterisk.org/pub/security/AST-2012-009.html" source="CONFIRM" adv="1">http://downloads.asterisk.org/pub/security/AST-2012-009.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="digium" name="asterisk">
-        <vers num="10.0.0" edition="beta1" />
-        <vers num="10.0.0" edition="beta2" />
-        <vers num="10.0.0" edition="rc1" />
-        <vers num="10.0.0" edition="rc2" />
-        <vers num="10.0.0" edition="rc3" />
-        <vers num="10.0.1" />
-        <vers num="10.1.0" edition="rc1" />
-        <vers num="10.1.0" edition="rc2" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.2.0" edition="rc1" />
-        <vers num="10.2.0" edition="rc2" />
-        <vers num="10.2.0" edition="rc3" />
-        <vers num="10.2.0" edition="rc4" />
-        <vers num="10.2.1" />
-        <vers num="10.3.0" edition="rc2" />
-        <vers num="10.3.0" edition="rc3" />
-        <vers num="10.3.1" />
-        <vers num="10.4.0" edition="rc1" />
-        <vers num="10.4.0" edition="rc2" />
-        <vers num="10.4.0" edition="rc3" />
-        <vers num="10.4.1" />
-        <vers num="10.4.2" />
-        <vers num="10.5.0" edition="rc1" />
-        <vers num="10.5.0" edition="rc2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3554" published="2012-08-10" name="CVE-2012-3554" modified="2012-08-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.rsgallery2.nl/announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.0.html" source="CONFIRM" adv="1">http://www.rsgallery2.nl/announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.0.html</ref>
-      <ref url="http://joomlacode.org/gf/project/rsgallery2/news/" source="CONFIRM">http://joomlacode.org/gf/project/rsgallery2/news/</ref>
-      <ref url="http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/142" source="CONFIRM">http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/142</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rsgallery2" name="com_rsgallery2">
-        <vers num="1.10.1" edition="alpha" />
-        <vers num="1.10.10" edition="alpha" />
-        <vers num="1.10.11" edition="alpha" />
-        <vers num="1.10.13" edition="alpha" />
-        <vers num="1.10.14" edition="alpha" />
-        <vers num="1.10.2" edition="alpha" />
-        <vers num="1.10.5" edition="alpha" />
-        <vers num="1.10.6" edition="alpha" />
-        <vers num="1.10.7" edition="alpha" />
-        <vers num="1.10.8" edition="alpha" />
-        <vers num="1.10.9" edition="alpha" />
-        <vers num="1.11.0" edition="alpha" />
-        <vers num="1.11.1" edition="alpha" />
-        <vers num="1.11.10" edition="alpha" />
-        <vers num="1.11.11" edition="alpha" />
-        <vers num="1.11.2" edition="alpha" />
-        <vers num="1.11.3" edition="alpha" />
-        <vers num="1.11.4" edition="alpha" />
-        <vers num="1.11.5" edition="alpha" />
-        <vers num="1.11.6" edition="alpha" />
-        <vers num="1.11.7" edition="alpha" />
-        <vers num="1.11.8" edition="alpha" />
-        <vers num="1.12.0" edition="alpha" />
-        <vers num="1.12.1" edition="alpha" />
-        <vers num="1.12.2" edition="alpha" />
-        <vers num="1.13.0" edition="alpha" />
-        <vers num="1.13.1" edition="alpha" />
-        <vers num="1.14.0" edition="alpha" />
-        <vers num="1.14.1" edition="alpha" />
-        <vers num="1.9.0-4" edition="alpha" />
-        <vers num="1.9.4" edition="alpha" />
-        <vers num="1.9.5" edition="alpha" />
-        <vers num="2.1.0" edition="beta" />
-        <vers num="2.1.1" />
-        <vers num="2.2.0" />
-        <vers prev="1" num="2.2.1" />
-        <vers num="2.3.0" />
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0.1" />
-        <vers prev="1" num="3.1.0" />
-        <vers num="3.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3555" published="2012-06-14" name="CVE-2012-3555" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="7.6" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="4.9" CVSS_base_score="7.6">
-    <desc>
-      <descript source="cve">Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary code via a crafted web site, related to a "hidden keyboard navigation" issue.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/support/kb/view/1021/" source="CONFIRM" adv="1">http://www.opera.com/support/kb/view/1021/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1200/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1200/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1200/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1200/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1200/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1200/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1165/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1165/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers prev="1" num="11.62" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3556" published="2012-06-14" name="CVE-2012-3556" modified="2012-06-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double-click action, which makes it easier for user-assisted remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary code via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/support/kb/view/1020/" source="CONFIRM" adv="1">http://www.opera.com/support/kb/view/1020/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1200/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1200/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1200/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1200/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1200/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1200/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1165/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1165/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers prev="1" num="11.62" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3557" published="2012-06-14" name="CVE-2012-3557" modified="2012-06-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and consequently obtain sensitive information via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/support/kb/view/1019/" source="CONFIRM" adv="1">http://www.opera.com/support/kb/view/1019/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1200/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1200/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1200/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1200/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1200/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1200/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1165/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1165/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers prev="1" num="11.62" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3558" published="2012-06-14" name="CVE-2012-3558" modified="2012-06-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field, which makes it easier for user-assisted remote attackers to conduct spoofing attacks via vectors involving navigation, reloads, and redirects.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/support/kb/view/1018/" source="CONFIRM" adv="1">http://www.opera.com/support/kb/view/1018/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1200/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1200/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1200/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1200/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1200/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1200/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1165/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1165/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers num="11.62" />
-        <vers prev="1" num="11.64" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3559" published="2012-06-14" name="CVE-2012-3559" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Opera before 12.00 on Mac OS X has unknown impact and attack vectors, related to a "moderate severity issue."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1200/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1200/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers num="11.62" />
-        <vers num="11.64" />
-        <vers num="11.65" />
-        <vers prev="1" num="12.00" edition="beta" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3560" published="2012-06-14" name="CVE-2012-3560" modified="2012-06-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during blocked navigation, which makes it easier for remote attackers to conduct spoofing attacks by detecting and preventing attempts to load a different web page.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/support/kb/view/1022/" source="CONFIRM" adv="1">http://www.opera.com/support/kb/view/1022/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1200/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1200/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1200/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1200/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1200/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1200/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1165/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1165/</ref>
-      <ref url="http://blog.vulnhunt.com/index.php/2012/06/14/cal-2012-0015-opera-website-spoof/" source="MISC">http://blog.vulnhunt.com/index.php/2012/06/14/cal-2012-0015-opera-website-spoof/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers num="11.62" />
-        <vers prev="1" num="11.64" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3561" published="2012-06-14" name="CVE-2012-3561" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Opera before 11.64 does not properly allocate memory for URL strings, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted string.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/support/kb/view/1016/" source="CONFIRM" adv="1">http://www.opera.com/support/kb/view/1016/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1164/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1164/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1164/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1164/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1164/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1164/</ref>
-      <ref url="http://osvdb.org/81809" source="OSVDB">81809</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers prev="1" num="11.62" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3562" published="2012-06-14" name="CVE-2012-3562" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted web page that is not properly handled during a reload, as demonstrated by a "multiple origin camera test" page.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76357" source="XF">opera-reload-dos(76357)</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1200b/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1200b/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers num="11.62" />
-        <vers num="11.64" />
-        <vers prev="1" num="11.65" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3563" published="2012-06-14" name="CVE-2012-3563" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via a web page that contains invalid character encodings.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76358" source="XF">opera-charencode-dos(76358)</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1200b/" source="CONFIRM" adv="1">http://www.opera.com/docs/changelogs/windows/1200b/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers num="11.62" />
-        <vers num="11.64" />
-        <vers prev="1" num="11.65" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3564" published="2012-06-14" name="CVE-2012-3564" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Opera before 12.00 Beta allows remote attackers to cause a denial of service (application hang) via an absolutely positioned wrap=off TEXTAREA element located next to an "overflow: auto" block element.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76359" source="XF">opera-wrapoff-dos(76359)</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1200b/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1200b/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers num="11.62" />
-        <vers num="11.64" />
-        <vers prev="1" num="11.65" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3565" published="2012-06-14" name="CVE-2012-3565" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via crafted characters in domain names, as demonstrated by "IDNA2008 tests."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76360" source="XF">opera-domainnames-dos(76360)</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1200b/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1200b/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers num="11.62" />
-        <vers num="11.64" />
-        <vers prev="1" num="11.65" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3566" published="2012-06-14" name="CVE-2012-3566" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service (application hang) via JavaScript code that changes a form before submission.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76361" source="XF">opera-form-dos(76361)</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1200b/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1200b/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers num="11.62" />
-        <vers num="11.64" />
-        <vers prev="1" num="11.65" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3567" published="2012-06-14" name="CVE-2012-3567" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Opera before 12.00 Beta allows remote attackers to cause a denial of service (memory consumption or application hang) via an IFRAME element that uses the src="#" syntax to embed a parent document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76362" source="XF">opera-iframesrc-dos(76362)</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1200b/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1200b/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers num="11.62" />
-        <vers num="11.64" />
-        <vers prev="1" num="11.65" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3568" published="2012-06-14" name="CVE-2012-3568" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via crafted WebGL content, as demonstrated by a codeflow.org WebGL demo.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76363" source="XF">opera-webgl-dos(76363)</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1200b/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1200b/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers num="11.62" />
-        <vers num="11.64" />
-        <vers prev="1" num="11.65" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3570" published="2012-07-25" name="CVE-2012-3570" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:A/AC:M/Au:N/C:N/I:N/A:C)" CVSS_score="5.7" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="5.5" CVSS_base_score="5.7">
-    <desc>
-      <descript source="cve">Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a denial of service (segmentation fault and daemon exit) via a crafted client identifier parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://kb.isc.org/article/AA-00714" source="CONFIRM" adv="1">https://kb.isc.org/article/AA-00714</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-08/msg00030.html" source="SUSE">openSUSE-SU-2012:1006</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="isc" name="dhcp">
-        <vers num="4.2.0" edition="a1" />
-        <vers num="4.2.0" edition="a2" />
-        <vers num="4.2.0" edition="b1" />
-        <vers num="4.2.0" edition="b2" />
-        <vers num="4.2.0" edition="p1" />
-        <vers num="4.2.0" edition="rc1" />
-        <vers num="4.2.1" edition="b1" />
-        <vers num="4.2.1" edition="rc1" />
-        <vers num="4.2.2" edition="b1" />
-        <vers num="4.2.2" edition="rc1" />
-        <vers num="4.2.3" edition="p1" />
-        <vers num="4.2.3" edition="p2" />
-        <vers num="4.2.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3571" published="2012-07-25" name="CVE-2012-3571" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="6.1" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="6.5" CVSS_base_score="6.1">
-    <desc>
-      <descript source="cve">ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed client identifier.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://kb.isc.org/article/AA-00712" source="CONFIRM" adv="1">https://kb.isc.org/article/AA-00712</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1519-1" source="UBUNTU">USN-1519-1</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2516" source="DEBIAN">DSA-2516</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1141.html" source="REDHAT">RHSA-2012:1141</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1140.html" source="REDHAT">RHSA-2012:1140</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-08/msg00030.html" source="SUSE">openSUSE-SU-2012:1006</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="isc" name="dhcp">
-        <vers num="4.1-esv" edition="r1" />
-        <vers num="4.1-esv" edition="r2" />
-        <vers num="4.1-esv" edition="r3" />
-        <vers num="4.1-esv" edition="r3_b1" />
-        <vers num="4.1-esv" edition="r4" />
-        <vers num="4.1-esv" edition="r5" />
-        <vers num="4.1-esv" edition="r5_b1" />
-        <vers num="4.1-esv" edition="r5_rc1" />
-        <vers num="4.1-esv" edition="r5_rc2" />
-        <vers num="4.1.2" />
-        <vers num="4.2.0" edition="a1" />
-        <vers num="4.2.0" edition="a2" />
-        <vers num="4.2.0" edition="b1" />
-        <vers num="4.2.0" edition="b2" />
-        <vers num="4.2.0" edition="p1" />
-        <vers num="4.2.0" edition="rc1" />
-        <vers num="4.2.1" edition="b1" />
-        <vers num="4.2.1" edition="rc1" />
-        <vers num="4.2.2" edition="b1" />
-        <vers num="4.2.2" edition="rc1" />
-        <vers num="4.2.3" edition="p1" />
-        <vers num="4.2.3" edition="p2" />
-        <vers num="4.2.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3572" published="2012-09-11" name="CVE-2012-3572" modified="2012-09-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">Open Source Competency Center (OSCC) MyMeeting 3.0.1 and earlier, and MyMesyuarat 09b-1, does not properly verify uploaded documents, which allows remote authenticated users to execute arbitrary PHP code via a crafted document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.mycert.org.my/en/services/advisories/mycert/2012/main/detail/904/index.html" source="MISC">http://www.mycert.org.my/en/services/advisories/mycert/2012/main/detail/904/index.html</ref>
-      <ref url="http://sourceforge.net/projects/mymesyuarat/files/mymesyuarat/mymesyuarat%20ver0.9b-2.zip/download" source="MISC">http://sourceforge.net/projects/mymesyuarat/files/mymesyuarat/mymesyuarat%20ver0.9b-2.zip/download</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nurul_hidayah_hamazulan" name="mymesyuarat">
-        <vers num="09b-1" />
-      </prod>
-      <prod vendor="oscc" name="mymeeting">
-        <vers prev="1" num="3.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3574" published="2012-06-15" name="CVE-2012-3574" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unrestricted file upload vulnerability in includes/doajaxfileupload.php in the MM Forms Community plugin 2.2.5 and 2.2.6 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/temp.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76133" source="XF">wp-mmforms-doajaxfileupload-file-upload(76133)</ref>
-      <ref url="http://www.securityfocus.com/bid/53852" source="BID">53852</ref>
-      <ref url="http://www.opensyscom.fr/Actualites/wordpress-plugins-mm-forms-community-shell-upload-vulnerability.html" source="MISC">http://www.opensyscom.fr/Actualites/wordpress-plugins-mm-forms-community-shell-upload-vulnerability.html</ref>
-      <ref url="http://www.exploit-db.com/exploits/18997" source="EXPLOIT-DB">18997</ref>
-      <ref url="http://secunia.com/advisories/49411" source="SECUNIA" adv="1">49411</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tbelmans" name="mm_forms_community">
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3575" published="2012-06-15" name="CVE-2012-3575" modified="2012-06-18" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/rbxslider.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76170" source="XF">rbxgallery-uploader-file-upload(76170)</ref>
-      <ref url="http://www.opensyscom.fr/Actualites/wordpress-plugins-rbx-gallery-multiple-arbitrary-file-upload-vulnerability.html" source="MISC">http://www.opensyscom.fr/Actualites/wordpress-plugins-rbx-gallery-multiple-arbitrary-file-upload-vulnerability.html</ref>
-      <ref url="http://www.exploit-db.com/exploits/19019" source="EXPLOIT-DB">19019</ref>
-      <ref url="http://secunia.com/advisories/49463" source="SECUNIA" adv="1">49463</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rbx_gallery" name="rbx_gallery">
-        <vers num="2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3576" published="2012-06-15" name="CVE-2012-3576" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76166" source="XF">wpstorecart-upload-file-upload(76166)</ref>
-      <ref url="http://www.exploit-db.com/exploits/19023" source="EXPLOIT-DB">19023</ref>
-      <ref url="http://wordpress.org/extend/plugins/wpstorecart/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/wpstorecart/changelog/</ref>
-      <ref url="http://secunia.com/advisories/49459" source="SECUNIA" adv="1">49459</ref>
-      <ref url="http://plugins.trac.wordpress.org/changeset?old_path=%2Fwpstorecart&amp;old=555124&amp;new_path=%2Fwpstorecart&amp;new=555124" source="CONFIRM">http://plugins.trac.wordpress.org/changeset?old_path=%2Fwpstorecart&amp;old=555124&amp;new_path=%2Fwpstorecart&amp;new=555124</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="jquindlen" name="wpstorecart">
-        <vers num="0.62" />
-        <vers num="1.0.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.7" />
-        <vers num="2.1.8" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" />
-        <vers num="2.2.5" />
-        <vers num="2.2.6" />
-        <vers num="2.2.7" />
-        <vers num="2.2.8" />
-        <vers num="2.2.9" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.10" />
-        <vers num="2.3.11" />
-        <vers num="2.3.12" />
-        <vers num="2.3.13" />
-        <vers num="2.3.14" />
-        <vers num="2.3.15" />
-        <vers num="2.3.16" />
-        <vers num="2.3.17" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers num="2.3.7" />
-        <vers num="2.3.8" />
-        <vers num="2.3.9" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.10" />
-        <vers num="2.4.11" />
-        <vers num="2.4.12" />
-        <vers num="2.4.13" />
-        <vers num="2.4.14" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers num="2.4.8" />
-        <vers num="2.4.9" />
-        <vers num="2.5.0" />
-        <vers num="2.5.1" />
-        <vers num="2.5.10" />
-        <vers num="2.5.11" />
-        <vers num="2.5.12" />
-        <vers num="2.5.13" />
-        <vers num="2.5.14" />
-        <vers num="2.5.15" />
-        <vers num="2.5.16" />
-        <vers num="2.5.17" />
-        <vers num="2.5.18" />
-        <vers num="2.5.19" />
-        <vers num="2.5.2" />
-        <vers num="2.5.20" />
-        <vers num="2.5.21" />
-        <vers num="2.5.22" />
-        <vers num="2.5.23" />
-        <vers num="2.5.24" />
-        <vers num="2.5.25" />
-        <vers num="2.5.26" />
-        <vers num="2.5.27" />
-        <vers num="2.5.28" />
-        <vers prev="1" num="2.5.29" />
-        <vers num="2.5.3" />
-        <vers num="2.5.4" />
-        <vers num="2.5.5" />
-        <vers num="2.5.6" />
-        <vers num="2.5.7" />
-        <vers num="2.5.8" />
-        <vers num="2.5.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3577" published="2012-06-16" name="CVE-2012-3577" modified="2012-06-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin before 1.4 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/uploads/user_uploads.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76076" source="XF">wp-nmedia-doupload-file-upload(76076)</ref>
-      <ref url="http://www.securityfocus.com/bid/53790" source="BID">53790</ref>
-      <ref url="http://www.opensyscom.fr/Actualites/wordpress-plugins-nmedia-wordpress-member-conversation-shell-upload-vulnerability.html" source="MISC">http://www.opensyscom.fr/Actualites/wordpress-plugins-nmedia-wordpress-member-conversation-shell-upload-vulnerability.html</ref>
-      <ref url="http://wordpress.org/extend/plugins/wordpress-member-private-conversation/changelog/" source="MISC">http://wordpress.org/extend/plugins/wordpress-member-private-conversation/changelog/</ref>
-      <ref url="http://secunia.com/advisories/49375" source="SECUNIA" adv="1">49375</ref>
-      <ref url="http://packetstormsecurity.org/files/113287/WordPress-Nmedia-WP-Member-Conversation-1.35.0-Shell-Upload.html" source="MISC">http://packetstormsecurity.org/files/113287/WordPress-Nmedia-WP-Member-Conversation-1.35.0-Shell-Upload.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nmedia" name="member_conversation">
-        <vers num="1.0" />
-        <vers num="1.2" />
-        <vers prev="1" num="1.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3578" published="2012-06-16" name="CVE-2012-3578" modified="2012-06-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Unrestricted file upload vulnerability in html/Upload.php in the FCChat Widget plugin 2.2.13.1 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in html/images.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76123" source="XF">wp-fcchatwidget-upload-file-upload(76123)</ref>
-      <ref url="http://www.securityfocus.com/bid/53855" source="BID">53855</ref>
-      <ref url="http://www.opensyscom.fr/Actualites/wordpress-plugins-fcchat-widget-shell-upload-vulnerability.html" source="MISC">http://www.opensyscom.fr/Actualites/wordpress-plugins-fcchat-widget-shell-upload-vulnerability.html</ref>
-      <ref url="http://secunia.com/advisories/49419" source="SECUNIA" adv="1">49419</ref>
-      <ref url="http://packetstormsecurity.org/files/113323/WordPress-FCChat-Widget-2.x-Shell-Upload.html" source="MISC">http://packetstormsecurity.org/files/113323/WordPress-FCChat-Widget-2.x-Shell-Upload.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wordpress" name="fcchat_widget">
-        <vers prev="1" num="2.2.13.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3579" published="2012-08-29" name="CVE-2012-3579" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:A/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="7.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="5.5" CVSS_base_score="7.9">
-    <desc>
-      <descript source="cve">Symantec Messaging Gateway before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120827_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120827_00</ref>
-      <ref url="http://www.securityfocus.com/bid/55143" source="BID">55143</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="messaging_gateway">
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-        <vers num="9.5.2" />
-        <vers num="9.5.3" />
-        <vers prev="1" num="9.5.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3580" published="2012-08-29" name="CVE-2012-3580" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="7.7" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="5.1" CVSS_base_score="7.7">
-    <desc>
-      <descript source="cve">Symantec Messaging Gateway before 10.0 allows remote authenticated users to modify the web application by leveraging access to the management interface.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120827_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120827_00</ref>
-      <ref url="http://www.securityfocus.com/bid/55141" source="BID">55141</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="messaging_gateway">
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-        <vers num="9.5.2" />
-        <vers num="9.5.3" />
-        <vers prev="1" num="9.5.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3581" published="2012-08-29" name="CVE-2012-3581" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">Symantec Messaging Gateway before 10.0 allows remote attackers to obtain potentially sensitive information about component versions via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120827_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120827_00</ref>
-      <ref url="http://www.securityfocus.com/bid/55142" source="BID">55142</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="messaging_gateway">
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-        <vers num="9.5.2" />
-        <vers num="9.5.3" />
-        <vers prev="1" num="9.5.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3582" published="2012-09-04" name="CVE-2012-3582" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:A/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="2.9" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="5.5" CVSS_base_score="2.9">
-    <desc>
-      <descript source="cve">Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests, which might allow remote attackers to read a private key in opportunistic circumstances by making a request near the end of a user's session.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120830_00" source="CONFIRM" adv="1">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120830_00</ref>
-      <ref url="http://www.securityfocus.com/bid/55246" source="BID">55246</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="pgp_universal_server">
-        <vers num="3.2.0" />
-        <vers num="3.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3585" published="2012-07-05" name="CVE-2012-3585" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attackers to execute arbitrary code via a crafted JLS file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.reactionpenetrationtesting.co.uk/Irfanview-JLS-Heap-Overflow.html" source="MISC">http://www.reactionpenetrationtesting.co.uk/Irfanview-JLS-Heap-Overflow.html</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-06/0191.html" source="BUGTRAQ">20120629 Irfanview Plugins JLS Decompression</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="irfanview" name="irfanview_plugins">
-        <vers prev="1" num="4.33" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3587" published="2012-06-19" name="CVE-2012-3587" modified="2012-06-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attackers to install Trojan horse packages via a man-in-the-middle (MITM) attack.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1013128" source="CONFIRM">https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1013128</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1477-1" source="UBUNTU">USN-1477-1</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1475-1" source="UBUNTU">USN-1475-1</ref>
-      <ref url="http://seclists.org/fulldisclosure/2012/Jun/267" source="FULLDISC">20120612 Strange gpg key shadowing</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="debian" name="apt">
-        <vers num="0.7.0" />
-        <vers num="0.7.1" />
-        <vers num="0.7.10" />
-        <vers num="0.7.11" />
-        <vers num="0.7.12" />
-        <vers num="0.7.13" />
-        <vers num="0.7.14" />
-        <vers num="0.7.15" edition="exp1" />
-        <vers num="0.7.15" edition="exp2" />
-        <vers num="0.7.15" edition="exp3" />
-        <vers num="0.7.16" />
-        <vers num="0.7.17" edition="exp1" />
-        <vers num="0.7.17" edition="exp2" />
-        <vers num="0.7.17" edition="exp3" />
-        <vers num="0.7.17" edition="exp4" />
-        <vers num="0.7.18" />
-        <vers num="0.7.19" />
-        <vers num="0.7.2" />
-        <vers num="0.7.2-0.1" />
-        <vers num="0.7.20" />
-        <vers num="0.7.20.1" />
-        <vers num="0.7.20.2" />
-        <vers num="0.7.21" />
-        <vers num="0.7.22" />
-        <vers num="0.7.22.1" />
-        <vers num="0.7.22.2" />
-        <vers num="0.7.23" />
-        <vers num="0.7.23.1" />
-        <vers num="0.7.24" />
-        <vers num="0.8.0" edition="pre1" />
-        <vers num="0.8.0" edition="pre2" />
-        <vers num="0.8.1" />
-        <vers num="0.8.10" />
-        <vers num="0.8.10.1" />
-        <vers num="0.8.10.2" />
-        <vers num="0.8.10.3" />
-        <vers num="0.8.11" />
-        <vers num="0.8.11.1" />
-        <vers num="0.8.11.2" />
-        <vers num="0.8.11.3" />
-        <vers num="0.8.11.4" />
-        <vers num="0.8.11.5" />
-        <vers num="0.8.12" />
-        <vers num="0.8.13" />
-        <vers num="0.8.13.1" />
-        <vers num="0.8.13.2" />
-        <vers num="0.8.14" />
-        <vers num="0.8.14.1" />
-        <vers num="0.8.15" edition="exp1" />
-        <vers num="0.8.15" edition="exp2" />
-        <vers num="0.8.15" edition="exp3" />
-        <vers num="0.8.15.1" />
-        <vers num="0.8.15.10" />
-        <vers num="0.8.15.6" />
-        <vers num="0.8.15.7" />
-        <vers num="0.8.15.8" />
-        <vers num="0.8.15.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3588" published="2012-06-19" name="CVE-2012-3588" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the data parameter.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76171" source="XF">newsletter-preview-file-disclosure(76171)</ref>
-      <ref url="http://www.opensyscom.fr/Actualites/wordpress-plugins-plugin-newsletter-remote-file-disclosure-vulnerability.html" source="MISC">http://www.opensyscom.fr/Actualites/wordpress-plugins-plugin-newsletter-remote-file-disclosure-vulnerability.html</ref>
-      <ref url="http://www.exploit-db.com/exploits/19018" source="EXPLOIT-DB">19018</ref>
-      <ref url="http://secunia.com/advisories/49464" source="SECUNIA" adv="1">49464</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wordpress" name="plugin_newsletter_plugin">
-        <vers num="1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3589" published="2012-07-25" name="CVE-2012-3589" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3590" published="2012-07-25" name="CVE-2012-3590" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:N)" CVSS_score="8.8" CVSS_impact_subscore="9.2" CVSS_exploit_subscore="8.6" CVSS_base_score="8.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3591" published="2012-07-25" name="CVE-2012-3591" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3592" published="2012-07-25" name="CVE-2012-3592" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3593" published="2012-07-25" name="CVE-2012-3593" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3594" published="2012-07-25" name="CVE-2012-3594" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3595" published="2012-07-25" name="CVE-2012-3595" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3596" published="2012-07-25" name="CVE-2012-3596" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3597" published="2012-07-25" name="CVE-2012-3597" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3598" published="2012-09-13" name="CVE-2012-3598" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3599" published="2012-07-25" name="CVE-2012-3599" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3600" published="2012-07-25" name="CVE-2012-3600" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3601" published="2012-09-13" name="CVE-2012-3601" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3602" published="2012-09-13" name="CVE-2012-3602" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3603" published="2012-07-25" name="CVE-2012-3603" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3604" published="2012-07-25" name="CVE-2012-3604" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3605" published="2012-07-25" name="CVE-2012-3605" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3606" published="2012-09-13" name="CVE-2012-3606" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3607" published="2012-09-13" name="CVE-2012-3607" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3608" published="2012-07-25" name="CVE-2012-3608" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3609" published="2012-07-25" name="CVE-2012-3609" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3610" published="2012-07-25" name="CVE-2012-3610" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3611" published="2012-07-25" name="CVE-2012-3611" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3612" published="2012-09-13" name="CVE-2012-3612" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3613" published="2012-09-13" name="CVE-2012-3613" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3614" published="2012-09-13" name="CVE-2012-3614" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3615" published="2012-07-25" name="CVE-2012-3615" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3616" published="2012-09-13" name="CVE-2012-3616" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3617" published="2012-09-13" name="CVE-2012-3617" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3618" published="2012-07-25" name="CVE-2012-3618" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3620" published="2012-07-25" name="CVE-2012-3620" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3621" published="2012-09-13" name="CVE-2012-3621" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3622" published="2012-09-13" name="CVE-2012-3622" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3623" published="2012-09-13" name="CVE-2012-3623" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3624" published="2012-09-13" name="CVE-2012-3624" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3625" published="2012-07-25" name="CVE-2012-3625" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3626" published="2012-07-25" name="CVE-2012-3626" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3627" published="2012-07-25" name="CVE-2012-3627" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3628" published="2012-07-25" name="CVE-2012-3628" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3629" published="2012-07-25" name="CVE-2012-3629" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3630" published="2012-07-25" name="CVE-2012-3630" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3631" published="2012-07-25" name="CVE-2012-3631" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3632" published="2012-09-13" name="CVE-2012-3632" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3633" published="2012-07-25" name="CVE-2012-3633" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3634" published="2012-07-25" name="CVE-2012-3634" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3635" published="2012-07-25" name="CVE-2012-3635" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3636" published="2012-07-25" name="CVE-2012-3636" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3637" published="2012-07-25" name="CVE-2012-3637" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3638" published="2012-07-25" name="CVE-2012-3638" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3639" published="2012-07-25" name="CVE-2012-3639" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3640" published="2012-07-25" name="CVE-2012-3640" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3641" published="2012-07-25" name="CVE-2012-3641" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3642" published="2012-07-25" name="CVE-2012-3642" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3643" published="2012-09-13" name="CVE-2012-3643" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3644" published="2012-07-25" name="CVE-2012-3644" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3645" published="2012-07-25" name="CVE-2012-3645" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3646" published="2012-07-25" name="CVE-2012-3646" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3647" published="2012-09-13" name="CVE-2012-3647" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3648" published="2012-09-13" name="CVE-2012-3648" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3649" published="2012-09-13" name="CVE-2012-3649" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3650" published="2012-07-25" name="CVE-2012-3650" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">WebKit in Apple Safari before 6.0 accesses uninitialized memory locations during the rendering of SVG images, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3651" published="2012-09-13" name="CVE-2012-3651" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3652" published="2012-09-13" name="CVE-2012-3652" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3653" published="2012-07-25" name="CVE-2012-3653" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3654" published="2012-09-13" name="CVE-2012-3654" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3655" published="2012-07-25" name="CVE-2012-3655" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3656" published="2012-07-25" name="CVE-2012-3656" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3657" published="2012-09-13" name="CVE-2012-3657" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3658" published="2012-09-13" name="CVE-2012-3658" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3659" published="2012-09-13" name="CVE-2012-3659" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3660" published="2012-09-13" name="CVE-2012-3660" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3661" published="2012-07-25" name="CVE-2012-3661" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3663" published="2012-07-25" name="CVE-2012-3663" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3664" published="2012-07-25" name="CVE-2012-3664" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3665" published="2012-07-25" name="CVE-2012-3665" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3666" published="2012-07-25" name="CVE-2012-3666" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3667" published="2012-07-25" name="CVE-2012-3667" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3668" published="2012-07-25" name="CVE-2012-3668" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3669" published="2012-07-25" name="CVE-2012-3669" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3670" published="2012-07-25" name="CVE-2012-3670" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3671" published="2012-09-13" name="CVE-2012-3671" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3672" published="2012-09-13" name="CVE-2012-3672" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3673" published="2012-09-13" name="CVE-2012-3673" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3674" published="2012-07-25" name="CVE-2012-3674" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3675" published="2012-09-13" name="CVE-2012-3675" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3676" published="2012-09-13" name="CVE-2012-3676" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3677" published="2012-09-13" name="CVE-2012-3677" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3678" published="2012-07-25" name="CVE-2012-3678" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3679" published="2012-07-25" name="CVE-2012-3679" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3680" published="2012-07-25" name="CVE-2012-3680" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3681" published="2012-07-25" name="CVE-2012-3681" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3682" published="2012-07-25" name="CVE-2012-3682" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3683" published="2012-07-25" name="CVE-2012-3683" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3684" published="2012-09-13" name="CVE-2012-3684" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3685" published="2012-09-13" name="CVE-2012-3685" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3686" published="2012-07-25" name="CVE-2012-3686" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE">APPLE-SA-2012-09-12-1</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3687" published="2012-09-13" name="CVE-2012-3687" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3688" published="2012-09-13" name="CVE-2012-3688" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3689" published="2012-07-25" name="CVE-2012-3689" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3690" published="2012-07-25" name="CVE-2012-3690" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to read arbitrary files via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3691" published="2012-07-25" name="CVE-2012-3691" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">WebKit in Apple Safari before 6.0 does not properly handle Cascading Style Sheets (CSS) property values, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3692" published="2012-09-13" name="CVE-2012-3692" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3693" published="2012-07-25" name="CVE-2012-3693" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, by leveraging the availability of IDN support and Unicode fonts to construct unspecified homoglyphs.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/184.html
-
-'CWE-184: Incomplete Blacklist'</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3694" published="2012-07-25" name="CVE-2012-3694" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to obtain sensitive information about full pathnames via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3695" published="2012-07-25" name="CVE-2012-3695" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to inject arbitrary web script or HTML by leveraging improper URL canonicalization during the handling of the location.href property.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3696" published="2012-07-25" name="CVE-2012-3696" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">CRLF injection vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP request splitting attacks via a crafted web site that leverages improper WebSockets URI handling.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3697" published="2012-07-25" name="CVE-2012-3697" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:N/A:N)" CVSS_score="7.1" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="8.6" CVSS_base_score="7.1">
-    <desc>
-      <descript source="cve">WebKit in Apple Safari before 6.0 does not properly handle file: URLs, which allows remote attackers to bypass intended sandbox restrictions and read arbitrary files by leveraging a WebProcess compromise.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5400" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5400</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="safari">
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0" edition="beta2" />
-        <vers num="1.0.0" />
-        <vers num="1.0.0b1" />
-        <vers num="1.0.0b2" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" edition="85.8" />
-        <vers num="1.0.3" edition="85.8.1" />
-        <vers num="1.0b1" edition="-" />
-        <vers num="1.0b1" edition="-:mac" />
-        <vers num="1.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.3" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" edition="312.5" />
-        <vers num="1.3.2" edition="312.6" />
-        <vers num="2" />
-        <vers num="2.0" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" edition="417.8" />
-        <vers num="2.0.3" edition="417.9" />
-        <vers num="2.0.3" edition="417.9.2" />
-        <vers num="2.0.3" edition="417.9.3" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:mac" />
-        <vers num="3" />
-        <vers num="3.0" />
-        <vers num="3.0.0" edition="-" />
-        <vers num="3.0.0" edition="-:mac" />
-        <vers num="3.0.0b" edition="-" />
-        <vers num="3.0.0b" edition="-:windows" />
-        <vers num="3.0.1" edition="-" />
-        <vers num="3.0.1" edition="-:mac" />
-        <vers num="3.0.1" edition="beta" />
-        <vers num="3.0.1b" edition="-" />
-        <vers num="3.0.1b" edition="-:windows" />
-        <vers num="3.0.2" edition="-" />
-        <vers num="3.0.2" edition="-:mac" />
-        <vers num="3.0.2b" edition="-" />
-        <vers num="3.0.2b" edition="-:windows" />
-        <vers num="3.0.3" edition="-" />
-        <vers num="3.0.3" edition="-:mac" />
-        <vers num="3.0.3b" edition="-" />
-        <vers num="3.0.3b" edition="-:windows" />
-        <vers num="3.0.4" edition="-" />
-        <vers num="3.0.4" edition="-:mac" />
-        <vers num="3.0.4b" edition="-" />
-        <vers num="3.0.4b" edition="-:windows" />
-        <vers num="3.1.0" edition="-" />
-        <vers num="3.1.0" edition="-:mac" />
-        <vers num="3.1.0b" edition="-" />
-        <vers num="3.1.0b" edition="-:windows" />
-        <vers num="3.1.1" />
-        <vers num="3.1.1b" edition="-" />
-        <vers num="3.1.1b" edition="-:windows" />
-        <vers num="3.1.2" />
-        <vers num="3.1.2b" edition="-" />
-        <vers num="3.1.2b" edition="-:windows" />
-        <vers num="3.2.0" />
-        <vers num="3.2.0b" edition="-" />
-        <vers num="3.2.0b" edition="-:windows" />
-        <vers num="3.2.1" />
-        <vers num="3.2.1b" edition="-" />
-        <vers num="3.2.1b" edition="-:windows" />
-        <vers num="3.2.2" />
-        <vers num="3.2.2b" edition="-" />
-        <vers num="3.2.2b" edition="-:windows" />
-        <vers num="4.0" edition="beta" />
-        <vers num="4.0.0b" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.0.2" />
-        <vers num="5.0.4" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.1" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="5.1.3" />
-        <vers num="5.1.4" />
-        <vers num="5.1.5" />
-        <vers num="5.1.6" />
-        <vers prev="1" num="5.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3698" published="2012-07-26" name="CVE-2012-3698" modified="2012-07-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Apple Xcode before 4.4 does not properly compose a designated requirement (DR) during signing of programs that lack bundle identifiers, which allows remote attackers to read keychain entries via a crafted app, as demonstrated by the keychain entries of a (1) helper tool or (2) command-line tool.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Jul/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-07-25-2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="xcode">
-        <vers num="1.5.0" />
-        <vers num="2.0.0" />
-        <vers num="2.1.0" />
-        <vers num="2.2.0" />
-        <vers num="2.3.0" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="3.2.5" />
-        <vers num="4.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.1.1" />
-        <vers num="4.2" />
-        <vers num="4.2.1" />
-        <vers num="4.3" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers prev="1" num="4.3.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3699" published="2012-09-13" name="CVE-2012-3699" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3700" published="2012-09-13" name="CVE-2012-3700" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3701" published="2012-09-13" name="CVE-2012-3701" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3702" published="2012-09-13" name="CVE-2012-3702" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3703" published="2012-09-13" name="CVE-2012-3703" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:C)" CVSS_score="8.3" CVSS_impact_subscore="8.5" CVSS_exploit_subscore="8.6" CVSS_base_score="8.3">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3704" published="2012-09-13" name="CVE-2012-3704" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3705" published="2012-09-13" name="CVE-2012-3705" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3706" published="2012-09-13" name="CVE-2012-3706" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3707" published="2012-09-13" name="CVE-2012-3707" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3708" published="2012-09-13" name="CVE-2012-3708" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3709" published="2012-09-13" name="CVE-2012-3709" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3710" published="2012-09-13" name="CVE-2012-3710" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3711" published="2012-09-13" name="CVE-2012-3711" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3712" published="2012-09-13" name="CVE-2012-3712" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://support.apple.com/kb/HT5485" source="CONFIRM" adv="1">http://support.apple.com/kb/HT5485</ref>
-      <ref url="http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html" source="APPLE" adv="1">APPLE-SA-2012-09-12-1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="itunes">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.1.4" />
-        <vers num="10.1.2" />
-        <vers num="10.2" />
-        <vers num="10.2.2.12" />
-        <vers num="10.3" />
-        <vers num="10.3.1" />
-        <vers num="10.4" />
-        <vers num="10.4.0.80" />
-        <vers num="10.4.1" />
-        <vers num="10.4.1.10" />
-        <vers num="10.5" />
-        <vers num="10.5.1" />
-        <vers num="10.5.1.42" />
-        <vers num="10.5.2" />
-        <vers num="10.5.3" />
-        <vers num="10.6" />
-        <vers num="10.6.1" />
-        <vers prev="1" num="10.6.3" />
-        <vers num="4.0.0" edition="-" />
-        <vers num="4.0.0" edition="-:windows" />
-        <vers num="4.0.1" edition="-" />
-        <vers num="4.0.1" edition="-:windows" />
-        <vers num="4.1.0" edition="-" />
-        <vers num="4.1.0" edition="-:windows" />
-        <vers num="4.2.0" edition="-" />
-        <vers num="4.2.0" edition="-:windows" />
-        <vers num="4.5" edition="" />
-        <vers num="4.5" edition=":windows" />
-        <vers num="4.5.0" edition="-" />
-        <vers num="4.5.0" edition="-:windows" />
-        <vers num="4.6" edition="" />
-        <vers num="4.6" edition=":windows" />
-        <vers num="4.6.0" edition="-" />
-        <vers num="4.6.0" edition="-:windows" />
-        <vers num="4.7" edition="" />
-        <vers num="4.7" edition=":windows" />
-        <vers num="4.7.0" edition="-" />
-        <vers num="4.7.0" edition="-:windows" />
-        <vers num="4.7.1" edition="" />
-        <vers num="4.7.1" edition=":windows" />
-        <vers num="4.7.1" edition="-" />
-        <vers num="4.7.1" edition="-:windows" />
-        <vers num="4.7.2" />
-        <vers num="4.8.0" edition="-" />
-        <vers num="4.8.0" edition="-:windows" />
-        <vers num="4.9.0" edition="-" />
-        <vers num="4.9.0" edition="-:windows" />
-        <vers num="5.0" edition="" />
-        <vers num="5.0" edition=":windows" />
-        <vers num="5.0.0" edition="-" />
-        <vers num="5.0.0" edition="-:windows" />
-        <vers num="5.0.1" edition="-" />
-        <vers num="5.0.1" edition="-:windows" />
-        <vers num="6.0.0" edition="-" />
-        <vers num="6.0.0" edition="-:windows" />
-        <vers num="6.0.1" edition="" />
-        <vers num="6.0.1" edition=":windows" />
-        <vers num="6.0.1" edition="-" />
-        <vers num="6.0.1" edition="-:windows" />
-        <vers num="6.0.2" edition="" />
-        <vers num="6.0.2" edition=":windows" />
-        <vers num="6.0.2" edition="-" />
-        <vers num="6.0.2" edition="-:windows" />
-        <vers num="6.0.3" edition="-" />
-        <vers num="6.0.3" edition="-:windows" />
-        <vers num="6.0.4" edition="" />
-        <vers num="6.0.4" edition=":windows" />
-        <vers num="6.0.4" edition="-" />
-        <vers num="6.0.4" edition="-:windows" />
-        <vers num="6.0.5" edition="-" />
-        <vers num="6.0.5" edition="-:windows" />
-        <vers num="7.0.0" edition="-" />
-        <vers num="7.0.0" edition="-:windows" />
-        <vers num="7.0.1" edition="-" />
-        <vers num="7.0.1" edition="-:windows" />
-        <vers num="7.0.2" edition="" />
-        <vers num="7.0.2" edition=":windows" />
-        <vers num="7.0.2" edition="-" />
-        <vers num="7.0.2" edition="-:windows" />
-        <vers num="7.1.0" edition="-" />
-        <vers num="7.1.0" edition="-:windows" />
-        <vers num="7.1.1" edition="-" />
-        <vers num="7.1.1" edition="-:windows" />
-        <vers num="7.2.0" edition="-" />
-        <vers num="7.2.0" edition="-:windows" />
-        <vers num="7.3.0" edition="-" />
-        <vers num="7.3.0" edition="-:windows" />
-        <vers num="7.3.1" edition="-" />
-        <vers num="7.3.1" edition="-:windows" />
-        <vers num="7.3.2" edition="" />
-        <vers num="7.3.2" edition=":windows" />
-        <vers num="7.3.2" edition="-" />
-        <vers num="7.3.2" edition="-:windows" />
-        <vers num="7.4" edition="" />
-        <vers num="7.4" edition=":windows" />
-        <vers num="7.4.0" edition="-" />
-        <vers num="7.4.0" edition="-:windows" />
-        <vers num="7.4.1" edition="" />
-        <vers num="7.4.1" edition=":windows" />
-        <vers num="7.4.1" edition="-" />
-        <vers num="7.4.1" edition="-:windows" />
-        <vers num="7.4.2" edition="" />
-        <vers num="7.4.2" edition=":windows" />
-        <vers num="7.4.2" edition="-" />
-        <vers num="7.4.2" edition="-:windows" />
-        <vers num="7.4.3" edition="" />
-        <vers num="7.4.3" edition=":windows" />
-        <vers num="7.5" edition="" />
-        <vers num="7.5" edition=":windows" />
-        <vers num="7.5.0" edition="-" />
-        <vers num="7.5.0" edition="-:windows" />
-        <vers num="7.6" />
-        <vers num="7.6.0" edition="-" />
-        <vers num="7.6.0" edition="-:windows" />
-        <vers num="7.6.1" edition="" />
-        <vers num="7.6.1" edition=":windows" />
-        <vers num="7.6.1" edition="-" />
-        <vers num="7.6.1" edition="-:windows" />
-        <vers num="7.6.2" edition="-" />
-        <vers num="7.6.2" edition="-:windows" />
-        <vers num="7.7" />
-        <vers num="7.7.0" edition="-" />
-        <vers num="7.7.0" edition="-:windows" />
-        <vers num="7.7.1" edition="" />
-        <vers num="7.7.1" edition=":windows" />
-        <vers num="7.7.1" edition="-" />
-        <vers num="7.7.1" edition="-:windows" />
-        <vers num="8.0.0" edition="-" />
-        <vers num="8.0.0" edition="-:windows" />
-        <vers num="8.0.1" edition="-" />
-        <vers num="8.0.1" edition="-:windows" />
-        <vers num="9.0.0" />
-        <vers num="9.0.1" />
-        <vers num="9.0.2" />
-        <vers num="9.0.3" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.2" />
-        <vers num="9.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3789" published="2012-08-06" name="CVE-2012-3789" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.7rc3, 0.5.x before 0.5.6rc3, 0.6.0.x before 0.6.0.9rc1, and 0.6.x before 0.6.3rc1 allows remote attackers to cause a denial of service (process hang) via unknown behavior on a Bitcoin network.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://en.bitcoin.it/wiki/CVEs" source="CONFIRM" adv="1">https://en.bitcoin.it/wiki/CVEs</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bitcoin" name="bitcoin-qt">
-        <vers num="0.4.0" />
-        <vers num="0.4.1" edition="rc6" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" edition="rc2" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" edition="rc2" />
-        <vers num="0.5.0" edition="rc" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.3.1" />
-        <vers num="0.5.4" />
-        <vers num="0.5.5" />
-        <vers prev="1" num="0.5.6" edition="rc2" />
-        <vers num="0.6.0" edition="rc1" />
-        <vers num="0.6.0" edition="rc3" />
-        <vers num="0.6.0.1" />
-        <vers num="0.6.0.2" />
-        <vers num="0.6.0.3" />
-        <vers num="0.6.0.4" />
-        <vers num="0.6.0.5" />
-        <vers num="0.6.0.6" />
-        <vers num="0.6.0.7" />
-        <vers num="0.6.0.8" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-      </prod>
-      <prod vendor="bitcoin" name="bitcoind">
-        <vers num="0.4.0" />
-        <vers num="0.4.1" edition="rc6" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" edition="rc2" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" edition="rc2" />
-        <vers num="0.5.0" edition="rc" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.3.1" />
-        <vers num="0.5.4" />
-        <vers num="0.5.5" />
-        <vers num="0.5.6" edition="rc2" />
-        <vers num="0.6.0" edition="rc1" />
-        <vers num="0.6.0" edition="rc3" />
-        <vers num="0.6.0.1" />
-        <vers num="0.6.0.2" />
-        <vers num="0.6.0.3" />
-        <vers num="0.6.0.4" />
-        <vers num="0.6.0.5" />
-        <vers num="0.6.0.6" />
-        <vers num="0.6.0.7" />
-        <vers num="0.6.0.8" />
-        <vers num="0.6.1" />
-        <vers num="0.6.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3790" published="2012-06-20" name="CVE-2012-3790" modified="2012-06-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in index.php in Adiscon LogAnalyzer before 3.4.4 and 3.5.x before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter in a Search action.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://loganalyzer.adiscon.com/downloads/loganalyzer-v3-5-5-v3-beta" source="CONFIRM" patch="1">http://loganalyzer.adiscon.com/downloads/loganalyzer-v3-5-5-v3-beta</ref>
-      <ref url="http://loganalyzer.adiscon.com/downloads/loganalyzer-3-4-4-v3-stable" source="CONFIRM" patch="1">http://loganalyzer.adiscon.com/downloads/loganalyzer-3-4-4-v3-stable</ref>
-      <ref url="http://secpod.org/blog/?p=504" source="MISC">http://secpod.org/blog/?p=504</ref>
-      <ref url="http://secpod.org/advisories/SecPod_LogAnalyzer_XSS_Vuln.txt" source="MISC">http://secpod.org/advisories/SecPod_LogAnalyzer_XSS_Vuln.txt</ref>
-      <ref url="http://loganalyzer.adiscon.com/security-advisories/loganalyzer-cross-site-scripting-vulnerability-in-highlight-parameter" source="CONFIRM" adv="1">http://loganalyzer.adiscon.com/security-advisories/loganalyzer-cross-site-scripting-vulnerability-in-highlight-parameter</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adiscon" name="loganalyzer">
-        <vers num="3.2.0" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.3.0" />
-        <vers num="3.4.0" />
-        <vers num="3.4.1" />
-        <vers num="3.4.2" />
-        <vers prev="1" num="3.4.3" />
-        <vers num="3.5.0" />
-        <vers num="3.5.1" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3791" published="2012-06-21" name="CVE-2012-3791" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in Simple Web Content Management System 1.1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) item_delete.php, (2) item_status.php, (3) item_detail.php, (4) item_modify.php, or (5) item_position.php in admin/; or (6) status parameter to admin/item_status.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75999" source="XF">swcms-multiple-sql-injection(75999)</ref>
-      <ref url="http://www.securityfocus.com/bid/53749" source="BID">53749</ref>
-      <ref url="http://www.exploit-db.com/exploits/18955" source="EXPLOIT-DB">18955</ref>
-      <ref url="http://osvdb.org/82414" source="OSVDB">82414</ref>
-      <ref url="http://osvdb.org/82413" source="OSVDB">82413</ref>
-      <ref url="http://osvdb.org/82412" source="OSVDB">82412</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cms-center" name="simple_web_content_management_system">
-        <vers num="1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3792" published="2012-06-25" name="CVE-2012-3792" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service (out-of-bounds read operation) via a crafted packet that triggers a certain Find Node check attempt.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.hmisource.com/otasuke/news/2012/0606.html" source="CONFIRM" adv="1">https://www.hmisource.com/otasuke/news/2012/0606.html</ref>
-      <ref url="https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt" source="CONFIRM">https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt</ref>
-      <ref url="http://www.securityfocus.com/bid/53499" source="BID">53499</ref>
-      <ref url="http://secunia.com/advisories/49172" source="SECUNIA">49172</ref>
-      <ref url="http://aluigi.org/adv/proservrex_1-adv.txt" source="MISC">http://aluigi.org/adv/proservrex_1-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pro-face" name="pro-server_ex">
-        <vers num="1.21.000" />
-        <vers num="1.23.000" />
-        <vers num="1.24.200" />
-        <vers prev="1" num="1.30.000" />
-      </prod>
-      <prod vendor="pro-face" name="wingp_pc_runtime">
-        <vers prev="1" num="3.1.00" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3793" published="2012-06-25" name="CVE-2012-3793" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Integer overflow in Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service (daemon crash) via a crafted packet with a certain opcode that triggers an incorrect memory allocation and a buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.hmisource.com/otasuke/news/2012/0606.html" source="CONFIRM" adv="1">https://www.hmisource.com/otasuke/news/2012/0606.html</ref>
-      <ref url="https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt" source="CONFIRM">https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75547" source="XF">proserverex-overflow-dos(75547)</ref>
-      <ref url="http://www.securityfocus.com/bid/53499" source="BID">53499</ref>
-      <ref url="http://secunia.com/advisories/49172" source="SECUNIA">49172</ref>
-      <ref url="http://aluigi.org/adv/proservrex_1-adv.txt" source="MISC">http://aluigi.org/adv/proservrex_1-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pro-face" name="pro-server_ex">
-        <vers num="1.21.000" />
-        <vers num="1.23.000" />
-        <vers num="1.24.200" />
-        <vers prev="1" num="1.30.000" />
-      </prod>
-      <prod vendor="pro-face" name="wingp_pc_runtime">
-        <vers prev="1" num="3.1.00" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3794" published="2012-06-25" name="CVE-2012-3794" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service (unhandled exception and daemon crash) via a crafted packet with a certain opcode that triggers an invalid attempt to allocate a large amount of memory.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.hmisource.com/otasuke/news/2012/0606.html" source="CONFIRM" adv="1">https://www.hmisource.com/otasuke/news/2012/0606.html</ref>
-      <ref url="https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt" source="CONFIRM">https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75551" source="XF">proserverex-exception-dos(75551)</ref>
-      <ref url="http://www.securityfocus.com/bid/53499" source="BID">53499</ref>
-      <ref url="http://secunia.com/advisories/49172" source="SECUNIA">49172</ref>
-      <ref url="http://aluigi.org/adv/proservrex_1-adv.txt" source="MISC">http://aluigi.org/adv/proservrex_1-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pro-face" name="pro-server_ex">
-        <vers num="1.21.000" />
-        <vers num="1.23.000" />
-        <vers num="1.24.200" />
-        <vers prev="1" num="1.30.000" />
-      </prod>
-      <prod vendor="pro-face" name="wingp_pc_runtime">
-        <vers prev="1" num="3.1.00" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3795" published="2012-06-25" name="CVE-2012-3795" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service (daemon crash) via a crafted packet with a certain opcode and a large value in a size field.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.hmisource.com/otasuke/news/2012/0606.html" source="CONFIRM" adv="1">https://www.hmisource.com/otasuke/news/2012/0606.html</ref>
-      <ref url="https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt" source="CONFIRM">https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt</ref>
-      <ref url="http://www.securityfocus.com/bid/53499" source="BID">53499</ref>
-      <ref url="http://secunia.com/advisories/49172" source="SECUNIA">49172</ref>
-      <ref url="http://aluigi.org/adv/proservrex_1-adv.txt" source="MISC">http://aluigi.org/adv/proservrex_1-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pro-face" name="pro-server_ex">
-        <vers num="1.21.000" />
-        <vers num="1.23.000" />
-        <vers num="1.24.200" />
-        <vers prev="1" num="1.30.000" />
-      </prod>
-      <prod vendor="pro-face" name="wingp_pc_runtime">
-        <vers prev="1" num="3.1.00" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3796" published="2012-06-25" name="CVE-2012-3796" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to obtain sensitive information from daemon memory via a crafted packet with a certain opcode.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.hmisource.com/otasuke/news/2012/0606.html" source="CONFIRM" adv="1">https://www.hmisource.com/otasuke/news/2012/0606.html</ref>
-      <ref url="https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt" source="CONFIRM">https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt</ref>
-      <ref url="http://www.securityfocus.com/bid/53499" source="BID">53499</ref>
-      <ref url="http://secunia.com/advisories/49172" source="SECUNIA">49172</ref>
-      <ref url="http://aluigi.org/adv/proservrex_1-adv.txt" source="MISC">http://aluigi.org/adv/proservrex_1-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pro-face" name="pro-server_ex">
-        <vers num="1.21.000" />
-        <vers num="1.23.000" />
-        <vers num="1.24.200" />
-        <vers prev="1" num="1.30.000" />
-      </prod>
-      <prod vendor="pro-face" name="wingp_pc_runtime">
-        <vers prev="1" num="3.1.00" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3797" published="2012-06-25" name="CVE-2012-3797" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, does not properly check packet sizes before reusing packet memory buffers, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a short crafted packet with a certain opcode.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.hmisource.com/otasuke/news/2012/0606.html" source="CONFIRM" adv="1">https://www.hmisource.com/otasuke/news/2012/0606.html</ref>
-      <ref url="https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt" source="CONFIRM">https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt</ref>
-      <ref url="http://www.securityfocus.com/bid/53499" source="BID">53499</ref>
-      <ref url="http://secunia.com/advisories/49172" source="SECUNIA">49172</ref>
-      <ref url="http://aluigi.org/adv/proservrex_1-adv.txt" source="MISC">http://aluigi.org/adv/proservrex_1-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pro-face" name="pro-server_ex">
-        <vers num="1.21.000" />
-        <vers num="1.23.000" />
-        <vers num="1.24.200" />
-        <vers prev="1" num="1.30.000" />
-      </prod>
-      <prod vendor="pro-face" name="wingp_pc_runtime">
-        <vers prev="1" num="3.1.00" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3798" published="2012-06-26" name="CVE-2012-3798" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when creating a local user account, allows attackers to obtain part of the initial input used to generate passwords, which makes it easier to conduct brute force password guessing attacks.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1632734" source="MISC" patch="1" adv="1">http://drupal.org/node/1632734</ref>
-      <ref url="http://drupal.org/node/1632704" source="MISC" patch="1">http://drupal.org/node/1632704</ref>
-      <ref url="http://drupal.org/node/1632702" source="MISC" patch="1">http://drupal.org/node/1632702</ref>
-      <ref url="http://osvdb.org/82957" source="OSVDB">82957</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bryce_hamrick" name="janrain_capture">
-        <vers num="6.x-1.0" />
-        <vers num="7.x-1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3799" published="2012-06-26" name="CVE-2012-3799" modified="2012-06-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="5.1" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="4.9" CVSS_base_score="5.1">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) change workflows or (2) insert cross-site scripting (XSS) sequences.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/maestro.git/commitdiff/c499971" source="CONFIRM" patch="1">http://drupalcode.org/project/maestro.git/commitdiff/c499971</ref>
-      <ref url="http://drupal.org/node/1619830" source="MISC" patch="1" adv="1">http://drupal.org/node/1619830</ref>
-      <ref url="http://drupal.org/node/1617952" source="CONFIRM" patch="1">http://drupal.org/node/1617952</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76146" source="XF">maestro-unspecified-csrf(76146)</ref>
-      <ref url="http://www.securityfocus.com/bid/53836" source="BID">53836</ref>
-      <ref url="http://www.osvdb.org/82714" source="OSVDB">82714</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49393" source="SECUNIA" adv="1">49393</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="blaine_lang" name="maestro">
-        <vers num="7.x-1.0" edition="alpha1" />
-        <vers num="7.x-1.0" edition="alpha2" />
-        <vers num="7.x-1.0" edition="alpha3" />
-        <vers num="7.x-1.0" edition="rc1" />
-        <vers num="7.x-1.1" />
-        <vers num="7.x-1.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3800" published="2012-06-26" name="CVE-2012-3800" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in og.js in the Organic Groups (OG) module 6.x-2.x before 6.x-2.4 for Drupal, when used with the Vertical Tabs module, allows remote authenticated users to inject arbitrary web script or HTML via vectors related the group title.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://drupalcode.org/project/og.git/commitdiff/d48fef5" source="CONFIRM" patch="1">http://drupalcode.org/project/og.git/commitdiff/d48fef5</ref>
-      <ref url="http://drupal.org/node/1619810" source="MISC" patch="1" adv="1">http://drupal.org/node/1619810</ref>
-      <ref url="http://drupal.org/node/1619736" source="CONFIRM" patch="1">http://drupal.org/node/1619736</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76149" source="XF">organicgroups-unspecified-xss(76149)</ref>
-      <ref url="http://www.securityfocus.com/bid/53838" source="BID">53838</ref>
-      <ref url="http://www.osvdb.org/82712" source="OSVDB">82712</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-      <ref url="http://secunia.com/advisories/49397" source="SECUNIA" adv="1">49397</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moshe_weitzman" name="organic_groups">
-        <vers num="6.x-2.0" edition="rc1" />
-        <vers num="6.x-2.0" edition="rc2" />
-        <vers num="6.x-2.0" edition="rc3" />
-        <vers num="6.x-2.1" />
-        <vers num="6.x-2.2" />
-        <vers num="6.x-2.3" />
-        <vers num="6.x-2.x" edition="dev" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-3801" reject="1" published="2012-06-26" name="CVE-2012-3801" modified="2012-09-04">
-    <desc>
-      <descript source="cve">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-2704.  Reason: This candidate is a duplicate of CVE-2012-2704.  Notes: All CVE users should reference CVE-2012-2704 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</descript>
-    </desc>
-    <refs />
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3802" published="2012-06-27" name="CVE-2012-3802" modified="2012-06-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote authenticated users to read the commissions of other users via unknown attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://drupal.org/node/1585648" source="MISC" patch="1" adv="1">http://drupal.org/node/1585648</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75716" source="XF">postaffiliatepro-registration-xss(75716)</ref>
-      <ref url="http://www.securityfocus.com/bid/53589" source="BID">53589</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/06/14/3" source="MLIST">[oss-security] 20120613 Re: CVE Request for Drupal contributed modules</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="peter_pokrivcak" name="post_affiliate_pro">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3805" published="2012-07-12" name="CVE-2012-3805" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the getAllPassedParams function in system/functions.php in Kajona before 3.4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) absender_name, (2) absender_email, or (3) absender_nachricht parameter to the content page; (4) comment_name, (5) comment_subject, or (6) comment_message parameter to the postacomment module; (7) module parameter to index.php; (8) action parameter to the admin login page; (9) pv or (10) pe parameter in a list action to the user module; (11) user_username, (12) user_email, (13) user_forename, (14) user_name, (15) user_street, (16) user_postal, (17) user_city, (18) user_tel, or (19) user_mobil parameter in a newUser action to the user module; (20) group_name or (21) group_desc parameter in a groupNew action to the user module; (22) name, (23) browsername, (24) seostring, (25) keywords, or (26) folder_id parameter in a newPage action to the pages module; (27) element_name or (28) element_cachetime parameter in a newElement action in the pages module; (29) aspect_name parameter in a newAspect action in the system module; (30) filemanager_name, (31) filemanager_path, (32) filemanager_upload_filter, or (33) filemanager_view_filter parameter in a NewRepo action to the filemanager module; or (34) archive_title or (35) archive_path parameter in a newArchive action to the downloads module.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23097" source="MISC">https://www.htbridge.com/advisory/HTB23097</ref>
-      <ref url="http://www.kajona.de/newsdetails.Kajona-V3-4-2-available.newsDetail.616decb4fe9b7a5929fb.en.html" source="CONFIRM" adv="1">http://www.kajona.de/newsdetails.Kajona-V3-4-2-available.newsDetail.616decb4fe9b7a5929fb.en.html</ref>
-      <ref url="http://www.kajona.de/changelog_34x.de.html" source="CONFIRM">http://www.kajona.de/changelog_34x.de.html</ref>
-      <ref url="http://secunia.com/advisories/49849" source="SECUNIA" adv="1">49849</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0058.html" source="BUGTRAQ">20120711 Multiple Cross-Site Scripting (XSS) in Kajona</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kajona" name="kajona">
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.2.0" />
-        <vers num="3.2.1" />
-        <vers num="3.3.0" />
-        <vers num="3.3.1" />
-        <vers num="3.4.0" />
-        <vers prev="1" num="3.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3811" published="2012-07-03" name="CVE-2012-3811" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it via a direct request.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/434.html
-
-'CWE-434: Unrestricted Upload of File with Dangerous Type'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://downloads.avaya.com/css/P8/documents/100164021" source="CONFIRM" adv="1">https://downloads.avaya.com/css/P8/documents/100164021</ref>
-      <ref url="http://zerodayinitiative.com/advisories/ZDI-12-106/" source="MISC">http://zerodayinitiative.com/advisories/ZDI-12-106/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="avaya" name="ip_office_customer_call_reporter">
-        <vers num="7.0" />
-        <vers num="8.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3812" published="2012-07-09" name="CVE-2012-3812" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones allows remote authenticated users to cause a denial of service (daemon crash) by establishing multiple voicemail sessions and accessing both the Urgent mailbox and the INBOX mailbox.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://issues.asterisk.org/jira/browse/ASTERISK-20052" source="CONFIRM">https://issues.asterisk.org/jira/browse/ASTERISK-20052</ref>
-      <ref url="http://downloads.asterisk.org/pub/security/AST-2012-011.html" source="CONFIRM" adv="1">http://downloads.asterisk.org/pub/security/AST-2012-011.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="digium" name="asterisk">
-        <vers num="1.8.0" edition="beta1" />
-        <vers num="1.8.0" edition="beta2" />
-        <vers num="1.8.0" edition="beta3" />
-        <vers num="1.8.0" edition="beta4" />
-        <vers num="1.8.0" edition="beta5" />
-        <vers num="1.8.0" edition="rc2" />
-        <vers num="1.8.0" edition="rc3" />
-        <vers num="1.8.0" edition="rc4" />
-        <vers num="1.8.0" edition="rc5" />
-        <vers num="1.8.1" edition="rc1" />
-        <vers num="1.8.1.1" />
-        <vers num="1.8.1.2" />
-        <vers num="1.8.11.0" edition="rc2" />
-        <vers num="1.8.11.0" edition="rc3" />
-        <vers num="1.8.11.1" />
-        <vers num="1.8.13.0" edition="rc1" />
-        <vers num="1.8.13.0" edition="rc2" />
-        <vers num="1.8.2" />
-        <vers num="1.8.2.1" />
-        <vers num="1.8.2.2" />
-        <vers num="1.8.2.3" />
-        <vers num="1.8.2.4" />
-        <vers num="1.8.3" edition="rc1" />
-        <vers num="1.8.3" edition="rc2" />
-        <vers num="1.8.3" edition="rc3" />
-        <vers num="1.8.3.1" />
-        <vers num="1.8.3.2" />
-        <vers num="1.8.3.3" />
-        <vers num="1.8.4" edition="rc1" />
-        <vers num="1.8.4" edition="rc2" />
-        <vers num="1.8.4" edition="rc3" />
-        <vers num="1.8.4.1" />
-        <vers num="1.8.4.2" />
-        <vers num="1.8.4.3" />
-        <vers num="1.8.4.4" />
-        <vers num="1.8.5" edition="rc1" />
-        <vers num="1.8.5.0" />
-        <vers num="1.8.6.0" edition="rc1" />
-        <vers num="1.8.6.0" edition="rc2" />
-        <vers num="1.8.6.0" edition="rc3" />
-        <vers num="1.8.7.0" edition="rc1" />
-        <vers num="1.8.7.0" edition="rc2" />
-        <vers num="1.8.7.1" />
-        <vers num="1.8.8.0" edition="rc1" />
-        <vers num="1.8.8.0" edition="rc2" />
-        <vers num="1.8.8.0" edition="rc3" />
-        <vers num="1.8.8.0" edition="rc5" />
-        <vers num="1.8.8.1" />
-        <vers num="1.8.8.2" />
-        <vers num="1.8.9.0" edition="rc1" />
-        <vers num="1.8.9.0" edition="rc2" />
-        <vers num="1.8.9.0" edition="rc3" />
-        <vers num="1.8.9.2" />
-        <vers num="1.8.9.3" />
-        <vers num="10.0.0" edition="" />
-        <vers num="10.0.0" edition=":digiumphones" />
-        <vers num="10.0.0" edition="beta1" />
-        <vers num="10.0.0" edition="beta1:digiumphones" />
-        <vers num="10.0.0" edition="beta2" />
-        <vers num="10.0.0" edition="beta2:digiumphones" />
-        <vers num="10.0.0" edition="rc1" />
-        <vers num="10.0.0" edition="rc1:digiumphones" />
-        <vers num="10.0.0" edition="rc2" />
-        <vers num="10.0.0" edition="rc2:digiumphones" />
-        <vers num="10.0.0" edition="rc3" />
-        <vers num="10.0.0" edition="rc3:digiumphones" />
-        <vers num="10.0.1" />
-        <vers num="10.1.0" edition="" />
-        <vers num="10.1.0" edition=":digiumphones" />
-        <vers num="10.1.0" edition="rc1" />
-        <vers num="10.1.0" edition="rc1:digiumphones" />
-        <vers num="10.1.0" edition="rc2" />
-        <vers num="10.1.0" edition="rc2:digiumphones" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.2.0" edition="" />
-        <vers num="10.2.0" edition=":digiumphones" />
-        <vers num="10.2.0" edition="rc1" />
-        <vers num="10.2.0" edition="rc1:digiumphones" />
-        <vers num="10.2.0" edition="rc2" />
-        <vers num="10.2.0" edition="rc2:digiumphones" />
-        <vers num="10.2.0" edition="rc3" />
-        <vers num="10.2.0" edition="rc3:digiumphones" />
-        <vers num="10.2.0" edition="rc4" />
-        <vers num="10.2.0" edition="rc4:digiumphones" />
-        <vers num="10.2.1" />
-        <vers num="10.3.0" edition="" />
-        <vers num="10.3.0" edition=":digiumphones" />
-        <vers num="10.3.0" edition="rc2" />
-        <vers num="10.3.0" edition="rc2:digiumphones" />
-        <vers num="10.3.0" edition="rc3" />
-        <vers num="10.3.0" edition="rc3:digiumphones" />
-        <vers num="10.3.1" />
-        <vers num="10.4.0" edition="" />
-        <vers num="10.4.0" edition=":digiumphones" />
-        <vers num="10.4.0" edition="rc1" />
-        <vers num="10.4.0" edition="rc1:digiumphones" />
-        <vers num="10.4.0" edition="rc2" />
-        <vers num="10.4.0" edition="rc2:digiumphones" />
-        <vers num="10.4.0" edition="rc3" />
-        <vers num="10.4.1" />
-        <vers num="10.4.2" />
-        <vers num="10.5.0" edition="" />
-        <vers num="10.5.0" edition=":digiumphones" />
-        <vers num="10.5.0" edition="rc1" />
-        <vers num="10.5.0" edition="rc1:digiumphones" />
-        <vers num="10.5.0" edition="rc2" />
-        <vers num="10.5.0" edition="rc2:digiumphones" />
-        <vers num="10.5.1" edition="" />
-        <vers num="10.5.1" edition=":digiumphones" />
-      </prod>
-      <prod vendor="digium" name="asteriske">
-        <vers num="1.8.8.0" edition="rc4" />
-        <vers num="1.8.9.1" />
-      </prod>
-      <prod vendor="digium" name="certified_asterisk">
-        <vers num="1.8.11" edition="cert" />
-        <vers num="1.8.11" edition="cert1" />
-        <vers num="1.8.11" edition="cert2" />
-        <vers num="1.8.11" edition="cert3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3814" published="2012-06-27" name="CVE-2012-3814" modified="2012-06-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a .php.ttf extension, then accessing it via a direct request to the file in font-uploader/fonts.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/18994" source="EXPLOIT-DB">18994</ref>
-      <ref url="http://secunia.com/advisories/49327" source="SECUNIA">49327</ref>
-      <ref url="http://osvdb.org/82657" source="OSVDB">82657</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pippin_williamson" name="font_uploader">
-        <vers num="1.2.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3815" published="2012-06-27" name="CVE-2012-3815" modified="2012-08-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 46824.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76060" source="XF">winlog-request-bo(76060)</ref>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf</ref>
-      <ref url="http://www.sielcosistemi.com/en/news/index.html?id=70" source="CONFIRM">http://www.sielcosistemi.com/en/news/index.html?id=70</ref>
-      <ref url="http://www.sielcosistemi.com/en/news/index.html?id=69" source="CONFIRM">http://www.sielcosistemi.com/en/news/index.html?id=69</ref>
-      <ref url="http://www.securityfocus.com/bid/53811" source="BID">53811</ref>
-      <ref url="http://www.s3cur1ty.de/m1adv2012-001" source="MISC">http://www.s3cur1ty.de/m1adv2012-001</ref>
-      <ref url="http://www.osvdb.org/82654" source="OSVDB">82654</ref>
-      <ref url="http://securitytracker.com/id?1027128" source="SECTRACK">1027128</ref>
-      <ref url="http://secunia.com/advisories/49395" source="SECUNIA" adv="1">49395</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-06/0009.html" source="BUGTRAQ">20120605 Sielco Sistemi Winlog Buffer Overflow &lt;= v2.07.14</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sielcosistemi" name="winlog_lite">
-        <vers num="2.06.00" />
-        <vers num="2.06.03" />
-        <vers num="2.06.04" />
-        <vers num="2.06.06" />
-        <vers num="2.06.09" />
-        <vers num="2.06.10" />
-        <vers num="2.06.12" />
-        <vers num="2.06.13" />
-        <vers num="2.06.14" />
-        <vers num="2.06.18" />
-        <vers num="2.06.21" />
-        <vers num="2.06.24" />
-        <vers num="2.06.25" />
-        <vers num="2.06.28" />
-        <vers num="2.06.40" />
-        <vers num="2.06.46" />
-        <vers num="2.06.50" />
-        <vers num="2.06.60" />
-        <vers num="2.06.73" />
-        <vers num="2.06.86" />
-        <vers num="2.07.00" />
-        <vers num="2.07.01" />
-        <vers num="2.07.08" />
-        <vers num="2.07.09" />
-        <vers num="2.07.11" />
-        <vers prev="1" num="2.07.14" />
-      </prod>
-      <prod vendor="sielcosistemi" name="winlog_pro">
-        <vers num="2.06.00" />
-        <vers num="2.06.03" />
-        <vers num="2.06.04" />
-        <vers num="2.06.06" />
-        <vers num="2.06.09" />
-        <vers num="2.06.10" />
-        <vers num="2.06.12" />
-        <vers num="2.06.13" />
-        <vers num="2.06.14" />
-        <vers num="2.06.18" />
-        <vers num="2.06.21" />
-        <vers num="2.06.24" />
-        <vers num="2.06.25" />
-        <vers num="2.06.28" />
-        <vers num="2.06.40" />
-        <vers num="2.06.46" />
-        <vers num="2.06.50" />
-        <vers num="2.06.60" />
-        <vers num="2.06.73" />
-        <vers num="2.06.86" />
-        <vers num="2.07.00" />
-        <vers num="2.07.01" />
-        <vers num="2.07.08" />
-        <vers num="2.07.09" />
-        <vers num="2.07.11" />
-        <vers prev="1" num="2.07.14" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3816" published="2012-06-27" name="CVE-2012-3816" modified="2012-06-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">WinRadius Server 2009 allows remote attackers to cause a denial of service (crash) via a long password in an Access-Request packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75890" source="XF">winradius-accessrequest-dos(75890)</ref>
-      <ref url="http://www.securityfocus.com/bid/53702" source="BID">53702</ref>
-      <ref url="http://www.exploit-db.com/exploits/18945" source="EXPLOIT-DB">18945</ref>
-      <ref url="http://secunia.com/advisories/49299" source="SECUNIA" adv="1">49299</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-05/0135.html" source="BUGTRAQ">20120527 WinRadius Server Denial Of Service Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="winradius" name="winradius">
-        <vers num="2009" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3817" published="2012-07-25" name="CVE-2012-3817" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) by sending many queries.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kb.isc.org/article/AA-00729" source="CONFIRM" adv="1">https://kb.isc.org/article/AA-00729</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1518-1" source="UBUNTU">USN-1518-1</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1123.html" source="REDHAT">RHSA-2012:1123</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1122.html" source="REDHAT">RHSA-2012:1122</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="isc" name="bind">
-        <vers num="9.4" />
-        <vers num="9.4.0" edition="rc1" />
-        <vers num="9.4.0a1" />
-        <vers num="9.4.0a2" />
-        <vers num="9.4.0a3" />
-        <vers num="9.4.0a4" />
-        <vers num="9.4.0a5" />
-        <vers num="9.4.0a6" />
-        <vers num="9.4.0b1" />
-        <vers num="9.4.0b2" />
-        <vers num="9.4.0b3" />
-        <vers num="9.4.0b4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" edition="rc1" />
-        <vers num="9.4.3b1" />
-        <vers num="9.4.3b2" />
-        <vers num="9.4.3b3" />
-        <vers num="9.5" />
-        <vers num="9.5.0" edition="rc1" />
-        <vers num="9.5.0-p1" />
-        <vers num="9.5.0-p2" />
-        <vers num="9.5.0-p2-w1" />
-        <vers num="9.5.0-p2-w2" />
-        <vers num="9.5.0a1" />
-        <vers num="9.5.0a2" />
-        <vers num="9.5.0a3" />
-        <vers num="9.5.0a4" />
-        <vers num="9.5.0a5" />
-        <vers num="9.5.0a6" />
-        <vers num="9.5.0a7" />
-        <vers num="9.5.0b1" />
-        <vers num="9.5.0b2" />
-        <vers num="9.5.0b3" />
-        <vers num="9.5.1" edition="rc1" />
-        <vers num="9.5.1" edition="rc2" />
-        <vers num="9.5.1b1" />
-        <vers num="9.5.1b2" />
-        <vers num="9.5.1b3" />
-        <vers num="9.5.2" edition="rc1" />
-        <vers num="9.5.2-p1" />
-        <vers num="9.5.2-p2" />
-        <vers num="9.5.2-p3" />
-        <vers num="9.5.2-p4" />
-        <vers num="9.5.2b1" />
-        <vers num="9.5.3" edition="rc1" />
-        <vers num="9.5.3b1" />
-        <vers num="9.6-esv" />
-        <vers num="9.6-esv-r1" />
-        <vers num="9.6-esv-r2" />
-        <vers num="9.6-esv-r3" />
-        <vers num="9.6-esv-r4" />
-        <vers num="9.6-esv-r4-p1" />
-        <vers num="9.6-esv-r5" edition="p1" />
-        <vers num="9.6-esv-r5b1" />
-        <vers num="9.6-esv-r6" edition="b1" />
-        <vers num="9.6-esv-r6" edition="rc1" />
-        <vers num="9.6-esv-r6" edition="rc2" />
-        <vers num="9.6-esv-r7" edition="p1" />
-        <vers num="9.6.0" edition="p1" />
-        <vers num="9.6.0" edition="rc1" />
-        <vers num="9.6.0" edition="rc2" />
-        <vers num="9.6.0a1" />
-        <vers num="9.6.0b1" />
-        <vers num="9.6.1" edition="p1" />
-        <vers num="9.6.1" edition="p2" />
-        <vers num="9.6.1" edition="p3" />
-        <vers num="9.6.1" edition="rc1" />
-        <vers num="9.6.1b1" />
-        <vers num="9.6.2" edition="rc1" />
-        <vers num="9.6.2-p1" />
-        <vers num="9.6.2-p2" />
-        <vers num="9.6.2-p3" />
-        <vers num="9.6.2b1" />
-        <vers num="9.6.3" edition="rc1" />
-        <vers num="9.6.3b1" />
-        <vers num="9.7.0" edition="p1" />
-        <vers num="9.7.0" edition="p2" />
-        <vers num="9.7.0" edition="rc1" />
-        <vers num="9.7.0" edition="rc2" />
-        <vers num="9.7.0a1" />
-        <vers num="9.7.0a2" />
-        <vers num="9.7.0a3" />
-        <vers num="9.7.0b1" />
-        <vers num="9.7.0b2" />
-        <vers num="9.7.0b3" />
-        <vers num="9.7.1" edition="p1" />
-        <vers num="9.7.1" edition="p2" />
-        <vers num="9.7.1" edition="rc1" />
-        <vers num="9.7.1b1" />
-        <vers num="9.7.2" edition="p1" />
-        <vers num="9.7.2" edition="p2" />
-        <vers num="9.7.2" edition="p3" />
-        <vers num="9.7.2" edition="rc1" />
-        <vers num="9.7.3" edition="b1" />
-        <vers num="9.7.3" edition="p1" />
-        <vers num="9.7.3" edition="rc1" />
-        <vers num="9.7.4" edition="b1" />
-        <vers num="9.7.4" edition="p1" />
-        <vers num="9.7.4" edition="rc1" />
-        <vers num="9.7.5" edition="b1" />
-        <vers num="9.7.5" edition="rc1" />
-        <vers num="9.7.5" edition="rc2" />
-        <vers num="9.7.6" edition="p1" />
-        <vers num="9.8.0" edition="a1" />
-        <vers num="9.8.0" edition="b1" />
-        <vers num="9.8.0" edition="p1" />
-        <vers num="9.8.0" edition="p2" />
-        <vers num="9.8.0" edition="p4" />
-        <vers num="9.8.0" edition="rc1" />
-        <vers num="9.8.1" edition="b1" />
-        <vers num="9.8.1" edition="b2" />
-        <vers num="9.8.1" edition="b3" />
-        <vers num="9.8.1" edition="p1" />
-        <vers num="9.8.1" edition="rc1" />
-        <vers num="9.8.2" edition="b1" />
-        <vers num="9.8.2" edition="rc1" />
-        <vers num="9.8.2" edition="rc2" />
-        <vers num="9.8.3" edition="p1" />
-        <vers num="9.9.0" edition="a1" />
-        <vers num="9.9.0" edition="a2" />
-        <vers num="9.9.0" edition="a3" />
-        <vers num="9.9.0" edition="b1" />
-        <vers num="9.9.0" edition="b2" />
-        <vers num="9.9.0" edition="rc1" />
-        <vers num="9.9.0" edition="rc2" />
-        <vers num="9.9.0" edition="rc3" />
-        <vers num="9.9.0" edition="rc4" />
-        <vers num="9.9.1" edition="p1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3818" published="2012-06-29" name="CVE-2012-3818" modified="2012-07-02" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">The fpm exporter in Revelation 0.4.13-2 and earlier encrypts the version number but not the password when exporting a file, which might allow local users to obtain sensitive information.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://knoxin.blogspot.co.uk/2012/06/revelation-password-manager-considered.html" source="MISC">http://knoxin.blogspot.co.uk/2012/06/revelation-password-manager-considered.html</ref>
-      <ref url="http://als.regnet.cz/fpm2/feedback/2" source="MISC">http://als.regnet.cz/fpm2/feedback/2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mikel_olasagasti" name="revelation">
-        <vers num="0.1.0" />
-        <vers num="0.1.1" />
-        <vers num="0.1.2" />
-        <vers num="0.2.0" />
-        <vers num="0.2.1" />
-        <vers num="0.3.0" />
-        <vers num="0.3.1" />
-        <vers num="0.3.2" />
-        <vers num="0.3.3" />
-        <vers num="0.3.4" />
-        <vers num="0.4.0" />
-        <vers num="0.4.1" />
-        <vers num="0.4.10" />
-        <vers num="0.4.11" />
-        <vers num="0.4.12" />
-        <vers prev="1" num="0.4.13-2" />
-        <vers num="0.4.2" />
-        <vers num="0.4.3" />
-        <vers num="0.4.4" />
-        <vers num="0.4.5" />
-        <vers num="0.4.6" />
-        <vers num="0.4.7" />
-        <vers num="0.4.8" />
-        <vers num="0.4.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3825" published="2012-06-30" name="CVE-2012-3825" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) BACapp and (2) Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7122" source="CONFIRM" adv="1">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7122</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7121" source="CONFIRM" adv="1">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7121</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-08.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-08.html</ref>
-      <ref url="http://secunia.com/advisories/49226" source="SECUNIA">49226</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15478" source="OVAL">oval:org.mitre.oval:def:15478</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3826" published="2012-06-30" name="CVE-2012-3826" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">Multiple integer underflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (loop) via vectors related to the R3 dissector, a different vulnerability than CVE-2012-2392.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7125" source="CONFIRM" adv="1">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7125</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-08.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-08.html</ref>
-      <ref url="http://secunia.com/advisories/49226" source="SECUNIA">49226</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15536" source="OVAL">oval:org.mitre.oval:def:15536</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3828" published="2012-07-03" name="CVE-2012-3828" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Joomla! 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the Host HTTP Header.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75223" source="XF">joomla-hostheader-xss(75223)</ref>
-      <ref url="http://www.securityfocus.com/bid/53277" source="BID">53277</ref>
-      <ref url="http://packetstormsecurity.org/files/112249/Joomla-2.5.3-Host-Header-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112249/Joomla-2.5.3-Host-Header-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="joomla" name="joomla!">
-        <vers num="2.5.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3829" published="2012-07-03" name="CVE-2012-3829" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://packetstormsecurity.org/files/112249/Joomla-2.5.3-Host-Header-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112249/Joomla-2.5.3-Host-Header-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="joomla" name="joomla!">
-        <vers num="2.5.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3830" published="2012-07-03" name="CVE-2012-3830" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via the video directive.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/milesj/php-decoda/commit/666778f326dff3bd213be9f624f0fcb337c0b4c9" source="CONFIRM" patch="1">https://github.com/milesj/php-decoda/commit/666778f326dff3bd213be9f624f0fcb337c0b4c9</ref>
-      <ref url="https://github.com/milesj/php-decoda/commit/4068257bb4e1071d1d60577289d3da922c296c83" source="CONFIRM" patch="1">https://github.com/milesj/php-decoda/commit/4068257bb4e1071d1d60577289d3da922c296c83</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75333" source="XF">decoda-decoda-xss(75333)</ref>
-      <ref url="http://www.securityfocus.com/bid/53332" source="BID">53332</ref>
-      <ref url="http://www.redteam-pentesting.de/en/advisories/rt-sa-2012-002/-php-decoda-cross-site-scripting-in-video-tags" source="MISC">http://www.redteam-pentesting.de/en/advisories/rt-sa-2012-002/-php-decoda-cross-site-scripting-in-video-tags</ref>
-      <ref url="http://secunia.com/advisories/48931" source="SECUNIA" adv="1">48931</ref>
-      <ref url="http://osvdb.org/81637" source="OSVDB">81637</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="milesj" name="decoda">
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.4" />
-        <vers num="2.5" />
-        <vers num="2.6" />
-        <vers num="2.7" />
-        <vers num="2.8" />
-        <vers num="2.9" />
-        <vers num="3.0" />
-        <vers num="3.1" />
-        <vers num="3.2" />
-        <vers num="3.3" />
-        <vers prev="1" num="3.3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3831" published="2012-07-03" name="CVE-2012-3831" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.1 allows remote attackers to inject arbitrary web script or HTML via multiple URLs in an img tag.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/milesj/php-decoda/commit/104afad9d3cb1fbb766c4bc5b98e070a8a13fbd8" source="CONFIRM" patch="1">https://github.com/milesj/php-decoda/commit/104afad9d3cb1fbb766c4bc5b98e070a8a13fbd8</ref>
-      <ref url="http://osvdb.org/81637" source="OSVDB">81637</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="milesj" name="decoda">
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.4" />
-        <vers num="2.5" />
-        <vers num="2.6" />
-        <vers num="2.7" />
-        <vers num="2.8" />
-        <vers num="2.9" />
-        <vers num="3.0" />
-        <vers num="3.1" />
-        <vers num="3.2" />
-        <vers prev="1" num="3.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3832" published="2012-07-03" name="CVE-2012-3832" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in decoda/Decoda.php in Decoda before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to (1) b or (2) div tags.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/milesj/php-decoda/commit/6f2b9fb48bc110edeab17459038feb2627d52320" source="CONFIRM" patch="1">https://github.com/milesj/php-decoda/commit/6f2b9fb48bc110edeab17459038feb2627d52320</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="milesj" name="decoda">
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.4" />
-        <vers num="2.5" />
-        <vers num="2.6" />
-        <vers num="2.7" />
-        <vers num="2.8" />
-        <vers num="2.9" />
-        <vers num="3.0" />
-        <vers prev="1" num="3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3833" published="2012-07-03" name="CVE-2012-3833" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75224" source="XF">quickcms-admin-xss(75224)</ref>
-      <ref url="http://www.securityfocus.com/bid/53273" source="BID">53273</ref>
-      <ref url="http://packetstormsecurity.org/files/112243/Quick.CMS-4.0-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112243/Quick.CMS-4.0-Cross-Site-Scripting.html</ref>
-      <ref url="http://hauntit.blogspot.com/2012/03/en-quickcmsv40-xss-over-get.html" source="MISC">http://hauntit.blogspot.com/2012/03/en-quickcmsv40-xss-over-get.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opensolution" name="quick.cms">
-        <vers num="4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3834" published="2012-07-03" name="CVE-2012-3834" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:P/A:P)" CVSS_score="6.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.0" CVSS_base_score="6.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (OSSIM) 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time[0][0] parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75290" source="XF">alienvault-baseqrymain-sql-injection(75290)</ref>
-      <ref url="http://www.securityfocus.com/bid/53331" source="BID">53331</ref>
-      <ref url="http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-002.txt" source="MISC">http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-002.txt</ref>
-      <ref url="http://www.exploit-db.com/exploits/18800" source="EXPLOIT-DB">18800</ref>
-      <ref url="http://www.darksecurity.de/index.php?/211-KORAMIS-ADV2012-002-Alienvault-OSSIM-Open-Source-SIEM-3.1-Multiple-security-vulnerabilities.html" source="MISC">http://www.darksecurity.de/index.php?/211-KORAMIS-ADV2012-002-Alienvault-OSSIM-Open-Source-SIEM-3.1-Multiple-security-vulnerabilities.html</ref>
-      <ref url="http://secunia.com/advisories/49005" source="SECUNIA" adv="1">49005</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="alienvault" name="open_source_security_information_management">
-        <vers num="3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3835" published="2012-07-03" name="CVE-2012-3835" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to top.php or (2) time[0][0] parameter to forensics/base_qry_main.php, which is not properly handled in an error page.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75297" source="XF">alienvault-multiple-xss(75297)</ref>
-      <ref url="http://www.securityfocus.com/bid/53331" source="BID">53331</ref>
-      <ref url="http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-002.txt" source="MISC">http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-002.txt</ref>
-      <ref url="http://www.exploit-db.com/exploits/18800" source="EXPLOIT-DB">18800</ref>
-      <ref url="http://www.darksecurity.de/index.php?/211-KORAMIS-ADV2012-002-Alienvault-OSSIM-Open-Source-SIEM-3.1-Multiple-security-vulnerabilities.html" source="MISC">http://www.darksecurity.de/index.php?/211-KORAMIS-ADV2012-002-Alienvault-OSSIM-Open-Source-SIEM-3.1-Multiple-security-vulnerabilities.html</ref>
-      <ref url="http://secunia.com/advisories/49005" source="SECUNIA" adv="1">49005</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="alienvault" name="open_source_security_information_management">
-        <vers num="3.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3836" published="2012-07-03" name="CVE-2012-3836" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) groupname parameter in a savecategory in the users module; (2) virtual_filename, (3) branch, (4) contact_person, (5) street, (6) city, (7) province, (8) postal, (9) country, (10) tollfree, (11) phone, (12) fax, or (13) mobile parameter in a saveitem action in the contacts module; (14) title parameter in a savecategory action in the menus module; (15) firstname or (16) lastname in a saveitem action in the users module; (17) meta_key or (18) meta_description in a saveitem action in the blog module; or (19) the PATH_INFO to admin/index.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5086.php" source="MISC">http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5086.php</ref>
-      <ref url="http://www.securityfocus.com/bid/53366" source="BID">53366</ref>
-      <ref url="http://www.exploit-db.com/exploits/18827" source="EXPLOIT-DB">18827</ref>
-      <ref url="http://www.babygekko.com/site/news/general/baby-gekko-v1-2-0-released-with-3rd-party-independent-security-testing-performed-by-zero-science-lab.html" source="CONFIRM">http://www.babygekko.com/site/news/general/baby-gekko-v1-2-0-released-with-3rd-party-independent-security-testing-performed-by-zero-science-lab.html</ref>
-      <ref url="http://secunia.com/advisories/49023" source="SECUNIA" adv="1">49023</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="babygekko" name="baby_gekko">
-        <vers num="0.90" />
-        <vers num="0.91" />
-        <vers num="0.98" edition="alpha" />
-        <vers num="0.99" edition="beta" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers prev="1" num="1.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3837" published="2012-07-03" name="CVE-2012-3837" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) email_address, (3) password, (4) password_verify, (5) firstname, (6) lastname, or (7) verification_code parameter to users/action/register.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5086.php" source="MISC">http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5086.php</ref>
-      <ref url="http://www.securityfocus.com/bid/53366" source="BID">53366</ref>
-      <ref url="http://www.exploit-db.com/exploits/18827" source="EXPLOIT-DB">18827</ref>
-      <ref url="http://www.babygekko.com/site/news/general/baby-gekko-v1-2-0-released-with-3rd-party-independent-security-testing-performed-by-zero-science-lab.html" source="CONFIRM">http://www.babygekko.com/site/news/general/baby-gekko-v1-2-0-released-with-3rd-party-independent-security-testing-performed-by-zero-science-lab.html</ref>
-      <ref url="http://secunia.com/advisories/49052" source="SECUNIA" adv="1">49052</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="babygekko" name="baby_gekko">
-        <vers num="0.90" />
-        <vers num="0.91" />
-        <vers num="0.98" edition="alpha" />
-        <vers num="0.99" edition="beta" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers prev="1" num="1.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3838" published="2012-07-03" name="CVE-2012-3838" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to (1) admin/templates/babygekko/index.php or (2) templates/html5demo/index.php.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5086.php" source="MISC">http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5086.php</ref>
-      <ref url="http://www.exploit-db.com/exploits/18827" source="EXPLOIT-DB">18827</ref>
-      <ref url="http://www.babygekko.com/site/news/general/baby-gekko-v1-2-0-released-with-3rd-party-independent-security-testing-performed-by-zero-science-lab.html" source="CONFIRM">http://www.babygekko.com/site/news/general/baby-gekko-v1-2-0-released-with-3rd-party-independent-security-testing-performed-by-zero-science-lab.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="babygekko" name="baby_gekko">
-        <vers num="0.90" />
-        <vers num="0.91" />
-        <vers num="0.98" edition="alpha" />
-        <vers num="0.99" edition="beta" />
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers prev="1" num="1.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3839" published="2012-07-03" name="CVE-2012-3839" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in application/core/MY_Model.php in MyClientBase 0.12 allow remote attackers to execute arbitrary SQL commands via the (1) invoice_number or (2) tags parameter to index.php/invoice_search.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bitbucket.org/jesseterry/myclientbase/changeset/789099396f05" source="CONFIRM">https://bitbucket.org/jesseterry/myclientbase/changeset/789099396f05</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75298" source="XF">myclientbase-index-sql-injection(75298)</ref>
-      <ref url="http://www.securityfocus.com/bid/53311" source="BID">53311</ref>
-      <ref url="http://www.exploit-db.com/exploits/18814" source="EXPLOIT-DB">18814</ref>
-      <ref url="http://secunia.com/advisories/48961" source="SECUNIA" adv="1">48961</ref>
-      <ref url="http://myclientbase.com/" source="CONFIRM">http://myclientbase.com/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="myclientbase" name="myclientbase">
-        <vers num="0.12" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3840" published="2012-07-03" name="CVE-2012-3840" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in index.php/users/form/user_id in MyClientBase 0.12 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name or (2) last_name parameters.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75299" source="XF">myclientbase-index-xss(75299)</ref>
-      <ref url="http://www.securityfocus.com/bid/53311" source="BID">53311</ref>
-      <ref url="http://www.exploit-db.com/exploits/18814" source="EXPLOIT-DB">18814</ref>
-      <ref url="http://secunia.com/advisories/48961" source="SECUNIA" adv="1">48961</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="myclientbase" name="myclientbase">
-        <vers num="0.12" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3841" published="2012-07-03" name="CVE-2012-3841" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in KMPlayer 3.2.0.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ehtrace.dll that is located in the current working directory.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per indicated reference links 1182120 and 1182121, the attack can be leveraged remotely has been scored as such pending clarification of CVE description.</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75193" source="XF">kmplayer-dll-code-execution(75193)</ref>
-      <ref url="http://packetstormsecurity.org/files/112218/KMPlayer-3.2.0.19-DLL-Hijack.html" source="MISC">http://packetstormsecurity.org/files/112218/KMPlayer-3.2.0.19-DLL-Hijack.html</ref>
-      <ref url="http://osvdb.org/81558" source="OSVDB">81558</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kmplayer" name="kmplayer">
-        <vers num="3.2.0.19" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3842" published="2012-07-03" name="CVE-2012-3842" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via the (1) select0 or (2) select8 parameters.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=509" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=509</ref>
-      <ref url="http://www.securityfocus.com/bid/53281" source="BID">53281</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0214.html" source="BUGTRAQ">20120426 DirectAdmin v1.403 - Multiple Cross Site Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="jbmc-software" name="directadmin">
-        <vers num="1.403" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3843" published="2012-07-03" name="CVE-2012-3843" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the registration page in e107, probably 1.0.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75225" source="XF">e107-registration-xss(75225)</ref>
-      <ref url="http://www.securityfocus.com/bid/53271" source="BID">53271</ref>
-      <ref url="http://packetstormsecurity.org/files/112241/e107-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112241/e107-Cross-Site-Scripting.html</ref>
-      <ref url="http://hauntit.blogspot.com/2012/04/en-e107-cms-reflected-xss-in.html" source="MISC">http://hauntit.blogspot.com/2012/04/en-e107-cms-reflected-xss-in.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="e107" name="e107">
-        <vers num="1.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3844" published="2012-07-03" name="CVE-2012-3844" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in vBulletin 4.1.12 allows remote attackers to inject arbitrary web script or HTML via a long string in the subject parameter when creating a post.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75325" source="XF">vbulletin-subjectparameter-xss(75325)</ref>
-      <ref url="http://www.securityfocus.com/bid/53319" source="BID">53319</ref>
-      <ref url="http://packetstormsecurity.org/files/112385/vBulletin-4.1.12-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112385/vBulletin-4.1.12-Cross-Site-Scripting.html</ref>
-      <ref url="http://hauntit.blogspot.com/2012/04/en-vbulletin-4112-cross-site-scripting.html" source="MISC">http://hauntit.blogspot.com/2012/04/en-vbulletin-4112-cross-site-scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vbulletin" name="vbulletin">
-        <vers num="4.1.12" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3845" published="2012-07-03" name="CVE-2012-3845" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Buffer overflow in LAN Messenger 1.2.28 and earlier allows remote attackers to cause a denial of service (crash) via a long string in an initiation request.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75319" source="XF">lan-messenger-packet-dos(75319)</ref>
-      <ref url="http://www.securityfocus.com/bid/53333" source="BID">53333</ref>
-      <ref url="http://www.exploit-db.com/exploits/18816" source="EXPLOIT-DB">18816</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-05/0005.html" source="BUGTRAQ">20120501 LAN Messenger v1.2.28 - Denial of Service Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="lan_messenger" name="lan_messenger1.2.28">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3846" published="2012-07-03" name="CVE-2012-3846" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in index.php in PHP-pastebin 2.1 allows remote attackers to inject arbitrary web script or HTML via the title parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75323" source="XF">phppastebin-index-xss(75323)</ref>
-      <ref url="http://www.securityfocus.com/bid/53329" source="BID">53329</ref>
-      <ref url="http://www.osvdb.org/81661" source="OSVDB">81661</ref>
-      <ref url="http://secunia.com/advisories/49025" source="SECUNIA" adv="1">49025</ref>
-      <ref url="http://packetstormsecurity.org/files/112375/PHP-Pastebin-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112375/PHP-Pastebin-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="atmoner" name="php-pastebin">
-        <vers num="2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3847" published="2012-07-04" name="CVE-2012-3847" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application Server 2012 allows remote attackers to cause a denial of service (resource consumption) via a long Unicode string, a different vulnerability than CVE-2012-3007.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-171-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-171-01.pdf</ref>
-      <ref url="http://secunia.com/advisories/49173" source="SECUNIA">49173</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="invensys" name="intouch">
-        <vers num="2012" />
-      </prod>
-      <prod vendor="invensys" name="wonderware_application_server">
-        <vers num="2012" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3848" published="2012-07-31" name="CVE-2012-3848" modified="2012-07-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to d4d/exporters.php, (2) the HTTP Referer header to d4d/exporters.php, or (3) unspecified input to d4d/contextMenu.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt" source="MISC">https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt</ref>
-      <ref url="http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html" source="MISC">http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dell" name="sonicwall_scrutinizer">
-        <vers num="8.6.2" edition="-" />
-        <vers num="8.6.2" edition="-:free" />
-        <vers num="9.0.0" edition="-" />
-        <vers num="9.0.0" edition="-:free" />
-        <vers num="9.0.1" edition="-" />
-        <vers num="9.0.1" edition="-:free" />
-        <vers prev="1" num="9.5.0" edition="-" />
-        <vers prev="1" num="9.5.0" edition="-:free" />
-      </prod>
-      <prod vendor="dell" name="sonicwall_scrutinizer_with_flow_analytics_module">
-        <vers num="8.6.2" edition="-" />
-        <vers num="8.6.2" edition="-:pay" />
-        <vers num="9.0.0" edition="-" />
-        <vers num="9.0.0" edition="-:pay" />
-        <vers num="9.0.1" edition="-" />
-        <vers num="9.0.1" edition="-:pay" />
-        <vers prev="1" num="9.5.0" edition="-" />
-        <vers prev="1" num="9.5.0" edition="-:pay" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3859" published="2012-07-09" name="CVE-2012-3859" modified="2012-07-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the WebAdmin Portal in Netsweeper has unknown impact and attack vectors, a different vulnerability than CVE-2012-2446 and CVE-2012-2447.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://infosec42.blogspot.com/2012/07/cve-2012-2446-cve-2012-2447-cve-2012.html" source="MISC">http://infosec42.blogspot.com/2012/07/cve-2012-2446-cve-2012-2447-cve-2012.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netsweeper" name="netsweeper">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3863" published="2012-07-09" name="CVE-2012-3863" modified="2012-07-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:N/A:P)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones does not properly handle a provisional response to a SIP reINVITE request, which allows remote authenticated users to cause a denial of service (RTP port exhaustion) via sessions that lack final responses.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://downloads.asterisk.org/pub/security/AST-2012-010.html" source="CONFIRM" patch="1" adv="1">http://downloads.asterisk.org/pub/security/AST-2012-010.html</ref>
-      <ref url="https://issues.asterisk.org/jira/browse/ASTERISK-19992" source="CONFIRM">https://issues.asterisk.org/jira/browse/ASTERISK-19992</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="digium" name="asterisk">
-        <vers num="1.8.0" edition="beta1" />
-        <vers num="1.8.0" edition="beta2" />
-        <vers num="1.8.0" edition="beta3" />
-        <vers num="1.8.0" edition="beta4" />
-        <vers num="1.8.0" edition="beta5" />
-        <vers num="1.8.0" edition="rc2" />
-        <vers num="1.8.0" edition="rc3" />
-        <vers num="1.8.0" edition="rc4" />
-        <vers num="1.8.0" edition="rc5" />
-        <vers num="1.8.1" edition="rc1" />
-        <vers num="1.8.1.1" />
-        <vers num="1.8.1.2" />
-        <vers num="1.8.11.0" edition="rc2" />
-        <vers num="1.8.11.0" edition="rc3" />
-        <vers num="1.8.11.1" />
-        <vers num="1.8.13.0" edition="rc1" />
-        <vers num="1.8.13.0" edition="rc2" />
-        <vers num="1.8.2" />
-        <vers num="1.8.2.1" />
-        <vers num="1.8.2.2" />
-        <vers num="1.8.2.3" />
-        <vers num="1.8.2.4" />
-        <vers num="1.8.3" edition="rc1" />
-        <vers num="1.8.3" edition="rc2" />
-        <vers num="1.8.3" edition="rc3" />
-        <vers num="1.8.3.1" />
-        <vers num="1.8.3.2" />
-        <vers num="1.8.3.3" />
-        <vers num="1.8.4" edition="rc1" />
-        <vers num="1.8.4" edition="rc2" />
-        <vers num="1.8.4" edition="rc3" />
-        <vers num="1.8.4.1" />
-        <vers num="1.8.4.2" />
-        <vers num="1.8.4.3" />
-        <vers num="1.8.4.4" />
-        <vers num="1.8.5" edition="rc1" />
-        <vers num="1.8.5.0" />
-        <vers num="1.8.6.0" edition="rc1" />
-        <vers num="1.8.6.0" edition="rc2" />
-        <vers num="1.8.6.0" edition="rc3" />
-        <vers num="1.8.7.0" edition="rc1" />
-        <vers num="1.8.7.0" edition="rc2" />
-        <vers num="1.8.7.1" />
-        <vers num="1.8.8.0" edition="rc1" />
-        <vers num="1.8.8.0" edition="rc2" />
-        <vers num="1.8.8.0" edition="rc3" />
-        <vers num="1.8.8.0" edition="rc5" />
-        <vers num="1.8.8.1" />
-        <vers num="1.8.8.2" />
-        <vers num="1.8.9.0" edition="rc1" />
-        <vers num="1.8.9.0" edition="rc2" />
-        <vers num="1.8.9.0" edition="rc3" />
-        <vers num="1.8.9.2" />
-        <vers num="1.8.9.3" />
-        <vers num="10.0.0" edition="" />
-        <vers num="10.0.0" edition=":digiumphones" />
-        <vers num="10.0.0" edition="beta1" />
-        <vers num="10.0.0" edition="beta1:digiumphones" />
-        <vers num="10.0.0" edition="beta2" />
-        <vers num="10.0.0" edition="beta2:digiumphones" />
-        <vers num="10.0.0" edition="rc1" />
-        <vers num="10.0.0" edition="rc1:digiumphones" />
-        <vers num="10.0.0" edition="rc2" />
-        <vers num="10.0.0" edition="rc2:digiumphones" />
-        <vers num="10.0.0" edition="rc3" />
-        <vers num="10.0.0" edition="rc3:digiumphones" />
-        <vers num="10.0.1" />
-        <vers num="10.1.0" edition="" />
-        <vers num="10.1.0" edition=":digiumphones" />
-        <vers num="10.1.0" edition="rc1" />
-        <vers num="10.1.0" edition="rc1:digiumphones" />
-        <vers num="10.1.0" edition="rc2" />
-        <vers num="10.1.0" edition="rc2:digiumphones" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.2.0" edition="" />
-        <vers num="10.2.0" edition=":digiumphones" />
-        <vers num="10.2.0" edition="rc1" />
-        <vers num="10.2.0" edition="rc1:digiumphones" />
-        <vers num="10.2.0" edition="rc2" />
-        <vers num="10.2.0" edition="rc2:digiumphones" />
-        <vers num="10.2.0" edition="rc3" />
-        <vers num="10.2.0" edition="rc3:digiumphones" />
-        <vers num="10.2.0" edition="rc4" />
-        <vers num="10.2.0" edition="rc4:digiumphones" />
-        <vers num="10.2.1" />
-        <vers num="10.3.0" edition="" />
-        <vers num="10.3.0" edition=":digiumphones" />
-        <vers num="10.3.0" edition="rc2" />
-        <vers num="10.3.0" edition="rc2:digiumphones" />
-        <vers num="10.3.0" edition="rc3" />
-        <vers num="10.3.0" edition="rc3:digiumphones" />
-        <vers num="10.3.1" />
-        <vers num="10.4.0" edition="" />
-        <vers num="10.4.0" edition=":digiumphones" />
-        <vers num="10.4.0" edition="rc1" />
-        <vers num="10.4.0" edition="rc1:digiumphones" />
-        <vers num="10.4.0" edition="rc2" />
-        <vers num="10.4.0" edition="rc2:digiumphones" />
-        <vers num="10.4.0" edition="rc3" />
-        <vers num="10.4.1" />
-        <vers num="10.4.2" />
-        <vers num="10.5.0" edition="" />
-        <vers num="10.5.0" edition=":digiumphones" />
-        <vers num="10.5.0" edition="rc1" />
-        <vers num="10.5.0" edition="rc1:digiumphones" />
-        <vers num="10.5.0" edition="rc2" />
-        <vers num="10.5.0" edition="rc2:digiumphones" />
-        <vers num="10.5.1" edition="" />
-        <vers num="10.5.1" edition=":digiumphones" />
-      </prod>
-      <prod vendor="digium" name="asterisk_business_edition">
-        <vers num="c.3.1" />
-        <vers num="c.3.3" />
-        <vers num="c.3.7.4" />
-      </prod>
-      <prod vendor="digium" name="asteriske">
-        <vers num="1.8.8.0" edition="rc4" />
-        <vers num="1.8.9.1" />
-      </prod>
-      <prod vendor="digium" name="certified_asterisk">
-        <vers num="1.8.11" edition="cert" />
-        <vers num="1.8.11" edition="cert1" />
-        <vers num="1.8.11" edition="cert2" />
-        <vers num="1.8.11" edition="cert3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3864" published="2012-08-06" name="CVE-2012-3864" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote authenticated users to read arbitrary files on the puppet master server by leveraging an arbitrary user's certificate and private key in a GET request.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/puppetlabs/puppet/commit/c3c7462e4066bf3a563987a402bf3ddf278bcd87" source="CONFIRM" patch="1">https://github.com/puppetlabs/puppet/commit/c3c7462e4066bf3a563987a402bf3ddf278bcd87</ref>
-      <ref url="https://github.com/puppetlabs/puppet/commit/10f6cb8969b4d5a933b333ecb01ce3696b1d57d4" source="CONFIRM" patch="1">https://github.com/puppetlabs/puppet/commit/10f6cb8969b4d5a933b333ecb01ce3696b1d57d4</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=839130" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=839130</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1506-1" source="UBUNTU">USN-1506-1</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2511" source="DEBIAN">DSA-2511</ref>
-      <ref url="http://puppetlabs.com/security/cve/cve-2012-3864/" source="CONFIRM" adv="1">http://puppetlabs.com/security/cve/cve-2012-3864/</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00006.html" source="SUSE">SUSE-SU-2012:0983</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="puppetlabs" name="puppet">
-        <vers prev="1" num="2.5.1" edition="-" />
-        <vers prev="1" num="2.5.1" edition="-:enterprise" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.10" />
-        <vers num="2.6.11" />
-        <vers num="2.6.12" />
-        <vers num="2.6.13" />
-        <vers num="2.6.14" />
-        <vers num="2.6.15" />
-        <vers prev="1" num="2.6.16" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.6.7" />
-        <vers num="2.6.8" />
-        <vers num="2.6.9" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.11" />
-        <vers num="2.7.12" />
-        <vers num="2.7.13" />
-        <vers num="2.7.14" />
-        <vers num="2.7.16" />
-        <vers num="2.7.17" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3865" published="2012-08-06" name="CVE-2012-3865" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:P)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, when Delete is enabled in auth.conf, allows remote authenticated users to delete arbitrary files on the puppet master server via a .. (dot dot) in a node name.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/puppetlabs/puppet/commit/d80478208d79a3e6d6cb1fbc525e24817fe8c4c6" source="CONFIRM" patch="1">https://github.com/puppetlabs/puppet/commit/d80478208d79a3e6d6cb1fbc525e24817fe8c4c6</ref>
-      <ref url="https://github.com/puppetlabs/puppet/commit/554eefc55f57ed2b76e5ee04d8f194d36f6ee67f" source="CONFIRM" patch="1">https://github.com/puppetlabs/puppet/commit/554eefc55f57ed2b76e5ee04d8f194d36f6ee67f</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=839131" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=839131</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1506-1" source="UBUNTU">USN-1506-1</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2511" source="DEBIAN">DSA-2511</ref>
-      <ref url="http://puppetlabs.com/security/cve/cve-2012-3865/" source="CONFIRM" adv="1">http://puppetlabs.com/security/cve/cve-2012-3865/</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00006.html" source="SUSE">SUSE-SU-2012:0983</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="puppetlabs" name="puppet">
-        <vers prev="1" num="2.5.1" edition="-" />
-        <vers prev="1" num="2.5.1" edition="-:enterprise" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.10" />
-        <vers num="2.6.11" />
-        <vers num="2.6.12" />
-        <vers num="2.6.13" />
-        <vers num="2.6.14" />
-        <vers num="2.6.15" />
-        <vers prev="1" num="2.6.16" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.6.7" />
-        <vers num="2.6.8" />
-        <vers num="2.6.9" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.11" />
-        <vers num="2.7.12" />
-        <vers num="2.7.13" />
-        <vers num="2.7.14" />
-        <vers num="2.7.16" />
-        <vers prev="1" num="2.7.17" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3866" published="2012-08-06" name="CVE-2012-3866" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 permissions for last_run_report.yaml, which allows local users to obtain sensitive configuration information by leveraging access to the puppet master server to read this file.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://github.com/puppetlabs/puppet/commit/fd44bf5e6d0d360f6a493d663b653c121fa83c3f" source="CONFIRM" patch="1">https://github.com/puppetlabs/puppet/commit/fd44bf5e6d0d360f6a493d663b653c121fa83c3f</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=839135" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=839135</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1506-1" source="UBUNTU">USN-1506-1</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2511" source="DEBIAN">DSA-2511</ref>
-      <ref url="http://puppetlabs.com/security/cve/cve-2012-3866/" source="CONFIRM" adv="1">http://puppetlabs.com/security/cve/cve-2012-3866/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="puppetlabs" name="puppet">
-        <vers prev="1" num="2.5.1" edition="-" />
-        <vers prev="1" num="2.5.1" edition="-:enterprise" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.11" />
-        <vers num="2.7.12" />
-        <vers num="2.7.13" />
-        <vers num="2.7.14" />
-        <vers num="2.7.16" />
-        <vers prev="1" num="2.7.17" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3867" published="2012-08-06" name="CVE-2012-3867" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">lib/puppet/ssl/certificate_authority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not properly restrict the characters in the Common Name field of a Certificate Signing Request (CSR), which makes it easier for user-assisted remote attackers to trick administrators into signing a crafted agent certificate via ANSI control sequences.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/puppetlabs/puppet/commit/f3419620b42080dad3b0be14470b20a972f13c50" source="CONFIRM" patch="1">https://github.com/puppetlabs/puppet/commit/f3419620b42080dad3b0be14470b20a972f13c50</ref>
-      <ref url="https://github.com/puppetlabs/puppet/commit/dfedaa5fa841ccf335245a748b347b7c7c236640" source="CONFIRM" patch="1">https://github.com/puppetlabs/puppet/commit/dfedaa5fa841ccf335245a748b347b7c7c236640</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=839158" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=839158</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1506-1" source="UBUNTU">USN-1506-1</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2511" source="DEBIAN">DSA-2511</ref>
-      <ref url="http://puppetlabs.com/security/cve/cve-2012-3867/" source="CONFIRM" adv="1">http://puppetlabs.com/security/cve/cve-2012-3867/</ref>
-      <ref url="http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00006.html" source="SUSE">SUSE-SU-2012:0983</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="puppetlabs" name="puppet">
-        <vers prev="1" num="2.5.1" edition="-" />
-        <vers prev="1" num="2.5.1" edition="-:enterprise" />
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.10" />
-        <vers num="2.6.11" />
-        <vers num="2.6.12" />
-        <vers num="2.6.13" />
-        <vers num="2.6.14" />
-        <vers num="2.6.15" />
-        <vers prev="1" num="2.6.16" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.6.7" />
-        <vers num="2.6.8" />
-        <vers num="2.6.9" />
-        <vers num="2.7.0" />
-        <vers num="2.7.1" />
-        <vers num="2.7.10" />
-        <vers num="2.7.11" />
-        <vers num="2.7.12" />
-        <vers num="2.7.13" />
-        <vers num="2.7.14" />
-        <vers num="2.7.16" />
-        <vers num="2.7.17" />
-        <vers num="2.7.2" />
-        <vers num="2.7.3" />
-        <vers num="2.7.4" />
-        <vers num="2.7.5" />
-        <vers num="2.7.6" />
-        <vers num="2.7.7" />
-        <vers num="2.7.8" />
-        <vers num="2.7.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3868" published="2012-07-25" name="CVE-2012-3868" modified="2012-07-25" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Race condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause a denial of service (memory consumption or process exit) via a large volume of TCP queries.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kb.isc.org/article/AA-00730" source="CONFIRM" adv="1">https://kb.isc.org/article/AA-00730</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="isc" name="bind">
-        <vers num="9.9.0" edition="a1" />
-        <vers num="9.9.0" edition="a2" />
-        <vers num="9.9.0" edition="a3" />
-        <vers num="9.9.0" edition="b1" />
-        <vers num="9.9.0" edition="b2" />
-        <vers num="9.9.0" edition="rc1" />
-        <vers num="9.9.0" edition="rc2" />
-        <vers num="9.9.0" edition="rc3" />
-        <vers num="9.9.0" edition="rc4" />
-        <vers num="9.9.1" edition="p1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3869" published="2012-08-13" name="CVE-2012-3869" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in include/classes/class.rex_list.inc.php in REDAXO 4.3.x and 4.4 allows remote attackers to inject arbitrary web script or HTML via the subpage parameter to index.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23098" source="MISC">https://www.htbridge.com/advisory/HTB23098</ref>
-      <ref url="http://www.securityfocus.com/bid/54670" source="BID">54670</ref>
-      <ref url="http://www.redaxo.org/de/download/sicherheitshinweise/" source="CONFIRM">http://www.redaxo.org/de/download/sicherheitshinweise/</ref>
-      <ref url="http://secunia.com/advisories/49904" source="SECUNIA" adv="1">49904</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0142.html" source="BUGTRAQ">20120725 Cross-Site Scripting (XSS) in Redaxo</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="redaxo" name="redaxo">
-        <vers num="4.3" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-        <vers num="4.3.3" />
-        <vers num="4.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3881" published="2012-07-12" name="CVE-2012-3881" modified="2012-07-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in RTG 0.7.4 and RTG2 0.9.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) 95.php, (2) view.php, or (3) rtg.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://code.google.com/p/rtg2/issues/detail?id=35" source="MISC">https://code.google.com/p/rtg2/issues/detail?id=35</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/09/2" source="MLIST">[oss-security] 20120709 CVE-2012-3881 RTG and RTG2: 95.php/rtg.php/view.php SQL injection</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adrian_chadd" name="rtg">
-        <vers num="0.7.4" />
-      </prod>
-      <prod vendor="adrian_chadd" name="rtg2">
-        <vers num="0.9.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3884" published="2012-07-26" name="CVE-2012-3884" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it easier for remote attackers to obtain access by sniffing the local wireless network and then replaying the authentication data.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt" source="MISC">http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html" source="BUGTRAQ">20120712 security advisory: AirDroid 1.0.4 beta</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="airdroid" name="airdroid">
-        <vers num="1.0.4" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3885" published="2012-07-26" name="CVE-2012-3885" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The default configuration of AirDroid 1.0.4 beta uses a four-character alphanumeric password, which makes it easier for remote attackers to obtain access via a brute-force attack.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt" source="MISC">http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html" source="BUGTRAQ">20120712 security advisory: AirDroid 1.0.4 beta</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="airdroid" name="airdroid">
-        <vers num="1.0.4" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3886" published="2012-07-26" name="CVE-2012-3886" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">AirDroid 1.0.4 beta uses the MD5 algorithm for values in the checklogin key parameter and 7bb cookie, which makes it easier for remote attackers to obtain cleartext data by sniffing the local wireless network and then conducting a (1) brute-force attack or (2) rainbow-table attack.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt" source="MISC">http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html" source="BUGTRAQ">20120712 security advisory: AirDroid 1.0.4 beta</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="airdroid" name="airdroid">
-        <vers num="1.0.4" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3887" published="2012-07-26" name="CVE-2012-3887" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmission" feature, which allows remote attackers to obtain sensitive information by sniffing the local wireless network, as demonstrated by the SMS message content sent to the sdctl/sms/send/single/ URI.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt" source="MISC">http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html" source="BUGTRAQ">20120712 security advisory: AirDroid 1.0.4 beta</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="airdroid" name="airdroid">
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" edition="beta" />
-        <vers num="1.0.5" />
-        <vers prev="1" num="1.0.6" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3888" published="2012-07-26" name="CVE-2012-3888" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The login implementation in AirDroid 1.0.4 beta allows remote attackers to bypass a multiple-login protection mechanism by modifying a pass value within JSON data.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt" source="MISC">http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html" source="BUGTRAQ">20120712 security advisory: AirDroid 1.0.4 beta</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="airdroid" name="airdroid">
-        <vers num="1.0.4" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3889" published="2012-07-11" name="CVE-2012-3889" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a .IT file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://forums.winamp.com/showthread.php?t=345684" source="CONFIRM" patch="1">http://forums.winamp.com/showthread.php?t=345684</ref>
-      <ref url="http://www.securityfocus.com/bid/54131" source="BID">54131</ref>
-      <ref url="http://secunia.com/advisories/46624" source="SECUNIA">46624</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14748" source="OVAL">oval:org.mitre.oval:def:14748</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nullsoft" name="winamp">
-        <vers num="0.20a" />
-        <vers num="0.92" />
-        <vers num="1.006" />
-        <vers num="1.90" />
-        <vers num="2.0" />
-        <vers num="2.10" />
-        <vers num="2.6" />
-        <vers num="2.9" />
-        <vers num="2.91" />
-        <vers num="2.92" />
-        <vers num="2.95" />
-        <vers num="5.0" />
-        <vers num="5.01" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.06" />
-        <vers num="5.07" />
-        <vers num="5.08c" />
-        <vers num="5.08d" />
-        <vers num="5.08e" />
-        <vers num="5.09" />
-        <vers num="5.091" />
-        <vers num="5.093" />
-        <vers num="5.094" />
-        <vers num="5.1" edition="-" />
-        <vers num="5.1" edition="-:surround" />
-        <vers num="5.11" />
-        <vers num="5.111" />
-        <vers num="5.112" />
-        <vers num="5.12" />
-        <vers num="5.13" />
-        <vers num="5.2" />
-        <vers num="5.21" />
-        <vers num="5.22" />
-        <vers num="5.23" />
-        <vers num="5.24" />
-        <vers num="5.3" />
-        <vers num="5.31" />
-        <vers num="5.32" />
-        <vers num="5.33" />
-        <vers num="5.34" />
-        <vers num="5.35" />
-        <vers num="5.36" />
-        <vers num="5.5" />
-        <vers num="5.51" edition="beta" />
-        <vers num="5.52" />
-        <vers num="5.53" />
-        <vers num="5.531" />
-        <vers num="5.54" edition="beta" />
-        <vers num="5.541" />
-        <vers num="5.55" edition="beta" />
-        <vers num="5.56" />
-        <vers num="5.57" />
-        <vers num="5.572" />
-        <vers num="5.581" />
-        <vers num="5.59" edition="beta" />
-        <vers num="5.61" />
-        <vers prev="1" num="5.623" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3890" published="2012-07-11" name="CVE-2012-3890" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a .IT file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://forums.winamp.com/showthread.php?t=345684" source="CONFIRM" patch="1">http://forums.winamp.com/showthread.php?t=345684</ref>
-      <ref url="http://www.securityfocus.com/bid/54131" source="BID">54131</ref>
-      <ref url="http://secunia.com/advisories/46624" source="SECUNIA">46624</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15553" source="OVAL">oval:org.mitre.oval:def:15553</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nullsoft" name="winamp">
-        <vers num="0.20a" />
-        <vers num="0.92" />
-        <vers num="1.006" />
-        <vers num="1.90" />
-        <vers num="2.0" />
-        <vers num="2.10" />
-        <vers num="2.6" />
-        <vers num="2.9" />
-        <vers num="2.91" />
-        <vers num="2.92" />
-        <vers num="2.95" />
-        <vers num="5.0" />
-        <vers num="5.01" />
-        <vers num="5.02" />
-        <vers num="5.03" />
-        <vers num="5.04" />
-        <vers num="5.05" />
-        <vers num="5.06" />
-        <vers num="5.07" />
-        <vers num="5.08c" />
-        <vers num="5.08d" />
-        <vers num="5.08e" />
-        <vers num="5.09" />
-        <vers num="5.091" />
-        <vers num="5.093" />
-        <vers num="5.094" />
-        <vers num="5.1" edition="-" />
-        <vers num="5.1" edition="-:surround" />
-        <vers num="5.11" />
-        <vers num="5.111" />
-        <vers num="5.112" />
-        <vers num="5.12" />
-        <vers num="5.13" />
-        <vers num="5.2" />
-        <vers num="5.21" />
-        <vers num="5.22" />
-        <vers num="5.23" />
-        <vers num="5.24" />
-        <vers num="5.3" />
-        <vers num="5.31" />
-        <vers num="5.32" />
-        <vers num="5.33" />
-        <vers num="5.34" />
-        <vers num="5.35" />
-        <vers num="5.36" />
-        <vers num="5.5" />
-        <vers num="5.51" edition="beta" />
-        <vers num="5.52" />
-        <vers num="5.53" />
-        <vers num="5.531" />
-        <vers num="5.54" edition="beta" />
-        <vers num="5.541" />
-        <vers num="5.55" edition="beta" />
-        <vers num="5.56" />
-        <vers num="5.57" />
-        <vers num="5.572" />
-        <vers num="5.581" />
-        <vers num="5.59" edition="beta" />
-        <vers num="5.61" />
-        <vers prev="1" num="5.623" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3893" published="2012-09-16" name="CVE-2012-3893" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:C)" CVSS_score="6.3" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="6.8" CVSS_base_score="6.3">
-    <desc>
-      <descript source="cve">The FlexVPN implementation in Cisco IOS 15.2 and 15.3 allows remote authenticated users to cause a denial of service (spoke crash) via spoke-to-spoke traffic, aka Bug ID CSCtz02622.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/ios/15_2s/release/notes/15_2s_caveats_15_2_4s.html" source="CONFIRM">http://www.cisco.com/en/US/docs/ios/15_2s/release/notes/15_2s_caveats_15_2_4s.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="15.2" />
-        <vers num="15.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3895" published="2012-09-16" name="CVE-2012-3895" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:C)" CVSS_score="6.3" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="6.8" CVSS_base_score="6.3">
-    <desc>
-      <descript source="cve">Cisco IOS 15.0 through 15.3 allows remote authenticated users to cause a denial of service (device crash) via an MVPNv6 update, aka Bug ID CSCty89224.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/ios/15_2s/release/notes/15_2s_caveats_15_2_2s.html" source="CONFIRM">http://www.cisco.com/en/US/docs/ios/15_2s/release/notes/15_2s_caveats_15_2_2s.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="15.0" />
-        <vers num="15.0(1)se" />
-        <vers num="15.1" />
-        <vers num="15.2" />
-        <vers num="15.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3899" published="2012-09-16" name="CVE-2012-3899" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and process crash, and traffic-inspection outage) via network traffic, aka Bug ID CSCtn23051.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/web/software/282549758/51927/IPS-6_2-4-E4-readme.txt" source="CONFIRM" adv="1">http://www.cisco.com/web/software/282549758/51927/IPS-6_2-4-E4-readme.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="intrusion_prevention_system">
-        <vers num="6.0" />
-        <vers num="6.2" />
-        <vers num="7.0" />
-      </prod>
-      <prod vendor="cisco" name="ips_4240">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="ips_4250_sx">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="ips_4255">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="ips_4260">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="ips_4270-20">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3901" published="2012-09-16" name="CVE-2012-3901" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The updateTime function in sensorApp on Cisco IPS 4200 series sensors 7.0 and 7.1 allows remote attackers to cause a denial of service (process crash and traffic-inspection outage) via network traffic, aka Bug ID CSCta96144.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/security/ips/7.0/release/notes/22789_01.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/security/ips/7.0/release/notes/22789_01.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="intrusion_prevention_system">
-        <vers num="7.0" />
-        <vers num="7.1" />
-      </prod>
-      <prod vendor="cisco" name="ips_4240">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="ips_4250_sx">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="ips_4255">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="ips_4260">
-        <vers num="" />
-      </prod>
-      <prod vendor="cisco" name="ips_4270-20">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3908" published="2012-09-16" name="CVE-2012-3908" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in the ISE Administrator user interface (aka the Apache Tomcat interface) on Cisco Identity Services Engine (ISE) 3300 series appliances before 1.1.0.665 Cumulative Patch 1 allow remote attackers to hijack the authentication of administrators, aka Bug ID CSCty46684.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/security/ise/1.1/release_notes/ise1.1_rn.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/security/ise/1.1/release_notes/ise1.1_rn.html</ref>
-      <ref url="http://en.securitylab.ru/lab/" source="MISC">http://en.securitylab.ru/lab/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="identity_services_engine_software">
-        <vers num="1.0" />
-        <vers num="1.0.4" />
-        <vers num="1.0mr" />
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-      </prod>
-      <prod vendor="cisco" name="identity_services_engine">
-        <vers num="3300" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3915" published="2012-09-16" name="CVE-2012-3915" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The DMVPN tunnel implementation in Cisco IOS 15.2 allows remote attackers to cause a denial of service (persistent IKE state) via a large volume of hub-to-spoke traffic, aka Bug ID CSCtq39602.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/ios/15_2s/release/notes/15_2s_caveats_15_2_2s.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/ios/15_2s/release/notes/15_2s_caveats_15_2_2s.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="15.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3919" published="2012-09-16" name="CVE-2012-3919" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Cisco Application Control Engine (ACE) module 3.0 for Cisco Catalyst switches and Cisco routers does not properly monitor Load Balancer (LB) queues, which allows remote attackers to cause a denial of service (incorrect memory access and module reboot) via application traffic, aka Bug ID CSCtw70879.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/vA2_3_x/Release/Note/RACEA2_3_X.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/vA2_3_x/Release/Note/RACEA2_3_X.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="application_control_engine_module">
-        <vers num="3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3923" published="2012-09-16" name="CVE-2012-3923" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:P)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service (device crash) via a session involving a PPP over ATM (PPPoA) interface, aka Bug ID CSCte41827.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/ios/15_2m_and_t/release/notes/152-1TCAVS.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/ios/15_2m_and_t/release/notes/152-1TCAVS.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="12.4" />
-        <vers num="15.0" />
-        <vers num="15.1" />
-        <vers num="15.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3924" published="2012-09-16" name="CVE-2012-3924" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:N/A:P)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">The SSLVPN implementation in Cisco IOS 15.1 and 15.2, when DTLS is enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service (device crash) via a session involving a PPP over ATM (PPPoA) interface, aka Bug ID CSCty97961.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.cisco.com/en/US/docs/ios/15_2m_and_t/release/notes/152-1TCAVS.html" source="CONFIRM" adv="1">http://www.cisco.com/en/US/docs/ios/15_2m_and_t/release/notes/152-1TCAVS.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="ios">
-        <vers num="15.1" />
-        <vers num="15.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3935" published="2012-09-12" name="CVE-2012-3935" modified="2012-09-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, aka Bug ID CSCtu32832.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-cupxcp" source="CONFIRM">http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-cupxcp</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="jabber_extensible_communications_platform">
-        <vers prev="1" num="5.2" />
-      </prod>
-      <prod vendor="cisco" name="unified_presence">
-        <vers num="1.0" />
-        <vers num="6.0" />
-        <vers num="6.0(1)" />
-        <vers num="6.0(2)" />
-        <vers num="6.0(3)" />
-        <vers num="6.0(4)" />
-        <vers num="6.0(5)" />
-        <vers num="6.0(6)" />
-        <vers num="6.0(7)" />
-        <vers num="6.0_1" />
-        <vers num="6.0_2" />
-        <vers num="7.0" />
-        <vers num="7.0(1)" />
-        <vers num="7.0(2)" />
-        <vers num="7.0(3)" />
-        <vers num="7.0(4)" />
-        <vers num="7.0(5)" />
-        <vers num="7.0(6)" />
-        <vers num="7.0(7)" />
-        <vers num="7.0(8)" />
-        <vers num="7.0(9)" />
-        <vers num="8.0" />
-        <vers num="8.0(1)" />
-        <vers num="8.0(2)" />
-        <vers num="8.0(3)" />
-        <vers num="8.0(4)" />
-        <vers num="8.5" />
-        <vers num="8.5(1)" />
-        <vers num="8.5(2)" />
-        <vers num="8.5(3)" />
-        <vers num="8.6(1)" />
-        <vers prev="1" num="8.6(2)" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3951" published="2012-07-31" name="CVE-2012-3951" modified="2012-07-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default password of admin for the (1) scrutinizer and (2) scrutremote accounts, which allows remote attackers to execute arbitrary SQL commands via a TCP session.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt" source="MISC">https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt</ref>
-      <ref url="http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html" source="MISC">http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dell" name="sonicwall_scrutinizer">
-        <vers prev="1" num="9.0.1.19899" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3952" published="2012-08-11" name="CVE-2012-3952" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in admin/index.php in phpList before 2.10.19 allows remote attackers to inject arbitrary web script or HTML via the unconfirmed parameter to the user page.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23100" source="MISC">https://www.htbridge.com/advisory/HTB23100</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77526" source="XF">phplist-unconfirmed-xss(77526)</ref>
-      <ref url="http://www.securityfocus.com/bid/54887" source="BID">54887</ref>
-      <ref url="http://www.phplist.com/?lid=579" source="CONFIRM">http://www.phplist.com/?lid=579</ref>
-      <ref url="http://secunia.com/advisories/50150" source="SECUNIA" adv="1">50150</ref>
-      <ref url="http://osvdb.org/84482" source="OSVDB">84482</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-08/0059.html" source="BUGTRAQ">20120808 Multiple Vulnerabilities in phpList</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="phplist" name="phplist">
-        <vers num="2.10.1" />
-        <vers num="2.10.10" />
-        <vers num="2.10.11" />
-        <vers num="2.10.12" />
-        <vers num="2.10.13" />
-        <vers num="2.10.14" />
-        <vers num="2.10.15" />
-        <vers num="2.10.16" />
-        <vers num="2.10.17" />
-        <vers prev="1" num="2.10.18" />
-        <vers num="2.10.2" />
-        <vers num="2.10.3" />
-        <vers num="2.10.4" />
-        <vers num="2.10.5" />
-        <vers num="2.10.7" />
-        <vers num="2.10.8" />
-        <vers num="2.10.9" />
-        <vers num="2.6.5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8.12" />
-        <vers num="2.8.2" />
-        <vers num="2.8.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3953" published="2012-08-11" name="CVE-2012-3953" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in admin/index.php in phpList before 2.10.19 allows remote administrators to execute arbitrary SQL commands via the delete parameter to the editattributes page.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.phplist.com/?lid=579" source="CONFIRM" patch="1" adv="1">http://www.phplist.com/?lid=579</ref>
-      <ref url="https://www.htbridge.com/advisory/HTB23100" source="MISC">https://www.htbridge.com/advisory/HTB23100</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77527" source="XF">phplist-delete-sql-injection(77527)</ref>
-      <ref url="http://osvdb.org/84483" source="OSVDB">84483</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-08/0059.html" source="BUGTRAQ">20120808 Multiple Vulnerabilities in phpList</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="phplist" name="phplist">
-        <vers num="2.10.1" />
-        <vers num="2.10.10" />
-        <vers num="2.10.11" />
-        <vers num="2.10.12" />
-        <vers num="2.10.13" />
-        <vers num="2.10.14" />
-        <vers num="2.10.15" />
-        <vers num="2.10.16" />
-        <vers num="2.10.17" />
-        <vers prev="1" num="2.10.18" />
-        <vers num="2.10.2" />
-        <vers num="2.10.3" />
-        <vers num="2.10.4" />
-        <vers num="2.10.5" />
-        <vers num="2.10.7" />
-        <vers num="2.10.8" />
-        <vers num="2.10.9" />
-        <vers num="2.6.5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8.12" />
-        <vers num="2.8.2" />
-        <vers num="2.8.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-3954" published="2012-07-25" name="CVE-2012-3954" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://kb.isc.org/article/AA-00737" source="CONFIRM" adv="1">https://kb.isc.org/article/AA-00737</ref>
-      <ref url="http://www.ubuntu.com/usn/USN-1519-1" source="UBUNTU">USN-1519-1</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2516" source="DEBIAN">DSA-2516</ref>
-      <ref url="http://rhn.redhat.com/errata/RHSA-2012-1141.html" source="REDHAT">RHSA-2012:1141</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-08/msg00030.html" source="SUSE">openSUSE-SU-2012:1006</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="isc" name="dhcp">
-        <vers num="4.1-esv" edition="r1" />
-        <vers num="4.1-esv" edition="r2" />
-        <vers num="4.1-esv" edition="r3" />
-        <vers num="4.1-esv" edition="r3_b1" />
-        <vers num="4.1-esv" edition="r4" />
-        <vers num="4.1-esv" edition="r5" />
-        <vers num="4.1-esv" edition="r5_b1" />
-        <vers num="4.1-esv" edition="r5_rc1" />
-        <vers num="4.1-esv" edition="r5_rc2" />
-        <vers num="4.1-esv" edition="rc1" />
-        <vers num="4.1.0" edition="a1" />
-        <vers num="4.1.0" edition="a2" />
-        <vers num="4.1.0" edition="b1" />
-        <vers num="4.1.1" edition="b1" />
-        <vers num="4.1.1" edition="b2" />
-        <vers num="4.1.1" edition="b3" />
-        <vers num="4.1.1" edition="rc1" />
-        <vers num="4.1.2" edition="b1" />
-        <vers num="4.1.2" edition="p1" />
-        <vers num="4.1.2" edition="rc1" />
-        <vers num="4.2.0" edition="a1" />
-        <vers num="4.2.0" edition="a2" />
-        <vers num="4.2.0" edition="b1" />
-        <vers num="4.2.0" edition="b2" />
-        <vers num="4.2.0" edition="p1" />
-        <vers num="4.2.0" edition="rc1" />
-        <vers num="4.2.1" edition="b1" />
-        <vers num="4.2.1" edition="rc1" />
-        <vers num="4.2.2" edition="b1" />
-        <vers num="4.2.2" edition="rc1" />
-        <vers num="4.2.3" edition="p1" />
-        <vers num="4.2.3" edition="p2" />
-        <vers num="4.2.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3955" published="2012-09-14" name="CVE-2012-3955" modified="2012-09-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:C)" CVSS_score="7.1" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="8.6" CVSS_base_score="7.1">
-    <desc>
-      <descript source="cve">ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kb.isc.org/article/AA-00779" source="CONFIRM" adv="1">https://kb.isc.org/article/AA-00779</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="isc" name="dhcp">
-        <vers num="4.1-esv" edition="r1" />
-        <vers num="4.1-esv" edition="r2" />
-        <vers num="4.1-esv" edition="r3" />
-        <vers num="4.1-esv" edition="r3_b1" />
-        <vers num="4.1-esv" edition="r4" />
-        <vers num="4.1-esv" edition="r5" />
-        <vers num="4.1-esv" edition="r5_b1" />
-        <vers num="4.1-esv" edition="r5_rc1" />
-        <vers num="4.1-esv" edition="r5_rc2" />
-        <vers num="4.1-esv" edition="r6" />
-        <vers num="4.1-esv" edition="rc1" />
-        <vers num="4.1.0" edition="a1" />
-        <vers num="4.1.0" edition="a2" />
-        <vers num="4.1.0" edition="b1" />
-        <vers num="4.1.1" edition="b1" />
-        <vers num="4.1.1" edition="b2" />
-        <vers num="4.1.1" edition="b3" />
-        <vers num="4.1.1" edition="rc1" />
-        <vers num="4.1.2" edition="b1" />
-        <vers num="4.1.2" edition="p1" />
-        <vers num="4.1.2" edition="rc1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3956" published="2012-08-29" name="CVE-2012-3956" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=774597" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=774597</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-58.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-58.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3957" published="2012-08-29" name="CVE-2012-3957" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the nsBlockFrame::MarkLineDirty function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=774548" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=774548</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-58.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-58.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3958" published="2012-08-29" name="CVE-2012-3958" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the nsHTMLEditRules::DeleteNonTableElements function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=772346" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=772346</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-58.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-58.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3959" published="2012-08-29" name="CVE-2012-3959" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=771994" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=771994</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-58.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-58.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3960" published="2012-08-29" name="CVE-2012-3960" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the mozSpellChecker::SetCurrentDictionary function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=771976" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=771976</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-58.html" source="CONFIRM">http://www.mozilla.org/security/announce/2012/mfsa2012-58.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3961" published="2012-08-29" name="CVE-2012-3961" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the RangeData implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=771873" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=771873</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-58.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-58.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3962" published="2012-08-29" name="CVE-2012-3962" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly iterate through the characters in a text run, which allows remote attackers to execute arbitrary code via a crafted document.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=769120" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=769120</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-58.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-58.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3963" published="2012-08-29" name="CVE-2012-3963" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the js::gc::MapAllocToTraceKind function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=762280" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=762280</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-58.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-58.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3964" published="2012-08-29" name="CVE-2012-3964" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the gfxTextRun::GetUserData function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=756241" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=756241</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-58.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-58.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3965" published="2012-08-29" name="CVE-2012-3965" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Mozilla Firefox before 15.0 does not properly restrict navigation to the about:newtab page, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers creation of a new tab and then a new window.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=769108" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=769108</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-60.html" source="CONFIRM">http://www.mozilla.org/security/announce/2012/mfsa2012-60.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3966" published="2012-08-29" name="CVE-2012-3966" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a negative height value in a BMP image within a .ICO file, related to (1) improper handling of the transparency bitmask by the nsICODecoder component and (2) improper processing of the alpha channel by the nsBMPDecoder component.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=775794" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=775794</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=775793" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=775793</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-61.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-61.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3967" published="2012-08-29" name="CVE-2012-3967" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on Linux, when a large number of sampler uniforms are used, does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=777028" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=777028</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-62.html" source="CONFIRM">http://www.mozilla.org/security/announce/2012/mfsa2012-62.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="0.1" />
-        <vers num="0.10" />
-        <vers num="0.10.1" />
-        <vers num="0.2" />
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.8" />
-        <vers num="0.9" edition="rc" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="1.0" edition="alpha" />
-        <vers num="1.0" edition="beta" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.0.9" />
-        <vers num="1.1" edition="alpha" />
-        <vers num="1.1" edition="beta" />
-        <vers num="1.1.1" />
-        <vers num="1.1.10" />
-        <vers num="1.1.11" />
-        <vers num="1.1.12" />
-        <vers num="1.1.13" />
-        <vers num="1.1.14" />
-        <vers num="1.1.15" />
-        <vers num="1.1.16" />
-        <vers num="1.1.17" />
-        <vers num="1.1.18" />
-        <vers num="1.1.19" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.1.9" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3968" published="2012-08-29" name="CVE-2012-3968" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via vectors related to deletion of a fragment shader by its accessor.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=775852" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=775852</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-62.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-62.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3969" published="2012-08-29" name="CVE-2012-3969" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Integer overflow in the nsSVGFEMorphologyElement::Filter function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via a crafted SVG filter that triggers an incorrect sum calculation, leading to a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=782141" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=782141</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-63.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-63.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3970" published="2012-08-29" name="CVE-2012-3970" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving movement of a requiredFeatures attribute from one SVG document to another.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=760996" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=760996</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-63.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-63.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3971" published="2012-08-29" name="CVE-2012-3971" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Summer Institute of Linguistics (SIL) Graphite 2, as used in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the (1) Silf::readClassMap and (2) Pass::readPass functions.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=753623" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=753623</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=753230" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=753230</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-64.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-64.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3972" published="2012-08-29" name="CVE-2012-3972" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The format-number functionality in the XSLT implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based buffer over-read.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=746855" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=746855</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-65.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-65.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3973" published="2012-08-29" name="CVE-2012-3973" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:C/I:C/A:C)" CVSS_score="7.6" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="4.9" CVSS_base_score="7.6">
-    <desc>
-      <descript source="cve">The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote debugging is disabled, does not properly restrict access to the remote-debugging service, which allows remote attackers to execute arbitrary code by leveraging the presence of the HTTPMonitor extension and connecting to that service through the HTTPMonitor port.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=757128" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=757128</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-66.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-66.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3974" published="2012-08-29" name="CVE-2012-3974" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in the installer in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 on Windows allows local users to gain privileges via a Trojan horse executable file in a root directory.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=770478" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=770478</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-67.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-67.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.18" />
-        <vers num="3.1.19" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3975" published="2012-08-29" name="CVE-2012-3975" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The DOMParser component in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 loads subresources during parsing of text/html data within an extension, which allows remote attackers to obtain sensitive information by providing crafted data to privileged extension code.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=770684" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=770684</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-68.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-68.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3976" published="2012-08-29" name="CVE-2012-3976" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:P)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows remote attackers to spoof the X.509 certificate information in the address bar via a crafted web page.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=768568" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=768568</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-69.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-69.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3978" published="2012-08-29" name="CVE-2012-3978" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 does not properly follow the security model of the location object, which allows remote attackers to bypass intended content-loading restrictions or possibly have unspecified other impact via vectors involving chrome code.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=770429" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=770429</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-70.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-70.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="seamonkey">
-        <vers num="2.0" edition="alpha_1" />
-        <vers num="2.0" edition="alpha_2" />
-        <vers num="2.0" edition="alpha_3" />
-        <vers num="2.0" edition="beta_1" />
-        <vers num="2.0" edition="beta_2" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" edition="alpha1" />
-        <vers num="2.1" edition="alpha2" />
-        <vers num="2.1" edition="alpha3" />
-        <vers num="2.1" edition="beta1" />
-        <vers num="2.1" edition="beta2" />
-        <vers num="2.1" edition="beta3" />
-        <vers num="2.1" edition="rc1" />
-        <vers num="2.1" edition="rc2" />
-        <vers num="2.10" />
-        <vers prev="1" num="2.11" />
-        <vers num="2.2" edition="beta1" />
-        <vers num="2.2" edition="beta2" />
-        <vers num="2.2" edition="beta3" />
-        <vers num="2.3" edition="beta1" />
-        <vers num="2.3" edition="beta2" />
-        <vers num="2.3" edition="beta3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" edition="beta1" />
-        <vers num="2.4" edition="beta2" />
-        <vers num="2.4" edition="beta3" />
-        <vers num="2.4.1" />
-        <vers num="2.5" edition="beta1" />
-        <vers num="2.5" edition="beta2" />
-        <vers num="2.5" edition="beta3" />
-        <vers num="2.5" edition="beta4" />
-        <vers num="2.6" edition="beta1" />
-        <vers num="2.6" edition="beta2" />
-        <vers num="2.6" edition="beta3" />
-        <vers num="2.6" edition="beta4" />
-        <vers num="2.6.1" />
-        <vers num="2.7" edition="beta1" />
-        <vers num="2.7" edition="beta2" />
-        <vers num="2.7" edition="beta3" />
-        <vers num="2.7" edition="beta4" />
-        <vers num="2.7" edition="beta5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8" edition="beta1" />
-        <vers num="2.8" edition="beta2" />
-        <vers num="2.8" edition="beta3" />
-        <vers num="2.8" edition="beta4" />
-        <vers num="2.8" edition="beta5" />
-        <vers num="2.8" edition="beta6" />
-        <vers num="2.9" edition="beta1" />
-        <vers num="2.9" edition="beta2" />
-        <vers num="2.9" edition="beta3" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3979" published="2012-08-29" name="CVE-2012-3979" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Mozilla Firefox before 15.0 on Android does not properly implement unspecified callers of the __android_log_print function, which allows remote attackers to execute arbitrary code via a crafted web page that calls the JavaScript dump function.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=769265" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=769265</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-71.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-71.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="0.1" />
-        <vers num="0.10" />
-        <vers num="0.10.1" />
-        <vers num="0.2" />
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.8" />
-        <vers num="0.9" edition="rc" />
-        <vers num="0.9.1" />
-        <vers num="0.9.2" />
-        <vers num="0.9.3" />
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_mobile">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-      </prod>
-      <prod vendor="google" name="android">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3980" published="2012-08-29" name="CVE-2012-3980" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that injects this code and triggers an eval operation.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=771859" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=771859</ref>
-      <ref url="http://www.mozilla.org/security/announce/2012/mfsa2012-72.html" source="CONFIRM" adv="1">http://www.mozilla.org/security/announce/2012/mfsa2012-72.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="1.0" edition="preview_release" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.4.1" />
-        <vers num="1.5" edition="beta1" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.8" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="11.0" />
-        <vers num="12.0" edition="beta6" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.10" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.16" />
-        <vers num="3.0.17" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.10" />
-        <vers num="3.5.11" />
-        <vers num="3.5.12" />
-        <vers num="3.5.13" />
-        <vers num="3.5.14" />
-        <vers num="3.5.15" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.5.4" />
-        <vers num="3.5.5" />
-        <vers num="3.5.6" />
-        <vers num="3.5.7" />
-        <vers num="3.5.8" />
-        <vers num="3.5.9" />
-        <vers num="3.6" />
-        <vers num="3.6.10" />
-        <vers num="3.6.11" />
-        <vers num="3.6.12" />
-        <vers num="3.6.13" />
-        <vers num="3.6.14" />
-        <vers num="3.6.15" />
-        <vers num="3.6.16" />
-        <vers num="3.6.17" />
-        <vers num="3.6.18" />
-        <vers num="3.6.19" />
-        <vers num="3.6.2" />
-        <vers num="3.6.20" />
-        <vers num="3.6.21" />
-        <vers num="3.6.22" />
-        <vers num="3.6.23" />
-        <vers num="3.6.24" />
-        <vers num="3.6.25" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="4.0" edition="beta1" />
-        <vers num="4.0" edition="beta10" />
-        <vers num="4.0" edition="beta11" />
-        <vers num="4.0" edition="beta12" />
-        <vers num="4.0" edition="beta2" />
-        <vers num="4.0" edition="beta3" />
-        <vers num="4.0" edition="beta4" />
-        <vers num="4.0" edition="beta5" />
-        <vers num="4.0" edition="beta6" />
-        <vers num="4.0" edition="beta7" />
-        <vers num="4.0" edition="beta8" />
-        <vers num="4.0" edition="beta9" />
-        <vers num="4.0.1" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="8.0.1" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="firefox_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.0.5" edition="beta" />
-        <vers num="1.0.6" />
-        <vers num="1.0.7" />
-        <vers num="1.0.8" />
-        <vers num="1.5" edition="beta2" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.0.10" />
-        <vers num="1.5.0.11" />
-        <vers num="1.5.0.12" />
-        <vers num="1.5.0.13" />
-        <vers num="1.5.0.14" />
-        <vers num="1.5.0.2" />
-        <vers num="1.5.0.3" />
-        <vers num="1.5.0.4" />
-        <vers num="1.5.0.5" />
-        <vers num="1.5.0.6" />
-        <vers num="1.5.0.7" />
-        <vers num="1.5.0.8" />
-        <vers num="1.5.0.9" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.7.1" />
-        <vers num="1.7.3" />
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="11.0" />
-        <vers num="12.0" />
-        <vers num="13.0" />
-        <vers prev="1" num="14.0" />
-        <vers num="2.0" />
-        <vers num="2.0.0.0" />
-        <vers num="2.0.0.1" />
-        <vers num="2.0.0.11" />
-        <vers num="2.0.0.12" />
-        <vers num="2.0.0.13" />
-        <vers num="2.0.0.14" />
-        <vers num="2.0.0.15" />
-        <vers num="2.0.0.16" />
-        <vers num="2.0.0.17" />
-        <vers num="2.0.0.18" />
-        <vers num="2.0.0.19" />
-        <vers num="2.0.0.2" />
-        <vers num="2.0.0.20" />
-        <vers num="2.0.0.21" />
-        <vers num="2.0.0.22" />
-        <vers num="2.0.0.23" />
-        <vers num="2.0.0.3" />
-        <vers num="2.0.0.4" />
-        <vers num="2.0.0.5" />
-        <vers num="2.0.0.6" />
-        <vers num="2.0.0.7" />
-        <vers num="2.0.0.8" />
-        <vers num="2.0.0.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.10" />
-        <vers num="3.1.11" />
-        <vers num="3.1.12" />
-        <vers num="3.1.13" />
-        <vers num="3.1.14" />
-        <vers num="3.1.15" />
-        <vers num="3.1.16" />
-        <vers num="3.1.17" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-        <vers num="5.0" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="8.0" />
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-      </prod>
-      <prod vendor="mozilla" name="thunderbird_esr">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.0.4" />
-        <vers num="10.0.5" />
-        <vers num="10.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3981" published="2012-09-04" name="CVE-2012-3981" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Auth/Verify/LDAP.pm in Bugzilla 2.x and 3.x before 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3 does not restrict the characters in a username, which might allow remote attackers to inject data into an LDAP directory via a crafted login attempt.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.bugzilla.org/security/3.6.10/" source="CONFIRM" patch="1" adv="1">http://www.bugzilla.org/security/3.6.10/</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=785470" source="CONFIRM">https://bugzilla.mozilla.org/show_bug.cgi?id=785470</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=785112" source="MISC">https://bugzilla.mozilla.org/show_bug.cgi?id=785112</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="bugzilla">
-        <vers num="2.0" />
-        <vers num="2.10" />
-        <vers num="2.12" />
-        <vers num="2.14" />
-        <vers num="2.14.1" />
-        <vers num="2.14.2" />
-        <vers num="2.14.3" />
-        <vers num="2.14.4" />
-        <vers num="2.14.5" />
-        <vers num="2.16" edition="rc1" />
-        <vers num="2.16" edition="rc2" />
-        <vers num="2.16.1" />
-        <vers num="2.16.10" />
-        <vers num="2.16.11" />
-        <vers num="2.16.2" />
-        <vers num="2.16.3" />
-        <vers num="2.16.4" />
-        <vers num="2.16.5" />
-        <vers num="2.16.6" />
-        <vers num="2.16.7" />
-        <vers num="2.16.8" />
-        <vers num="2.16.9" />
-        <vers num="2.17" />
-        <vers num="2.17.1" />
-        <vers num="2.17.2" />
-        <vers num="2.17.3" />
-        <vers num="2.17.4" />
-        <vers num="2.17.5" />
-        <vers num="2.17.6" />
-        <vers num="2.17.7" />
-        <vers num="2.18" edition="rc1" />
-        <vers num="2.18" edition="rc2" />
-        <vers num="2.18" edition="rc3" />
-        <vers num="2.18.1" />
-        <vers num="2.18.2" />
-        <vers num="2.18.3" />
-        <vers num="2.18.4" />
-        <vers num="2.18.5" />
-        <vers num="2.18.6" />
-        <vers num="2.18.6+" />
-        <vers num="2.18.7" />
-        <vers num="2.18.8" />
-        <vers num="2.18.9" />
-        <vers num="2.19" />
-        <vers num="2.19.1" />
-        <vers num="2.19.2" />
-        <vers num="2.19.3" />
-        <vers num="2.2" />
-        <vers num="2.20" edition="rc1" />
-        <vers num="2.20" edition="rc2" />
-        <vers num="2.20.1" />
-        <vers num="2.20.2" />
-        <vers num="2.20.3" />
-        <vers num="2.20.4" />
-        <vers num="2.20.5" />
-        <vers num="2.20.6" />
-        <vers num="2.20.7" />
-        <vers num="2.21" />
-        <vers num="2.21.1" />
-        <vers num="2.21.2" edition="rc1" />
-        <vers num="2.22" edition="rc1" />
-        <vers num="2.22.1" />
-        <vers num="2.22.2" />
-        <vers num="2.22.3" />
-        <vers num="2.22.4" />
-        <vers num="2.22.5" />
-        <vers num="2.22.6" />
-        <vers num="2.22.7" />
-        <vers num="2.23" />
-        <vers num="2.23.1" />
-        <vers num="2.23.2" />
-        <vers num="2.23.3" />
-        <vers num="2.23.4" />
-        <vers num="2.4" />
-        <vers num="2.6" />
-        <vers num="2.8" />
-        <vers num="2.9" />
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.2" edition="rc1" />
-        <vers num="3.2" edition="rc2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.10" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" />
-        <vers num="3.2.8" />
-        <vers num="3.2.9" />
-        <vers num="3.3" />
-        <vers num="3.3.1" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers num="3.3.4" />
-        <vers num="3.4" edition="rc1" />
-        <vers num="3.4.1" />
-        <vers num="3.4.10" />
-        <vers num="3.4.11" />
-        <vers num="3.4.12" />
-        <vers num="3.4.13" />
-        <vers num="3.4.2" />
-        <vers num="3.4.3" />
-        <vers num="3.4.4" />
-        <vers num="3.4.5" />
-        <vers num="3.4.6" />
-        <vers num="3.4.7" />
-        <vers num="3.4.8" />
-        <vers num="3.4.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.6" edition="rc1" />
-        <vers num="3.6.0" />
-        <vers num="3.6.1" />
-        <vers num="3.6.10" />
-        <vers num="3.6.2" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.5" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="3.7" />
-        <vers num="3.7.1" />
-        <vers num="3.7.2" />
-        <vers num="3.7.3" />
-        <vers num="4.0.7" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="4.1.3" />
-        <vers num="4.2" edition="rc1" />
-        <vers num="4.2" edition="rc2" />
-        <vers num="4.2.1" />
-        <vers num="4.2.2" />
-        <vers num="4.3" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3996" published="2012-07-12" name="CVE-2012-3996" modified="2012-07-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (1) admin/include_calendar.php, (2) tiki-rss_error.php, or (3) tiki-watershed_service.php.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://info.tiki.org/article191-Tiki-Releases-8-4" source="MISC" patch="1">http://info.tiki.org/article191-Tiki-Releases-8-4</ref>
-      <ref url="http://info.tiki.org/article190-Tiki-Wiki-CMS-Groupware-Updates-Tiki-6-7-LTS" source="MISC" patch="1">http://info.tiki.org/article190-Tiki-Wiki-CMS-Groupware-Updates-Tiki-6-7-LTS</ref>
-      <ref url="http://dev.tiki.org/item4109" source="MISC" patch="1">http://dev.tiki.org/item4109</ref>
-      <ref url="http://www.osvdb.org/83533" source="OSVDB">83533</ref>
-      <ref url="http://www.exploit-db.com/exploits/19630" source="EXPLOIT-DB">19630</ref>
-      <ref url="http://www.exploit-db.com/exploits/19573" source="EXPLOIT-DB">19573</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-07/0020.html" source="BUGTRAQ">20120704 [CVE-2012-0911] Tiki Wiki CMS Groupware &lt;= 8.3 </ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tikiwiki" name="tikiwiki">
-        <vers num="0.9" />
-        <vers num="0.95" />
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="1.4" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.5" />
-        <vers num="1.6" />
-        <vers num="1.6.1" />
-        <vers num="1.7" />
-        <vers num="1.7.1" />
-        <vers num="1.7.1.1" />
-        <vers num="1.8" />
-        <vers num="1.8.1" />
-        <vers num="1.8.2" />
-        <vers num="1.8.3" />
-        <vers num="1.8.4" />
-        <vers num="1.8.5" />
-        <vers num="1.8.6" />
-        <vers num="1.9" />
-        <vers num="1.9.1" />
-        <vers num="1.9.1.1" />
-        <vers num="1.9.10" />
-        <vers num="1.9.10.1" />
-        <vers num="1.9.11" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.3.1" />
-        <vers num="1.9.3.2" />
-        <vers num="1.9.4" />
-        <vers num="1.9.5" />
-        <vers num="1.9.6" />
-        <vers num="1.9.7" />
-        <vers num="1.9.8" />
-        <vers num="1.9.8.1" />
-        <vers num="1.9.8.2" />
-        <vers num="1.9.8.3" />
-        <vers num="1.9.9" />
-        <vers num="1.9_rc1" />
-        <vers num="1.9_rc2" />
-        <vers num="1.9_rc3" />
-        <vers num="1.9_rc3.1" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-        <vers num="4.2" />
-        <vers num="5.0" />
-        <vers num="5.1" edition="rc1" />
-        <vers num="5.2" />
-        <vers num="5.3" />
-        <vers num="5.4" />
-        <vers num="6.0" />
-        <vers num="6.1" />
-        <vers num="6.2" />
-        <vers num="6.3" />
-        <vers num="6.4" />
-        <vers num="6.5" />
-        <vers num="6.6" />
-        <vers num="6.7" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.0" edition="rc1" />
-        <vers num="7.1" edition="rc1" />
-        <vers num="7.2" />
-        <vers num="8.0" edition="beta" />
-        <vers num="8.0" edition="rc1" />
-        <vers num="8.1" />
-        <vers num="8.2" />
-        <vers prev="1" num="8.3" />
-      </prod>
-      <prod vendor="tikiwiki" name="tikiwiki_cms/groupware">
-        <vers num="2.2" />
-        <vers num="3.0" />
-        <vers num="3.1" />
-        <vers num="3.2" />
-        <vers num="3.3" />
-        <vers num="3.4" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3997" published="2012-07-12" name="CVE-2012-3997" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to inject arbitrary web script or HTML via the (1) paste_user or (2) paste_lang parameter to (a) list.php or (b) show.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://gitorious.org/sticky-notes/sticky-notes/commit/d97475f07520d61af3d20fbaeb2e9a974c190308" source="CONFIRM" patch="1">http://gitorious.org/sticky-notes/sticky-notes/commit/d97475f07520d61af3d20fbaeb2e9a974c190308</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=810928" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=810928</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/083169.html" source="FEDORA">FEDORA-2012-9714</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/083120.html" source="FEDORA">FEDORA-2012-9739</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sayakbanerjee" name="sticky_notes">
-        <vers num="0.2.27052012.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-3998" published="2012-07-12" name="CVE-2012-3998" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to execute arbitrary SQL commands via the (1) paste id in admin/modules/mod_pastes.php or (2) show.php, (3) user id to admin/modules/mod_users.php, (4) project to list.php, or (5) session id to show.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://gitorious.org/sticky-notes/sticky-notes/commit/d97475f07520d61af3d20fbaeb2e9a974c190308" source="CONFIRM" patch="1">http://gitorious.org/sticky-notes/sticky-notes/commit/d97475f07520d61af3d20fbaeb2e9a974c190308</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=810928" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=810928</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/083169.html" source="FEDORA">FEDORA-2012-9714</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/083120.html" source="FEDORA">FEDORA-2012-9739</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sayakbanerjee" name="sticky_notes">
-        <vers num="0.2.27052012.4" />
-        <vers prev="1" num="0.2.27052012.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-3999" published="2012-07-12" name="CVE-2012-3999" modified="2012-07-19" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in admin/login.php in Sticky Notes 0.3.09062012.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://gitorious.org/sticky-notes/sticky-notes/merge_requests/2" source="MISC">https://gitorious.org/sticky-notes/sticky-notes/merge_requests/2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sayakbanerjee" name="sticky_notes">
-        <vers prev="1" num="0.3.09062012.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4000" published="2012-07-12" name="CVE-2012-4000" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the print_textinputs_var function in editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor 2.6.7 and earlier allows remote attackers to inject arbitrary web script or HTML via textinputs array parameters.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76604" source="XF">fckeditor-spellchecker-xss(76604)</ref>
-      <ref url="http://www.securityfocus.com/bid/54188" source="BID">54188</ref>
-      <ref url="http://secunia.com/advisories/49606" source="SECUNIA" adv="1">49606</ref>
-      <ref url="http://disse.cting.org/blog/2012/06/22/fckeditor-reflected-xss-vulnerability/" source="MISC">http://disse.cting.org/blog/2012/06/22/fckeditor-reflected-xss-vulnerability/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ckeditor" name="fckeditor">
-        <vers num="0.8" edition="beta" />
-        <vers num="0.8.5" edition="beta" />
-        <vers num="0.9.0" edition="beta" />
-        <vers num="0.9.1" edition="beta" />
-        <vers num="0.9.2" edition="beta" />
-        <vers num="0.9.3" edition="beta" />
-        <vers num="0.9.4" edition="beta" />
-        <vers num="0.9.5" edition="beta" />
-        <vers num="1.0" edition="fc" />
-        <vers num="1.0" edition="rc1" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.2" />
-        <vers num="1.2.4" />
-        <vers num="1.3" />
-        <vers num="1.3.1" />
-        <vers num="1.4" />
-        <vers num="1.5" />
-        <vers num="1.6" />
-        <vers num="2.0" edition="beta1" />
-        <vers num="2.0" edition="beta2" />
-        <vers num="2.0" edition="fc" />
-        <vers num="2.0" edition="rc1" />
-        <vers num="2.0" edition="rc2" />
-        <vers num="2.0" edition="rc3" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.2" />
-        <vers num="2.3" edition="beta" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.4" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.5" edition="beta" />
-        <vers num="2.5.1" />
-        <vers num="2.6" edition="beta" />
-        <vers num="2.6" edition="rc" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" edition="beta" />
-        <vers num="2.6.4" edition="beta" />
-        <vers num="2.6.4.1" />
-        <vers num="2.6.5" />
-        <vers prev="1" num="2.6.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4001" published="2012-09-15" name="CVE-2012-4001" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers to trigger HTTP requests to arbitrary hosts via unspecified vectors, as demonstrated by requests to intranet servers.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://developers.google.com/speed/docs/mod_pagespeed/CVE-2012-4001" source="CONFIRM" adv="1">https://developers.google.com/speed/docs/mod_pagespeed/CVE-2012-4001</ref>
-      <ref url="https://developers.google.com/speed/docs/mod_pagespeed/announce-0.10.22.6" source="CONFIRM" adv="1">https://developers.google.com/speed/docs/mod_pagespeed/announce-0.10.22.6</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="modpagespeed" name="mod_pagespeed">
-        <vers num="0.10.19.1" />
-        <vers prev="1" num="0.10.22.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4004" published="2012-08-08" name="CVE-2012-4004" modified="2012-08-09" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allows remote attackers to inject arbitrary web script or HTML via a crafted application that interacts with an unspecified Sleipnir Mobile function.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black" source="CONFIRM">https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black</ref>
-      <ref url="https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir" source="CONFIRM">https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000076" source="JVNDB">JVNDB-2012-000076</ref>
-      <ref url="http://jvn.jp/en/jp/JVN39519659/index.html" source="JVN">JVN#39519659</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="fenrir-inc" name="sleipnir_mobile">
-        <vers num="1.0.0" edition="alpha" />
-        <vers num="1.0.0" edition="alpha:black" />
-        <vers num="1.0.0" edition="beta_update1" />
-        <vers num="1.0.0" edition="beta_update1:black" />
-        <vers num="1.0.0" edition="rc" />
-        <vers num="1.0.0" edition="rc:black" />
-        <vers num="1.1.0" edition="-" />
-        <vers num="1.1.0" edition="-:black" />
-        <vers num="1.2.0" edition="-" />
-        <vers num="1.2.0" edition="-:black" />
-        <vers num="1.3.0" edition="-" />
-        <vers num="1.3.0" edition="-:black" />
-        <vers num="1.4.0" edition="-" />
-        <vers num="1.4.0" edition="-:black" />
-        <vers num="1.5.0" edition="-" />
-        <vers num="1.5.0" edition="-:black" />
-        <vers num="1.5.1" edition="-" />
-        <vers num="1.5.1" edition="-:black" />
-        <vers num="1.6.0" edition="-" />
-        <vers num="1.6.0" edition="-:black" />
-        <vers num="1.7.0" edition="-" />
-        <vers num="1.7.0" edition="-:black" />
-        <vers num="1.7.1" edition="-" />
-        <vers num="1.7.1" edition="-:black" />
-        <vers num="2.0.0" edition="-" />
-        <vers num="2.0.0" edition="-:black" />
-        <vers num="2.0.1" edition="-" />
-        <vers num="2.0.1" edition="-:black" />
-        <vers num="2.0.2" edition="-" />
-        <vers num="2.0.2" edition="-:black" />
-        <vers num="2.0.3" edition="-" />
-        <vers num="2.0.3" edition="-:black" />
-        <vers num="2.0.4" edition="-" />
-        <vers num="2.0.4" edition="-:black" />
-        <vers num="2.1.0" edition="-" />
-        <vers num="2.1.0" edition="-:black" />
-        <vers prev="1" num="2.2.0" edition="-" />
-        <vers prev="1" num="2.2.0" edition="-:black" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4005" published="2012-08-07" name="CVE-2012-4005" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The NHN Japan NAVER LINE application before 2.5.5 for Android does not properly handle implicit intents, which allows remote attackers to obtain sensitive message information via a crafted application.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://lineblog.naver.jp/archives/12893561.html" source="CONFIRM" adv="1">http://lineblog.naver.jp/archives/12893561.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000074" source="JVNDB">JVNDB-2012-000074</ref>
-      <ref url="http://jvn.jp/en/jp/JVN67435981/index.html" source="JVN">JVN#67435981</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="naver" name="nhn_japan_naver_line">
-        <vers prev="1" num="2.5" edition="" />
-        <vers prev="1" num="2.5" edition=":~~~android~~" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4006" published="2012-08-17" name="CVE-2012-4006" modified="2012-08-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The GREE application before 1.4.0, GREE Tanken Dorirando application before 1.0.7, GREE Tsurisuta application before 1.5.0, GREE Monpura application before 1.1.1, GREE Kaizokuoukoku Columbus application before 1.3.5, GREE haconiwa application before 1.1.0, GREE Seisen Cerberus application before 1.1.0, and KDDI&amp;GREE GREE Market application before 2.1.2 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000077" source="JVNDB">JVNDB-2012-000077</ref>
-      <ref url="http://jvn.jp/en/jp/JVN99192898/index.html" source="JVN">JVN#99192898</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gree" name="gree">
-        <vers prev="1" num="1.3.9" />
-      </prod>
-      <prod vendor="gree" name="haconiwa">
-        <vers prev="1" num="1.0.9" />
-      </prod>
-      <prod vendor="gree" name="kaizokuoukoku_columbus">
-        <vers prev="1" num="1.3.4" />
-      </prod>
-      <prod vendor="gree" name="monpura">
-        <vers prev="1" num="1.1.0" />
-      </prod>
-      <prod vendor="gree" name="seisen_cerberus">
-        <vers prev="1" num="1.0.9" />
-      </prod>
-      <prod vendor="gree" name="tanken_dorirando">
-        <vers prev="1" num="1.0.6" />
-      </prod>
-      <prod vendor="gree" name="tsurisuta">
-        <vers prev="1" num="1.4.9" />
-      </prod>
-      <prod vendor="kddi_&amp;_gree" name="gree_market">
-        <vers prev="1" num="2.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4007" published="2012-08-17" name="CVE-2012-4007" modified="2012-08-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The mixi application before 4.3.0 for Android allows remote attackers to read potentially sensitive information in friends' comments via a crafted application that leverages the storage of these comments on an SD card.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000078" source="JVNDB">JVNDB-2012-000078</ref>
-      <ref url="http://jvn.jp/en/jp/JVN92038939/index.html" source="JVN">JVN#92038939</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mixi" name="mixi">
-        <vers prev="1" num="4.2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4008" published="2012-08-31" name="CVE-2012-4008" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://magazine.cybozulive.com/2012/08/291200.html" source="CONFIRM">http://magazine.cybozulive.com/2012/08/291200.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000081" source="JVNDB">JVNDB-2012-000081</ref>
-      <ref url="http://jvn.jp/en/jp/JVN23009798/index.html" source="JVN">JVN#23009798</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cybozu" name="cybozu_live">
-        <vers prev="1" num="1.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4009" published="2012-08-31" name="CVE-2012-4009" modified="2012-09-02" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The WebView class in the Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://magazine.cybozulive.com/2012/08/291200.html" source="CONFIRM">http://magazine.cybozulive.com/2012/08/291200.html</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000082" source="JVNDB">JVNDB-2012-000082</ref>
-      <ref url="http://jvn.jp/en/jp/JVN77393797/index.html" source="JVN">JVN#77393797</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cybozu" name="cybozu_live">
-        <vers prev="1" num="1.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4010" published="2012-08-30" name="CVE-2012-4010" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Opera before 11.60 allows remote attackers to spoof the address bar via unspecified homograph characters, a different vulnerability than CVE-2010-2660.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1160/" source="MISC">http://www.opera.com/docs/changelogs/windows/1160/</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000080" source="JVNDB">JVNDB-2012-000080</ref>
-      <ref url="http://jvn.jp/en/jp/JVN69880570/index.html" source="JVN">JVN#69880570</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers prev="1" num="11.60" edition="beta" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4011" published="2012-09-08" name="CVE-2012-4011" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The Cybozu KUNAI application before 2.0.6 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000083" source="JVNDB">JVNDB-2012-000083</ref>
-      <ref url="http://jvn.jp/en/jp/JVN23568423/index.html" source="JVN">JVN#23568423</ref>
-      <ref url="http://cs.cybozu.co.jp/information/20120910up01.php" source="CONFIRM" adv="1">http://cs.cybozu.co.jp/information/20120910up01.php</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cybozu" name="kunai">
-        <vers prev="1" num="2.0.5" edition="-" />
-        <vers prev="1" num="2.0.5" edition="-:~~~android~~" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4012" published="2012-09-08" name="CVE-2012-4012" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The WebView class in the Cybozu KUNAI application before 2.0.6 for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000084" source="JVNDB">JVNDB-2012-000084</ref>
-      <ref url="http://jvn.jp/en/jp/JVN59652356/index.html" source="JVN">JVN#59652356</ref>
-      <ref url="http://cs.cybozu.co.jp/information/20120910up02.php" source="CONFIRM">http://cs.cybozu.co.jp/information/20120910up02.php</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cybozu" name="kunai">
-        <vers prev="1" num="2.0.5" edition="-" />
-        <vers prev="1" num="2.0.5" edition="-:~~~android~~" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4013" published="2012-09-14" name="CVE-2012-4013" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The WebView class in the Cybozu KUNAI Browser for Remote Service application beta for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://products.cybozu.co.jp/remote/product/smartphone/" source="MISC">http://products.cybozu.co.jp/remote/product/smartphone/</ref>
-      <ref url="http://jvndb.jvn.jp/jvndb/JVNDB-2012-000085" source="JVNDB">JVNDB-2012-000085</ref>
-      <ref url="http://jvn.jp/en/jp/JVN03015214/index.html" source="JVN">JVN#03015214</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cybozu" name="kunai_browser_for_remote_service">
-        <vers num="-" edition="beta" />
-        <vers num="-" edition="beta:~~~android~~" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4024" published="2012-07-19" name="CVE-2012-4024" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in the get_component function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted list file (aka a crafted file for the -ef option).  NOTE: probably in most cases, the list file is a trusted file constructed by the program's user; however, there are some realistic situations in which a list file would be obtained from an untrusted remote source.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.osvdb.org/83898" source="OSVDB">83898</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/19/6" source="MLIST">[oss-security] 20120719 CVE-2012-4024 and CVE-2012-4025: Squashfs overflows</ref>
-      <ref url="http://sourceforge.net/mailarchive/forum.php?thread_name=CAAoG81HL9oP8roPLLhftTSXTzSD%2BZcR66PRkVU%3Df76W3Mjde_w%40mail.gmail.com&amp;forum_name=squashfs-devel" source="MISC">http://sourceforge.net/mailarchive/forum.php?thread_name=CAAoG81HL9oP8roPLLhftTSXTzSD%2BZcR66PRkVU%3Df76W3Mjde_w%40mail.gmail.com&amp;forum_name=squashfs-devel</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="phillip_lougher" name="squashfs">
-        <vers num="1.3" edition="r3" />
-        <vers num="2.2" edition="r2" />
-        <vers num="3.0" />
-        <vers num="3.4" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-        <vers prev="1" num="4.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4025" published="2012-07-19" name="CVE-2012-4025" modified="2012-07-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Integer overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted block_log field in the superblock of a .sqsh file, leading to a heap-based buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.osvdb.org/83899" source="OSVDB">83899</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/07/19/6" source="MLIST">[oss-security] 20120719 CVE-2012-4024 and CVE-2012-4025: Squashfs overflows</ref>
-      <ref url="http://sourceforge.net/mailarchive/forum.php?thread_name=CAAoG81HL9oP8roPLLhftTSXTzSD%2BZcR66PRkVU%3Df76W3Mjde_w%40mail.gmail.com&amp;forum_name=squashfs-devel" source="MISC">http://sourceforge.net/mailarchive/forum.php?thread_name=CAAoG81HL9oP8roPLLhftTSXTzSD%2BZcR66PRkVU%3Df76W3Mjde_w%40mail.gmail.com&amp;forum_name=squashfs-devel</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="phillip_lougher" name="squashfs">
-        <vers num="1.3" edition="r3" />
-        <vers num="2.2" edition="r2" />
-        <vers num="3.0" />
-        <vers num="3.4" />
-        <vers num="4.0" />
-        <vers num="4.1" />
-        <vers prev="1" num="4.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4026" published="2012-07-16" name="CVE-2012-4026" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Johnson Controls Pegasys P2000 server with software before 3.11 allows remote attackers to trigger false alerts via crafted packets to TCP port 41013 (aka the upload port), a different vulnerability than CVE-2012-2607.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/977312" source="CERT-VN">VU#977312</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/MORO-8UYN8P" source="CONFIRM">http://www.kb.cert.org/vuls/id/MORO-8UYN8P</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="johnsoncontrols" name="pegasys_p2000_server_software">
-        <vers prev="1" num="3.10" />
-      </prod>
-      <prod vendor="johnsoncontrols" name="pegasys_p2000_server">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4027" published="2012-07-16" name="CVE-2012-4027" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav, and px folders by leveraging incorrect permissions, as demonstrated by reading the config.bog file.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.tridium.com/galleries/briefings/NiagaraAX_Framework_Software_Security_Alert.pdf" source="CONFIRM" adv="1">https://www.tridium.com/galleries/briefings/NiagaraAX_Framework_Software_Security_Alert.pdf</ref>
-      <ref url="http://www.washingtonpost.com/investigations/tridiums-niagara-framework-marvel-of-connectivity-illustrates-new-cyber-risks/2012/07/11/gJQARJL6dW_story.html" source="MISC">http://www.washingtonpost.com/investigations/tridiums-niagara-framework-marvel-of-connectivity-illustrates-new-cyber-risks/2012/07/11/gJQARJL6dW_story.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tridium" name="niagra_ax_framework">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4028" published="2012-07-16" name="CVE-2012-4028" modified="2012-07-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.tridium.com/galleries/briefings/NiagaraAX_Framework_Software_Security_Alert.pdf" source="CONFIRM" adv="1">https://www.tridium.com/galleries/briefings/NiagaraAX_Framework_Software_Security_Alert.pdf</ref>
-      <ref url="http://www.washingtonpost.com/investigations/tridiums-niagara-framework-marvel-of-connectivity-illustrates-new-cyber-risks/2012/07/11/gJQARJL6dW_story.html" source="MISC">http://www.washingtonpost.com/investigations/tridiums-niagara-framework-marvel-of-connectivity-illustrates-new-cyber-risks/2012/07/11/gJQARJL6dW_story.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tridium" name="niagra_ax_framework">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4031" published="2012-07-17" name="CVE-2012-4031" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) lang or (2) langid cookie to port 85.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76682" source="XF">wangkongbao-acloglogin-directory-traversal(76682)</ref>
-      <ref url="http://www.securityfocus.com/bid/54267" source="BID">54267</ref>
-      <ref url="http://www.exploit-db.com/exploits/19526" source="EXPLOIT-DB">19526</ref>
-      <ref url="http://secunia.com/advisories/49776" source="SECUNIA" adv="1">49776</ref>
-      <ref url="http://osvdb.org/83636" source="OSVDB">83636</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wangkongbao" name="cns-1000">
-        <vers num="" />
-      </prod>
-      <prod vendor="wangkongbao" name="cns-1100">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4032" published="2012-07-17" name="CVE-2012-4032" modified="2012-08-01" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in ReturnUrl to Default.aspx.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76803" source="XF">websitepanel-returnurl-open-redirect(76803)</ref>
-      <ref url="http://www.securityfocus.com/bid/54346" source="BID">54346</ref>
-      <ref url="http://websitepanel.codeplex.com/workitem/224" source="CONFIRM">http://websitepanel.codeplex.com/workitem/224</ref>
-      <ref url="http://secunia.com/advisories/49813" source="SECUNIA" adv="1">49813</ref>
-      <ref url="http://packetstormsecurity.org/files/114541/WebsitePanel-CMS-Open-Redirect.html" source="MISC">http://packetstormsecurity.org/files/114541/WebsitePanel-CMS-Open-Redirect.html</ref>
-      <ref url="http://osvdb.org/83689" source="OSVDB">83689</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="websitepanel" name="websitepanel">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.0" />
-        <vers num="1.1.2" />
-        <vers num="1.2.0" />
-        <vers prev="1" num="1.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4033" published="2012-07-18" name="CVE-2012-4033" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in the Zingiri Web Shop plugin before 2.4.0 for WordPress have unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75044" source="XF">zingiri-wordpress-unspecified(75044)</ref>
-      <ref url="http://wordpress.org/extend/plugins/zingiri-web-shop/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/zingiri-web-shop/changelog/</ref>
-      <ref url="http://secunia.com/advisories/48909" source="SECUNIA" adv="1">48909</ref>
-      <ref url="http://forums.zingiri.com/announcements.php?aid=2" source="CONFIRM">http://forums.zingiri.com/announcements.php?aid=2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="zingiri" name="zingiri_web_shop">
-        <vers num="1.0.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.0.3" />
-        <vers num="1.0.4" />
-        <vers num="1.1.0" />
-        <vers num="1.1.1" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers num="1.2.8" />
-        <vers num="1.2.9" />
-        <vers num="1.3.0" />
-        <vers num="1.3.0.1" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.3.4" />
-        <vers num="1.3.5" />
-        <vers num="1.3.6" />
-        <vers num="1.3.7" />
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.5.0" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.5.5" />
-        <vers num="1.5.6" />
-        <vers num="1.5.7" />
-        <vers num="1.5.8" />
-        <vers num="1.5.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.8.1" />
-        <vers num="1.8.2" />
-        <vers num="1.8.3" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-        <vers num="2.3.5" />
-        <vers num="2.3.6" />
-        <vers prev="1" num="2.3.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4034" published="2012-08-11" name="CVE-2012-4034" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in PBBoard 2.1.4 allow remote attackers to execute arbitrary SQL commands via the (1) username parameter to the send page, (2) email parameter to the forget page, (3) password parameter to the forum_archive page, (4) section parameter to the management page, (5) section_id parameter to the managementreply page, (6) member_id parameter to the new_password page, or (7) subjectid parameter to the tags page to index.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23101" source="MISC">https://www.htbridge.com/advisory/HTB23101</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77501" source="XF">pbboard-indexscript-sql-injection(77501)</ref>
-      <ref url="http://www.securityfocus.com/bid/54916" source="BID">54916</ref>
-      <ref url="http://www.pbboard.com/forums/t10353.html" source="MISC" adv="1">http://www.pbboard.com/forums/t10353.html</ref>
-      <ref url="http://www.pbboard.com/forums/t10352.html" source="MISC">http://www.pbboard.com/forums/t10352.html</ref>
-      <ref url="http://secunia.com/advisories/50153" source="SECUNIA" adv="1">50153</ref>
-      <ref url="http://osvdb.org/84480" source="OSVDB">84480</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pbboard" name="pbboard">
-        <vers num="2.1.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4035" published="2012-08-11" name="CVE-2012-4035" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The new_password page in PBBoard 2.1.4 allows remote attackers to change the password of arbitrary user accounts via the member_id and new_password parameters to index.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23101" source="MISC">https://www.htbridge.com/advisory/HTB23101</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77506" source="XF">pbboard-index-security-bypass(77506)</ref>
-      <ref url="http://www.securityfocus.com/bid/54916" source="BID">54916</ref>
-      <ref url="http://www.pbboard.com/forums/t10353.html" source="MISC" adv="1">http://www.pbboard.com/forums/t10353.html</ref>
-      <ref url="http://www.pbboard.com/forums/t10352.html" source="MISC">http://www.pbboard.com/forums/t10352.html</ref>
-      <ref url="http://secunia.com/advisories/50153" source="SECUNIA" adv="1">50153</ref>
-      <ref url="http://osvdb.org/84481" source="OSVDB">84481</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pbboard" name="pbboard">
-        <vers num="2.1.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4036" published="2012-08-27" name="CVE-2012-4036" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the addons directory.  NOTE: this vulnerability can be leveraged by remote attackers using CVE-2012-1216.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/434.html 'CWE-434: Unrestricted Upload of File with Dangerous Type'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23101" source="MISC">https://www.htbridge.com/advisory/HTB23101</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77508" source="XF">pbboard-admin-security-bypass(77508)</ref>
-      <ref url="http://www.securityfocus.com/bid/54916" source="BID">54916</ref>
-      <ref url="http://www.pbboard.com/forums/t10353.html" source="MISC">http://www.pbboard.com/forums/t10353.html</ref>
-      <ref url="http://www.pbboard.com/forums/t10352.html" source="MISC" adv="1">http://www.pbboard.com/forums/t10352.html</ref>
-      <ref url="http://secunia.com/advisories/50153" source="SECUNIA" adv="1">50153</ref>
-      <ref url="http://osvdb.org/84479" source="OSVDB">84479</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pbboard" name="pbboard">
-        <vers num="2.1.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4037" published="2012-08-15" name="CVE-2012-4037" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the web client in Transmission before 2.61 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) created by, or (3) name field in a torrent file.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://trac.transmissionbt.com/ticket/4979" source="CONFIRM" patch="1">https://trac.transmissionbt.com/ticket/4979</ref>
-      <ref url="https://trac.transmissionbt.com/wiki/Changes#version-2.61" source="CONFIRM">https://trac.transmissionbt.com/wiki/Changes#version-2.61</ref>
-      <ref url="http://www.securityfocus.com/bid/54705" source="BID">54705</ref>
-      <ref url="http://www.madirish.net/541" source="MISC">http://www.madirish.net/541</ref>
-      <ref url="http://secunia.com/advisories/50027" source="SECUNIA" adv="1">50027</ref>
-      <ref url="http://archives.neohapsis.com/archives/fulldisclosure/2012-07/0349.html" source="FULLDISC">20120726 Transmission BitTorrent XSS Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="transmissionbt" name="transmission">
-        <vers num="0.1" />
-        <vers num="0.2" />
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="0.6" />
-        <vers num="0.6.1" />
-        <vers num="0.70" />
-        <vers num="0.71" />
-        <vers num="0.72" />
-        <vers num="0.80" />
-        <vers num="0.81" />
-        <vers num="0.82" />
-        <vers num="0.90" />
-        <vers num="0.91" />
-        <vers num="0.92" />
-        <vers num="0.93" />
-        <vers num="0.94" />
-        <vers num="0.95" />
-        <vers num="0.96" />
-        <vers num="1.00" />
-        <vers num="1.01" />
-        <vers num="1.02" />
-        <vers num="1.03" />
-        <vers num="1.04" />
-        <vers num="1.05" />
-        <vers num="1.06" />
-        <vers num="1.10" />
-        <vers num="1.11" />
-        <vers num="1.2" />
-        <vers num="1.20" />
-        <vers num="1.21" />
-        <vers num="1.22" />
-        <vers num="1.30" />
-        <vers num="1.31" />
-        <vers num="1.32" />
-        <vers num="1.33" />
-        <vers num="1.34" />
-        <vers num="1.40" />
-        <vers num="1.41" />
-        <vers num="1.42" />
-        <vers num="1.50" />
-        <vers num="1.51" />
-        <vers num="1.52" />
-        <vers num="1.53" />
-        <vers num="1.54" />
-        <vers num="1.60" />
-        <vers num="1.61" />
-        <vers num="1.70" />
-        <vers num="1.71" />
-        <vers num="1.72" />
-        <vers num="1.73" />
-        <vers num="1.74" />
-        <vers num="1.75" />
-        <vers num="1.76" />
-        <vers num="1.77" />
-        <vers num="1.80" />
-        <vers num="1.81" />
-        <vers num="1.82" />
-        <vers num="1.83" />
-        <vers num="1.90" />
-        <vers num="1.91" />
-        <vers num="1.92" />
-        <vers num="1.93" />
-        <vers num="2.00" />
-        <vers num="2.01" />
-        <vers num="2.02" />
-        <vers num="2.03" />
-        <vers num="2.04" />
-        <vers num="2.10" />
-        <vers num="2.11" />
-        <vers num="2.12" />
-        <vers num="2.13" />
-        <vers num="2.20" />
-        <vers num="2.21" />
-        <vers num="2.22" />
-        <vers num="2.30" />
-        <vers num="2.31" />
-        <vers num="2.32" />
-        <vers num="2.33" />
-        <vers num="2.40" />
-        <vers num="2.41" />
-        <vers num="2.42" />
-        <vers num="2.50" />
-        <vers num="2.51" />
-        <vers num="2.52" />
-        <vers prev="1" num="2.60" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4043" published="2012-07-26" name="CVE-2012-4043" modified="2012-07-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in global-protect/login.esp in Palo Alto Networks Global Protect Portal, Global Protect Gateway, and SSL VPN portals 3.1.x through 3.1.11 and 4.0.x through 4.0.5 allows remote attackers to inject arbitrary web script or HTML via the inputStr parameter in a Login action.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.osvdb.org/83896" source="OSVDB">83896</ref>
-      <ref url="http://blog.abhisek.me/2012/06/xss-on-palo-alto-networks-global.html" source="MISC">http://blog.abhisek.me/2012/06/xss-on-palo-alto-networks-global.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="palo_alto" name="global_protected_gateway">
-        <vers num="3.1" />
-        <vers num="3.1.11" />
-        <vers num="4.0" />
-        <vers num="4.0.5" />
-      </prod>
-      <prod vendor="palo_alto" name="ssl_vpn">
-        <vers num="3.1" />
-        <vers num="3.1.11" />
-        <vers num="4.0" />
-        <vers num="4.0.5" />
-      </prod>
-      <prod vendor="palo_alto" name="networks">
-        <vers num="global_protect_portal" edition="3.1" />
-        <vers num="global_protect_portal" edition="3.1.11" />
-        <vers num="global_protect_portal" edition="4.0" />
-        <vers num="global_protect_portal" edition="4.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4045" published="2012-07-22" name="CVE-2012-4045" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple heap-based buffer overflows in bmp.w5s in Winamp before 5.63 build 3235 allow remote attackers to execute arbitrary code via the (1) strf chunk in BI_RGB or (2) UYVY video data in an AVI file, or (3) decompressed TechSmith Screen Capture Codec (TSCC) data in an AVI file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/54131" source="BID">54131</ref>
-      <ref url="http://secunia.com/advisories/46624" source="SECUNIA" adv="1">46624</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15335" source="OVAL">oval:org.mitre.oval:def:15335</ref>
-      <ref url="http://forums.winamp.com/showthread.php?t=345684" source="CONFIRM">http://forums.winamp.com/showthread.php?t=345684</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="nullsoft" name="winamp">
-        <vers prev="1" num="5.63" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4048" published="2012-07-24" name="CVE-2012-4048" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">The PPP dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted packet, as demonstrated by a usbmon dump.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-11.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-11.html</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15547" source="OVAL">oval:org.mitre.oval:def:15547</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-08/msg00000.html" source="SUSE">openSUSE-SU-2012:0930</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=680056" source="CONFIRM">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=680056</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" edition="" />
-        <vers num="1.4.0" edition=":~~~~sparc~" />
-        <vers num="1.4.0" edition=":~~~~itanium~" />
-        <vers num="1.4.1" edition="" />
-        <vers num="1.4.1" edition=":~~~~itanium~" />
-        <vers num="1.4.1" edition=":~~~~sparc~" />
-        <vers num="1.4.10" edition="" />
-        <vers num="1.4.10" edition=":~~~~sparc~" />
-        <vers num="1.4.10" edition=":~~~~itanium~" />
-        <vers num="1.4.11" edition="" />
-        <vers num="1.4.11" edition=":~~~~itanium~" />
-        <vers num="1.4.11" edition=":~~~~sparc~" />
-        <vers num="1.4.12" edition="" />
-        <vers num="1.4.12" edition=":~~~~sparc~" />
-        <vers num="1.4.12" edition=":~~~~itanium~" />
-        <vers num="1.4.13" edition="" />
-        <vers num="1.4.13" edition=":~~~~itanium~" />
-        <vers num="1.4.13" edition=":~~~~sparc~" />
-        <vers num="1.4.2" edition="" />
-        <vers num="1.4.2" edition=":~~~~sparc~" />
-        <vers num="1.4.2" edition=":~~~~itanium~" />
-        <vers num="1.4.3" edition="" />
-        <vers num="1.4.3" edition=":~~~~itanium~" />
-        <vers num="1.4.3" edition=":~~~~sparc~" />
-        <vers num="1.4.4" edition="" />
-        <vers num="1.4.4" edition=":~~~~itanium~" />
-        <vers num="1.4.4" edition=":~~~~sparc~" />
-        <vers num="1.4.5" edition="" />
-        <vers num="1.4.5" edition=":~~~~sparc~" />
-        <vers num="1.4.5" edition=":~~~~itanium~" />
-        <vers num="1.4.6" edition="" />
-        <vers num="1.4.6" edition=":~~~~itanium~" />
-        <vers num="1.4.6" edition=":~~~~sparc~" />
-        <vers num="1.4.7" edition="" />
-        <vers num="1.4.7" edition=":~~~~itanium~" />
-        <vers num="1.4.7" edition=":~~~~sparc~" />
-        <vers num="1.4.8" edition="" />
-        <vers num="1.4.8" edition=":~~~~itanium~" />
-        <vers num="1.4.8" edition=":~~~~sparc~" />
-        <vers num="1.4.9" edition="" />
-        <vers num="1.4.9" edition=":~~~~sparc~" />
-        <vers num="1.4.9" edition=":~~~~itanium~" />
-        <vers num="1.6.0" edition="" />
-        <vers num="1.6.0" edition=":~~~~itanium~" />
-        <vers num="1.6.0" edition=":~~~~sparc~" />
-        <vers num="1.6.1" edition="" />
-        <vers num="1.6.1" edition=":~~~~sparc~" />
-        <vers num="1.6.1" edition=":~~~~itanium~" />
-        <vers num="1.6.2" edition="" />
-        <vers num="1.6.2" edition=":~~~~itanium~" />
-        <vers num="1.6.2" edition=":~~~~sparc~" />
-        <vers num="1.6.3" edition="" />
-        <vers num="1.6.3" edition=":~~~~itanium~" />
-        <vers num="1.6.3" edition=":~~~~sparc~" />
-        <vers num="1.6.4" edition="" />
-        <vers num="1.6.4" edition=":~~~~itanium~" />
-        <vers num="1.6.4" edition=":~~~~sparc~" />
-        <vers num="1.6.5" edition="" />
-        <vers num="1.6.5" edition=":~~~~itanium~" />
-        <vers num="1.6.5" edition=":~~~~sparc~" />
-        <vers num="1.6.6" edition="" />
-        <vers num="1.6.6" edition=":~~~~sparc~" />
-        <vers num="1.6.6" edition=":~~~~itanium~" />
-        <vers num="1.6.7" edition="" />
-        <vers num="1.6.7" edition=":~~~~sparc~" />
-        <vers num="1.6.7" edition=":~~~~itanium~" />
-        <vers num="1.6.8" edition="" />
-        <vers num="1.6.8" edition=":~~~~sparc~" />
-        <vers num="1.6.8" edition=":~~~~itanium~" />
-        <vers num="1.8.0" edition="" />
-        <vers num="1.8.0" edition=":~~~~sparc~" />
-        <vers num="1.8.0" edition=":~~~~itanium~" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4049" published="2012-07-24" name="CVE-2012-4049" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:A/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="2.9" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="5.5" CVSS_base_score="2.9">
-    <desc>
-      <descript source="cve">epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (loop and CPU consumption) via a crafted packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-nfs.c?r1=43576&amp;r2=43575&amp;pathrev=43576" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-nfs.c?r1=43576&amp;r2=43575&amp;pathrev=43576</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7436" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7436</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-12.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-12.html</ref>
-      <ref url="http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15707" source="OVAL">oval:org.mitre.oval:def:15707</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-08/msg00000.html" source="SUSE">openSUSE-SU-2012:0930</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=43576" source="CONFIRM">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=43576</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" edition="" />
-        <vers num="1.4.0" edition=":~~~~sparc~" />
-        <vers num="1.4.0" edition=":~~~~itanium~" />
-        <vers num="1.4.1" edition="" />
-        <vers num="1.4.1" edition=":~~~~itanium~" />
-        <vers num="1.4.1" edition=":~~~~sparc~" />
-        <vers num="1.4.10" edition="" />
-        <vers num="1.4.10" edition=":~~~~sparc~" />
-        <vers num="1.4.10" edition=":~~~~itanium~" />
-        <vers num="1.4.11" edition="" />
-        <vers num="1.4.11" edition=":~~~~itanium~" />
-        <vers num="1.4.11" edition=":~~~~sparc~" />
-        <vers num="1.4.12" edition="" />
-        <vers num="1.4.12" edition=":~~~~sparc~" />
-        <vers num="1.4.12" edition=":~~~~itanium~" />
-        <vers num="1.4.13" edition="" />
-        <vers num="1.4.13" edition=":~~~~itanium~" />
-        <vers num="1.4.13" edition=":~~~~sparc~" />
-        <vers num="1.4.2" edition="" />
-        <vers num="1.4.2" edition=":~~~~sparc~" />
-        <vers num="1.4.2" edition=":~~~~itanium~" />
-        <vers num="1.4.3" edition="" />
-        <vers num="1.4.3" edition=":~~~~itanium~" />
-        <vers num="1.4.3" edition=":~~~~sparc~" />
-        <vers num="1.4.4" edition="" />
-        <vers num="1.4.4" edition=":~~~~itanium~" />
-        <vers num="1.4.4" edition=":~~~~sparc~" />
-        <vers num="1.4.5" edition="" />
-        <vers num="1.4.5" edition=":~~~~sparc~" />
-        <vers num="1.4.5" edition=":~~~~itanium~" />
-        <vers num="1.4.6" edition="" />
-        <vers num="1.4.6" edition=":~~~~itanium~" />
-        <vers num="1.4.6" edition=":~~~~sparc~" />
-        <vers num="1.4.7" edition="" />
-        <vers num="1.4.7" edition=":~~~~itanium~" />
-        <vers num="1.4.7" edition=":~~~~sparc~" />
-        <vers num="1.4.8" edition="" />
-        <vers num="1.4.8" edition=":~~~~itanium~" />
-        <vers num="1.4.8" edition=":~~~~sparc~" />
-        <vers num="1.4.9" edition="" />
-        <vers num="1.4.9" edition=":~~~~sparc~" />
-        <vers num="1.4.9" edition=":~~~~itanium~" />
-        <vers num="1.6.0" edition="" />
-        <vers num="1.6.0" edition=":~~~~itanium~" />
-        <vers num="1.6.0" edition=":~~~~sparc~" />
-        <vers num="1.6.1" edition="" />
-        <vers num="1.6.1" edition=":~~~~sparc~" />
-        <vers num="1.6.1" edition=":~~~~itanium~" />
-        <vers num="1.6.2" edition="" />
-        <vers num="1.6.2" edition=":~~~~itanium~" />
-        <vers num="1.6.2" edition=":~~~~sparc~" />
-        <vers num="1.6.3" edition="" />
-        <vers num="1.6.3" edition=":~~~~itanium~" />
-        <vers num="1.6.3" edition=":~~~~sparc~" />
-        <vers num="1.6.4" edition="" />
-        <vers num="1.6.4" edition=":~~~~itanium~" />
-        <vers num="1.6.4" edition=":~~~~sparc~" />
-        <vers num="1.6.5" edition="" />
-        <vers num="1.6.5" edition=":~~~~itanium~" />
-        <vers num="1.6.5" edition=":~~~~sparc~" />
-        <vers num="1.6.6" edition="" />
-        <vers num="1.6.6" edition=":~~~~sparc~" />
-        <vers num="1.6.6" edition=":~~~~itanium~" />
-        <vers num="1.6.7" edition="" />
-        <vers num="1.6.7" edition=":~~~~sparc~" />
-        <vers num="1.6.7" edition=":~~~~itanium~" />
-        <vers num="1.6.8" edition="" />
-        <vers num="1.6.8" edition=":~~~~sparc~" />
-        <vers num="1.6.8" edition=":~~~~itanium~" />
-        <vers num="1.8.0" edition="" />
-        <vers num="1.8.0" edition=":~~~~sparc~" />
-        <vers num="1.8.0" edition=":~~~~itanium~" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4050" published="2012-07-24" name="CVE-2012-4050" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in Google Chrome OS before 21.0.1180.50 on the Cr-48 and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, have unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77191" source="XF">chromeos-multiple-unspecified(77191)</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/07/beta-channel-update-for-chrome-os.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/07/beta-channel-update-for-chrome-os.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome_os">
-        <vers num="21.0.1180.0" />
-        <vers num="21.0.1180.1" />
-        <vers num="21.0.1180.10" />
-        <vers num="21.0.1180.11" />
-        <vers num="21.0.1180.13" />
-        <vers num="21.0.1180.14" />
-        <vers num="21.0.1180.15" />
-        <vers num="21.0.1180.17" />
-        <vers num="21.0.1180.18" />
-        <vers num="21.0.1180.2" />
-        <vers num="21.0.1180.3" />
-        <vers num="21.0.1180.31" />
-        <vers num="21.0.1180.32" />
-        <vers num="21.0.1180.33" />
-        <vers num="21.0.1180.34" />
-        <vers num="21.0.1180.35" />
-        <vers num="21.0.1180.36" />
-        <vers num="21.0.1180.37" />
-        <vers num="21.0.1180.38" />
-        <vers num="21.0.1180.39" />
-        <vers num="21.0.1180.4" />
-        <vers num="21.0.1180.41" />
-        <vers num="21.0.1180.46" />
-        <vers num="21.0.1180.47" />
-        <vers num="21.0.1180.48" />
-        <vers prev="1" num="21.0.1180.49" />
-        <vers num="21.0.1180.5" />
-        <vers num="21.0.1180.6" />
-        <vers num="21.0.1180.7" />
-        <vers num="21.0.1180.8" />
-        <vers num="21.0.1180.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4052" published="2012-08-20" name="CVE-2012-4052" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Jease before 2.9, when creating a comment, allow remote attackers to inject arbitrary web script or HTML via the (1) author, (2) subject, or (3) comment parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23104" source="MISC">https://www.htbridge.com/advisory/HTB23104</ref>
-      <ref url="https://groups.google.com/forum/?fromgroups#%21topic/jease/2BHaDww-5ac%5B1-25%5D" source="CONFIRM">https://groups.google.com/forum/?fromgroups#!topic/jease/2BHaDww-5ac[1-25]</ref>
-      <ref url="http://www.jease.org/download/2.9/" source="MISC">http://www.jease.org/download/2.9/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="jease" name="jease">
-        <vers num="0.1" />
-        <vers num="0.2" />
-        <vers num="0.3" />
-        <vers num="0.4" />
-        <vers num="0.5" />
-        <vers num="0.6" />
-        <vers num="0.7" />
-        <vers num="0.8" />
-        <vers num="0.9" />
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="1.4" />
-        <vers num="1.5" />
-        <vers num="1.6" />
-        <vers num="1.7" />
-        <vers num="1.8" />
-        <vers num="1.9" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.4" />
-        <vers num="2.5" />
-        <vers num="2.6" />
-        <vers num="2.7" />
-        <vers prev="1" num="2.8" />
-        <vers num="2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4053" published="2012-07-25" name="CVE-2012-4053" modified="2012-07-26" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in eZOE flash player in eZ Publish 4.1 through 4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/76811" source="XF">ezpublish-ezoe-csrf(76811)</ref>
-      <ref url="http://share.ez.no/community-project/security-advisories/ezsa-2012-009-ezoe-flash-player-csrf-security-issues" source="CONFIRM" adv="1">http://share.ez.no/community-project/security-advisories/ezsa-2012-009-ezoe-flash-player-csrf-security-issues</ref>
-      <ref url="http://secunia.com/advisories/49812" source="SECUNIA" adv="1">49812</ref>
-      <ref url="http://osvdb.org/83676" source="OSVDB">83676</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ez" name="ez_publish">
-        <vers num="4.1" />
-        <vers num="4.2" />
-        <vers num="4.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4054" published="2012-07-25" name="CVE-2012-4054" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Buffer overflow in the readfile function in CPE17 Autorun Killer 1.7.1 and earlier allows physically proximate attackers to execute arbitrary code via a crafted inf file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75238" source="XF">autorun-killer-bo(75238)</ref>
-      <ref url="http://www.securityfocus.com/bid/53286" source="BID">53286</ref>
-      <ref url="http://www.exploit-db.com/exploits/18792" source="EXPLOIT-DB">18792</ref>
-      <ref url="http://osvdb.org/81496" source="OSVDB">81496</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cpe17" name="autorun_killer">
-        <vers prev="1" num="1.7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4055" published="2012-07-25" name="CVE-2012-4055" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via the p parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75288" source="XF">uigafanclub-index2-sql-injection(75288)</ref>
-      <ref url="http://www.securityfocus.com/bid/53295" source="BID">53295</ref>
-      <ref url="http://packetstormsecurity.org/files/112287/Uiga-FanClub-SQL-Injection.html" source="MISC">http://packetstormsecurity.org/files/112287/Uiga-FanClub-SQL-Injection.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="uiga" name="fan_club">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4056" published="2012-07-25" name="CVE-2012-4056" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in index2.php in Uiga Personal Portal allows remote attackers to execute arbitrary SQL commands via the p parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75281" source="XF">uiga-index2-sql-injection(75281)</ref>
-      <ref url="http://www.securityfocus.com/bid/53296" source="BID">53296</ref>
-      <ref url="http://packetstormsecurity.org/files/112288/Uiga-Personal-Portal-SQL-Injection.html" source="MISC">http://packetstormsecurity.org/files/112288/Uiga-Personal-Portal-SQL-Injection.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="uiga" name="personal_portal">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4057" published="2012-07-25" name="CVE-2012-4057" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in the Player in Remote-Anything 5.60.15 allows remote attackers to execute arbitrary code via a crafted flm file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75237" source="XF">remote-anything-dos(75237)</ref>
-      <ref url="http://www.securityfocus.com/bid/53303" source="BID">53303</ref>
-      <ref url="http://www.exploit-db.com/exploits/18799" source="EXPLOIT-DB">18799</ref>
-      <ref url="http://secunia.com/advisories/49008" source="SECUNIA" adv="1">49008</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="twd-industries" name="remote-anything">
-        <vers num="5.60.15" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4058" published="2012-07-25" name="CVE-2012-4058" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in SocketMail Pro 2.2.9 allows remote attackers to inject arbitrary web script or HTML via the subject of an email.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75113" source="XF">socketmailpro-email-xss(75113)</ref>
-      <ref url="http://packetstormsecurity.org/files/112090/SocketMail-Pro-2.2.9-Cross-Site-Request-Forgery-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112090/SocketMail-Pro-2.2.9-Cross-Site-Request-Forgery-Cross-Site-Scripting.html</ref>
-      <ref url="http://osvdb.org/81532" source="OSVDB">81532</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="socketmail" name="socketmail">
-        <vers num="2.2.9" edition="-" />
-        <vers num="2.2.9" edition="-:professional" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4059" published="2012-07-25" name="CVE-2012-4059" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in home/secretqtn.php in SocketMail Pro 2.2.9 allows remote attackers to hijack the authentication of arbitrary users for requests that change user security questions and answers via an upd action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75114" source="XF">socketmailpro-secretqtn-csrf(75114)</ref>
-      <ref url="http://www.osvdb.org/81531" source="OSVDB">81531</ref>
-      <ref url="http://packetstormsecurity.org/files/112090/SocketMail-Pro-2.2.9-Cross-Site-Request-Forgery-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112090/SocketMail-Pro-2.2.9-Cross-Site-Request-Forgery-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="socketmail" name="socketmail">
-        <vers num="2.2.9" edition="-" />
-        <vers num="2.2.9" edition="-:professional" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4060" published="2012-07-25" name="CVE-2012-4060" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) profile.asp, (2) forum.asp, or (3) topic.asp.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75261" source="XF">xmforums-id-sql-injection(75261)</ref>
-      <ref url="http://www.securityfocus.com/bid/53292" source="BID">53292</ref>
-      <ref url="http://packetstormsecurity.org/files/112259/ASP-DEv-XM-Forums-SQL-Injection.html" source="MISC">http://packetstormsecurity.org/files/112259/ASP-DEv-XM-Forums-SQL-Injection.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="asp-dev" name="xm_forums">
-        <vers num="-" edition="rc3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4061" published="2012-07-25" name="CVE-2012-4061" modified="2012-07-30" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to diary_view.asp or (2) view_date parameter to default.asp.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75262" source="XF">xmdiary-multiple-sql-injection(75262)</ref>
-      <ref url="http://packetstormsecurity.org/files/112257/ASP-DEv-XM-Diary-SQL-Injection.html" source="MISC">http://packetstormsecurity.org/files/112257/ASP-DEv-XM-Diary-SQL-Injection.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="asp-dev" name="xm_diary">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4068" published="2012-07-26" name="CVE-2012-4068" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.1 allows remote attackers to execute arbitrary code via a crafted string associated with date and time data.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=979" source="IDEFENSE" patch="1">20120501 Citrix Provisioning Services SoapServer Heap Buffer Overflow</ref>
-      <ref url="http://support.citrix.com/article/ctx133039" source="CONFIRM" patch="1">http://support.citrix.com/article/ctx133039</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75311" source="XF">citrix-provisioning-server-code-execution(75311)</ref>
-      <ref url="http://www.securitytracker.com/id?1027004" source="SECTRACK">1027004</ref>
-      <ref url="http://osvdb.org/81664" source="OSVDB">81664</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="citrix" name="provisioning_services">
-        <vers num="5.0" />
-        <vers num="5.1" />
-        <vers num="5.6" edition="sp1" />
-        <vers num="6.0" />
-        <vers num="6.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4069" published="2012-08-12" name="CVE-2012-4069" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Dir2web 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database via a direct request for system/db/website.db.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-08/0045.html" source="BUGTRAQ">20120805 Dir2web3 Mutiple Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dir2web" name="dir2web">
-        <vers num="3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4070" published="2012-08-12" name="CVE-2012-4070" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in system/src/dispatcher.php in Dir2web 3.0 allows remote attackers to execute arbitrary SQL commands via the oid parameter in a homepage action to index.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-08/0045.html" source="BUGTRAQ">20120805 Dir2web3 Mutiple Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="dir2web" name="dir2web">
-        <vers num="3.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4071" published="2012-08-10" name="CVE-2012-4071" modified="2012-08-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the comments module in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to inject arbitrary web script or HTML via crafted BBCode markup in a comment.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://joomlacode.org/gf/download/frsrelease/17326/75428/com_rsgallery2_3.2.0.zip" source="CONFIRM" patch="1">http://joomlacode.org/gf/download/frsrelease/17326/75428/com_rsgallery2_3.2.0.zip</ref>
-      <ref url="http://joomlacode.org/gf/download/frsrelease/17325/75427/com_rsgallery2_2.3.0.zip" source="CONFIRM" patch="1">http://joomlacode.org/gf/download/frsrelease/17325/75427/com_rsgallery2_2.3.0.zip</ref>
-      <ref url="http://www.rsgallery2.nl/announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.0.html" source="CONFIRM">http://www.rsgallery2.nl/announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.0.html</ref>
-      <ref url="http://joomlacode.org/gf/project/rsgallery2/news/" source="CONFIRM">http://joomlacode.org/gf/project/rsgallery2/news/</ref>
-      <ref url="http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/142" source="CONFIRM">http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/142</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rsgallery2" name="com_rsgallery2">
-        <vers num="1.10.1" edition="alpha" />
-        <vers num="1.10.10" edition="alpha" />
-        <vers num="1.10.11" edition="alpha" />
-        <vers num="1.10.13" edition="alpha" />
-        <vers num="1.10.14" edition="alpha" />
-        <vers num="1.10.2" edition="alpha" />
-        <vers num="1.10.5" edition="alpha" />
-        <vers num="1.10.6" edition="alpha" />
-        <vers num="1.10.7" edition="alpha" />
-        <vers num="1.10.8" edition="alpha" />
-        <vers num="1.10.9" edition="alpha" />
-        <vers num="1.11.0" edition="alpha" />
-        <vers num="1.11.1" edition="alpha" />
-        <vers num="1.11.10" edition="alpha" />
-        <vers num="1.11.11" edition="alpha" />
-        <vers num="1.11.2" edition="alpha" />
-        <vers num="1.11.3" edition="alpha" />
-        <vers num="1.11.4" edition="alpha" />
-        <vers num="1.11.5" edition="alpha" />
-        <vers num="1.11.6" edition="alpha" />
-        <vers num="1.11.7" edition="alpha" />
-        <vers num="1.11.8" edition="alpha" />
-        <vers num="1.12.0" edition="alpha" />
-        <vers num="1.12.1" edition="alpha" />
-        <vers num="1.12.2" edition="alpha" />
-        <vers num="1.13.0" edition="alpha" />
-        <vers num="1.13.1" edition="alpha" />
-        <vers num="1.14.0" edition="alpha" />
-        <vers num="1.14.1" edition="alpha" />
-        <vers num="1.9.0-4" edition="alpha" />
-        <vers num="1.9.4" edition="alpha" />
-        <vers num="1.9.5" edition="alpha" />
-        <vers num="2.1.0" edition="beta" />
-        <vers num="2.1.1" />
-        <vers num="2.2.0" />
-        <vers prev="1" num="2.2.1" />
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0.1" />
-        <vers prev="1" num="3.1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4142" published="2012-08-06" name="CVE-2012-4142" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, ignores some characters in HTML documents in unspecified circumstances, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/support/kb/view/1026/" source="CONFIRM" adv="1">http://www.opera.com/support/kb/view/1026/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1201/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1201/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1201/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1201/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1201/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1201/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1166/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1166/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="b" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.52.1100" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers num="11.62" />
-        <vers num="11.64" />
-        <vers prev="1" num="11.65" />
-        <vers prev="1" num="12.00" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4143" published="2012-08-06" name="CVE-2012-4143" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog, a different vulnerability than CVE-2012-1924.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/support/kb/view/1027/" source="CONFIRM" adv="1">http://www.opera.com/support/kb/view/1027/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1201/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1201/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1201/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1201/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1201/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1201/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1166/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1166/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="b" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.52.1100" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers num="11.62" />
-        <vers num="11.64" />
-        <vers prev="1" num="11.65" />
-        <vers prev="1" num="12.00" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4144" published="2012-08-06" name="CVE-2012-4144" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, does not properly escape characters in DOM elements, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted HTML document.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/support/kb/view/1025/" source="CONFIRM" adv="1">http://www.opera.com/support/kb/view/1025/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1201/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1201/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1201/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1201/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1201/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1201/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1166/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1166/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="b" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.52.1100" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers num="11.62" />
-        <vers num="11.64" />
-        <vers prev="1" num="11.65" />
-        <vers prev="1" num="12.00" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4145" published="2012-08-06" name="CVE-2012-4145" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, has unknown impact and attack vectors, related to a "low severity issue."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1201/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1201/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1201/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1201/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1201/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1201/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1166/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1166/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="b" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.52.1100" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers num="11.62" />
-        <vers num="11.64" />
-        <vers prev="1" num="11.65" />
-        <vers prev="1" num="12.00" edition="beta" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4146" published="2012-08-06" name="CVE-2012-4146" modified="2012-08-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Opera before 12.01 allows remote attackers to cause a denial of service (application crash) via a crafted web site, as demonstrated by the Lenovo "Shop now" page.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.opera.com/docs/changelogs/windows/1201/" source="CONFIRM">http://www.opera.com/docs/changelogs/windows/1201/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/unix/1201/" source="CONFIRM">http://www.opera.com/docs/changelogs/unix/1201/</ref>
-      <ref url="http://www.opera.com/docs/changelogs/mac/1201/" source="CONFIRM">http://www.opera.com/docs/changelogs/mac/1201/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="opera" name="opera_browser">
-        <vers num="1.00" />
-        <vers num="10.00" edition="beta1" />
-        <vers num="10.00" edition="beta2" />
-        <vers num="10.00" edition="beta3" />
-        <vers num="10.01" />
-        <vers num="10.10" edition="beta1" />
-        <vers num="10.11" />
-        <vers num="10.50" edition="beta1" />
-        <vers num="10.50" edition="beta2" />
-        <vers num="10.51" />
-        <vers num="10.52" edition="beta1" />
-        <vers num="10.52" edition="beta2" />
-        <vers num="10.53" edition="b" />
-        <vers num="10.53" edition="beta1" />
-        <vers num="10.54" />
-        <vers num="10.60" edition="beta1" />
-        <vers num="10.61" />
-        <vers num="10.62" />
-        <vers num="10.63" />
-        <vers num="11.00" edition="beta" />
-        <vers num="11.01" />
-        <vers num="11.10" edition="beta" />
-        <vers num="11.11" />
-        <vers num="11.50" edition="beta" />
-        <vers num="11.51" />
-        <vers num="11.52" />
-        <vers num="11.52.1100" />
-        <vers num="11.60" edition="beta" />
-        <vers num="11.61" />
-        <vers num="11.62" />
-        <vers num="11.64" />
-        <vers num="11.65" />
-        <vers prev="1" num="12.00" edition="beta" />
-        <vers num="2.00" />
-        <vers num="2.10" edition="beta1" />
-        <vers num="2.10" edition="beta2" />
-        <vers num="2.10" edition="beta3" />
-        <vers num="2.12" />
-        <vers num="3.00" edition="beta" />
-        <vers num="3.10" />
-        <vers num="3.21" />
-        <vers num="3.50" />
-        <vers num="3.51" />
-        <vers num="3.60" />
-        <vers num="3.61" />
-        <vers num="3.62" edition="beta" />
-        <vers num="4.00" edition="beta2" />
-        <vers num="4.00" edition="beta3" />
-        <vers num="4.00" edition="beta4" />
-        <vers num="4.00" edition="beta5" />
-        <vers num="4.00" edition="beta6" />
-        <vers num="4.01" />
-        <vers num="4.02" />
-        <vers num="5.0" edition="beta2" />
-        <vers num="5.0" edition="beta3" />
-        <vers num="5.0" edition="beta4" />
-        <vers num="5.0" edition="beta5" />
-        <vers num="5.0" edition="beta6" />
-        <vers num="5.0" edition="beta7" />
-        <vers num="5.0" edition="beta8" />
-        <vers num="5.02" />
-        <vers num="5.10" />
-        <vers num="5.11" />
-        <vers num="5.12" />
-        <vers num="6.0" edition="beta1" />
-        <vers num="6.0" edition="beta2" />
-        <vers num="6.0" edition="beta3" />
-        <vers num="6.0" edition="tp1" />
-        <vers num="6.0" edition="tp2" />
-        <vers num="6.0" edition="tp3" />
-        <vers num="6.01" />
-        <vers num="6.02" />
-        <vers num="6.03" />
-        <vers num="6.04" />
-        <vers num="6.05" />
-        <vers num="6.06" />
-        <vers num="6.1" edition="beta1" />
-        <vers num="6.11" />
-        <vers num="6.12" />
-        <vers num="7.0" edition="beta1" />
-        <vers num="7.0" edition="beta1_v2" />
-        <vers num="7.0" edition="beta2" />
-        <vers num="7.01" />
-        <vers num="7.02" />
-        <vers num="7.03" />
-        <vers num="7.10" edition="beta1" />
-        <vers num="7.11" edition="beta2" />
-        <vers num="7.20" edition="beta7" />
-        <vers num="7.21" />
-        <vers num="7.22" />
-        <vers num="7.23" />
-        <vers num="7.50" edition="beta1" />
-        <vers num="7.51" />
-        <vers num="7.52" />
-        <vers num="7.53" />
-        <vers num="7.54" edition="update1" />
-        <vers num="7.54" edition="update2" />
-        <vers num="7.60" />
-        <vers num="8.0" edition="beta1" />
-        <vers num="8.0" edition="beta2" />
-        <vers num="8.0" edition="beta3" />
-        <vers num="8.01" />
-        <vers num="8.02" />
-        <vers num="8.50" />
-        <vers num="8.51" />
-        <vers num="8.52" />
-        <vers num="8.53" />
-        <vers num="8.54" />
-        <vers num="9.0" edition="beta1" />
-        <vers num="9.0" edition="beta2" />
-        <vers num="9.01" />
-        <vers num="9.02" />
-        <vers num="9.10" />
-        <vers num="9.12" />
-        <vers num="9.20" edition="beta1" />
-        <vers num="9.21" />
-        <vers num="9.22" />
-        <vers num="9.23" />
-        <vers num="9.24" />
-        <vers num="9.25" />
-        <vers num="9.26" />
-        <vers num="9.27" />
-        <vers num="9.50" edition="beta1" />
-        <vers num="9.50" edition="beta2" />
-        <vers num="9.51" />
-        <vers num="9.52" />
-        <vers num="9.60" edition="beta1" />
-        <vers num="9.61" />
-        <vers num="9.62" />
-        <vers num="9.63" />
-        <vers num="9.64" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4147" published="2012-08-15" name="CVE-2012-4147" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150, CVE-2012-4151, CVE-2012-4152, CVE-2012-4153, CVE-2012-4154, CVE-2012-4155, CVE-2012-4156, CVE-2012-4157, CVE-2012-4158, CVE-2012-4159, and CVE-2012-4160.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4148" published="2012-08-15" name="CVE-2012-4148" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4149, CVE-2012-4150, CVE-2012-4151, CVE-2012-4152, CVE-2012-4153, CVE-2012-4154, CVE-2012-4155, CVE-2012-4156, CVE-2012-4157, CVE-2012-4158, CVE-2012-4159, and CVE-2012-4160.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4149" published="2012-08-15" name="CVE-2012-4149" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4150, CVE-2012-4151, CVE-2012-4152, CVE-2012-4153, CVE-2012-4154, CVE-2012-4155, CVE-2012-4156, CVE-2012-4157, CVE-2012-4158, CVE-2012-4159, and CVE-2012-4160.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4150" published="2012-08-15" name="CVE-2012-4150" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4151, CVE-2012-4152, CVE-2012-4153, CVE-2012-4154, CVE-2012-4155, CVE-2012-4156, CVE-2012-4157, CVE-2012-4158, CVE-2012-4159, and CVE-2012-4160.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4151" published="2012-08-15" name="CVE-2012-4151" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150, CVE-2012-4152, CVE-2012-4153, CVE-2012-4154, CVE-2012-4155, CVE-2012-4156, CVE-2012-4157, CVE-2012-4158, CVE-2012-4159, and CVE-2012-4160.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4152" published="2012-08-15" name="CVE-2012-4152" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150, CVE-2012-4151, CVE-2012-4153, CVE-2012-4154, CVE-2012-4155, CVE-2012-4156, CVE-2012-4157, CVE-2012-4158, CVE-2012-4159, and CVE-2012-4160.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4153" published="2012-08-15" name="CVE-2012-4153" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150, CVE-2012-4151, CVE-2012-4152, CVE-2012-4154, CVE-2012-4155, CVE-2012-4156, CVE-2012-4157, CVE-2012-4158, CVE-2012-4159, and CVE-2012-4160.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4154" published="2012-08-15" name="CVE-2012-4154" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150, CVE-2012-4151, CVE-2012-4152, CVE-2012-4153, CVE-2012-4155, CVE-2012-4156, CVE-2012-4157, CVE-2012-4158, CVE-2012-4159, and CVE-2012-4160.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4155" published="2012-08-15" name="CVE-2012-4155" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150, CVE-2012-4151, CVE-2012-4152, CVE-2012-4153, CVE-2012-4154, CVE-2012-4156, CVE-2012-4157, CVE-2012-4158, CVE-2012-4159, and CVE-2012-4160.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4156" published="2012-08-15" name="CVE-2012-4156" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150, CVE-2012-4151, CVE-2012-4152, CVE-2012-4153, CVE-2012-4154, CVE-2012-4155, CVE-2012-4157, CVE-2012-4158, CVE-2012-4159, and CVE-2012-4160.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4157" published="2012-08-15" name="CVE-2012-4157" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150, CVE-2012-4151, CVE-2012-4152, CVE-2012-4153, CVE-2012-4154, CVE-2012-4155, CVE-2012-4156, CVE-2012-4158, CVE-2012-4159, and CVE-2012-4160.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4158" published="2012-08-15" name="CVE-2012-4158" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150, CVE-2012-4151, CVE-2012-4152, CVE-2012-4153, CVE-2012-4154, CVE-2012-4155, CVE-2012-4156, CVE-2012-4157, CVE-2012-4159, and CVE-2012-4160.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4159" published="2012-08-15" name="CVE-2012-4159" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150, CVE-2012-4151, CVE-2012-4152, CVE-2012-4153, CVE-2012-4154, CVE-2012-4155, CVE-2012-4156, CVE-2012-4157, CVE-2012-4158, and CVE-2012-4160.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4160" published="2012-08-15" name="CVE-2012-4160" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150, CVE-2012-4151, CVE-2012-4152, CVE-2012-4153, CVE-2012-4154, CVE-2012-4155, CVE-2012-4156, CVE-2012-4157, CVE-2012-4158, and CVE-2012-4159.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4161" published="2012-08-15" name="CVE-2012-4161" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4162.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4162" published="2012-08-15" name="CVE-2012-4162" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4161.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-16.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-16.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat">
-        <vers num="10.0" edition="-" />
-        <vers num="10.0" edition="-:pro" />
-        <vers num="10.0.1" edition="-" />
-        <vers num="10.0.1" edition="-:pro" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9" />
-        <vers num="9.0" edition="-" />
-        <vers num="9.0" edition="-:pro" />
-        <vers num="9.1" edition="-" />
-        <vers num="9.1" edition="-:pro" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" edition="-" />
-        <vers num="9.3" edition="-:pro" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.0" />
-        <vers num="10.0.1" />
-        <vers num="10.0.2" />
-        <vers num="10.0.3" />
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4163" published="2012-08-21" name="CVE-2012-4163" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4164, CVE-2012-4165, and CVE-2012-4166.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-19.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-19.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="adobe_air">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.4990" />
-        <vers num="1.0.8.4990" />
-        <vers num="1.1" />
-        <vers num="1.1.0.5790" />
-        <vers num="1.5" />
-        <vers num="1.5.0.7220" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.8210" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.9120" />
-        <vers num="1.5.3.9130" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.12610" />
-        <vers num="2.0.3" />
-        <vers num="2.0.3.13070" />
-        <vers num="2.0.4" />
-        <vers num="2.5.0.16600" />
-        <vers num="2.5.1.17730" />
-        <vers num="2.6" />
-        <vers num="2.6.0.19120" />
-        <vers num="2.6.0.19140" />
-        <vers num="2.7" />
-        <vers num="2.7.0.1948" />
-        <vers num="2.7.0.19480" />
-        <vers num="2.7.0.1953" />
-        <vers num="2.7.0.19530" />
-        <vers num="2.7.1" />
-        <vers num="2.7.1.19610" />
-        <vers num="3.0.0.408" />
-        <vers num="3.0.0.4080" />
-        <vers num="3.1.0.485" />
-        <vers num="3.1.0.488" />
-        <vers num="3.1.0.4880" />
-        <vers num="3.2.0.207" />
-        <vers num="3.2.0.2070" />
-        <vers prev="1" num="3.3.0.3670" />
-      </prod>
-      <prod vendor="adobe" name="adobe_air_sdk">
-        <vers prev="1" num="3.3.0.3690" />
-      </prod>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10" />
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.2.54" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.106.17" />
-        <vers num="10.1.52.14" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.23" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers num="10.3.183.16" />
-        <vers num="10.3.183.18" />
-        <vers num="10.3.183.19" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="10.3.185.22" />
-        <vers num="10.3.185.24" />
-        <vers num="10.3.186.3" />
-        <vers num="10.3.186.6" />
-        <vers num="10.3.186.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.59" />
-        <vers num="11.1.102.62" />
-        <vers num="11.1.102.63" />
-        <vers num="11.1.111.8" />
-        <vers num="11.1.115.7" />
-        <vers num="11.2.202.228" />
-        <vers num="11.2.202.233" />
-        <vers prev="1" num="11.2.202.235" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.8.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-      <prod vendor="adobe" name="flash_player_for_android">
-        <vers num="11.1.102.59" />
-        <vers num="11.1.111.5" />
-        <vers num="11.1.111.6" />
-        <vers num="11.1.111.7" />
-        <vers num="11.1.111.8" />
-        <vers num="11.1.112.60" />
-        <vers num="11.1.112.61" />
-        <vers prev="1" num="11.1.115.11" />
-        <vers num="11.1.115.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4164" published="2012-08-21" name="CVE-2012-4164" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4163, CVE-2012-4165, and CVE-2012-4166.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-19.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-19.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="adobe_air">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.4990" />
-        <vers num="1.0.8.4990" />
-        <vers num="1.1" />
-        <vers num="1.1.0.5790" />
-        <vers num="1.5" />
-        <vers num="1.5.0.7220" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.8210" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.9120" />
-        <vers num="1.5.3.9130" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.12610" />
-        <vers num="2.0.3" />
-        <vers num="2.0.3.13070" />
-        <vers num="2.0.4" />
-        <vers num="2.5.0.16600" />
-        <vers num="2.5.1.17730" />
-        <vers num="2.6" />
-        <vers num="2.6.0.19120" />
-        <vers num="2.6.0.19140" />
-        <vers num="2.7" />
-        <vers num="2.7.0.1948" />
-        <vers num="2.7.0.19480" />
-        <vers num="2.7.0.1953" />
-        <vers num="2.7.0.19530" />
-        <vers num="2.7.1" />
-        <vers num="2.7.1.19610" />
-        <vers num="3.0.0.408" />
-        <vers num="3.0.0.4080" />
-        <vers num="3.1.0.485" />
-        <vers num="3.1.0.488" />
-        <vers num="3.1.0.4880" />
-        <vers num="3.2.0.207" />
-        <vers num="3.2.0.2070" />
-        <vers prev="1" num="3.3.0.3670" />
-      </prod>
-      <prod vendor="adobe" name="adobe_air_sdk">
-        <vers prev="1" num="3.3.0.3690" />
-      </prod>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10" />
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.2.54" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.106.17" />
-        <vers num="10.1.52.14" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.23" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers num="10.3.183.16" />
-        <vers num="10.3.183.18" />
-        <vers num="10.3.183.19" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="10.3.185.22" />
-        <vers num="10.3.185.24" />
-        <vers num="10.3.186.3" />
-        <vers num="10.3.186.6" />
-        <vers num="10.3.186.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.59" />
-        <vers num="11.1.102.62" />
-        <vers num="11.1.102.63" />
-        <vers num="11.1.111.8" />
-        <vers num="11.1.115.7" />
-        <vers num="11.2.202.228" />
-        <vers num="11.2.202.233" />
-        <vers prev="1" num="11.2.202.235" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.8.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-      <prod vendor="adobe" name="flash_player_for_android">
-        <vers num="11.1.102.59" />
-        <vers num="11.1.111.5" />
-        <vers num="11.1.111.6" />
-        <vers num="11.1.111.7" />
-        <vers num="11.1.111.8" />
-        <vers num="11.1.112.60" />
-        <vers num="11.1.112.61" />
-        <vers prev="1" num="11.1.115.11" />
-        <vers num="11.1.115.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4165" published="2012-08-21" name="CVE-2012-4165" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4163, CVE-2012-4164, and CVE-2012-4166.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-19.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-19.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="adobe_air">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.4990" />
-        <vers num="1.0.8.4990" />
-        <vers num="1.1" />
-        <vers num="1.1.0.5790" />
-        <vers num="1.5" />
-        <vers num="1.5.0.7220" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.8210" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.9120" />
-        <vers num="1.5.3.9130" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.12610" />
-        <vers num="2.0.3" />
-        <vers num="2.0.3.13070" />
-        <vers num="2.0.4" />
-        <vers num="2.5.0.16600" />
-        <vers num="2.5.1.17730" />
-        <vers num="2.6" />
-        <vers num="2.6.0.19120" />
-        <vers num="2.6.0.19140" />
-        <vers num="2.7" />
-        <vers num="2.7.0.1948" />
-        <vers num="2.7.0.19480" />
-        <vers num="2.7.0.1953" />
-        <vers num="2.7.0.19530" />
-        <vers num="2.7.1" />
-        <vers num="2.7.1.19610" />
-        <vers num="3.0.0.408" />
-        <vers num="3.0.0.4080" />
-        <vers num="3.1.0.485" />
-        <vers num="3.1.0.488" />
-        <vers num="3.1.0.4880" />
-        <vers num="3.2.0.207" />
-        <vers num="3.2.0.2070" />
-        <vers prev="1" num="3.3.0.3670" />
-      </prod>
-      <prod vendor="adobe" name="adobe_air_sdk">
-        <vers prev="1" num="3.3.0.3690" />
-      </prod>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10" />
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.2.54" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.106.17" />
-        <vers num="10.1.52.14" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.23" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers num="10.3.183.16" />
-        <vers num="10.3.183.18" />
-        <vers num="10.3.183.19" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="10.3.185.22" />
-        <vers num="10.3.185.24" />
-        <vers num="10.3.186.3" />
-        <vers num="10.3.186.6" />
-        <vers num="10.3.186.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.59" />
-        <vers num="11.1.102.62" />
-        <vers num="11.1.102.63" />
-        <vers num="11.1.111.8" />
-        <vers num="11.1.115.7" />
-        <vers num="11.2.202.228" />
-        <vers num="11.2.202.233" />
-        <vers prev="1" num="11.2.202.235" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.8.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-      <prod vendor="adobe" name="flash_player_for_android">
-        <vers num="11.1.102.59" />
-        <vers num="11.1.111.5" />
-        <vers num="11.1.111.6" />
-        <vers num="11.1.111.7" />
-        <vers num="11.1.111.8" />
-        <vers num="11.1.112.60" />
-        <vers num="11.1.112.61" />
-        <vers prev="1" num="11.1.115.11" />
-        <vers num="11.1.115.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4166" published="2012-08-21" name="CVE-2012-4166" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4163, CVE-2012-4164, and CVE-2012-4165.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-19.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-19.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="adobe_air">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.4990" />
-        <vers num="1.0.8.4990" />
-        <vers num="1.1" />
-        <vers num="1.1.0.5790" />
-        <vers num="1.5" />
-        <vers num="1.5.0.7220" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.8210" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.9120" />
-        <vers num="1.5.3.9130" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.12610" />
-        <vers num="2.0.3" />
-        <vers num="2.0.3.13070" />
-        <vers num="2.0.4" />
-        <vers num="2.5.0.16600" />
-        <vers num="2.5.1.17730" />
-        <vers num="2.6" />
-        <vers num="2.6.0.19120" />
-        <vers num="2.6.0.19140" />
-        <vers num="2.7" />
-        <vers num="2.7.0.1948" />
-        <vers num="2.7.0.19480" />
-        <vers num="2.7.0.1953" />
-        <vers num="2.7.0.19530" />
-        <vers num="2.7.1" />
-        <vers num="2.7.1.19610" />
-        <vers num="3.0.0.408" />
-        <vers num="3.0.0.4080" />
-        <vers num="3.1.0.485" />
-        <vers num="3.1.0.488" />
-        <vers num="3.1.0.4880" />
-        <vers num="3.2.0.207" />
-        <vers num="3.2.0.2070" />
-        <vers prev="1" num="3.3.0.3670" />
-      </prod>
-      <prod vendor="adobe" name="adobe_air_sdk">
-        <vers prev="1" num="3.3.0.3690" />
-      </prod>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10" />
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.2.54" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.106.17" />
-        <vers num="10.1.52.14" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.23" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers num="10.3.183.16" />
-        <vers num="10.3.183.18" />
-        <vers num="10.3.183.19" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="10.3.185.22" />
-        <vers num="10.3.185.24" />
-        <vers num="10.3.186.3" />
-        <vers num="10.3.186.6" />
-        <vers num="10.3.186.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.59" />
-        <vers num="11.1.102.62" />
-        <vers num="11.1.102.63" />
-        <vers num="11.1.111.8" />
-        <vers num="11.1.115.7" />
-        <vers num="11.2.202.228" />
-        <vers num="11.2.202.233" />
-        <vers prev="1" num="11.2.202.235" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.8.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-      <prod vendor="adobe" name="flash_player_for_android">
-        <vers num="11.1.102.59" />
-        <vers num="11.1.111.5" />
-        <vers num="11.1.111.6" />
-        <vers num="11.1.111.7" />
-        <vers num="11.1.111.8" />
-        <vers num="11.1.112.60" />
-        <vers num="11.1.112.61" />
-        <vers prev="1" num="11.1.115.11" />
-        <vers num="11.1.115.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4167" published="2012-08-21" name="CVE-2012-4167" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Integer overflow in Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allows attackers to execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-19.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-19.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="adobe_air">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.4990" />
-        <vers num="1.0.8.4990" />
-        <vers num="1.1" />
-        <vers num="1.1.0.5790" />
-        <vers num="1.5" />
-        <vers num="1.5.0.7220" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.8210" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.9120" />
-        <vers num="1.5.3.9130" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.12610" />
-        <vers num="2.0.3" />
-        <vers num="2.0.3.13070" />
-        <vers num="2.0.4" />
-        <vers num="2.5.0.16600" />
-        <vers num="2.5.1.17730" />
-        <vers num="2.6" />
-        <vers num="2.6.0.19120" />
-        <vers num="2.6.0.19140" />
-        <vers num="2.7" />
-        <vers num="2.7.0.1948" />
-        <vers num="2.7.0.19480" />
-        <vers num="2.7.0.1953" />
-        <vers num="2.7.0.19530" />
-        <vers num="2.7.1" />
-        <vers num="2.7.1.19610" />
-        <vers num="3.0.0.408" />
-        <vers num="3.0.0.4080" />
-        <vers num="3.1.0.485" />
-        <vers num="3.1.0.488" />
-        <vers num="3.1.0.4880" />
-        <vers num="3.2.0.207" />
-        <vers num="3.2.0.2070" />
-        <vers prev="1" num="3.3.0.3670" />
-      </prod>
-      <prod vendor="adobe" name="adobe_air_sdk">
-        <vers prev="1" num="3.3.0.3690" />
-      </prod>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10" />
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.2.54" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.106.17" />
-        <vers num="10.1.52.14" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.23" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers num="10.3.183.16" />
-        <vers num="10.3.183.18" />
-        <vers num="10.3.183.19" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="10.3.185.22" />
-        <vers num="10.3.185.24" />
-        <vers num="10.3.186.3" />
-        <vers num="10.3.186.6" />
-        <vers num="10.3.186.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.59" />
-        <vers num="11.1.102.62" />
-        <vers num="11.1.102.63" />
-        <vers num="11.1.111.8" />
-        <vers num="11.1.115.7" />
-        <vers num="11.2.202.228" />
-        <vers num="11.2.202.233" />
-        <vers prev="1" num="11.2.202.235" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.8.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-      <prod vendor="adobe" name="flash_player_for_android">
-        <vers num="11.1.102.59" />
-        <vers num="11.1.111.5" />
-        <vers num="11.1.111.6" />
-        <vers num="11.1.111.7" />
-        <vers num="11.1.111.8" />
-        <vers num="11.1.112.60" />
-        <vers num="11.1.112.61" />
-        <vers prev="1" num="11.1.115.11" />
-        <vers num="11.1.115.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4168" published="2012-08-21" name="CVE-2012-4168" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allow remote attackers to read content from a different domain via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-19.html" source="CONFIRM" patch="1" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-19.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="adobe_air">
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.4990" />
-        <vers num="1.0.8.4990" />
-        <vers num="1.1" />
-        <vers num="1.1.0.5790" />
-        <vers num="1.5" />
-        <vers num="1.5.0.7220" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.8210" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.3.9120" />
-        <vers num="1.5.3.9130" />
-        <vers num="2.0.2" />
-        <vers num="2.0.2.12610" />
-        <vers num="2.0.3" />
-        <vers num="2.0.3.13070" />
-        <vers num="2.0.4" />
-        <vers num="2.5.0.16600" />
-        <vers num="2.5.1.17730" />
-        <vers num="2.6" />
-        <vers num="2.6.0.19120" />
-        <vers num="2.6.0.19140" />
-        <vers num="2.7" />
-        <vers num="2.7.0.1948" />
-        <vers num="2.7.0.19480" />
-        <vers num="2.7.0.1953" />
-        <vers num="2.7.0.19530" />
-        <vers num="2.7.1" />
-        <vers num="2.7.1.19610" />
-        <vers num="3.0.0.408" />
-        <vers num="3.0.0.4080" />
-        <vers num="3.1.0.485" />
-        <vers num="3.1.0.488" />
-        <vers num="3.1.0.4880" />
-        <vers num="3.2.0.207" />
-        <vers num="3.2.0.2070" />
-        <vers prev="1" num="3.3.0.3670" />
-      </prod>
-      <prod vendor="adobe" name="adobe_air_sdk">
-        <vers prev="1" num="3.3.0.3690" />
-      </prod>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10" />
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.2.54" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.106.17" />
-        <vers num="10.1.52.14" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.23" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers num="10.3.183.16" />
-        <vers num="10.3.183.18" />
-        <vers num="10.3.183.19" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="10.3.185.22" />
-        <vers num="10.3.185.24" />
-        <vers num="10.3.186.3" />
-        <vers num="10.3.186.6" />
-        <vers num="10.3.186.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.59" />
-        <vers num="11.1.102.62" />
-        <vers num="11.1.102.63" />
-        <vers num="11.1.111.8" />
-        <vers num="11.1.115.7" />
-        <vers num="11.2.202.228" />
-        <vers num="11.2.202.233" />
-        <vers prev="1" num="11.2.202.235" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.8.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-      <prod vendor="adobe" name="flash_player_for_android">
-        <vers num="11.1.102.59" />
-        <vers num="11.1.111.5" />
-        <vers num="11.1.111.6" />
-        <vers num="11.1.111.7" />
-        <vers num="11.1.111.8" />
-        <vers num="11.1.112.60" />
-        <vers num="11.1.112.61" />
-        <vers prev="1" num="11.1.115.11" />
-        <vers num="11.1.115.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4170" published="2012-08-31" name="CVE-2012-4170" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-20.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-20.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="photoshop_cs6">
-        <vers num="13.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4171" published="2012-08-31" name="CVE-2012-4171" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allow attackers to cause a denial of service (application crash) by leveraging a logic error during handling of Firefox dialogs.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.adobe.com/support/security/bulletins/apsb12-19.html" source="CONFIRM" adv="1">http://www.adobe.com/support/security/bulletins/apsb12-19.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="adobe_air">
-        <vers prev="1" num="3.3.0.3670" />
-      </prod>
-      <prod vendor="adobe" name="adobe_air_sdk">
-        <vers prev="1" num="3.3.0.3690" />
-      </prod>
-      <prod vendor="adobe" name="flash_player">
-        <vers num="10.0.0.584" />
-        <vers num="10.0.12.10" />
-        <vers num="10.0.12.36" />
-        <vers num="10.0.15.3" />
-        <vers num="10.0.2.54" />
-        <vers num="10.0.22.87" />
-        <vers num="10.0.32.18" />
-        <vers num="10.0.42.34" />
-        <vers num="10.0.45.2" />
-        <vers num="10.1" />
-        <vers num="10.1.102.64" />
-        <vers num="10.1.105.6" />
-        <vers num="10.1.106.16" />
-        <vers num="10.1.106.17" />
-        <vers num="10.1.52.14" />
-        <vers num="10.1.52.14.1" />
-        <vers num="10.1.52.15" />
-        <vers num="10.1.53.64" />
-        <vers num="10.1.82.76" />
-        <vers num="10.1.85.3" />
-        <vers num="10.1.92.10" />
-        <vers num="10.1.92.8" />
-        <vers num="10.1.95.1" />
-        <vers num="10.1.95.2" />
-        <vers num="10.2.152" />
-        <vers num="10.2.152.26" />
-        <vers num="10.2.152.32" />
-        <vers num="10.2.152.33" />
-        <vers num="10.2.153.1" />
-        <vers num="10.2.154.13" />
-        <vers num="10.2.154.25" />
-        <vers num="10.2.156.12" />
-        <vers num="10.2.157.51" />
-        <vers num="10.2.159.1" />
-        <vers num="10.3.181.14" />
-        <vers num="10.3.181.16" />
-        <vers num="10.3.181.22" />
-        <vers num="10.3.181.23" />
-        <vers num="10.3.181.26" />
-        <vers num="10.3.181.34" />
-        <vers num="10.3.183.10" />
-        <vers num="10.3.183.11" />
-        <vers num="10.3.183.15" />
-        <vers num="10.3.183.16" />
-        <vers num="10.3.183.18" />
-        <vers prev="1" num="10.3.183.19" />
-        <vers num="10.3.183.5" />
-        <vers num="10.3.183.7" />
-        <vers num="11.0" />
-        <vers num="11.0.1.152" />
-        <vers num="11.0.1.153" />
-        <vers num="11.1" />
-        <vers num="11.1.102.55" />
-        <vers num="11.1.102.59" />
-        <vers num="11.1.102.62" />
-        <vers num="11.2.202.228" />
-        <vers num="11.2.202.233" />
-        <vers num="11.2.202.235" />
-        <vers num="11.2.202.238" />
-        <vers num="11.3.300.270" />
-        <vers num="11.3.300.271" />
-        <vers num="2" />
-        <vers num="3" />
-        <vers num="4" />
-        <vers num="5" />
-        <vers num="6" />
-        <vers num="6.0.21.0" />
-        <vers num="6.0.79" />
-        <vers num="7" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.14.0" />
-        <vers num="7.0.19.0" />
-        <vers num="7.0.24.0" />
-        <vers num="7.0.25" />
-        <vers num="7.0.53.0" />
-        <vers num="7.0.60.0" />
-        <vers num="7.0.61.0" />
-        <vers num="7.0.63" />
-        <vers num="7.0.66.0" />
-        <vers num="7.0.67.0" />
-        <vers num="7.0.68.0" />
-        <vers num="7.0.69.0" />
-        <vers num="7.0.70.0" />
-        <vers num="7.0.73.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.2" />
-        <vers num="8" />
-        <vers num="8.0" />
-        <vers num="8.0.22.0" />
-        <vers num="8.0.24.0" />
-        <vers num="8.0.33.0" />
-        <vers num="8.0.34.0" />
-        <vers num="8.0.35.0" />
-        <vers num="8.0.39.0" />
-        <vers num="8.0.42.0" />
-        <vers num="9" />
-        <vers num="9.0.112.0" />
-        <vers num="9.0.114.0" />
-        <vers num="9.0.115.0" />
-        <vers num="9.0.124.0" />
-        <vers num="9.0.125.0" />
-        <vers num="9.0.151.0" />
-        <vers num="9.0.152.0" />
-        <vers num="9.0.155.0" />
-        <vers num="9.0.159.0" />
-        <vers num="9.0.16" />
-        <vers num="9.0.18d60" />
-        <vers num="9.0.20" />
-        <vers num="9.0.20.0" />
-        <vers num="9.0.246.0" />
-        <vers num="9.0.260.0" />
-        <vers num="9.0.262.0" />
-        <vers num="9.0.277.0" />
-        <vers num="9.0.28" />
-        <vers num="9.0.28.0" />
-        <vers num="9.0.280" />
-        <vers num="9.0.283.0" />
-        <vers num="9.0.31" />
-        <vers num="9.0.31.0" />
-        <vers num="9.0.45.0" />
-        <vers num="9.0.47.0" />
-        <vers num="9.0.48.0" />
-        <vers num="9.0.8.0" />
-        <vers num="9.0.9.0" />
-        <vers num="9.125.0" />
-      </prod>
-      <prod vendor="adobe" name="flash_player_for_android">
-        <vers num="11.1.102.59" />
-        <vers prev="1" num="11.1.111.10" />
-        <vers num="11.1.111.5" />
-        <vers num="11.1.111.6" />
-        <vers num="11.1.111.7" />
-        <vers num="11.1.111.8" />
-        <vers num="11.1.112.60" />
-        <vers num="11.1.112.61" />
-        <vers prev="1" num="11.1.115.11" />
-        <vers num="11.1.115.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4177" published="2012-08-07" name="CVE-2012-4177" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line argument.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.bbc.com/news/technology-19053453" source="MISC">http://www.bbc.com/news/technology-19053453</ref>
-      <ref url="http://seclists.org/fulldisclosure/2012/Jul/375" source="FULLDISC">20120729 Re: AxMan ActiveX fuzzing &lt;== Memory Corruption PoC</ref>
-      <ref url="http://osvdb.org/84402" source="OSVDB">84402</ref>
-      <ref url="http://forums.ubi.com/showthread.php/699940-Uplay-PC-Patch-2-0-4-Security-fix" source="CONFIRM">http://forums.ubi.com/showthread.php/699940-Uplay-PC-Patch-2-0-4-Security-fix</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ubi" name="uplay_pc">
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers prev="1" num="2.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4178" published="2012-08-07" name="CVE-2012-4178" modified="2012-08-08" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in spywall/includes/deptUploads_data.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77264" source="XF">symantec-deptuploads-sql-injection(77264)</ref>
-      <ref url="http://www.securityfocus.com/bid/54721" source="BID">54721</ref>
-      <ref url="http://www.exploit-db.com/exploits/20123" source="EXPLOIT-DB">20123</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="symantec" name="web_gateway">
-        <vers num="5.0.3.18" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4219" published="2012-08-21" name="CVE-2012-4219" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">show_config_errors.php in phpMyAdmin 3.5.x before 3.5.2.1 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message, related to lack of inclusion of the common.inc.php library file.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15513071" source="SUSE">openSUSE-SU-2012:1062</ref>
-      <ref url="https://github.com/phpmyadmin/phpmyadmin/commit/0f0c2f1e2b3ece41cc1bb99a9931c8fcc7c917bc" source="CONFIRM">https://github.com/phpmyadmin/phpmyadmin/commit/0f0c2f1e2b3ece41cc1bb99a9931c8fcc7c917bc</ref>
-      <ref url="http://www.phpmyadmin.net/home_page/security/PMASA-2012-3.php" source="CONFIRM" adv="1">http://www.phpmyadmin.net/home_page/security/PMASA-2012-3.php</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="phpmyadmin" name="phpmyadmin">
-        <vers num="3.5.0.0" />
-        <vers num="3.5.1.0" />
-        <vers num="3.5.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4235" published="2012-08-10" name="CVE-2012-4235" modified="2012-08-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The RSGallery2 (com_rsgallery2) component before 3.2.0 for Joomla! 2.5.x does not place index.html files in image directories, which allows remote attackers to list image filenames via a request for a directory URI.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://joomlacode.org/gf/download/frsrelease/17326/75428/com_rsgallery2_3.2.0.zip" source="CONFIRM" patch="1">http://joomlacode.org/gf/download/frsrelease/17326/75428/com_rsgallery2_3.2.0.zip</ref>
-      <ref url="http://www.rsgallery2.nl/announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.0.html" source="CONFIRM" adv="1">http://www.rsgallery2.nl/announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.0.html</ref>
-      <ref url="http://joomlacode.org/gf/project/rsgallery2/news/" source="CONFIRM">http://joomlacode.org/gf/project/rsgallery2/news/</ref>
-      <ref url="http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/142" source="CONFIRM">http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/142</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rsgallery2" name="com_rsgallery2">
-        <vers num="1.10.1" edition="alpha" />
-        <vers num="1.10.10" edition="alpha" />
-        <vers num="1.10.11" edition="alpha" />
-        <vers num="1.10.13" edition="alpha" />
-        <vers num="1.10.14" edition="alpha" />
-        <vers num="1.10.2" edition="alpha" />
-        <vers num="1.10.5" edition="alpha" />
-        <vers num="1.10.6" edition="alpha" />
-        <vers num="1.10.7" edition="alpha" />
-        <vers num="1.10.8" edition="alpha" />
-        <vers num="1.10.9" edition="alpha" />
-        <vers num="1.11.0" edition="alpha" />
-        <vers num="1.11.1" edition="alpha" />
-        <vers num="1.11.10" edition="alpha" />
-        <vers num="1.11.11" edition="alpha" />
-        <vers num="1.11.2" edition="alpha" />
-        <vers num="1.11.3" edition="alpha" />
-        <vers num="1.11.4" edition="alpha" />
-        <vers num="1.11.5" edition="alpha" />
-        <vers num="1.11.6" edition="alpha" />
-        <vers num="1.11.7" edition="alpha" />
-        <vers num="1.11.8" edition="alpha" />
-        <vers num="1.12.0" edition="alpha" />
-        <vers num="1.12.1" edition="alpha" />
-        <vers num="1.12.2" edition="alpha" />
-        <vers num="1.13.0" edition="alpha" />
-        <vers num="1.13.1" edition="alpha" />
-        <vers num="1.14.0" edition="alpha" />
-        <vers num="1.14.1" edition="alpha" />
-        <vers num="1.9.0-4" edition="alpha" />
-        <vers num="1.9.4" edition="alpha" />
-        <vers num="1.9.5" edition="alpha" />
-        <vers num="2.1.0" edition="beta" />
-        <vers num="2.1.1" />
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0.1" />
-        <vers prev="1" num="3.1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4236" published="2012-08-20" name="CVE-2012-4236" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the refresh_page function in application/modules/_main/views/_top.php in Total Shop UK eCommerce Open Source before 2.1.2_p1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/54985" source="BID">54985</ref>
-      <ref url="http://www.reactionpenetrationtesting.co.uk/totalshop-uk-generic-xss.html" source="MISC">http://www.reactionpenetrationtesting.co.uk/totalshop-uk-generic-xss.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/13/7" source="MLIST">[oss-security] 20120813 Total Shop UK eCommerce Generic Cross-Site Scripting</ref>
-      <ref url="http://secunia.com/advisories/50238" source="SECUNIA" adv="1">50238</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="totalshopuk" name="ecommerce">
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.5.0" />
-        <vers num="1.5.0.1" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="1.5.3" />
-        <vers num="1.5.4" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.7" />
-        <vers num="1.7.0" />
-        <vers num="1.7.1" />
-        <vers num="1.7.2" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers prev="1" num="2.1.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4237" published="2012-08-20" name="CVE-2012-4237" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the subject_module_id parameter to (1) tce_edit_answer.php or (2) tce_edit_question.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/54861" source="BID">54861</ref>
-      <ref url="http://www.reactionpenetrationtesting.co.uk/tcexam-sql-injection.html" source="MISC">http://www.reactionpenetrationtesting.co.uk/tcexam-sql-injection.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/13/8" source="MLIST">[oss-security] 20120813 TCExam Edit SQL Injection</ref>
-      <ref url="http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam;h=edf6e08622642f1b2421f4355d98250d9e1b0742" source="CONFIRM">http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam;h=edf6e08622642f1b2421f4355d98250d9e1b0742</ref>
-      <ref url="http://secunia.com/advisories/50141" source="SECUNIA" adv="1">50141</ref>
-      <ref url="http://freecode.com/projects/tcexam/releases/347125" source="CONFIRM">http://freecode.com/projects/tcexam/releases/347125</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-08/0079.html" source="BUGTRAQ">20120814 TCExam Edit SQL Injection</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tecnick" name="tcexam">
-        <vers num="10.1.000" />
-        <vers num="10.1.001" />
-        <vers num="10.1.002" />
-        <vers num="10.1.003" />
-        <vers num="10.1.004" />
-        <vers num="10.1.005" />
-        <vers num="10.1.006" />
-        <vers num="10.1.007" />
-        <vers num="10.1.008" />
-        <vers num="10.1.009" />
-        <vers num="10.1.010" />
-        <vers num="10.1.011" />
-        <vers num="10.1.012" />
-        <vers num="10.1.013" />
-        <vers num="11.0.000" />
-        <vers num="11.0.001" />
-        <vers num="11.0.002" />
-        <vers num="11.0.003" />
-        <vers num="11.0.004" />
-        <vers num="11.0.005" />
-        <vers num="11.0.006" />
-        <vers num="11.0.007" />
-        <vers num="11.0.008" />
-        <vers num="11.0.009" />
-        <vers num="11.0.010" />
-        <vers num="11.0.011" />
-        <vers num="11.0.012" />
-        <vers num="11.0.013" />
-        <vers num="11.0.014" />
-        <vers num="11.0.015" />
-        <vers num="11.0.016" />
-        <vers num="11.1.000" />
-        <vers num="11.1.001" />
-        <vers num="11.1.002" />
-        <vers num="11.1.003" />
-        <vers num="11.1.004" />
-        <vers num="11.1.005" />
-        <vers num="11.1.006" />
-        <vers num="11.1.007" />
-        <vers num="11.1.008" />
-        <vers num="11.1.009" />
-        <vers num="11.1.010" />
-        <vers num="11.1.011" />
-        <vers num="11.1.012" />
-        <vers num="11.1.013" />
-        <vers num="11.1.014" />
-        <vers num="11.1.015" />
-        <vers num="11.1.016" />
-        <vers num="11.1.017" />
-        <vers num="11.1.018" />
-        <vers num="11.1.019" />
-        <vers num="11.1.020" />
-        <vers num="11.1.021" />
-        <vers num="11.1.022" />
-        <vers num="11.1.023" />
-        <vers num="11.1.024" />
-        <vers num="11.1.025" />
-        <vers num="11.1.026" />
-        <vers num="11.1.027" />
-        <vers num="11.1.028" />
-        <vers num="11.1.029" />
-        <vers num="11.1.030" />
-        <vers num="11.1.031" />
-        <vers num="11.2.000" />
-        <vers num="11.2.001" />
-        <vers num="11.2.002" />
-        <vers num="11.2.003" />
-        <vers num="11.2.004" />
-        <vers num="11.2.005" />
-        <vers num="11.2.006" />
-        <vers num="11.2.007" />
-        <vers num="11.2.008" />
-        <vers num="11.2.010" />
-        <vers num="11.2.011" />
-        <vers num="11.2.012" />
-        <vers num="11.2.013" />
-        <vers num="11.2.014" />
-        <vers num="11.2.015" />
-        <vers num="11.2.016" />
-        <vers num="11.2.017" />
-        <vers num="11.2.018" />
-        <vers num="11.2.020" />
-        <vers num="11.2.021" />
-        <vers num="11.2.022" />
-        <vers num="11.2.023" />
-        <vers num="11.2.025" />
-        <vers num="11.2.026" />
-        <vers num="11.2.027" />
-        <vers num="11.2.028" />
-        <vers num="11.2.029" />
-        <vers num="11.2.030" />
-        <vers num="11.2.031" />
-        <vers num="11.2.032" />
-        <vers num="11.3.000" />
-        <vers num="11.3.001" />
-        <vers num="11.3.002" />
-        <vers num="11.3.003" />
-        <vers num="11.3.004" />
-        <vers num="11.3.005" />
-        <vers num="11.3.006" />
-        <vers prev="1" num="11.3.007" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4238" published="2012-08-20" name="CVE-2012-4238" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:S/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in admin/code/tce_edit_answer.php in TCExam before 11.3.008 allows remote authenticated users with level 5 or greater permissions to inject arbitrary web script or HTML via the question_subject_id parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.reactionpenetrationtesting.co.uk/tcexam-cross-site-scripting.html" source="MISC">http://www.reactionpenetrationtesting.co.uk/tcexam-cross-site-scripting.html</ref>
-      <ref url="http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam;h=edf6e08622642f1b2421f4355d98250d9e1b0742" source="CONFIRM">http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam;h=edf6e08622642f1b2421f4355d98250d9e1b0742</ref>
-      <ref url="http://secunia.com/advisories/50141" source="SECUNIA" adv="1">50141</ref>
-      <ref url="http://freecode.com/projects/tcexam/releases/347125" source="CONFIRM">http://freecode.com/projects/tcexam/releases/347125</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-08/0090.html" source="BUGTRAQ">20120813 TCExam Edit Cross-Site Scripting</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tecnick" name="tcexam">
-        <vers num="10.1.000" />
-        <vers num="10.1.001" />
-        <vers num="10.1.002" />
-        <vers num="10.1.003" />
-        <vers num="10.1.004" />
-        <vers num="10.1.005" />
-        <vers num="10.1.006" />
-        <vers num="10.1.007" />
-        <vers num="10.1.008" />
-        <vers num="10.1.009" />
-        <vers num="10.1.010" />
-        <vers num="10.1.011" />
-        <vers num="10.1.012" />
-        <vers num="10.1.013" />
-        <vers num="11.0.000" />
-        <vers num="11.0.001" />
-        <vers num="11.0.002" />
-        <vers num="11.0.003" />
-        <vers num="11.0.004" />
-        <vers num="11.0.005" />
-        <vers num="11.0.006" />
-        <vers num="11.0.007" />
-        <vers num="11.0.008" />
-        <vers num="11.0.009" />
-        <vers num="11.0.010" />
-        <vers num="11.0.011" />
-        <vers num="11.0.012" />
-        <vers num="11.0.013" />
-        <vers num="11.0.014" />
-        <vers num="11.0.015" />
-        <vers num="11.0.016" />
-        <vers num="11.1.000" />
-        <vers num="11.1.001" />
-        <vers num="11.1.002" />
-        <vers num="11.1.003" />
-        <vers num="11.1.004" />
-        <vers num="11.1.005" />
-        <vers num="11.1.006" />
-        <vers num="11.1.007" />
-        <vers num="11.1.008" />
-        <vers num="11.1.009" />
-        <vers num="11.1.010" />
-        <vers num="11.1.011" />
-        <vers num="11.1.012" />
-        <vers num="11.1.013" />
-        <vers num="11.1.014" />
-        <vers num="11.1.015" />
-        <vers num="11.1.016" />
-        <vers num="11.1.017" />
-        <vers num="11.1.018" />
-        <vers num="11.1.019" />
-        <vers num="11.1.020" />
-        <vers num="11.1.021" />
-        <vers num="11.1.022" />
-        <vers num="11.1.023" />
-        <vers num="11.1.024" />
-        <vers num="11.1.025" />
-        <vers num="11.1.026" />
-        <vers num="11.1.027" />
-        <vers num="11.1.028" />
-        <vers num="11.1.029" />
-        <vers num="11.1.030" />
-        <vers num="11.1.031" />
-        <vers num="11.2.000" />
-        <vers num="11.2.001" />
-        <vers num="11.2.002" />
-        <vers num="11.2.003" />
-        <vers num="11.2.004" />
-        <vers num="11.2.005" />
-        <vers num="11.2.006" />
-        <vers num="11.2.007" />
-        <vers num="11.2.008" />
-        <vers num="11.2.010" />
-        <vers num="11.2.011" />
-        <vers num="11.2.012" />
-        <vers num="11.2.013" />
-        <vers num="11.2.014" />
-        <vers num="11.2.015" />
-        <vers num="11.2.016" />
-        <vers num="11.2.017" />
-        <vers num="11.2.018" />
-        <vers num="11.2.020" />
-        <vers num="11.2.021" />
-        <vers num="11.2.022" />
-        <vers num="11.2.023" />
-        <vers num="11.2.025" />
-        <vers num="11.2.026" />
-        <vers num="11.2.027" />
-        <vers num="11.2.028" />
-        <vers num="11.2.029" />
-        <vers num="11.2.030" />
-        <vers num="11.2.031" />
-        <vers num="11.2.032" />
-        <vers num="11.3.000" />
-        <vers num="11.3.001" />
-        <vers num="11.3.002" />
-        <vers num="11.3.003" />
-        <vers num="11.3.004" />
-        <vers num="11.3.005" />
-        <vers num="11.3.006" />
-        <vers prev="1" num="11.3.007" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4244" published="2012-09-14" name="CVE-2012-4244" modified="2012-09-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a long resource record.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kb.isc.org/article/AA-00778" source="CONFIRM" adv="1">https://kb.isc.org/article/AA-00778</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="isc" name="bind">
-        <vers num="9.0" />
-        <vers num="9.0.1" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.2.0" />
-        <vers num="9.2.1" />
-        <vers num="9.2.2" edition="p3" />
-        <vers num="9.2.3" />
-        <vers num="9.2.4" />
-        <vers num="9.2.5" />
-        <vers num="9.2.6" />
-        <vers num="9.2.7" />
-        <vers num="9.3" />
-        <vers num="9.3.0" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.4" />
-        <vers num="9.4-esv" edition="b1" />
-        <vers num="9.4-esv" edition="r1" />
-        <vers num="9.4-esv" edition="r2" />
-        <vers num="9.4-esv" edition="r3" />
-        <vers num="9.4-esv" edition="r4" />
-        <vers num="9.4-esv" edition="r4-p1" />
-        <vers num="9.4-esv" edition="r5b1" />
-        <vers num="9.4.0" edition="rc1" />
-        <vers num="9.4.0a1" />
-        <vers num="9.4.0a2" />
-        <vers num="9.4.0a3" />
-        <vers num="9.4.0a4" />
-        <vers num="9.4.0a5" />
-        <vers num="9.4.0a6" />
-        <vers num="9.4.0b1" />
-        <vers num="9.4.0b2" />
-        <vers num="9.4.0b3" />
-        <vers num="9.4.0b4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" edition="rc1" />
-        <vers num="9.4.3b1" />
-        <vers num="9.4.3b2" />
-        <vers num="9.4.3b3" />
-        <vers num="9.5" />
-        <vers num="9.5.0" edition="rc1" />
-        <vers num="9.5.0-p1" />
-        <vers num="9.5.0-p2" />
-        <vers num="9.5.0-p2-w1" />
-        <vers num="9.5.0-p2-w2" />
-        <vers num="9.5.0a1" />
-        <vers num="9.5.0a2" />
-        <vers num="9.5.0a3" />
-        <vers num="9.5.0a4" />
-        <vers num="9.5.0a5" />
-        <vers num="9.5.0a6" />
-        <vers num="9.5.0a7" />
-        <vers num="9.5.0b1" />
-        <vers num="9.5.0b2" />
-        <vers num="9.5.0b3" />
-        <vers num="9.5.1" edition="rc1" />
-        <vers num="9.5.1" edition="rc2" />
-        <vers num="9.5.1b1" />
-        <vers num="9.5.1b2" />
-        <vers num="9.5.1b3" />
-        <vers num="9.5.2" edition="rc1" />
-        <vers num="9.5.2-p1" />
-        <vers num="9.5.2-p2" />
-        <vers num="9.5.2-p3" />
-        <vers num="9.5.2-p4" />
-        <vers num="9.5.2b1" />
-        <vers num="9.5.3" edition="rc1" />
-        <vers num="9.5.3b1" />
-        <vers num="9.6-esv" />
-        <vers num="9.6-esv-r1" />
-        <vers num="9.6-esv-r2" />
-        <vers num="9.6-esv-r3" />
-        <vers num="9.6-esv-r4" />
-        <vers num="9.6-esv-r4-p1" />
-        <vers num="9.6-esv-r5" edition="p1" />
-        <vers num="9.6-esv-r5b1" />
-        <vers num="9.6-esv-r6" edition="b1" />
-        <vers num="9.6-esv-r6" edition="rc1" />
-        <vers num="9.6-esv-r6" edition="rc2" />
-        <vers num="9.6-esv-r7" edition="p1" />
-        <vers num="9.6-esv-r7" edition="p2" />
-        <vers num="9.6.0" edition="p1" />
-        <vers num="9.6.0" edition="rc1" />
-        <vers num="9.6.0" edition="rc2" />
-        <vers num="9.6.0a1" />
-        <vers num="9.6.0b1" />
-        <vers num="9.6.1" edition="p1" />
-        <vers num="9.6.1" edition="p2" />
-        <vers num="9.6.1" edition="p3" />
-        <vers num="9.6.1" edition="rc1" />
-        <vers num="9.6.1b1" />
-        <vers num="9.6.2" edition="rc1" />
-        <vers num="9.6.2-p1" />
-        <vers num="9.6.2-p2" />
-        <vers num="9.6.2-p3" />
-        <vers num="9.6.2b1" />
-        <vers num="9.6.3" edition="rc1" />
-        <vers num="9.6.3b1" />
-        <vers num="9.7.0" edition="beta" />
-        <vers num="9.7.0" edition="p1" />
-        <vers num="9.7.0" edition="p2" />
-        <vers num="9.7.0" edition="rc1" />
-        <vers num="9.7.0" edition="rc2" />
-        <vers num="9.7.0a1" />
-        <vers num="9.7.0a2" />
-        <vers num="9.7.0a3" />
-        <vers num="9.7.0b1" />
-        <vers num="9.7.0b2" />
-        <vers num="9.7.0b3" />
-        <vers num="9.7.1" edition="p1" />
-        <vers num="9.7.1" edition="p2" />
-        <vers num="9.7.1" edition="rc1" />
-        <vers num="9.7.1b1" />
-        <vers num="9.7.2" edition="p1" />
-        <vers num="9.7.2" edition="p2" />
-        <vers num="9.7.2" edition="p3" />
-        <vers num="9.7.2" edition="rc1" />
-        <vers num="9.7.3" edition="b1" />
-        <vers num="9.7.3" edition="p1" />
-        <vers num="9.7.3" edition="rc1" />
-        <vers num="9.7.4" edition="b1" />
-        <vers num="9.7.4" edition="p1" />
-        <vers num="9.7.4" edition="rc1" />
-        <vers num="9.7.4b1" />
-        <vers num="9.7.5" edition="b1" />
-        <vers num="9.7.5" edition="rc1" />
-        <vers num="9.7.5" edition="rc2" />
-        <vers num="9.7.6" edition="p1" />
-        <vers num="9.7.6" edition="p2" />
-        <vers num="9.8.0" edition="a1" />
-        <vers num="9.8.0" edition="b1" />
-        <vers num="9.8.0" edition="p1" />
-        <vers num="9.8.0" edition="p2" />
-        <vers num="9.8.0" edition="p4" />
-        <vers num="9.8.0" edition="rc1" />
-        <vers num="9.8.1" edition="b1" />
-        <vers num="9.8.1" edition="b2" />
-        <vers num="9.8.1" edition="b3" />
-        <vers num="9.8.1" edition="p1" />
-        <vers num="9.8.1" edition="rc1" />
-        <vers num="9.8.2" edition="b1" />
-        <vers num="9.8.2" edition="rc1" />
-        <vers num="9.8.2" edition="rc2" />
-        <vers num="9.8.3" edition="p1" />
-        <vers num="9.8.3" edition="p2" />
-        <vers num="9.9.0" edition="a1" />
-        <vers num="9.9.0" edition="a2" />
-        <vers num="9.9.0" edition="a3" />
-        <vers num="9.9.0" edition="b1" />
-        <vers num="9.9.0" edition="b2" />
-        <vers num="9.9.0" edition="rc1" />
-        <vers num="9.9.0" edition="rc2" />
-        <vers num="9.9.0" edition="rc3" />
-        <vers num="9.9.0" edition="rc4" />
-        <vers num="9.9.1" edition="p1" />
-        <vers num="9.9.1" edition="p2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4245" published="2012-08-31" name="CVE-2012-4245" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitrary commands via the python-fu-eval command.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55089" source="BID">55089</ref>
-      <ref url="http://www.reactionpenetrationtesting.co.uk/GIMP-scriptfu-python-command-execution.html" source="MISC">http://www.reactionpenetrationtesting.co.uk/GIMP-scriptfu-python-command-execution.html</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/20/1" source="MLIST">[oss-security] 20120820 RE: [Full-disclosure] GIMP Scriptfu Python Remote Command Execution</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/17/2" source="MLIST">[oss-security] 20120817 Re: [Full-disclosure] GIMP Scriptfu Python Remote Command Execution</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/16/6" source="MLIST">[oss-security] 20120816 GIMP Scriptfu Python Remote Command Execution</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-08/0106.html" source="BUGTRAQ">20120816 GIMP Scriptfu Python Remote Command Execution</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gimp" name="gimp">
-        <vers num="2.6.0" />
-        <vers num="2.6.1" />
-        <vers num="2.6.10" />
-        <vers num="2.6.11" />
-        <vers num="2.6.12" />
-        <vers num="2.6.13" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.6.7" />
-        <vers num="2.6.8" />
-        <vers num="2.6.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4246" published="2012-08-11" name="CVE-2012-4246" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter; or the (2) footer, (3) status, or (4) testtarget parameter in the send page.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.phplist.com/?lid=579" source="CONFIRM" patch="1">http://www.phplist.com/?lid=579</ref>
-      <ref url="https://www.httpcs.com/advisory/httpcs26" source="MISC">https://www.httpcs.com/advisory/httpcs26</ref>
-      <ref url="https://www.httpcs.com/advisory/httpcs25" source="MISC">https://www.httpcs.com/advisory/httpcs25</ref>
-      <ref url="https://www.httpcs.com/advisory/httpcs24" source="MISC">https://www.httpcs.com/advisory/httpcs24</ref>
-      <ref url="https://www.httpcs.com/advisory/httpcs23" source="MISC">https://www.httpcs.com/advisory/httpcs23</ref>
-      <ref url="https://www.httpcs.com/advisories" source="MISC">https://www.httpcs.com/advisories</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="phplist" name="phplist">
-        <vers num="2.10.1" />
-        <vers num="2.10.10" />
-        <vers num="2.10.11" />
-        <vers num="2.10.12" />
-        <vers num="2.10.13" />
-        <vers num="2.10.14" />
-        <vers num="2.10.15" />
-        <vers num="2.10.16" />
-        <vers num="2.10.17" />
-        <vers prev="1" num="2.10.18" />
-        <vers num="2.10.2" />
-        <vers num="2.10.3" />
-        <vers num="2.10.4" />
-        <vers num="2.10.5" />
-        <vers num="2.10.7" />
-        <vers num="2.10.8" />
-        <vers num="2.10.9" />
-        <vers num="2.6.5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8.12" />
-        <vers num="2.8.2" />
-        <vers num="2.8.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4247" published="2012-08-11" name="CVE-2012-4247" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the (1) remote_user, (2) remote_database, (3) remote_userprefix, (4) remote_password, or (5) remote_prefix parameter to the import4 page; or the (6) id parameter to the bouncerule page.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.phplist.com/?lid=579" source="CONFIRM" patch="1">http://www.phplist.com/?lid=579</ref>
-      <ref url="https://www.httpcs.com/advisory/httpcs7" source="MISC">https://www.httpcs.com/advisory/httpcs7</ref>
-      <ref url="https://www.httpcs.com/advisory/httpcs6" source="MISC">https://www.httpcs.com/advisory/httpcs6</ref>
-      <ref url="https://www.httpcs.com/advisory/httpcs4" source="MISC">https://www.httpcs.com/advisory/httpcs4</ref>
-      <ref url="https://www.httpcs.com/advisory/httpcs3" source="MISC">https://www.httpcs.com/advisory/httpcs3</ref>
-      <ref url="https://www.httpcs.com/advisory/httpcs2" source="MISC">https://www.httpcs.com/advisory/httpcs2</ref>
-      <ref url="https://www.httpcs.com/advisory/httpcs1" source="MISC">https://www.httpcs.com/advisory/httpcs1</ref>
-      <ref url="https://www.httpcs.com/advisories" source="MISC">https://www.httpcs.com/advisories</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="phplist" name="phplist">
-        <vers num="2.10.1" />
-        <vers num="2.10.10" />
-        <vers num="2.10.11" />
-        <vers num="2.10.12" />
-        <vers num="2.10.13" />
-        <vers num="2.10.14" />
-        <vers num="2.10.15" />
-        <vers num="2.10.16" />
-        <vers num="2.10.17" />
-        <vers prev="1" num="2.10.18" />
-        <vers num="2.10.2" />
-        <vers num="2.10.3" />
-        <vers num="2.10.4" />
-        <vers num="2.10.5" />
-        <vers num="2.10.7" />
-        <vers num="2.10.8" />
-        <vers num="2.10.9" />
-        <vers num="2.6.5" />
-        <vers num="2.7.1" />
-        <vers num="2.7.2" />
-        <vers num="2.8.12" />
-        <vers num="2.8.2" />
-        <vers num="2.8.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4248" published="2012-08-12" name="CVE-2012-4248" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">The Amazon Kindle Touch before 5.1.2 does not properly restrict access to the libkindleplugin.so NPAPI plugin interface, which might allow remote attackers to have an unspecified impact via vectors involving the (1) dev.log, (2) lipc.set, (3) lipc.get, or (4) todo.scheduleItems method, a different vulnerability than CVE-2012-4249.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/122656" source="CERT-VN">VU#122656</ref>
-      <ref url="http://www.mobileread.com/forums/showthread.php?s=c7953cc553a4aaa36e880b25aa1a6bf6&amp;t=175368" source="MISC">http://www.mobileread.com/forums/showthread.php?s=c7953cc553a4aaa36e880b25aa1a6bf6&amp;t=175368</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/MORO-8WKGBN" source="CONFIRM">http://www.kb.cert.org/vuls/id/MORO-8WKGBN</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="amazon" name="kindle_touch">
-        <vers num="5.1.0" />
-        <vers prev="1" num="5.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4249" published="2012-08-12" name="CVE-2012-4249" modified="2012-08-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The Amazon Lab126 com.lab126.system sendEvent implementation on the Kindle Touch before 5.1.2 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a string, as demonstrated by using lipc-set-prop to set an LIPC property, a different vulnerability than CVE-2012-4248.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/MORO-8WKGBN" source="CONFIRM">http://www.kb.cert.org/vuls/id/MORO-8WKGBN</ref>
-      <ref url="http://www.kb.cert.org/vuls/id/122656" source="CERT-VN">VU#122656</ref>
-      <ref url="http://www.mobileread.com/forums/showthread.php?s=c7953cc553a4aaa36e880b25aa1a6bf6&amp;t=175368" source="MISC">http://www.mobileread.com/forums/showthread.php?s=c7953cc553a4aaa36e880b25aa1a6bf6&amp;t=175368</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="amazon" name="kindle_touch">
-        <vers num="5.1.0" />
-        <vers num="5.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4250" published="2012-08-13" name="CVE-2012-4250" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msls31.dll in Samsung NET-i viewer 1.37 allows remote attackers to execute arbitrary code via a long string in the first argument.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75310" source="XF">samsung-netiviewer-activex-bo(75310)</ref>
-      <ref url="http://www.securityfocus.com/bid/53317" source="BID">53317</ref>
-      <ref url="http://www.exploit-db.com/exploits/18808" source="EXPLOIT-DB">18808</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="samsung" name="net-i_viewer">
-        <vers num="1.37" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4251" published="2012-08-13" name="CVE-2012-4251" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter to index.php, (2) phase parameter to install.php, (3) tablename or (4) dbid parameter to sql.php, or (5) filename parameter to restore.php in learn/cubemail/.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75284" source="XF">mysqldumper-install-xss(75284)</ref>
-      <ref url="http://www.securityfocus.com/bid/53306" source="BID">53306</ref>
-      <ref url="http://www.osvdb.org/81612" source="OSVDB">81612</ref>
-      <ref url="http://www.osvdb.org/81611" source="OSVDB">81611</ref>
-      <ref url="http://www.osvdb.org/81610" source="OSVDB">81610</ref>
-      <ref url="http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html" source="MISC">http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysqldumper" name="mysqldumper">
-        <vers num="1.24.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4252" published="2012-08-13" name="CVE-2012-4252" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:P/A:P)" CVSS_score="5.1" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="4.9" CVSS_base_score="5.1">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to hijack the authentication of administrators for requests that (1) remove file access restriction via a deletehtaccess action, (2) drop a database via a kill value in a db action, (3) uninstall the application via a 101 value in the phase parameter to learn/cubemail/install.php, (4) delete config.php via a 2 value in the phase parameter to learn/cubemail/install.php, (5) change a password via a schutz action, or (6) execute arbitrary SQL commands via the sql_statement parameter to learn/cubemail/sql.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75285" source="XF">mysqldumper-main-csrf(75285)</ref>
-      <ref url="http://www.securityfocus.com/bid/53306" source="BID">53306</ref>
-      <ref url="http://www.osvdb.org/81613" source="OSVDB">81613</ref>
-      <ref url="http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html" source="MISC">http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysqldumper" name="mysqldumper">
-        <vers num="1.24.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4253" published="2012-08-13" name="CVE-2012-4253" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) language parameter to learn/cubemail/install.php or (2) f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. (dot dot) in the (3) config parameter to learn/cubemail/menu.php.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75286" source="XF">mysqldumper-filemanagement-dir-traversal(75286)</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75283" source="XF">mysqldumper-install-file-include(75283)</ref>
-      <ref url="http://www.securityfocus.com/bid/53306" source="BID">53306</ref>
-      <ref url="http://www.osvdb.org/81615" source="OSVDB">81615</ref>
-      <ref url="http://www.osvdb.org/81609" source="OSVDB">81609</ref>
-      <ref url="http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html" source="MISC">http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysqldumper" name="mysqldumper">
-        <vers num="1.24.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4254" published="2012-08-13" name="CVE-2012-4254" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information (Notices) via a direct request to (1) learn/cubemail/restore.php or (2) learn/cubemail/dump.php.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75287" source="XF">mysqldumper-restore-info-disclosure(75287)</ref>
-      <ref url="http://www.securityfocus.com/bid/53306" source="BID">53306</ref>
-      <ref url="http://www.osvdb.org/81616" source="OSVDB">81616</ref>
-      <ref url="http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html" source="MISC">http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysqldumper" name="mysqldumper">
-        <vers num="1.24.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4255" published="2012-08-13" name="CVE-2012-4255" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request to learn/cubemail/refresh_dblist.php, which reveals the installation path in an error message.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53306" source="BID">53306</ref>
-      <ref url="http://www.osvdb.org/81616" source="OSVDB">81616</ref>
-      <ref url="http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html" source="MISC">http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mysqldumper" name="mysqldumper">
-        <vers num="1.24.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4256" published="2012-08-13" name="CVE-2012-4256" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The jNews (com_jnews) component 7.5.1 for Joomla! allows remote attackers to obtain sensitive information via the emailsearch parameter, which reveals the installation path in an error message.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75198" source="XF">jnews-index-info-disclosure(75198)</ref>
-      <ref url="http://packetstormsecurity.org/files/112233/jNews-7.5.1-Information-Disclosure.html" source="MISC">http://packetstormsecurity.org/files/112233/jNews-7.5.1-Information-Disclosure.html</ref>
-      <ref url="http://hauntit.blogspot.com/2012/04/en-jnews-jnewscore751-information.html" source="MISC">http://hauntit.blogspot.com/2012/04/en-jnews-jnewscore751-information.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="joobi" name="com_jnews">
-        <vers num="7.5.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4257" published="2012-08-13" name="CVE-2012-4257" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Yaqas (Yet Another Question &amp; Answer System) 1.0 Alpha 1 allows remote attackers to obtain sensitive information via an invalid character in the PHPSESSID, which reveals the installation path in an error message.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75205" source="XF">yaqas-index-info-disclosure(75205)</ref>
-      <ref url="http://packetstormsecurity.org/files/112248/Yaqas-CMS-Alpha1-Information-Disclosure.html" source="MISC">http://packetstormsecurity.org/files/112248/Yaqas-CMS-Alpha1-Information-Disclosure.html</ref>
-      <ref url="http://hauntit.blogspot.com/2012/03/en-yaqas-cms-alpha1-information.html" source="MISC">http://hauntit.blogspot.com/2012/03/en-yaqas-cms-alpha1-information.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="george_karpouzas" name="yet_another_question_&amp;_answer_system">
-        <vers num="1.0" edition="alpha1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4258" published="2012-08-13" name="CVE-2012-4258" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitrary SQL commands via the (1) link_idd parameter to 1_mobile/listings.php or (2) userid parameter to 1_mobile/agentprofile.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=516" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=516</ref>
-      <ref url="http://www.securityfocus.com/bid/53394" source="BID">53394</ref>
-      <ref url="http://www.exploit-db.com/exploits/18843" source="EXPLOIT-DB">18843</ref>
-      <ref url="http://packetstormsecurity.org/files/112480/MYRE-Real-Estate-Mobile-2012-2-Cross-Site-Scripting-SQL-Injection.html" source="MISC">http://packetstormsecurity.org/files/112480/MYRE-Real-Estate-Mobile-2012-2-Cross-Site-Scripting-SQL-Injection.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="myrephp" name="myre_real_estate_software">
-        <vers num="2012" edition="q2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4259" published="2012-08-13" name="CVE-2012-4259" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the contacts in (1) XPhone UC Web and the (2) web frontend for XPhone Virtual Directory in C4B XPhone Unified Communications (UC) 2011 Web 4.1.890S R1 allows remote attackers to inject arbitrary web script or HTML via the company name. NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75221" source="XF">xphone-multiple-xss(75221)</ref>
-      <ref url="http://www.securityfocus.com/bid/53283" source="BID">53283</ref>
-      <ref url="http://www.exploit-db.com/exploits/18802" source="EXPLOIT-DB">18802</ref>
-      <ref url="http://security.inshell.net/advisory/16" source="MISC">http://security.inshell.net/advisory/16</ref>
-      <ref url="http://secunia.com/advisories/48979" source="SECUNIA" adv="1">48979</ref>
-      <ref url="http://osvdb.org/81559" source="OSVDB">81559</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0216.html" source="BUGTRAQ">20120426 C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="c4b" name="xphone_unified_communications_2011">
-        <vers num="4.1.890s" edition="r1" />
-        <vers num="4.1.890s" edition="r1:web" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4260" published="2012-08-13" name="CVE-2012-4260" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the (1) aktion or (2) callurl parameter to modules/patient/mycare2x_pat_info.php; (3) dept_nr or (4) pid parameter to modules/importer/mycare2x_importer.php; (5) myOpsEintrag or (6) keyword parameter in a Suchen action to modules/drg/mycare2x_proc_search.php; or (7) name_last or (8) pid parameter to modules/patient/mycare_pid.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75390" source="XF">mycare2xcms-multiple-sql-injection-(75390)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=524" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=524</ref>
-      <ref url="http://www.securityfocus.com/bid/53392" source="BID">53392</ref>
-      <ref url="http://www.osvdb.org/81686" source="OSVDB">81686</ref>
-      <ref url="http://www.osvdb.org/81685" source="OSVDB">81685</ref>
-      <ref url="http://www.exploit-db.com/exploits/18844" source="EXPLOIT-DB">18844</ref>
-      <ref url="http://secunia.com/advisories/49029" source="SECUNIA" adv="1">49029</ref>
-      <ref url="http://packetstormsecurity.org/files/112462/myCare2x-CMS-Cross-Site-Scripting-SQL-Injection.html" source="MISC">http://packetstormsecurity.org/files/112462/myCare2x-CMS-Cross-Site-Scripting-SQL-Injection.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hccgmbh" name="mycare2x">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4261" published="2012-08-13" name="CVE-2012-4261" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in modules/patient/mycare2x_pat_info.php in myCare2x allows remote attackers to execute arbitrary SQL commands via the lang parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75390" source="XF">mycare2xcms-multiple-sql-injection-(75390)</ref>
-      <ref url="http://www.osvdb.org/81684" source="OSVDB">81684</ref>
-      <ref url="http://secunia.com/advisories/49029" source="SECUNIA" adv="1">49029</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hccgmbh" name="mycare2x">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4262" published="2012-08-13" name="CVE-2012-4262" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or HTML via the (1) name_last, (2) name_first, (3) name_middle, or (4) name_maiden parameter to modules/patient/mycare_pid.php; (5) favorites or (6) lang parameter to modules/nursing/mycare_ward_print.php; (7) aktion or (8) callurl parameter to modules/patient/mycare2x_pat_info.php; or (9) ln parameter to modules/drg/mycare2x_proc_search.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75392" source="XF">mycare2x-multiple-xss(75392)</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75391" source="XF">mycar2xcms-mycarepid-xss(75391)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=524" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=524</ref>
-      <ref url="http://www.securityfocus.com/bid/53392" source="BID">53392</ref>
-      <ref url="http://www.osvdb.org/81690" source="OSVDB">81690</ref>
-      <ref url="http://www.osvdb.org/81689" source="OSVDB">81689</ref>
-      <ref url="http://www.osvdb.org/81688" source="OSVDB">81688</ref>
-      <ref url="http://www.osvdb.org/81687" source="OSVDB">81687</ref>
-      <ref url="http://www.exploit-db.com/exploits/18844" source="EXPLOIT-DB">18844</ref>
-      <ref url="http://secunia.com/advisories/49029" source="SECUNIA">49029</ref>
-      <ref url="http://packetstormsecurity.org/files/112462/myCare2x-CMS-Cross-Site-Scripting-SQL-Injection.html" source="MISC">http://packetstormsecurity.org/files/112462/myCare2x-CMS-Cross-Site-Scripting-SQL-Injection.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hccgmbh" name="mycare2x">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4263" published="2012-08-13" name="CVE-2012-4263" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in inc/admin/content.php in the Better WP Security (better_wp_security) plugin before 3.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP_USER_AGENT header.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://plugins.trac.wordpress.org/changeset?old_path=%2Fbetter-wp-security&amp;old=542852&amp;new_path=%2Fbetter-wp-security&amp;new=542852" source="CONFIRM" patch="1">http://plugins.trac.wordpress.org/changeset?old_path=%2Fbetter-wp-security&amp;old=542852&amp;new_path=%2Fbetter-wp-security&amp;new=542852</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75523" source="XF">betterwpsecurity-admin-xss(75523)</ref>
-      <ref url="http://www.securityfocus.com/bid/53480" source="BID">53480</ref>
-      <ref url="http://packetstormsecurity.org/files/112617/WordPress-Better-WP-Security-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112617/WordPress-Better-WP-Security-Cross-Site-Scripting.html</ref>
-      <ref url="http://bit51.com/software/better-wp-security/changelog/" source="CONFIRM">http://bit51.com/software/better-wp-security/changelog/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bit51" name="better-wp-security">
-        <vers num="-" edition="alpha1" />
-        <vers num="-" edition="alpha10" />
-        <vers num="-" edition="alpha11" />
-        <vers num="-" edition="alpha2" />
-        <vers num="-" edition="alpha3" />
-        <vers num="-" edition="alpha4" />
-        <vers num="-" edition="alpha5" />
-        <vers num="-" edition="alpha6" />
-        <vers num="-" edition="alpha7" />
-        <vers num="-" edition="alpha8" />
-        <vers num="-" edition="alpha9" />
-        <vers num="0.1" edition="alpha" />
-        <vers num="0.1" edition="beta" />
-        <vers num="0.10" edition="beta" />
-        <vers num="0.11" edition="beta" />
-        <vers num="0.13" edition="beta" />
-        <vers num="0.14" edition="beta" />
-        <vers num="0.15" edition="beta" />
-        <vers num="0.16" edition="beta" />
-        <vers num="0.2" edition="beta" />
-        <vers num="0.3" edition="beta" />
-        <vers num="0.4" edition="beta" />
-        <vers num="0.5" edition="beta" />
-        <vers num="0.6" edition="beta" />
-        <vers num="0.7" edition="beta" />
-        <vers num="0.8" edition="beta" />
-        <vers num="0.9" edition="beta" />
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="1.4" />
-        <vers num="1.5" />
-        <vers num="1.6" />
-        <vers num="1.7" />
-        <vers num="1.8" />
-        <vers num="1.8.1" />
-        <vers num="1.9" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.10" />
-        <vers num="2.11" />
-        <vers num="2.12" />
-        <vers num="2.13" />
-        <vers num="2.14" />
-        <vers num="2.15" />
-        <vers num="2.16" />
-        <vers num="2.17" />
-        <vers num="2.18" />
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.4" />
-        <vers num="2.5" />
-        <vers num="2.6" />
-        <vers num="2.7" />
-        <vers num="2.8" />
-        <vers num="2.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers prev="1" num="3.2.4" />
-        <vers num="3.2.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4264" published="2012-08-13" name="CVE-2012-4264" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the Better WP Security (better_wp_security) plugin before 3.2.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "server variables," a different vulnerability than CVE-2012-4263.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://plugins.trac.wordpress.org/changeset?old_path=%2Fbetter-wp-security&amp;old=542852&amp;new_path=%2Fbetter-wp-security&amp;new=542852" source="CONFIRM" patch="1">http://plugins.trac.wordpress.org/changeset?old_path=%2Fbetter-wp-security&amp;old=542852&amp;new_path=%2Fbetter-wp-security&amp;new=542852</ref>
-      <ref url="http://bit51.com/software/better-wp-security/changelog/" source="CONFIRM">http://bit51.com/software/better-wp-security/changelog/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bit51" name="better-wp-security">
-        <vers num="-" edition="alpha1" />
-        <vers num="-" edition="alpha10" />
-        <vers num="-" edition="alpha11" />
-        <vers num="-" edition="alpha2" />
-        <vers num="-" edition="alpha3" />
-        <vers num="-" edition="alpha4" />
-        <vers num="-" edition="alpha5" />
-        <vers num="-" edition="alpha6" />
-        <vers num="-" edition="alpha7" />
-        <vers num="-" edition="alpha8" />
-        <vers num="-" edition="alpha9" />
-        <vers num="0.1" edition="alpha" />
-        <vers num="0.1" edition="beta" />
-        <vers num="0.10" edition="beta" />
-        <vers num="0.11" edition="beta" />
-        <vers num="0.13" edition="beta" />
-        <vers num="0.14" edition="beta" />
-        <vers num="0.15" edition="beta" />
-        <vers num="0.16" edition="beta" />
-        <vers num="0.2" edition="beta" />
-        <vers num="0.3" edition="beta" />
-        <vers num="0.4" edition="beta" />
-        <vers num="0.5" edition="beta" />
-        <vers num="0.6" edition="beta" />
-        <vers num="0.7" edition="beta" />
-        <vers num="0.8" edition="beta" />
-        <vers num="0.9" edition="beta" />
-        <vers num="1.0" />
-        <vers num="1.1" />
-        <vers num="1.2" />
-        <vers num="1.3" />
-        <vers num="1.4" />
-        <vers num="1.5" />
-        <vers num="1.6" />
-        <vers num="1.7" />
-        <vers num="1.8" />
-        <vers num="1.8.1" />
-        <vers num="1.9" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-        <vers num="2.10" />
-        <vers num="2.11" />
-        <vers num="2.12" />
-        <vers num="2.13" />
-        <vers num="2.14" />
-        <vers num="2.15" />
-        <vers num="2.16" />
-        <vers num="2.17" />
-        <vers num="2.18" />
-        <vers num="2.2" />
-        <vers num="2.3" />
-        <vers num="2.4" />
-        <vers num="2.5" />
-        <vers num="2.6" />
-        <vers num="2.7" />
-        <vers num="2.8" />
-        <vers num="2.9" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1" />
-        <vers num="3.2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers prev="1" num="3.2.4" />
-        <vers num="3.2.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4265" published="2012-08-13" name="CVE-2012-4265" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in category_edit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=512" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=512</ref>
-      <ref url="http://www.exploit-db.com/exploits/18872" source="EXPLOIT-DB">18872</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="itechscripts" name="proman_xpress">
-        <vers num="5.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4266" published="2012-08-13" name="CVE-2012-4266" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in client_details.php in Proman Xpress 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the cl_comments parameter.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=512" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=512</ref>
-      <ref url="http://www.exploit-db.com/exploits/18872" source="EXPLOIT-DB">18872</ref>
-      <ref url="http://secunia.com/advisories/49127" source="SECUNIA" adv="1">49127</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="itechscripts" name="proman_xpress">
-        <vers num="5.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4267" published="2012-08-13" name="CVE-2012-4267" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in user/register in Sockso 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/rodnaph/sockso/pull/99/files" source="CONFIRM" patch="1">https://github.com/rodnaph/sockso/pull/99/files</ref>
-      <ref url="https://github.com/rodnaph/sockso/commit/fe2d895ea8eb8b8ccad5a3319f472e45d6ba5136" source="CONFIRM" patch="1">https://github.com/rodnaph/sockso/commit/fe2d895ea8eb8b8ccad5a3319f472e45d6ba5136</ref>
-      <ref url="https://github.com/rodnaph/sockso/issues/93" source="CONFIRM">https://github.com/rodnaph/sockso/issues/93</ref>
-      <ref url="http://www.exploit-db.com/exploits/18868" source="EXPLOIT-DB">18868</ref>
-      <ref url="http://smwyg.com/blog/#sockso-persistant-xss-attack" source="MISC">http://smwyg.com/blog/#sockso-persistant-xss-attack</ref>
-      <ref url="http://secunia.com/advisories/49148" source="SECUNIA" adv="1">49148</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pu-gh" name="sockso">
-        <vers num="1.1" />
-        <vers num="1.1.1" />
-        <vers num="1.1.2" />
-        <vers num="1.1.3" />
-        <vers num="1.1.4" />
-        <vers num="1.1.5" />
-        <vers num="1.1.6" />
-        <vers num="1.1.7" />
-        <vers num="1.1.8" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" />
-        <vers num="1.2.6" />
-        <vers num="1.2.7" />
-        <vers num="1.3" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.3.4" />
-        <vers num="1.3.5" />
-        <vers num="1.4" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers prev="1" num="1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4268" published="2012-08-13" name="CVE-2012-4268" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in bulletproof-security/admin/options.php in the BulletProof Security plugin before .47.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP_ACCEPT_ENCODING header.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://plugins.trac.wordpress.org/changeset?old_path=%2Fbulletproof-security&amp;old=543044&amp;new_path=%2Fbulletproof-security&amp;new=543044" source="CONFIRM" patch="1">http://plugins.trac.wordpress.org/changeset?old_path=%2Fbulletproof-security&amp;old=543044&amp;new_path=%2Fbulletproof-security&amp;new=543044</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75522" source="XF">bulletproofsecurity-admin-xss(75522)</ref>
-      <ref url="http://www.securityfocus.com/bid/53478" source="BID">53478</ref>
-      <ref url="http://wordpress.org/extend/plugins/bulletproof-security/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/bulletproof-security/changelog/</ref>
-      <ref url="http://packetstormsecurity.org/files/112618/WordPress-BulletProof-Security-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112618/WordPress-BulletProof-Security-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ait-pro" name="bulletproof-security">
-        <vers prev="1" num=".47" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4269" published="2012-08-13" name="CVE-2012-4269" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">Unrestricted file upload vulnerability in eFront 3.6.11 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension via an attachment in a message.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/434.html 'CWE-434: Unrestricted Upload of File with Dangerous Type'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75443" source="XF">efront-upload-file-upload(75443)</ref>
-      <ref url="http://www.securityfocus.com/bid/53412" source="BID">53412</ref>
-      <ref url="http://packetstormsecurity.org/files/112496/Efront-3.6.11-Cross-Site-Scripting-Shell-Upload.html" source="MISC">http://packetstormsecurity.org/files/112496/Efront-3.6.11-Cross-Site-Scripting-Shell-Upload.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="efrontlearning" name="efront">
-        <vers num="3.6.11" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4270" published="2012-08-13" name="CVE-2012-4270" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in eFront 3.6.11 allows remote authenticated users to inject arbitrary web script or HTML via the subject box of a message.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75442" source="XF">efront-admin-xss(75442)</ref>
-      <ref url="http://www.securityfocus.com/bid/53412" source="BID">53412</ref>
-      <ref url="http://packetstormsecurity.org/files/112496/Efront-3.6.11-Cross-Site-Scripting-Shell-Upload.html" source="MISC">http://packetstormsecurity.org/files/112496/Efront-3.6.11-Cross-Site-Scripting-Shell-Upload.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="efrontlearning" name="efront">
-        <vers num="3.6.11" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4271" published="2012-08-13" name="CVE-2012-4271" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in bad-behavior-wordpress-admin.php in the Bad Behavior plugin before 2.0.47 and 2.2.x before 2.2.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, (2) httpbl_key, (3) httpbl_maxage, (4) httpbl_threat, (5) reverse_proxy_addresses, or (6) reverse_proxy_header parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://plugins.trac.wordpress.org/changeset?old_path=%2Fbad-behavior&amp;old=543807&amp;new_path=%2Fbad-behavior&amp;new=543807" source="CONFIRM" patch="1">http://plugins.trac.wordpress.org/changeset?old_path=%2Fbad-behavior&amp;old=543807&amp;new_path=%2Fbad-behavior&amp;new=543807</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75521" source="XF">badbehavior-optionsgeneral-xss(75521)</ref>
-      <ref url="http://www.securityfocus.com/bid/53477" source="BID">53477</ref>
-      <ref url="http://packetstormsecurity.org/files/112619/WordPress-Bad-Behavior-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112619/WordPress-Bad-Behavior-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mark_jaquith" name="bad_behavior">
-        <vers prev="1" num="2.0.46" />
-        <vers num="2.2.0" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.2.4" />
-      </prod>
-      <prod vendor="wordpress" name="wordpress">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4272" published="2012-08-13" name="CVE-2012-4272" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the "processing of the buttons of Xing and Pinterest".</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://plugins.trac.wordpress.org/changeset?old_path=%2F2-click-socialmedia-buttons&amp;old=532798&amp;new_path=%2F2-click-socialmedia-buttons&amp;new=532798" source="CONFIRM" patch="1">http://plugins.trac.wordpress.org/changeset?old_path=%2F2-click-socialmedia-buttons&amp;old=532798&amp;new_path=%2F2-click-socialmedia-buttons&amp;new=532798</ref>
-      <ref url="http://wordpress.org/extend/plugins/2-click-socialmedia-buttons/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/2-click-socialmedia-buttons/changelog/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ppfeufer" name="2-click-social-media-buttons">
-        <vers num="0.1" edition="-" />
-        <vers num="0.10" />
-        <vers num="0.11" edition="r1" />
-        <vers num="0.11" edition="r2" />
-        <vers num="0.12" />
-        <vers num="0.13" />
-        <vers num="0.14" />
-        <vers num="0.15" />
-        <vers num="0.16" />
-        <vers num="0.17" />
-        <vers num="0.18" />
-        <vers num="0.18.1" />
-        <vers num="0.19" />
-        <vers num="0.19.1" />
-        <vers num="0.2" />
-        <vers num="0.20" />
-        <vers num="0.21" />
-        <vers num="0.21.1" />
-        <vers num="0.22" />
-        <vers num="0.23" />
-        <vers num="0.23.1" />
-        <vers num="0.24" />
-        <vers num="0.24.1" />
-        <vers num="0.25" />
-        <vers num="0.26" />
-        <vers num="0.27" />
-        <vers num="0.27.1" />
-        <vers num="0.28" />
-        <vers num="0.29" />
-        <vers num="0.3" />
-        <vers num="0.30" />
-        <vers num="0.31.1" />
-        <vers num="0.31.2" />
-        <vers num="0.31.3" />
-        <vers num="0.32.1" />
-        <vers num="0.32.2" />
-        <vers prev="1" num="0.33" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4273" published="2012-08-13" name="CVE-2012-4273" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://plugins.trac.wordpress.org/changeset?old_path=%2F2-click-socialmedia-buttons&amp;old=532798&amp;new_path=%2F2-click-socialmedia-buttons&amp;new=532798" source="CONFIRM" patch="1">http://plugins.trac.wordpress.org/changeset?old_path=%2F2-click-socialmedia-buttons&amp;old=532798&amp;new_path=%2F2-click-socialmedia-buttons&amp;new=532798</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75518" source="XF">wp2clicksocialmedia-xing-xss(75518)</ref>
-      <ref url="http://wordpress.org/extend/plugins/2-click-socialmedia-buttons/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/2-click-socialmedia-buttons/changelog/</ref>
-      <ref url="http://packetstormsecurity.org/files/112615/WordPress-2-Click-Socialmedia-Buttons-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/112615/WordPress-2-Click-Socialmedia-Buttons-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ppfeufer" name="2-click-social-media-buttons">
-        <vers num="0.1" edition="-" />
-        <vers num="0.10" />
-        <vers num="0.11" edition="r1" />
-        <vers num="0.11" edition="r2" />
-        <vers num="0.12" />
-        <vers num="0.13" />
-        <vers num="0.14" />
-        <vers num="0.15" />
-        <vers num="0.16" />
-        <vers num="0.17" />
-        <vers num="0.18" />
-        <vers num="0.18.1" />
-        <vers num="0.19" />
-        <vers num="0.19.1" />
-        <vers num="0.2" />
-        <vers num="0.20" />
-        <vers num="0.21" />
-        <vers num="0.21.1" />
-        <vers num="0.22" />
-        <vers num="0.23" />
-        <vers num="0.23.1" />
-        <vers num="0.24" />
-        <vers num="0.24.1" />
-        <vers num="0.25" />
-        <vers num="0.26" />
-        <vers num="0.27" />
-        <vers num="0.27.1" />
-        <vers num="0.28" />
-        <vers num="0.29" />
-        <vers num="0.3" />
-        <vers num="0.30" />
-        <vers num="0.31.1" />
-        <vers num="0.31.2" />
-        <vers num="0.31.3" />
-        <vers num="0.32.1" />
-        <vers num="0.32.2" />
-        <vers prev="1" num="0.33" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4274" published="2012-08-13" name="CVE-2012-4274" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Hitachi Cobol GUI Option 06-00, 06-01 through 06-01-/A, 07-00, 07-01 before 07-01-/B, and 08-00 before 08-00-/B and Cobol GUI Option Server 07-00, 07-01 before 07-01-/B, and 08-00 before 08-00-/B allows remote attackers to execute arbitrary code via unknown attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-013/index.html" source="CONFIRM">http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-013/index.html</ref>
-      <ref url="http://secunia.com/advisories/49158" source="SECUNIA" adv="1">49158</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hitachi" name="cobol_gui_option">
-        <vers num="06-00" />
-        <vers num="06-01" />
-        <vers num="06-01/a" />
-        <vers num="07-00" />
-        <vers num="07-01" />
-        <vers num="07-01/a" />
-        <vers num="08-00" />
-        <vers num="08-00/a" />
-      </prod>
-      <prod vendor="hitachi" name="cobol_gui_option_server">
-        <vers num="07-00" />
-        <vers num="07-01" />
-        <vers num="07-01/a" />
-        <vers num="08-00" />
-        <vers num="08-00/a" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4275" published="2012-08-13" name="CVE-2012-4275" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 before 03-00-08 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-014/index.html" source="CONFIRM" adv="1">http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-014/index.html</ref>
-      <ref url="http://secunia.com/advisories/49144" source="SECUNIA" adv="1">49144</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hitachi" name="it_operations_director">
-        <vers num="02-50-01" />
-        <vers num="02-50-06" />
-        <vers num="02-50-07" />
-        <vers num="03-00" />
-        <vers num="03-00-04" />
-        <vers num="03-00-07" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4276" published="2012-08-13" name="CVE-2012-4276" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 before 03-00-08 allows attackers to cause a denial of service via unknown attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-014/index.html" source="CONFIRM" adv="1">http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-014/index.html</ref>
-      <ref url="http://secunia.com/advisories/49144" source="SECUNIA" adv="1">49144</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hitachi" name="it_operations_director">
-        <vers num="02-50-01" />
-        <vers num="02-50-06" />
-        <vers num="02-50-07" />
-        <vers num="03-00" />
-        <vers num="03-00-04" />
-        <vers num="03-00-07" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4277" published="2012-08-13" name="CVE-2012-4277" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the smarty_function_html_options_optoutput function in distribution/libs/plugins/function.html_options.php in Smarty before 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://code.google.com/p/smarty-php/source/detail?r=4612" source="CONFIRM" patch="1">http://code.google.com/p/smarty-php/source/detail?r=4612</ref>
-      <ref url="http://www.securitytracker.com/id?1027061" source="SECTRACK">1027061</ref>
-      <ref url="http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt" source="CONFIRM">http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt</ref>
-      <ref url="http://secunia.com/advisories/49164" source="SECUNIA" adv="1">49164</ref>
-      <ref url="http://code.google.com/p/smarty-php/issues/detail?id=98&amp;can=1" source="MISC">http://code.google.com/p/smarty-php/issues/detail?id=98&amp;can=1</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="smarty" name="smarty">
-        <vers num="1.0" />
-        <vers num="1.0a" />
-        <vers num="1.0b" />
-        <vers num="1.1.0" />
-        <vers num="1.2.0" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.3.0" />
-        <vers num="1.3.1" />
-        <vers num="1.3.2" />
-        <vers num="1.4.0" edition="b1" />
-        <vers num="1.4.0" edition="b2" />
-        <vers num="1.4.1" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.5.0" />
-        <vers num="1.5.1" />
-        <vers num="1.5.2" />
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.2.0" />
-        <vers num="2.3.0" />
-        <vers num="2.3.1" />
-        <vers num="2.4.0" />
-        <vers num="2.4.1" />
-        <vers num="2.4.2" />
-        <vers num="2.5.0" edition="rc1" />
-        <vers num="2.5.0" edition="rc2" />
-        <vers num="2.6.0" edition="rc1" />
-        <vers num="2.6.0" edition="rc2" />
-        <vers num="2.6.0" edition="rc3" />
-        <vers num="2.6.1" />
-        <vers num="2.6.10" />
-        <vers num="2.6.11" />
-        <vers num="2.6.12" />
-        <vers num="2.6.13" />
-        <vers num="2.6.14" />
-        <vers num="2.6.15" />
-        <vers num="2.6.16" />
-        <vers num="2.6.17" />
-        <vers num="2.6.18" />
-        <vers num="2.6.2" />
-        <vers num="2.6.20" />
-        <vers num="2.6.22" />
-        <vers num="2.6.24" />
-        <vers num="2.6.25" />
-        <vers num="2.6.26" />
-        <vers num="2.6.3" />
-        <vers num="2.6.4" />
-        <vers num="2.6.5" />
-        <vers num="2.6.6" />
-        <vers num="2.6.7" />
-        <vers num="2.6.9" />
-        <vers num="3.0.0" edition="beta4" />
-        <vers num="3.0.0" edition="beta5" />
-        <vers num="3.0.0" edition="beta6" />
-        <vers num="3.0.0" edition="beta7" />
-        <vers num="3.0.0" edition="beta8" />
-        <vers num="3.0.0" edition="rc1" />
-        <vers num="3.0.0" edition="rc2" />
-        <vers num="3.0.0" edition="rc3" />
-        <vers num="3.0.0" edition="rc4" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.1" edition="rc1" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers prev="1" num="3.1.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4278" published="2012-08-13" name="CVE-2012-4278" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) notes parameter to (a) admin/agenteditor.php; (2) title, (3) previewdesc, (4) fulldesc, or (5) notes parameter (b) to agentadmin.php or (c) in an addlisting action to agentadmin.php; or unspecified vectors to (d) admin/adminfeatures.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=513" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=513</ref>
-      <ref url="http://www.securityfocus.com/bid/53491" source="BID">53491</ref>
-      <ref url="http://www.exploit-db.com/exploits/18874" source="EXPLOIT-DB">18874</ref>
-      <ref url="http://secunia.com/advisories/49132" source="SECUNIA" adv="1">49132</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rwcinc" name="free_realty">
-        <vers num="3.1-0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4279" published="2012-08-13" name="CVE-2012-4279" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to agentdisplay.php or (2) edit parameter to admin/admin.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=513" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=513</ref>
-      <ref url="http://www.securityfocus.com/bid/53491" source="BID">53491</ref>
-      <ref url="http://www.exploit-db.com/exploits/18874" source="EXPLOIT-DB">18874</ref>
-      <ref url="http://secunia.com/advisories/49132" source="SECUNIA" adv="1">49132</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rwcinc" name="free_realty">
-        <vers num="3.1-0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4280" published="2012-08-13" name="CVE-2012-4280" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in admin/agenteditor.php in Free Realty 3.1-0.6 allow remote attackers to hijack the authentication of administrators for requests that (1) add an agent via an addagent action or (2) modify an agent.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=513" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=513</ref>
-      <ref url="http://www.securityfocus.com/bid/53491" source="BID">53491</ref>
-      <ref url="http://www.exploit-db.com/exploits/18874" source="EXPLOIT-DB">18874</ref>
-      <ref url="http://secunia.com/advisories/49132" source="SECUNIA" adv="1">49132</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="rwcinc" name="free_realty">
-        <vers num="3.1-0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4281" published="2012-08-13" name="CVE-2012-4281" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to execute arbitrary SQL commands via the hid parameter to (1) holiday.php or (2) holiday_book.php, (3) id parameter to pages.php, (4) fid parameter to admin/airline-edit.php, or (5) cid parameter to admin/customer-edit.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75540" source="XF">travelonexpress-multiple-sql-injection(75540)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=530" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=530</ref>
-      <ref url="http://www.securityfocus.com/bid/53500" source="BID">53500</ref>
-      <ref url="http://www.osvdb.org/81886" source="OSVDB">81886</ref>
-      <ref url="http://www.osvdb.org/81885" source="OSVDB">81885</ref>
-      <ref url="http://www.osvdb.org/81884" source="OSVDB">81884</ref>
-      <ref url="http://www.osvdb.org/81883" source="OSVDB">81883</ref>
-      <ref url="http://www.osvdb.org/81882" source="OSVDB">81882</ref>
-      <ref url="http://www.exploit-db.com/exploits/18871" source="EXPLOIT-DB">18871</ref>
-      <ref url="http://secunia.com/advisories/49118" source="SECUNIA" adv="1">49118</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="itechscripts" name="travelon_express">
-        <vers num="6.2.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4282" published="2012-08-13" name="CVE-2012-4282" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in photo.php in Trombinoscope 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75427" source="XF">trombinoscope-photo-sql-injection(75427)</ref>
-      <ref url="http://www.securityfocus.com/bid/53398" source="BID">53398</ref>
-      <ref url="http://packetstormsecurity.org/files/112488/Trombinoscope-3.5-SQL-Injection.html" source="MISC">http://packetstormsecurity.org/files/112488/Trombinoscope-3.5-SQL-Injection.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="toocharger" name="trombinoscope">
-        <vers num="3.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4283" published="2012-08-13" name="CVE-2012-4283" modified="2012-08-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the Login With Ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://plugins.trac.wordpress.org/changeset/541069" source="CONFIRM" patch="1">http://plugins.trac.wordpress.org/changeset/541069</ref>
-      <ref url="http://wordpress.org/extend/plugins/login-with-ajax/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/login-with-ajax/changelog/</ref>
-      <ref url="http://secunia.com/advisories/49013" source="SECUNIA" adv="1">49013</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="netweblogic" name="login_with_ajax">
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.2" />
-        <vers num="2.21" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers prev="1" num="3.0.4" />
-        <vers num="3.0b" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4285" published="2012-08-16" name="CVE-2012-4285" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a zero-length message.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7566" source="CONFIRM" patch="1">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7566</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44247" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44247</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=44247&amp;r2=44246&amp;pathrev=44247" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=44247&amp;r2=44246&amp;pathrev=44247</ref>
-      <ref url="https://hermes.opensuse.org/messages/15514562" source="SUSE">openSUSE-SU-2012:1067</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-13.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-13.html</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html" source="SUSE">openSUSE-SU-2012:1035</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-        <vers num="1.6.8" />
-        <vers num="1.6.9" />
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4286" published="2012-08-16" name="CVE-2012-4286" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The pcapng_read_packet_block function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted pcap-ng file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://anonsvn.wireshark.org/viewvc?revision=44074&amp;view=revision" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc?revision=44074&amp;view=revision</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc/trunk/wiretap/pcapng.c?r1=44074&amp;r2=44073&amp;pathrev=44074" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc/trunk/wiretap/pcapng.c?r1=44074&amp;r2=44073&amp;pathrev=44074</ref>
-      <ref url="https://hermes.opensuse.org/messages/15514562" source="SUSE">openSUSE-SU-2012:1067</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7533" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7533</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-24.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-24.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4287" published="2012-08-16" name="CVE-2012-4287" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document length.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mongo.c?r1=44288&amp;r2=44287&amp;pathrev=44288" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mongo.c?r1=44288&amp;r2=44287&amp;pathrev=44288</ref>
-      <ref url="https://hermes.opensuse.org/messages/15514562" source="SUSE">openSUSE-SU-2012:1067</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7572" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7572</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-14.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-14.html</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44288" source="CONFIRM">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44288</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4288" published="2012-08-16" name="CVE-2012-4288" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">Integer overflow in the dissect_xtp_ecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop or application crash) via a large value for a span length.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44289" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44289</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-xtp.c?r1=44289&amp;r2=44288&amp;pathrev=44289" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-xtp.c?r1=44289&amp;r2=44288&amp;pathrev=44289</ref>
-      <ref url="https://hermes.opensuse.org/messages/15514562" source="SUSE">openSUSE-SU-2012:1067</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7571" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7571</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-15.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-15.html</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html" source="SUSE">openSUSE-SU-2012:1035</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-        <vers num="1.6.8" />
-        <vers num="1.6.9" />
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4289" published="2012-08-16" name="CVE-2012-4289" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a large number of ACL entries.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7603" source="CONFIRM" patch="1">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7603</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44317" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44317</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-afp.c?r1=44317&amp;r2=44316&amp;pathrev=44317" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-afp.c?r1=44317&amp;r2=44316&amp;pathrev=44317</ref>
-      <ref url="https://hermes.opensuse.org/messages/15514562" source="SUSE">openSUSE-SU-2012:1067</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-17.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-17.html</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html" source="SUSE">openSUSE-SU-2012:1035</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-        <vers num="1.6.8" />
-        <vers num="1.6.9" />
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4290" published="2012-08-16" name="CVE-2012-4290" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a malformed packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15514562" source="SUSE">openSUSE-SU-2012:1067</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7573" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7573</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-23.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-23.html</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html" source="SUSE">openSUSE-SU-2012:1035</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-        <vers num="1.6.8" />
-        <vers num="1.6.9" />
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4291" published="2012-08-16" name="CVE-2012-4291" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://hermes.opensuse.org/messages/15514562" source="SUSE">openSUSE-SU-2012:1067</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7570" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7570</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-20.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-20.html</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html" source="SUSE">openSUSE-SU-2012:1035</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-        <vers num="1.6.8" />
-        <vers num="1.6.9" />
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4292" published="2012-08-16" name="CVE-2012-4292" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44366" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44366</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc/trunk/epan/emem.c?r1=44380&amp;r2=44379&amp;pathrev=44380" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc/trunk/epan/emem.c?r1=44380&amp;r2=44379&amp;pathrev=44380</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-stun.c?r1=44366&amp;r2=44365&amp;pathrev=44366" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-stun.c?r1=44366&amp;r2=44365&amp;pathrev=44366</ref>
-      <ref url="https://hermes.opensuse.org/messages/15514562" source="SUSE">openSUSE-SU-2012:1067</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7569" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7569</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-21.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-21.html</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html" source="SUSE">openSUSE-SU-2012:1035</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44380" source="CONFIRM">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44380</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-        <vers num="1.6.8" />
-        <vers num="1.6.9" />
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4293" published="2012-08-16" name="CVE-2012-4293" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">plugins/ethercat/packet-ecatmb.c in the EtherCAT Mailbox dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly handle certain integer fields, which allows remote attackers to cause a denial of service (application exit) via a malformed packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7562" source="CONFIRM" patch="1">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7562</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=43149" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=43149</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc/trunk/plugins/ethercat/packet-ecatmb.c?r1=43149&amp;r2=43148&amp;pathrev=43149" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc/trunk/plugins/ethercat/packet-ecatmb.c?r1=43149&amp;r2=43148&amp;pathrev=43149</ref>
-      <ref url="https://hermes.opensuse.org/messages/15514562" source="SUSE">openSUSE-SU-2012:1067</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-22.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-22.html</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html" source="SUSE">openSUSE-SU-2012:1035</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-        <vers num="1.6.8" />
-        <vers num="1.6.9" />
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4294" published="2012-08-16" name="CVE-2012-4294" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="5.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.5" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Buffer overflow in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a large speed (aka rate) value.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-erf.c?r1=44377&amp;r2=44376&amp;pathrev=44377" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-erf.c?r1=44377&amp;r2=44376&amp;pathrev=44377</ref>
-      <ref url="https://hermes.opensuse.org/messages/15514562" source="SUSE">openSUSE-SU-2012:1067</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7563" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7563</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-16.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-16.html</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44377" source="CONFIRM">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44377</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4295" published="2012-08-16" name="CVE-2012-4295" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">Array index error in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 might allow remote attackers to cause a denial of service (application crash) via a crafted speed (aka rate) value.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-erf.c?r1=44419&amp;r2=44418&amp;pathrev=44419" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-erf.c?r1=44419&amp;r2=44418&amp;pathrev=44419</ref>
-      <ref url="https://hermes.opensuse.org/messages/15514562" source="SUSE">openSUSE-SU-2012:1067</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7563" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7563</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-16.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-16.html</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44419" source="CONFIRM">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44419</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4296" published="2012-08-16" name="CVE-2012-4296" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="3.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.5" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-rtps2.c?r1=44320&amp;r2=44319&amp;pathrev=44320" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-rtps2.c?r1=44320&amp;r2=44319&amp;pathrev=44320</ref>
-      <ref url="https://hermes.opensuse.org/messages/15514562" source="SUSE">openSUSE-SU-2012:1067</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7568" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7568</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-18.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-18.html</ref>
-      <ref url="http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html" source="SUSE">openSUSE-SU-2012:1035</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44320" source="CONFIRM">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44320</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.4.0" />
-        <vers num="1.4.1" />
-        <vers num="1.4.10" />
-        <vers num="1.4.11" />
-        <vers num="1.4.12" />
-        <vers num="1.4.13" />
-        <vers num="1.4.14" />
-        <vers num="1.4.2" />
-        <vers num="1.4.3" />
-        <vers num="1.4.4" />
-        <vers num="1.4.5" />
-        <vers num="1.4.6" />
-        <vers num="1.4.7" />
-        <vers num="1.4.8" />
-        <vers num="1.4.9" />
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-        <vers num="1.6.8" />
-        <vers num="1.6.9" />
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4297" published="2012-08-16" name="CVE-2012-4297" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="8.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="6.5" CVSS_base_score="8.3">
-    <desc>
-      <descript source="cve">Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a malformed packet.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44307" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc?view=revision&amp;revision=44307</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gsm_rlcmac.h?r1=44307&amp;r2=44306&amp;pathrev=44307" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gsm_rlcmac.h?r1=44307&amp;r2=44306&amp;pathrev=44307</ref>
-      <ref url="https://hermes.opensuse.org/messages/15514562" source="SUSE">openSUSE-SU-2012:1067</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7561" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7561</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-19.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-19.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.6.0" />
-        <vers num="1.6.1" />
-        <vers num="1.6.2" />
-        <vers num="1.6.3" />
-        <vers num="1.6.4" />
-        <vers num="1.6.5" />
-        <vers num="1.6.6" />
-        <vers num="1.6.7" />
-        <vers num="1.6.8" />
-        <vers num="1.6.9" />
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4298" published="2012-08-16" name="CVE-2012-4298" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:A/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="5.4" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="5.5" CVSS_base_score="5.4">
-    <desc>
-      <descript source="cve">Integer signedness error in the vwr_read_rec_data_ethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://anonsvn.wireshark.org/viewvc/trunk/wiretap/vwr.c?r1=44075&amp;r2=44074&amp;pathrev=44075" source="CONFIRM" patch="1">http://anonsvn.wireshark.org/viewvc/trunk/wiretap/vwr.c?r1=44075&amp;r2=44074&amp;pathrev=44075</ref>
-      <ref url="https://hermes.opensuse.org/messages/15514562" source="SUSE">openSUSE-SU-2012:1067</ref>
-      <ref url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7533" source="CONFIRM">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7533</ref>
-      <ref url="http://www.wireshark.org/security/wnpa-sec-2012-25.html" source="CONFIRM" adv="1">http://www.wireshark.org/security/wnpa-sec-2012-25.html</ref>
-      <ref url="http://anonsvn.wireshark.org/viewvc?revision=44075&amp;view=revision" source="CONFIRM">http://anonsvn.wireshark.org/viewvc?revision=44075&amp;view=revision</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wireshark" name="wireshark">
-        <vers num="1.8.0" />
-        <vers num="1.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4324" published="2012-08-14" name="CVE-2012-4324" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in PHPJabbers Vacation Rental Script allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a create action in the AdminUsers module to index.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74683" source="XF">vacationrentallisting-index-csrf(74683)</ref>
-      <ref url="http://packetstormsecurity.org/files/111564/Vacation-Rental-Listing-Cross-Site-Request-Forgery.html" source="MISC">http://packetstormsecurity.org/files/111564/Vacation-Rental-Listing-Cross-Site-Request-Forgery.html</ref>
-      <ref url="http://osvdb.org/80948" source="OSVDB">80948</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="phpjabbers" name="vacation_rental_script">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4325" published="2012-08-14" name="CVE-2012-4325" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in upload/users.php in Utopia News Pro (UNP) 1.4.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74760" source="XF">utopianewspro-users-csrf(74760)</ref>
-      <ref url="http://www.exploit-db.com/exploits/18720" source="EXPLOIT-DB">18720</ref>
-      <ref url="http://osvdb.org/80986" source="OSVDB">80986</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="utopiasoftware" name="news_pro">
-        <vers prev="1" num="1.4.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4326" published="2012-08-14" name="CVE-2012-4326" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in commonsettings.php in AlstraSoft Site Uptime Enterprise, possibly 5.4, allows remote attackers to hijack the authentication of administrators.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74682" source="XF">alstrasoftsiteuptime-commonsettings-csrf(74682)</ref>
-      <ref url="http://secunia.com/advisories/48707" source="SECUNIA" adv="1">48707</ref>
-      <ref url="http://packetstormsecurity.org/files/111563/AlstraSoft-Site-Uptime-Cross-Site-Request-Forgery.html" source="MISC">http://packetstormsecurity.org/files/111563/AlstraSoft-Site-Uptime-Cross-Site-Request-Forgery.html</ref>
-      <ref url="http://osvdb.org/80947" source="OSVDB">80947</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="altrasoft" name="site_uptime_enterprise">
-        <vers num="5.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4327" published="2012-08-14" name="CVE-2012-4327" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Image News slider plugin before 3.3 for WordPress has unspecified impact and remote attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://plugins.trac.wordpress.org/changeset?old_path=%2Fwp-image-news-slider&amp;old=529740&amp;new_path=%2Fwp-image-news-slider&amp;new=529740" source="CONFIRM" patch="1">http://plugins.trac.wordpress.org/changeset?old_path=%2Fwp-image-news-slider&amp;old=529740&amp;new_path=%2Fwp-image-news-slider&amp;new=529740</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74788" source="XF">image-news-wordpress-multiple-unspecified(74788)</ref>
-      <ref url="http://www.securityfocus.com/bid/52977" source="BID">52977</ref>
-      <ref url="http://wordpress.org/extend/plugins/wp-image-news-slider/other_notes/" source="CONFIRM">http://wordpress.org/extend/plugins/wp-image-news-slider/other_notes/</ref>
-      <ref url="http://secunia.com/advisories/48747" source="SECUNIA" adv="1">48747</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wpslideshow" name="image_news_slider">
-        <vers num="3.0" />
-        <vers num="3.1" />
-        <vers prev="1" num="3.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4328" published="2012-08-14" name="CVE-2012-4328" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the MAPI in vBulletin Suite 4.1.2 through 4.1.12, Forum 4.1.2 through 4.1.12, and the MAPI plugin 1.4.3 for vBulletin 3.x has unknown impact and attack vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://www.vbulletin.com/forum/showthread.php/400165-vBulletin-Security-Patch-for-vBulletin-4-1-12-for-Suite-amp-Forum-04-23-2012" source="CONFIRM" adv="1">https://www.vbulletin.com/forum/showthread.php/400165-vBulletin-Security-Patch-for-vBulletin-4-1-12-for-Suite-amp-Forum-04-23-2012</ref>
-      <ref url="https://www.vbulletin.com/forum/showthread.php/400164-vBulletin-Security-Patch-for-vBulletin-4-1-2-4-1-11-for-Suite-amp-Forum-04-23-2012" source="CONFIRM" adv="1">https://www.vbulletin.com/forum/showthread.php/400164-vBulletin-Security-Patch-for-vBulletin-4-1-2-4-1-11-for-Suite-amp-Forum-04-23-2012</ref>
-      <ref url="https://www.vbulletin.com/forum/showthread.php/400162-vBulletin-3-x-MAPI-Plugin-1-4-3-released-with-security-patch-04-23-2012" source="CONFIRM" adv="1">https://www.vbulletin.com/forum/showthread.php/400162-vBulletin-3-x-MAPI-Plugin-1-4-3-released-with-security-patch-04-23-2012</ref>
-      <ref url="http://www.securityfocus.com/bid/53226" source="BID">53226</ref>
-      <ref url="http://secunia.com/advisories/48917" source="SECUNIA" adv="1">48917</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vbulletin" name="mapi">
-        <vers num="1.4.3" />
-      </prod>
-      <prod vendor="vbulletin" name="vbulletin_forum">
-        <vers num="4.1.12" />
-        <vers num="4.1.2" />
-      </prod>
-      <prod vendor="vbulletin" name="vbulletin_suite">
-        <vers num="4.1.12" />
-        <vers num="4.1.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4329" published="2012-08-14" name="CVE-2012-4329" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart) via a crafted controller name.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74927" source="XF">samsungtv-controller-packet-dos(74927)</ref>
-      <ref url="http://www.securitytracker.com/id?1026976" source="SECTRACK">1026976</ref>
-      <ref url="http://www.securityfocus.com/bid/53161" source="BID">53161</ref>
-      <ref url="http://www.osvdb.org/81221" source="OSVDB">81221</ref>
-      <ref url="http://www.exploit-db.com/exploits/18751" source="EXPLOIT-DB">18751</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0142.html" source="BUGTRAQ">20120419 Vulnerabilities in Samsung TV (remote controller protocol)</ref>
-      <ref url="http://aluigi.org/adv/samsux_1-adv.txt" source="MISC">http://aluigi.org/adv/samsux_1-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="samsong" name="d6000">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4330" published="2012-08-14" name="CVE-2012-4330" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long string in certain fields, as demonstrated by the MAC address field, possibly a buffer overflow.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74928" source="XF">samsungtv-string-dos(74928)</ref>
-      <ref url="http://www.securitytracker.com/id?1026976" source="SECTRACK">1026976</ref>
-      <ref url="http://www.securityfocus.com/bid/53161" source="BID">53161</ref>
-      <ref url="http://www.osvdb.org/81222" source="OSVDB">81222</ref>
-      <ref url="http://www.exploit-db.com/exploits/18751" source="EXPLOIT-DB">18751</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0142.html" source="BUGTRAQ">20120419 Vulnerabilities in Samsung TV (remote controller protocol)</ref>
-      <ref url="http://aluigi.org/adv/samsux_1-adv.txt" source="MISC">http://aluigi.org/adv/samsux_1-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="samsong" name="d6000">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4331" published="2012-08-14" name="CVE-2012-4331" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in SPIP before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x before 2.1.13 have unknown impact and attack vectors that are not related to cross-site scripting (XSS), different vulnerabilities than CVE-2012-2151.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securitytracker.com/id?1026970" source="SECTRACK">1026970</ref>
-      <ref url="http://archives.rezo.net/archives/spip-en.mbox/U5QUZ6WJRAJC7H5BR7W5SQG6WCD3PXL7/" source="MLIST">[Spip-en] 20120423 New stable releases SPIP 1.9.2o, 2.0.18 et 2.1.13 are availables</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="spip" name="spip">
-        <vers num="1.9" />
-        <vers num="1.9.1" />
-        <vers num="1.9.2" />
-        <vers num="2.0" />
-        <vers num="2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4332" published="2012-08-14" name="CVE-2012-4332" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The ShareYourCart plugin 1.7.1 for WordPress allows remote attackers to obtain the installation path via unspecified vectors related to the SDK.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/53241" source="BID">53241</ref>
-      <ref url="http://wordpress.org/extend/plugins/shareyourcart/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/shareyourcart/changelog/</ref>
-      <ref url="http://secunia.com/advisories/48960" source="SECUNIA" adv="1">48960</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="barandisolutions" name="shareyourcart">
-        <vers num="1.7.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4333" published="2012-08-14" name="CVE-2012-4333" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow remote attackers to execute arbitrary code via a long string in the fname parameter.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75070" source="XF">netiware-activex-control-bo(75070)</ref>
-      <ref url="http://www.securityfocus.com/bid/53193" source="BID">53193</ref>
-      <ref url="http://www.exploit-db.com/exploits/18765" source="EXPLOIT-DB">18765</ref>
-      <ref url="http://secunia.com/advisories/48966" source="SECUNIA" adv="1">48966</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="samsung" name="net-i_viewer">
-        <vers num="1.37.120316" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4334" published="2012-08-14" name="CVE-2012-4334" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i viewer 1.37.120316 allows remote attackers to execute arbitrary code via unspecified vectors.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75069" source="XF">netiware-activex-code-execution(75069)</ref>
-      <ref url="http://www.securityfocus.com/bid/53193" source="BID">53193</ref>
-      <ref url="http://www.exploit-db.com/exploits/18765" source="EXPLOIT-DB">18765</ref>
-      <ref url="http://secunia.com/advisories/48965" source="SECUNIA" adv="1">48965</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="samsung" name="net-i_viewer">
-        <vers num="1.37.120316" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4335" published="2012-08-14" name="CVE-2012-4335" modified="2012-08-15" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service (infinite loop) via a negative size value in a TCP request to (1) NiwMasterService or (2) NiwStorageService.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75066" source="XF">netiware-storage-dos(75066)</ref>
-      <ref url="http://www.securityfocus.com/bid/53193" source="BID">53193</ref>
-      <ref url="http://www.exploit-db.com/exploits/18765" source="EXPLOIT-DB">18765</ref>
-      <ref url="http://secunia.com/advisories/48825" source="SECUNIA" adv="1">48825</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="samsung" name="net-i_viewer">
-        <vers num="1.37.120316" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4336" published="2012-09-15" name="CVE-2012-4336" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) an arbitrary parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.htbridge.com/advisory/HTB23110" source="MISC">https://www.htbridge.com/advisory/HTB23110</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/78311" source="XF">flogr-index-any-xss(78311)</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/78310" source="XF">flogr-index-xss(78310)</ref>
-      <ref url="http://www.securityfocus.com/bid/55418" source="BID">55418</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-09/0021.html" source="BUGTRAQ">20120905 Cross-Site Scripting (XSS) Vulnerabilities in Flogr</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mike_carr" name="flogr">
-        <vers num="2.3" />
-        <vers num="2.3.3" />
-        <vers num="2.4" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.5.2" />
-        <vers num="2.5.3" />
-        <vers num="2.5.4" />
-        <vers num="2.5.5" />
-        <vers prev="1" num="2.5.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4337" published="2012-08-23" name="CVE-2012-4337" modified="2012-08-24" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number during processing of cross references.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/55150" source="BID">55150</ref>
-      <ref url="http://www.osvdb.org/84808" source="OSVDB">84808</ref>
-      <ref url="http://www.foxitsoftware.com/Secure_PDF_Reader/security_bulletins.php" source="CONFIRM" adv="1">http://www.foxitsoftware.com/Secure_PDF_Reader/security_bulletins.php</ref>
-      <ref url="http://technet.microsoft.com/security/msvr/msvr12-013" source="MISC">http://technet.microsoft.com/security/msvr/msvr12-013</ref>
-      <ref url="http://securitytracker.com/id?1027424" source="SECTRACK">1027424</ref>
-      <ref url="http://secunia.com/advisories/50359" source="SECUNIA" adv="1">50359</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="foxitsoftware" name="foxit_reader">
-        <vers num="2.0" />
-        <vers num="2.3" />
-        <vers num="3.0" />
-        <vers num="3.1.2.1013" />
-        <vers num="3.1.2.1030" />
-        <vers num="3.2.0.0303" />
-        <vers num="3.2.1.0401" />
-        <vers num="4.0" />
-        <vers num="4.0.0.0619" />
-        <vers num="4.1" />
-        <vers num="4.1.1.0805" />
-        <vers num="4.2" />
-        <vers num="4.3" />
-        <vers num="4.3.1.0218" />
-        <vers num="5.0" />
-        <vers num="5.0.2" />
-        <vers num="5.1.0.1021" />
-        <vers num="5.1.3" />
-        <vers prev="1" num="5.1.4.0104" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4340" published="2012-08-15" name="CVE-2012-4340" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Sybase EAServer before 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000047.html" source="JVNDB">JVNDB-2012-000047</ref>
-      <ref url="http://jvn.jp/en/jp/JVN47662377/index.html" source="JVN">JVN#47662377</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sybase" name="easerver">
-        <vers num="4.0" />
-        <vers num="4.2.5" />
-        <vers num="5.0" />
-        <vers num="5.0.1" />
-        <vers num="5.1" />
-        <vers num="5.2" />
-        <vers num="5.2.1" />
-        <vers num="5.3" />
-        <vers num="5.5" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers prev="1" num="6.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4341" published="2012-08-15" name="CVE-2012-4341" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) long parameter value, (2) crafted string size field, or (3) long Parameter Name string in a package with opcode 0x43 and sub opcode 0x4 to TCP port 3900.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://websmp230.sap-ag.de/sap%28bD1lbiZjPTAwMQ==%29/bc/bsp/spn/sapnotes/index2.htm?numm=1649840" source="MISC">https://websmp230.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=1649840</ref>
-      <ref url="https://service.sap.com/sap/support/notes/1649838" source="MISC">https://service.sap.com/sap/support/notes/1649838</ref>
-      <ref url="http://www.zerodayinitiative.com/advisories/ZDI-12-112/" source="MISC">http://www.zerodayinitiative.com/advisories/ZDI-12-112/</ref>
-      <ref url="http://www.zerodayinitiative.com/advisories/ZDI-12-111/" source="MISC">http://www.zerodayinitiative.com/advisories/ZDI-12-111/</ref>
-      <ref url="http://www.zerodayinitiative.com/advisories/ZDI-12-104/" source="MISC">http://www.zerodayinitiative.com/advisories/ZDI-12-104/</ref>
-      <ref url="http://www.securitytracker.com/id?1027211" source="SECTRACK">1027211</ref>
-      <ref url="http://secunia.com/advisories/49744" source="SECUNIA" adv="1">49744</ref>
-      <ref url="http://scn.sap.com/docs/DOC-8218" source="CONFIRM">http://scn.sap.com/docs/DOC-8218</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sap" name="netweaver_abap">
-        <vers num="7.0" />
-        <vers num="7.02" edition="sp6" />
-        <vers num="7.03" edition="sp4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4342" published="2012-08-15" name="CVE-2012-4342" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082995.html" source="FEDORA">FEDORA-2012-9666</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082954.html" source="FEDORA">FEDORA-2012-9705</ref>
-      <ref url="http://gallery.menalto.com/gallery_3_0_4" source="CONFIRM">http://gallery.menalto.com/gallery_3_0_4</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="menalto" name="gallery">
-        <vers num="3.0" edition="beta1" />
-        <vers num="3.0" edition="beta2" />
-        <vers num="3.0" edition="beta3" />
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0" edition="rc2" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers prev="1" num="3.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4343" published="2012-08-15" name="CVE-2012-4343" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in Gallery 3 before 3.0.4 allow attackers to execute arbitrary PHP code via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082995.html" source="FEDORA">FEDORA-2012-9666</ref>
-      <ref url="http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082954.html" source="FEDORA">FEDORA-2012-9705</ref>
-      <ref url="http://gallery.menalto.com/gallery_3_0_4" source="CONFIRM">http://gallery.menalto.com/gallery_3_0_4</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="menalto" name="gallery">
-        <vers num="3.0" edition="beta1" />
-        <vers num="3.0" edition="beta2" />
-        <vers num="3.0" edition="beta3" />
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0" edition="rc2" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers prev="1" num="3.0.3" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4344" published="2012-08-15" name="CVE-2012-4344" modified="2012-08-16" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the SNMP system name of the attacking host.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77150" source="XF">ipswitch-whatsupgold-snmpd-xss(77150)</ref>
-      <ref url="http://www.exploit-db.com/exploits/20035" source="EXPLOIT-DB">20035</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ipswitch" name="whatsup_gold">
-        <vers num="15.02" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4345" published="2012-08-21" name="CVE-2012-4345" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in the Database Structure page in phpMyAdmin 3.4.x before 3.4.11.1 and 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) a crafted table name during table creation, or a (2) Empty link or (3) Drop link for a crafted table name.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.phpmyadmin.net/home_page/security/PMASA-2012-4.php" source="CONFIRM" patch="1" adv="1">http://www.phpmyadmin.net/home_page/security/PMASA-2012-4.php</ref>
-      <ref url="https://hermes.opensuse.org/messages/15513071" source="SUSE">openSUSE-SU-2012:1062</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="phpmyadmin" name="phpmyadmin">
-        <vers num="3.4.0.0" />
-        <vers num="3.4.1.0" />
-        <vers num="3.4.10.0" />
-        <vers num="3.4.10.1" />
-        <vers num="3.4.10.2" />
-        <vers num="3.4.11" />
-        <vers num="3.4.2.0" />
-        <vers num="3.4.3.0" />
-        <vers num="3.4.3.1" />
-        <vers num="3.4.3.2" />
-        <vers num="3.4.4.0" />
-        <vers num="3.4.5.0" />
-        <vers num="3.4.6.0" />
-        <vers num="3.4.7.0" />
-        <vers num="3.4.7.1" />
-        <vers num="3.4.8.0" />
-        <vers num="3.4.9.0" />
-        <vers num="3.5.0.0" />
-        <vers num="3.5.1.0" />
-        <vers num="3.5.2.0" />
-        <vers num="3.5.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4353" published="2012-08-19" name="CVE-2012-4353" modified="2012-08-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the _TCPIPS_BinOpenFileFP function, a different vulnerability than CVE-2012-3815.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf</ref>
-      <ref url="http://www.sielcosistemi.com/en/news/index.html?id=69" source="CONFIRM" patch="1">http://www.sielcosistemi.com/en/news/index.html?id=69</ref>
-      <ref url="http://secunia.com/advisories/49395" source="SECUNIA" adv="1">49395</ref>
-      <ref url="http://aluigi.org/adv/winlog_2-adv.txt" source="MISC">http://aluigi.org/adv/winlog_2-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sielcosistemi" name="winlog_lite">
-        <vers num="2.06.00" />
-        <vers num="2.06.03" />
-        <vers num="2.06.04" />
-        <vers num="2.06.06" />
-        <vers num="2.06.09" />
-        <vers num="2.06.10" />
-        <vers num="2.06.12" />
-        <vers num="2.06.13" />
-        <vers num="2.06.14" />
-        <vers num="2.06.18" />
-        <vers num="2.06.21" />
-        <vers num="2.06.24" />
-        <vers num="2.06.25" />
-        <vers num="2.06.28" />
-        <vers num="2.06.40" />
-        <vers num="2.06.46" />
-        <vers num="2.06.50" />
-        <vers num="2.06.60" />
-        <vers num="2.06.73" />
-        <vers num="2.06.86" />
-        <vers num="2.07.00" />
-        <vers num="2.07.01" />
-        <vers num="2.07.08" />
-        <vers num="2.07.09" />
-        <vers num="2.07.11" />
-        <vers num="2.07.14" />
-        <vers prev="1" num="2.07.16" />
-      </prod>
-      <prod vendor="sielcosistemi" name="winlog_pro">
-        <vers num="2.06.00" />
-        <vers num="2.06.03" />
-        <vers num="2.06.04" />
-        <vers num="2.06.06" />
-        <vers num="2.06.09" />
-        <vers num="2.06.10" />
-        <vers num="2.06.12" />
-        <vers num="2.06.13" />
-        <vers num="2.06.14" />
-        <vers num="2.06.18" />
-        <vers num="2.06.21" />
-        <vers num="2.06.24" />
-        <vers num="2.06.25" />
-        <vers num="2.06.28" />
-        <vers num="2.06.40" />
-        <vers num="2.06.46" />
-        <vers num="2.06.50" />
-        <vers num="2.06.60" />
-        <vers num="2.06.73" />
-        <vers num="2.06.86" />
-        <vers num="2.07.00" />
-        <vers num="2.07.01" />
-        <vers num="2.07.08" />
-        <vers num="2.07.09" />
-        <vers num="2.07.11" />
-        <vers num="2.07.14" />
-        <vers prev="1" num="2.07.16" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4354" published="2012-08-19" name="CVE-2012-4354" modified="2012-08-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted positive integer after the opcode, triggering incorrect function-pointer processing that can lead to a buffer overflow.  NOTE: some of these details are obtained from third party information.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf</ref>
-      <ref url="http://www.sielcosistemi.com/en/news/index.html?id=69" source="CONFIRM">http://www.sielcosistemi.com/en/news/index.html?id=69</ref>
-      <ref url="http://secunia.com/advisories/49395" source="SECUNIA" adv="1">49395</ref>
-      <ref url="http://aluigi.org/adv/winlog_2-adv.txt" source="MISC">http://aluigi.org/adv/winlog_2-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sielcosistemi" name="winlog_lite">
-        <vers num="2.06.00" />
-        <vers num="2.06.03" />
-        <vers num="2.06.04" />
-        <vers num="2.06.06" />
-        <vers num="2.06.09" />
-        <vers num="2.06.10" />
-        <vers num="2.06.12" />
-        <vers num="2.06.13" />
-        <vers num="2.06.14" />
-        <vers num="2.06.18" />
-        <vers num="2.06.21" />
-        <vers num="2.06.24" />
-        <vers num="2.06.25" />
-        <vers num="2.06.28" />
-        <vers num="2.06.40" />
-        <vers num="2.06.46" />
-        <vers num="2.06.50" />
-        <vers num="2.06.60" />
-        <vers num="2.06.73" />
-        <vers num="2.06.86" />
-        <vers num="2.07.00" />
-        <vers num="2.07.01" />
-        <vers num="2.07.08" />
-        <vers num="2.07.09" />
-        <vers num="2.07.11" />
-        <vers num="2.07.14" />
-        <vers prev="1" num="2.07.16" />
-      </prod>
-      <prod vendor="sielcosistemi" name="winlog_pro">
-        <vers num="2.06.00" />
-        <vers num="2.06.03" />
-        <vers num="2.06.04" />
-        <vers num="2.06.06" />
-        <vers num="2.06.09" />
-        <vers num="2.06.10" />
-        <vers num="2.06.12" />
-        <vers num="2.06.13" />
-        <vers num="2.06.14" />
-        <vers num="2.06.18" />
-        <vers num="2.06.21" />
-        <vers num="2.06.24" />
-        <vers num="2.06.25" />
-        <vers num="2.06.28" />
-        <vers num="2.06.40" />
-        <vers num="2.06.46" />
-        <vers num="2.06.50" />
-        <vers num="2.06.60" />
-        <vers num="2.06.73" />
-        <vers num="2.06.86" />
-        <vers num="2.07.00" />
-        <vers num="2.07.01" />
-        <vers num="2.07.08" />
-        <vers num="2.07.09" />
-        <vers num="2.07.11" />
-        <vers num="2.07.14" />
-        <vers prev="1" num="2.07.16" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4355" published="2012-08-19" name="CVE-2012-4355" modified="2012-08-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted negative integer after the opcode, triggering incorrect function-pointer processing that can lead to a buffer overflow.  NOTE: some of these details are obtained from third party information.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4354.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf</ref>
-      <ref url="http://www.sielcosistemi.com/en/news/index.html?id=70" source="CONFIRM">http://www.sielcosistemi.com/en/news/index.html?id=70</ref>
-      <ref url="http://secunia.com/advisories/49395" source="SECUNIA" adv="1">49395</ref>
-      <ref url="http://aluigi.org/adv/winlog_2-adv.txt" source="MISC">http://aluigi.org/adv/winlog_2-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sielcosistemi" name="winlog_lite">
-        <vers num="2.06.00" />
-        <vers num="2.06.03" />
-        <vers num="2.06.04" />
-        <vers num="2.06.06" />
-        <vers num="2.06.09" />
-        <vers num="2.06.10" />
-        <vers num="2.06.12" />
-        <vers num="2.06.13" />
-        <vers num="2.06.14" />
-        <vers num="2.06.18" />
-        <vers num="2.06.21" />
-        <vers num="2.06.24" />
-        <vers num="2.06.25" />
-        <vers num="2.06.28" />
-        <vers num="2.06.40" />
-        <vers num="2.06.46" />
-        <vers num="2.06.50" />
-        <vers num="2.06.60" />
-        <vers num="2.06.73" />
-        <vers num="2.06.86" />
-        <vers num="2.07.00" />
-        <vers num="2.07.01" />
-        <vers num="2.07.08" />
-        <vers num="2.07.09" />
-        <vers num="2.07.11" />
-        <vers num="2.07.14" />
-        <vers num="2.07.16" />
-        <vers prev="1" num="2.07.17" />
-      </prod>
-      <prod vendor="sielcosistemi" name="winlog_pro">
-        <vers num="2.06.00" />
-        <vers num="2.06.03" />
-        <vers num="2.06.04" />
-        <vers num="2.06.06" />
-        <vers num="2.06.09" />
-        <vers num="2.06.10" />
-        <vers num="2.06.12" />
-        <vers num="2.06.13" />
-        <vers num="2.06.14" />
-        <vers num="2.06.18" />
-        <vers num="2.06.21" />
-        <vers num="2.06.24" />
-        <vers num="2.06.25" />
-        <vers num="2.06.28" />
-        <vers num="2.06.40" />
-        <vers num="2.06.46" />
-        <vers num="2.06.50" />
-        <vers num="2.06.60" />
-        <vers num="2.06.73" />
-        <vers num="2.06.86" />
-        <vers num="2.07.00" />
-        <vers num="2.07.01" />
-        <vers num="2.07.08" />
-        <vers num="2.07.09" />
-        <vers num="2.07.11" />
-        <vers num="2.07.14" />
-        <vers num="2.07.16" />
-        <vers prev="1" num="2.07.17" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4356" published="2012-08-19" name="CVE-2012-4356" modified="2012-08-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. (dot dot) in a pathname, followed by a file-read operation with opcode (1) 0x96, (2) 0x97, or (3) 0x98.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf</ref>
-      <ref url="http://www.sielcosistemi.com/en/news/index.html?id=69" source="CONFIRM">http://www.sielcosistemi.com/en/news/index.html?id=69</ref>
-      <ref url="http://secunia.com/advisories/49395" source="SECUNIA" adv="1">49395</ref>
-      <ref url="http://aluigi.org/adv/winlog_2-adv.txt" source="MISC">http://aluigi.org/adv/winlog_2-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sielcosistemi" name="winlog_lite">
-        <vers num="2.06.00" />
-        <vers num="2.06.03" />
-        <vers num="2.06.04" />
-        <vers num="2.06.06" />
-        <vers num="2.06.09" />
-        <vers num="2.06.10" />
-        <vers num="2.06.12" />
-        <vers num="2.06.13" />
-        <vers num="2.06.14" />
-        <vers num="2.06.18" />
-        <vers num="2.06.21" />
-        <vers num="2.06.24" />
-        <vers num="2.06.25" />
-        <vers num="2.06.28" />
-        <vers num="2.06.40" />
-        <vers num="2.06.46" />
-        <vers num="2.06.50" />
-        <vers num="2.06.60" />
-        <vers num="2.06.73" />
-        <vers num="2.06.86" />
-        <vers num="2.07.00" />
-        <vers num="2.07.01" />
-        <vers num="2.07.08" />
-        <vers num="2.07.09" />
-        <vers num="2.07.11" />
-        <vers num="2.07.14" />
-        <vers prev="1" num="2.07.16" />
-      </prod>
-      <prod vendor="sielcosistemi" name="winlog_pro">
-        <vers num="2.06.00" />
-        <vers num="2.06.03" />
-        <vers num="2.06.04" />
-        <vers num="2.06.06" />
-        <vers num="2.06.09" />
-        <vers num="2.06.10" />
-        <vers num="2.06.12" />
-        <vers num="2.06.13" />
-        <vers num="2.06.14" />
-        <vers num="2.06.18" />
-        <vers num="2.06.21" />
-        <vers num="2.06.24" />
-        <vers num="2.06.25" />
-        <vers num="2.06.28" />
-        <vers num="2.06.40" />
-        <vers num="2.06.46" />
-        <vers num="2.06.50" />
-        <vers num="2.06.60" />
-        <vers num="2.06.73" />
-        <vers num="2.06.86" />
-        <vers num="2.07.00" />
-        <vers num="2.07.01" />
-        <vers num="2.07.08" />
-        <vers num="2.07.09" />
-        <vers num="2.07.11" />
-        <vers num="2.07.14" />
-        <vers prev="1" num="2.07.16" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4357" published="2012-08-19" name="CVE-2012-4357" modified="2012-08-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code block.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf</ref>
-      <ref url="http://www.sielcosistemi.com/en/news/index.html?id=69" source="CONFIRM">http://www.sielcosistemi.com/en/news/index.html?id=69</ref>
-      <ref url="http://secunia.com/advisories/49395" source="SECUNIA" adv="1">49395</ref>
-      <ref url="http://aluigi.org/adv/winlog_2-adv.txt" source="MISC">http://aluigi.org/adv/winlog_2-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sielcosistemi" name="winlog_lite">
-        <vers num="2.06.00" />
-        <vers num="2.06.03" />
-        <vers num="2.06.04" />
-        <vers num="2.06.06" />
-        <vers num="2.06.09" />
-        <vers num="2.06.10" />
-        <vers num="2.06.12" />
-        <vers num="2.06.13" />
-        <vers num="2.06.14" />
-        <vers num="2.06.18" />
-        <vers num="2.06.21" />
-        <vers num="2.06.24" />
-        <vers num="2.06.25" />
-        <vers num="2.06.28" />
-        <vers num="2.06.40" />
-        <vers num="2.06.46" />
-        <vers num="2.06.50" />
-        <vers num="2.06.60" />
-        <vers num="2.06.73" />
-        <vers num="2.06.86" />
-        <vers num="2.07.00" />
-        <vers num="2.07.01" />
-        <vers num="2.07.08" />
-        <vers num="2.07.09" />
-        <vers num="2.07.11" />
-        <vers num="2.07.14" />
-        <vers prev="1" num="2.07.16" />
-      </prod>
-      <prod vendor="sielcosistemi" name="winlog_pro">
-        <vers num="2.06.00" />
-        <vers num="2.06.03" />
-        <vers num="2.06.04" />
-        <vers num="2.06.06" />
-        <vers num="2.06.09" />
-        <vers num="2.06.10" />
-        <vers num="2.06.12" />
-        <vers num="2.06.13" />
-        <vers num="2.06.14" />
-        <vers num="2.06.18" />
-        <vers num="2.06.21" />
-        <vers num="2.06.24" />
-        <vers num="2.06.25" />
-        <vers num="2.06.28" />
-        <vers num="2.06.40" />
-        <vers num="2.06.46" />
-        <vers num="2.06.50" />
-        <vers num="2.06.60" />
-        <vers num="2.06.73" />
-        <vers num="2.06.86" />
-        <vers num="2.07.00" />
-        <vers num="2.07.01" />
-        <vers num="2.07.08" />
-        <vers num="2.07.09" />
-        <vers num="2.07.11" />
-        <vers num="2.07.14" />
-        <vers prev="1" num="2.07.16" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4358" published="2012-08-19" name="CVE-2012-4358" modified="2012-08-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a port-46824 TCP packet with a crafted positive integer after the opcode.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf</ref>
-      <ref url="http://www.sielcosistemi.com/en/news/index.html?id=69" source="CONFIRM">http://www.sielcosistemi.com/en/news/index.html?id=69</ref>
-      <ref url="http://secunia.com/advisories/49395" source="SECUNIA" adv="1">49395</ref>
-      <ref url="http://aluigi.org/adv/winlog_2-adv.txt" source="MISC">http://aluigi.org/adv/winlog_2-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sielcosistemi" name="winlog_lite">
-        <vers num="2.06.00" />
-        <vers num="2.06.03" />
-        <vers num="2.06.04" />
-        <vers num="2.06.06" />
-        <vers num="2.06.09" />
-        <vers num="2.06.10" />
-        <vers num="2.06.12" />
-        <vers num="2.06.13" />
-        <vers num="2.06.14" />
-        <vers num="2.06.18" />
-        <vers num="2.06.21" />
-        <vers num="2.06.24" />
-        <vers num="2.06.25" />
-        <vers num="2.06.28" />
-        <vers num="2.06.40" />
-        <vers num="2.06.46" />
-        <vers num="2.06.50" />
-        <vers num="2.06.60" />
-        <vers num="2.06.73" />
-        <vers num="2.06.86" />
-        <vers num="2.07.00" />
-        <vers num="2.07.01" />
-        <vers num="2.07.08" />
-        <vers num="2.07.09" />
-        <vers num="2.07.11" />
-        <vers num="2.07.14" />
-        <vers prev="1" num="2.07.16" />
-      </prod>
-      <prod vendor="sielcosistemi" name="winlog_pro">
-        <vers num="2.06.00" />
-        <vers num="2.06.03" />
-        <vers num="2.06.04" />
-        <vers num="2.06.06" />
-        <vers num="2.06.09" />
-        <vers num="2.06.10" />
-        <vers num="2.06.12" />
-        <vers num="2.06.13" />
-        <vers num="2.06.14" />
-        <vers num="2.06.18" />
-        <vers num="2.06.21" />
-        <vers num="2.06.24" />
-        <vers num="2.06.25" />
-        <vers num="2.06.28" />
-        <vers num="2.06.40" />
-        <vers num="2.06.46" />
-        <vers num="2.06.50" />
-        <vers num="2.06.60" />
-        <vers num="2.06.73" />
-        <vers num="2.06.86" />
-        <vers num="2.07.00" />
-        <vers num="2.07.01" />
-        <vers num="2.07.08" />
-        <vers num="2.07.09" />
-        <vers num="2.07.11" />
-        <vers num="2.07.14" />
-        <vers prev="1" num="2.07.16" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4359" published="2012-08-19" name="CVE-2012-4359" modified="2012-08-20" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a port-46824 TCP packet with a crafted negative integer after the opcode.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4358.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf</ref>
-      <ref url="http://www.sielcosistemi.com/en/news/index.html?id=70" source="CONFIRM">http://www.sielcosistemi.com/en/news/index.html?id=70</ref>
-      <ref url="http://secunia.com/advisories/49395" source="SECUNIA" adv="1">49395</ref>
-      <ref url="http://aluigi.org/adv/winlog_2-adv.txt" source="MISC">http://aluigi.org/adv/winlog_2-adv.txt</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sielcosistemi" name="winlog_lite">
-        <vers num="2.06.00" />
-        <vers num="2.06.03" />
-        <vers num="2.06.04" />
-        <vers num="2.06.06" />
-        <vers num="2.06.09" />
-        <vers num="2.06.10" />
-        <vers num="2.06.12" />
-        <vers num="2.06.13" />
-        <vers num="2.06.14" />
-        <vers num="2.06.18" />
-        <vers num="2.06.21" />
-        <vers num="2.06.24" />
-        <vers num="2.06.25" />
-        <vers num="2.06.28" />
-        <vers num="2.06.40" />
-        <vers num="2.06.46" />
-        <vers num="2.06.50" />
-        <vers num="2.06.60" />
-        <vers num="2.06.73" />
-        <vers num="2.06.86" />
-        <vers num="2.07.00" />
-        <vers num="2.07.01" />
-        <vers num="2.07.08" />
-        <vers num="2.07.09" />
-        <vers num="2.07.11" />
-        <vers num="2.07.14" />
-        <vers num="2.07.16" />
-        <vers prev="1" num="2.07.17" />
-      </prod>
-      <prod vendor="sielcosistemi" name="winlog_pro">
-        <vers num="2.06.00" />
-        <vers num="2.06.03" />
-        <vers num="2.06.04" />
-        <vers num="2.06.06" />
-        <vers num="2.06.09" />
-        <vers num="2.06.10" />
-        <vers num="2.06.12" />
-        <vers num="2.06.13" />
-        <vers num="2.06.14" />
-        <vers num="2.06.18" />
-        <vers num="2.06.21" />
-        <vers num="2.06.24" />
-        <vers num="2.06.25" />
-        <vers num="2.06.28" />
-        <vers num="2.06.40" />
-        <vers num="2.06.46" />
-        <vers num="2.06.50" />
-        <vers num="2.06.60" />
-        <vers num="2.06.73" />
-        <vers num="2.06.86" />
-        <vers num="2.07.00" />
-        <vers num="2.07.01" />
-        <vers num="2.07.08" />
-        <vers num="2.07.09" />
-        <vers num="2.07.11" />
-        <vers num="2.07.14" />
-        <vers num="2.07.16" />
-        <vers prev="1" num="2.07.17" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4360" published="2012-09-15" name="CVE-2012-4360" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the mod_pagespeed module 0.10.19.1 through 0.10.22.4 for the Apache HTTP Server allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://developers.google.com/speed/docs/mod_pagespeed/CVE-2012-4360" source="CONFIRM" adv="1">https://developers.google.com/speed/docs/mod_pagespeed/CVE-2012-4360</ref>
-      <ref url="https://developers.google.com/speed/docs/mod_pagespeed/announce-0.10.22.6" source="CONFIRM" adv="1">https://developers.google.com/speed/docs/mod_pagespeed/announce-0.10.22.6</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="modpagespeed" name="mod_pagespeed">
-        <vers num="0.10.19.1" />
-        <vers num="0.10.22.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4361" published="2012-08-20" name="CVE-2012-4361" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:A/AC:L/Au:S/C:C/I:C/A:C)" CVSS_score="7.7" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="5.1" CVSS_base_score="7.7">
-    <desc>
-      <descript source="cve">lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local_network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/441363" source="CERT-VN">VU#441363</ref>
-      <ref url="http://www.exploit-db.com/exploits/18901/" source="EXPLOIT-DB">18901</ref>
-      <ref url="http://www.exploit-db.com/exploits/18893/" source="EXPLOIT-DB">18893</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="san/iq">
-        <vers num="8.0" />
-        <vers num="8.1" />
-        <vers num="8.5" />
-        <vers prev="1" num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4362" published="2012-08-20" name="CVE-2012-4362" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">hydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance has a hardcoded password of L0CAlu53R for the global$agent account, which allows remote attackers to obtain access to a management service via a login: request to TCP port 13838.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/441363" source="CERT-VN">VU#441363</ref>
-      <ref url="http://www.exploit-db.com/exploits/18901/" source="EXPLOIT-DB">18901</ref>
-      <ref url="http://www.exploit-db.com/exploits/18893/" source="EXPLOIT-DB">18893</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="hp" name="san/iq">
-        <vers num="9.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4363" published="2012-08-21" name="CVE-2012-4363" modified="2012-08-21" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Multiple unspecified vulnerabilities in Adobe Reader through 10.1.4 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, related to "sixteen more crashes affecting Windows, OS X, or both systems."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://vexillium.org/dl.php?ar_callstack.txt" source="MISC">http://vexillium.org/dl.php?ar_callstack.txt</ref>
-      <ref url="http://j00ru.vexillium.org/?p=1175" source="MISC">http://j00ru.vexillium.org/?p=1175</ref>
-      <ref url="http://gynvael.coldwind.pl/?id=483" source="MISC">http://gynvael.coldwind.pl/?id=483</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="adobe" name="acrobat_reader">
-        <vers num="10.1" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.1.4" />
-        <vers num="3.0" />
-        <vers num="3.01" />
-        <vers num="3.02" />
-        <vers num="4.0" />
-        <vers num="4.0.5" />
-        <vers num="4.0.5a" />
-        <vers num="4.0.5c" />
-        <vers num="4.5" />
-        <vers num="5.0" />
-        <vers num="5.0.10" />
-        <vers num="5.0.11" />
-        <vers num="5.0.5" />
-        <vers num="5.0.6" />
-        <vers num="5.0.7" />
-        <vers num="5.0.9" />
-        <vers num="5.1" />
-        <vers num="6.0" />
-        <vers num="6.0.1" />
-        <vers num="6.0.2" />
-        <vers num="6.0.3" />
-        <vers num="6.0.4" />
-        <vers num="6.0.5" />
-        <vers num="7.0" />
-        <vers num="7.0.1" />
-        <vers num="7.0.2" />
-        <vers num="7.0.3" />
-        <vers num="7.0.4" />
-        <vers num="7.0.5" />
-        <vers num="7.0.6" />
-        <vers num="7.0.7" />
-        <vers num="7.0.8" />
-        <vers num="7.0.9" />
-        <vers num="7.1.0" />
-        <vers num="8.0" />
-        <vers num="8.1" />
-        <vers num="8.1.1" />
-        <vers num="8.1.2" />
-        <vers num="8.1.3" />
-        <vers num="8.1.4" />
-        <vers num="8.1.5" />
-        <vers num="8.1.6" />
-        <vers num="8.1.7" />
-        <vers num="8.2" />
-        <vers num="8.2.1" />
-        <vers num="8.2.2" />
-        <vers num="8.2.3" />
-        <vers num="8.2.4" />
-        <vers num="8.2.6" />
-        <vers num="8.3" />
-        <vers num="9.0" />
-        <vers num="9.1" />
-        <vers num="9.1.1" />
-        <vers num="9.1.2" />
-        <vers num="9.1.3" />
-        <vers num="9.2" />
-        <vers num="9.3" />
-        <vers num="9.3.1" />
-        <vers num="9.3.2" />
-        <vers num="9.3.3" />
-        <vers num="9.3.4" />
-        <vers num="9.4" />
-        <vers num="9.4.1" />
-        <vers num="9.4.2" />
-        <vers num="9.4.3" />
-        <vers num="9.4.4" />
-        <vers num="9.4.5" />
-        <vers num="9.4.6" />
-        <vers num="9.4.7" />
-        <vers num="9.5" />
-        <vers num="9.5.1" />
-        <vers num="9.5.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4386" published="2012-09-05" name="CVE-2012-4386" modified="2012-09-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks by setting the token name configuration parameter to a session attribute.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://issues.apache.org/jira/browse/WW-3858" source="CONFIRM">https://issues.apache.org/jira/browse/WW-3858</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/78182" source="XF">apache-struts-csrf(78182)</ref>
-      <ref url="http://www.securityfocus.com/bid/55346" source="BID">55346</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/01/5" source="MLIST">[oss-security] 20120901 Re: CVE request: Apache Struts S2-010 and S2-011</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/01/4" source="MLIST">[oss-security] 20120901 CVE request: Apache Struts S2-010 and S2-011</ref>
-      <ref url="http://struts.apache.org/2.x/docs/s2-010.html" source="CONFIRM" adv="1">http://struts.apache.org/2.x/docs/s2-010.html</ref>
-      <ref url="http://secunia.com/advisories/50420" source="SECUNIA" adv="1">50420</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="struts">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.11.1" />
-        <vers num="2.0.11.2" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.8" />
-        <vers num="2.1.8.1" />
-        <vers num="2.2.1" />
-        <vers num="2.2.1.1" />
-        <vers num="2.2.3" />
-        <vers num="2.2.3.1" />
-        <vers num="2.3.1" />
-        <vers num="2.3.1.1" />
-        <vers num="2.3.1.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4387" published="2012-09-05" name="CVE-2012-4387" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service (CPU consumption) via a long parameter name, which is processed as an OGNL expression.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://struts.apache.org/2.x/docs/s2-011.html" source="CONFIRM" patch="1" adv="1">http://struts.apache.org/2.x/docs/s2-011.html</ref>
-      <ref url="https://issues.apache.org/jira/browse/WW-3860" source="CONFIRM">https://issues.apache.org/jira/browse/WW-3860</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/78183" source="XF">apache-struts-parameters-dos(78183)</ref>
-      <ref url="http://www.securityfocus.com/bid/55346" source="BID">55346</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/01/5" source="MLIST">[oss-security] 20120901 Re: CVE request: Apache Struts S2-010 and S2-011</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/01/4" source="MLIST">[oss-security] 20120901 CVE request: Apache Struts S2-010 and S2-011</ref>
-      <ref url="http://secunia.com/advisories/50420" source="SECUNIA" adv="1">50420</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apache" name="struts">
-        <vers num="2.0.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.11.1" />
-        <vers num="2.0.11.2" />
-        <vers num="2.0.12" />
-        <vers num="2.0.13" />
-        <vers num="2.0.14" />
-        <vers num="2.0.2" />
-        <vers num="2.0.3" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1.0" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.1.4" />
-        <vers num="2.1.5" />
-        <vers num="2.1.6" />
-        <vers num="2.1.8" />
-        <vers num="2.1.8.1" />
-        <vers num="2.2.1" />
-        <vers num="2.2.1.1" />
-        <vers num="2.2.3" />
-        <vers num="2.2.3.1" />
-        <vers num="2.3.1" />
-        <vers num="2.3.1.1" />
-        <vers num="2.3.1.2" />
-        <vers num="2.3.3" />
-        <vers num="2.3.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4388" published="2012-09-07" name="CVE-2012-4388" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The sapi_header_op function in main/SAPI.c in PHP 5.4.0RC2 through 5.4.0 does not properly determine a pointer during checks for %0D sequences (aka carriage return characters), which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to improper interaction between the PHP header function and certain browsers, as demonstrated by Internet Explorer and Google Chrome.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1398.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://svn.php.net/viewvc/php/php-src/branches/PHP_5_4/main/SAPI.c?r1=323986&amp;r2=323985&amp;pathrev=323986" source="CONFIRM" patch="1">http://svn.php.net/viewvc/php/php-src/branches/PHP_5_4/main/SAPI.c?r1=323986&amp;r2=323985&amp;pathrev=323986</ref>
-      <ref url="https://bugs.php.net/bug.php?id=60227" source="MISC">https://bugs.php.net/bug.php?id=60227</ref>
-      <ref url="http://security-tracker.debian.org/tracker/CVE-2012-4388" source="CONFIRM">http://security-tracker.debian.org/tracker/CVE-2012-4388</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/09/07/3" source="MLIST">[oss-security] 20120906 Re: Re: php header() header injection detection bypass</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/09/05/15" source="MLIST">[oss-security] 20120905 Re: php header() header injection detection bypass</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/09/02/1" source="MLIST">[oss-security] 20120901 Re: php header() header injection detection bypass</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/08/29/5" source="MLIST">[oss-security] 20120829 php header() header injection detection bypass</ref>
-      <ref url="http://article.gmane.org/gmane.comp.php.devel/70584" source="MLIST">[internals] 20120203 [PHP-DEV] The case of HTTP response splitting protection in PHP</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="php" name="php">
-        <vers num="5.4.0" edition="rc2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4389" published="2012-09-05" name="CVE-2012-4389" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote attackers to execute arbitrary code by uploading a crafted .htaccess file in an import.zip file and accessing an uploaded PHP file.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/184.html
-
-'CWE-184: Incomplete Blacklist'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/owncloud/core/commit/4fd069b47906ebcf83887970c732d464dbe7d37a" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/4fd069b47906ebcf83887970c732d464dbe7d37a</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/2" source="MLIST">[oss-security] 20120901 Re: CVE - ownCloud</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="owncloud" name="owncloud">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers prev="1" num="4.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4390" published="2012-09-05" name="CVE-2012-4390" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">(1) apps/calendar/appinfo/remote.php and (2) apps/contacts/appinfo/remote.php in ownCloud before 4.0.7 allows remote authenticated users to enumerate the registered users via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/owncloud/core/commit/4682846d3ecdad15c6a60126dda75eb7fa97c707" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/4682846d3ecdad15c6a60126dda75eb7fa97c707</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/2" source="MLIST">[oss-security] 20120901 Re: CVE - ownCloud</ref>
-      <ref url="http://owncloud.org/changelog/" source="CONFIRM">http://owncloud.org/changelog/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="owncloud" name="owncloud">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers prev="1" num="4.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4391" published="2012-09-05" name="CVE-2012-4391" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in core/ajax/appconfig.php in ownCloud before 4.0.7 allows remote attackers to hijack the authentication of administrators for requests that edit the app configurations.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/owncloud/core/commit/5192eecce239a0b7ade1e60a6cf03075e5cfc188" source="CONFIRM">https://github.com/owncloud/core/commit/5192eecce239a0b7ade1e60a6cf03075e5cfc188</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/2" source="MLIST">[oss-security] 20120901 Re: CVE - ownCloud</ref>
-      <ref url="http://owncloud.org/changelog/" source="CONFIRM">http://owncloud.org/changelog/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="owncloud" name="owncloud">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers prev="1" num="4.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4392" published="2012-09-05" name="CVE-2012-4392" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">index.php in ownCloud 4.0.7 does not properly validate the oc_token cookie, which allows remote attackers to bypass authentication via a crafted oc_token cookie value.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/owncloud/core/commit/4fd069b47906ebcf83887970c732d464dbe7d37a" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/4fd069b47906ebcf83887970c732d464dbe7d37a</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/2" source="MLIST">[oss-security] 20120901 Re: CVE - ownCloud</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/11/1" source="MLIST">[oss-security] 20120810 ownCloud - matching CVEs to fix information and vice versa</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="owncloud" name="owncloud">
-        <vers num="4.0.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4393" published="2012-09-05" name="CVE-2012-4393" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users for requests that use (1) addBookmark.php, (2) delBookmark.php, or (3) editBookmark.php in bookmarks/ajax/; (4) calendar/delete.php, (5) calendar/edit.php, (6) calendar/new.php, (7) calendar/update.php, (8) event/delete.php, (9) event/edit.php, (10) event/move.php, (11) event/new.php, (12) import/import.php, (13) settings/setfirstday.php, (14) settings/settimeformat.php, (15) share/changepermission.php, (16) share/share.php, (17) or share/unshare.php in calendar/ajax/; (18) external/ajax/setsites.php, (19) files/ajax/delete.php, (20) files/ajax/move.php, (21) files/ajax/newfile.php, (22) files/ajax/newfolder.php, (23) files/ajax/rename.php, (24) files_sharing/ajax/email.php, (25) files_sharing/ajax/setpermissions.php, (26) files_sharing/ajax/share.php, (27) files_sharing/ajax/toggleresharing.php, (28) files_sharing/ajax/togglesharewitheveryone.php, (29) files_sharing/ajax/unshare.php, (30) files_texteditor/ajax/savefile.php, (31) files_versions/ajax/rollbackVersion.php, (32) gallery/ajax/createAlbum.php, (33) gallery/ajax/sharing.php, (34) tasks/ajax/addtask.php, (35) tasks/ajax/addtaskform.php, (36) tasks/ajax/delete.php, or (37) tasks/ajax/edittask.php in apps/; or administrators for requests that use (38) changepassword.php, (39) creategroup.php, (40) createuser.php, (41) disableapp.php, (42) enableapp.php, (43) lostpassword.php, (44) removegroup.php, (45) removeuser.php, (46) setlanguage.php, (47) setloglevel.php, (48) setquota.php, or (49) togglegroups.php in settings/ajax/.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/owncloud/core/commit/93579d88dcea389205c01ddf6da41f37ad9b8745" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/93579d88dcea389205c01ddf6da41f37ad9b8745</ref>
-      <ref url="https://github.com/owncloud/core/commit/38271ded753bc9ea9943cef3c2706f8d71f3a58f" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/38271ded753bc9ea9943cef3c2706f8d71f3a58f</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/2" source="MLIST">[oss-security] 20120901 Re: CVE - ownCloud</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/11/1" source="MLIST">[oss-security] 20120810 ownCloud - matching CVEs to fix information and vice versa</ref>
-      <ref url="http://owncloud.org/changelog/" source="CONFIRM">http://owncloud.org/changelog/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="owncloud" name="owncloud">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers prev="1" num="4.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4394" published="2012-09-05" name="CVE-2012-4394" modified="2012-09-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in apps/files/js/filelist.js in ownCloud before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/owncloud/core/commit/d203fa2c50f4b2791e68e2b8ab9a0f8b94f9c9f8" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/d203fa2c50f4b2791e68e2b8ab9a0f8b94f9c9f8</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/2" source="MLIST">[oss-security] 20120901 Re: CVE - ownCloud</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/11/1" source="MLIST">[oss-security] 20120810 ownCloud - matching CVEs to fix information and vice versa</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="owncloud" name="owncloud">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers prev="1" num="4.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4395" published="2012-09-05" name="CVE-2012-4395" modified="2012-09-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in index.php in ownCloud before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the redirect_url parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/owncloud/core/commit/0074062b5329c3d43679909fddce2d70608a4475" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/0074062b5329c3d43679909fddce2d70608a4475</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/2" source="MLIST">[oss-security] 20120901 Re: CVE - ownCloud</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/11/1" source="MLIST">[oss-security] 20120810 ownCloud - matching CVEs to fix information and vice versa</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="owncloud" name="owncloud">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers prev="1" num="4.0.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4396" published="2012-09-05" name="CVE-2012-4396" modified="2012-09-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) file names to apps/user_ldap/settings.php; (2) url or (3) title parameter to apps/bookmarks/ajax/editBookmark.php; (4) tag or (5) page parameter to apps/bookmarks/ajax/updateList.php; (6) identity to apps/user_openid/settings.php; (7) stack name in apps/gallery/lib/tiles.php; (8) root parameter to apps/gallery/templates/index.php; (9) calendar displayname in apps/calendar/templates/part.import.php; (10) calendar uri in apps/calendar/templates/part.choosecalendar.rowfields.php; (11) title, (12) location, or (13) description parameter in apps/calendar/lib/object.php; (14) certain vectors in core/js/multiselect.js; or (15) artist, (16) album, or (17) title comments parameter in apps/media/lib_scanner.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/owncloud/core/commit/f955f6a6857754826af8903475688ba54f72c1bb" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/f955f6a6857754826af8903475688ba54f72c1bb</ref>
-      <ref url="https://github.com/owncloud/core/commit/f8337c9d723039760eecccf68bcb02752551e254" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/f8337c9d723039760eecccf68bcb02752551e254</ref>
-      <ref url="https://github.com/owncloud/core/commit/e817504569dce49fd7a677fa510e500394af0c48" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/e817504569dce49fd7a677fa510e500394af0c48</ref>
-      <ref url="https://github.com/owncloud/core/commit/d294373f476c795aaee7dc2444e7edfdea01a606" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/d294373f476c795aaee7dc2444e7edfdea01a606</ref>
-      <ref url="https://github.com/owncloud/core/commit/cc653a8a408adfb4d0cd532145668aacd85ad96c" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/cc653a8a408adfb4d0cd532145668aacd85ad96c</ref>
-      <ref url="https://github.com/owncloud/core/commit/8f616ecf76aac4a8b554fbf5a90b1645d0f25438" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/8f616ecf76aac4a8b554fbf5a90b1645d0f25438</ref>
-      <ref url="https://github.com/owncloud/core/commit/8f09299e2468dfc4f9ec72b05acf47de3ef9d1d7" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/8f09299e2468dfc4f9ec72b05acf47de3ef9d1d7</ref>
-      <ref url="https://github.com/owncloud/core/commit/642e7ce110cb8c320072532c29abe003385d50f5" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/642e7ce110cb8c320072532c29abe003385d50f5</ref>
-      <ref url="https://github.com/owncloud/core/commit/44260a552cd4ee50ee11eee45164c725f56f7027" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/44260a552cd4ee50ee11eee45164c725f56f7027</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/2" source="MLIST">[oss-security] 20120901 Re: CVE - ownCloud</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/11/1" source="MLIST">[oss-security] 20120810 ownCloud - matching CVEs to fix information and vice versa</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="owncloud" name="owncloud">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="4.0.0" />
-        <vers prev="1" num="4.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4397" published="2012-09-05" name="CVE-2012-4397" modified="2012-09-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) calendar displayname to part.choosecalendar.rowfields.php or (2) part.choosecalendar.rowfields.shared.php in apps/calendar/templates/; or (3) unspecified vectors to apps/contacts/lib/vcard.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/owncloud/core/commit/54a371700554ed21a5cb7db03126b6c95ae4cbd3" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/54a371700554ed21a5cb7db03126b6c95ae4cbd3</ref>
-      <ref url="https://github.com/owncloud/core/commit/00595351400523168e18a08e3ffa5c3b1e7c1f6e" source="CONFIRM" patch="1">https://github.com/owncloud/core/commit/00595351400523168e18a08e3ffa5c3b1e7c1f6e</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/2" source="MLIST">[oss-security] 20120901 Re: CVE - ownCloud</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/11/1" source="MLIST">[oss-security] 20120810 ownCloud - matching CVEs to fix information and vice versa</ref>
-      <ref url="http://owncloud.org/changelog/" source="CONFIRM">http://owncloud.org/changelog/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="owncloud" name="owncloud">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers prev="1" num="4.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4404" published="2012-09-10" name="CVE-2012-4404" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Known," or "Trusted," which allows remote authenticated users with virtual group membership to be treated as a member of the group.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/05/2" source="MLIST">[oss-security] 20120904 Re: CVE request: moinmoin incorrect ACL evaluation for virtual groups</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/04/4" source="MLIST">[oss-security] 20120904 CVE request: moinmoin incorrect ACL evaluation for virtual groups</ref>
-      <ref url="http://www.debian.org/security/2012/dsa-2538" source="DEBIAN">DSA-2538</ref>
-      <ref url="http://secunia.com/advisories/50496" source="SECUNIA" adv="1">50496</ref>
-      <ref url="http://secunia.com/advisories/50474" source="SECUNIA" adv="1">50474</ref>
-      <ref url="http://moinmo.in/SecurityFixes" source="CONFIRM" adv="1">http://moinmo.in/SecurityFixes</ref>
-      <ref url="http://hg.moinmo.in/moin/1.9/rev/7b9f39289e16" source="CONFIRM">http://hg.moinmo.in/moin/1.9/rev/7b9f39289e16</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="moinmo" name="moinmoin">
-        <vers num="1.9.0" />
-        <vers num="1.9.1" />
-        <vers num="1.9.2" />
-        <vers num="1.9.3" />
-        <vers num="1.9.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4419" published="2012-09-14" name="CVE-2012-4419" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The compare_tor_addr_to_addr_policy function in or/policies.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.21-rc, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a zero-valued port field that is not properly handled during policy comparison.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://trac.torproject.org/projects/tor/ticket/6690" source="CONFIRM">https://trac.torproject.org/projects/tor/ticket/6690</ref>
-      <ref url="https://lists.torproject.org/pipermail/tor-talk/2012-September/025434.html" source="MLIST">[tor-talk] 20120905 Tor 0.2.3.21-rc is out</ref>
-      <ref url="https://gitweb.torproject.org/tor.git/commit/62d96284f7e0f81c40d5df7e53dd7b4dfe7e56a5" source="CONFIRM">https://gitweb.torproject.org/tor.git/commit/62d96284f7e0f81c40d5df7e53dd7b4dfe7e56a5</ref>
-      <ref url="https://gitweb.torproject.org/tor.git/blob/release-0.2.2:/ReleaseNotes" source="CONFIRM">https://gitweb.torproject.org/tor.git/blob/release-0.2.2:/ReleaseNotes</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/09/13/2" source="MLIST">[oss-security] 20120912 Re: CVE id request: tor</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="torproject" name="tor">
-        <vers num="0.0.2" edition="pre13" />
-        <vers num="0.0.2" edition="pre14" />
-        <vers num="0.0.2" edition="pre15" />
-        <vers num="0.0.2" edition="pre16" />
-        <vers num="0.0.2" edition="pre17" />
-        <vers num="0.0.2" edition="pre18" />
-        <vers num="0.0.2" edition="pre19" />
-        <vers num="0.0.2" edition="pre20" />
-        <vers num="0.0.2" edition="pre21" />
-        <vers num="0.0.2" edition="pre22" />
-        <vers num="0.0.2" edition="pre23" />
-        <vers num="0.0.2" edition="pre24" />
-        <vers num="0.0.2" edition="pre25" />
-        <vers num="0.0.2" edition="pre26" />
-        <vers num="0.0.2" edition="pre27" />
-        <vers num="0.0.3" />
-        <vers num="0.0.4" />
-        <vers num="0.0.5" />
-        <vers num="0.0.6" />
-        <vers num="0.0.6.1" />
-        <vers num="0.0.6.2" />
-        <vers num="0.0.7" />
-        <vers num="0.0.7.1" />
-        <vers num="0.0.7.2" />
-        <vers num="0.0.7.3" />
-        <vers num="0.0.8.1" />
-        <vers num="0.0.9.1" />
-        <vers num="0.0.9.10" />
-        <vers num="0.0.9.2" />
-        <vers num="0.0.9.3" />
-        <vers num="0.0.9.4" />
-        <vers num="0.0.9.5" />
-        <vers num="0.0.9.6" />
-        <vers num="0.0.9.7" />
-        <vers num="0.0.9.8" />
-        <vers num="0.0.9.9" />
-        <vers num="0.1.0.10" />
-        <vers num="0.1.0.11" />
-        <vers num="0.1.0.12" />
-        <vers num="0.1.0.13" />
-        <vers num="0.1.0.14" />
-        <vers num="0.1.0.15" />
-        <vers num="0.1.0.16" />
-        <vers num="0.1.0.17" />
-        <vers num="0.1.1.20" />
-        <vers num="0.1.1.21" />
-        <vers num="0.1.1.22" />
-        <vers num="0.1.1.23" />
-        <vers num="0.1.1.24" />
-        <vers num="0.1.1.25" />
-        <vers num="0.1.1.26" />
-        <vers num="0.1.2.13" />
-        <vers num="0.1.2.14" />
-        <vers num="0.1.2.15" />
-        <vers num="0.1.2.16" />
-        <vers num="0.1.2.17" />
-        <vers num="0.1.2.18" />
-        <vers num="0.1.2.19" />
-        <vers num="0.2.0.30" />
-        <vers num="0.2.0.31" />
-        <vers num="0.2.0.32" />
-        <vers num="0.2.0.33" />
-        <vers num="0.2.0.34" />
-        <vers num="0.2.0.35" />
-        <vers num="0.2.2.18" />
-        <vers num="0.2.2.19" />
-        <vers num="0.2.2.20" />
-        <vers num="0.2.2.21" />
-        <vers num="0.2.2.22" />
-        <vers num="0.2.2.23" />
-        <vers num="0.2.2.24" />
-        <vers num="0.2.2.25" />
-        <vers num="0.2.2.26" />
-        <vers num="0.2.2.27" />
-        <vers num="0.2.2.28" />
-        <vers num="0.2.2.29" />
-        <vers num="0.2.2.30" />
-        <vers num="0.2.2.31" />
-        <vers num="0.2.2.32" />
-        <vers num="0.2.2.33" />
-        <vers num="0.2.2.34" />
-        <vers num="0.2.2.35" />
-        <vers num="0.2.2.36" />
-        <vers num="0.2.2.37" />
-        <vers prev="1" num="0.2.2.38" />
-        <vers num="0.2.3" />
-        <vers num="0.2.3.13" edition="alpha" />
-        <vers num="0.2.3.14" edition="alpha" />
-        <vers num="0.2.3.15" edition="alpha" />
-        <vers num="0.2.3.16" edition="alpha" />
-        <vers num="0.2.3.17" edition="beta" />
-        <vers num="0.2.3.18" edition="rc" />
-        <vers num="0.2.3.19" edition="rc" />
-        <vers num="0.2.3.20" edition="rc" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4421" published="2012-09-14" name="CVE-2012-4421" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:N/I:P/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">The create_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not perform a capability check, which allows remote authenticated users to bypass intended access restrictions and publish new posts by leveraging the Contributor role and using the Atom Publishing Protocol (aka AtomPub) feature.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://core.trac.wordpress.org/changeset?old_path=%2Ftags%2F3.4.1&amp;old=21780&amp;new_path=%2Ftags%2F3.4.2&amp;new=21780#file2" source="CONFIRM" patch="1">http://core.trac.wordpress.org/changeset?old_path=%2Ftags%2F3.4.1&amp;old=21780&amp;new_path=%2Ftags%2F3.4.2&amp;new=21780#file2</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/09/13/4" source="MLIST">[oss-security] 20120913 Re: CVEs for wordpress 3.4.2 release</ref>
-      <ref url="http://codex.wordpress.org/Version_3.4.2" source="CONFIRM">http://codex.wordpress.org/Version_3.4.2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wordpress" name="wordpress">
-        <vers num="0.71" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" edition="a" />
-        <vers num="1.3" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.1" />
-        <vers num="1.5.1.2" />
-        <vers num="1.5.1.3" />
-        <vers num="1.5.2" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.2" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.5" />
-        <vers num="2.7" />
-        <vers num="2.7.1" />
-        <vers num="2.8" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" edition="a" />
-        <vers num="2.8.5" />
-        <vers num="2.8.5.1" />
-        <vers num="2.8.5.2" />
-        <vers num="2.8.6" />
-        <vers num="2.9" />
-        <vers num="2.9.1" />
-        <vers num="2.9.1.1" />
-        <vers num="2.9.2" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.2" />
-        <vers num="3.2.1" />
-        <vers num="3.3" />
-        <vers num="3.3.1" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers num="3.4.0" />
-        <vers prev="1" num="3.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4422" published="2012-09-14" name="CVE-2012-4422" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">wp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not check for network-administrator privileges before performing a network-wide activation of an installed plugin, which might allow remote authenticated users to make unintended plugin changes by leveraging the Administrator role.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://core.trac.wordpress.org/changeset?old_path=%2Ftags%2F3.4.1&amp;old=21780&amp;new_path=%2Ftags%2F3.4.2&amp;new=21780#file42" source="CONFIRM" patch="1">http://core.trac.wordpress.org/changeset?old_path=%2Ftags%2F3.4.1&amp;old=21780&amp;new_path=%2Ftags%2F3.4.2&amp;new=21780#file42</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/09/13/4" source="MLIST">[oss-security] 20120913 Re: CVEs for wordpress 3.4.2 release</ref>
-      <ref url="http://codex.wordpress.org/Version_3.4.2" source="CONFIRM">http://codex.wordpress.org/Version_3.4.2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wordpress" name="wordpress">
-        <vers num="0.71" />
-        <vers num="1.0" />
-        <vers num="1.0.1" />
-        <vers num="1.0.2" />
-        <vers num="1.1.1" />
-        <vers num="1.2" />
-        <vers num="1.2.1" />
-        <vers num="1.2.2" />
-        <vers num="1.2.3" />
-        <vers num="1.2.4" />
-        <vers num="1.2.5" edition="a" />
-        <vers num="1.3" />
-        <vers num="1.3.2" />
-        <vers num="1.3.3" />
-        <vers num="1.5" />
-        <vers num="1.5.1" />
-        <vers num="1.5.1.1" />
-        <vers num="1.5.1.2" />
-        <vers num="1.5.1.3" />
-        <vers num="1.5.2" />
-        <vers num="2.0" />
-        <vers num="2.0.1" />
-        <vers num="2.0.10" />
-        <vers num="2.0.11" />
-        <vers num="2.0.2" />
-        <vers num="2.0.4" />
-        <vers num="2.0.5" />
-        <vers num="2.0.6" />
-        <vers num="2.0.7" />
-        <vers num="2.0.8" />
-        <vers num="2.0.9" />
-        <vers num="2.1" />
-        <vers num="2.1.1" />
-        <vers num="2.1.2" />
-        <vers num="2.1.3" />
-        <vers num="2.2" />
-        <vers num="2.2.1" />
-        <vers num="2.2.2" />
-        <vers num="2.2.3" />
-        <vers num="2.3" />
-        <vers num="2.3.1" />
-        <vers num="2.3.2" />
-        <vers num="2.3.3" />
-        <vers num="2.5" />
-        <vers num="2.5.1" />
-        <vers num="2.6" />
-        <vers num="2.6.1" />
-        <vers num="2.6.2" />
-        <vers num="2.6.3" />
-        <vers num="2.6.5" />
-        <vers num="2.7" />
-        <vers num="2.7.1" />
-        <vers num="2.8" />
-        <vers num="2.8.1" />
-        <vers num="2.8.2" />
-        <vers num="2.8.3" />
-        <vers num="2.8.4" edition="a" />
-        <vers num="2.8.5" />
-        <vers num="2.8.5.1" />
-        <vers num="2.8.5.2" />
-        <vers num="2.8.6" />
-        <vers num="2.9" />
-        <vers num="2.9.1" />
-        <vers num="2.9.1.1" />
-        <vers num="2.9.2" />
-        <vers num="3.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.1" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.2" edition="beta1" />
-        <vers num="3.2.1" />
-        <vers num="3.3" />
-        <vers num="3.3.1" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers num="3.4.0" />
-        <vers prev="1" num="3.4.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4577" published="2012-08-21" name="CVE-2012-4577" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The Linux firmware image on (1) Korenix Jetport 5600 series serial-device servers and (2) ORing Industrial DIN-Rail serial-device servers has a hardcoded password of "password" for the root account, which allows remote attackers to obtain administrative access via an SSH session.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.digitalbond.com/2012/06/13/korenix-and-oring-insecurity" source="MISC">http://www.digitalbond.com/2012/06/13/korenix-and-oring-insecurity</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="korenix" name="jetport">
-        <vers num="5601" />
-        <vers num="5601f" />
-        <vers num="5604" />
-        <vers num="5604i" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4578" published="2012-08-21" name="CVE-2012-4578" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">The geli encryption provider 7 before r239184 on FreeBSD 10 uses a weak Master Key, which makes it easier for local users to defeat a cryptographic protection mechanism via a brute-force attack.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://lists.freebsd.org/pipermail/freebsd-security/2012-August/006541.html" source="MLIST" adv="1">[freebsd-security] 20120820 [HEADSUP] geli(4) weak master key generation on -CURRENT</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pawel_jakub_dawidek" name="geli">
-        <vers num="4" />
-        <vers prev="1" num="7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4579" published="2012-08-21" name="CVE-2012-4579" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:N/I:P/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via a Table Operations (1) TRUNCATE or (2) DROP link for a crafted table name, (3) the Add Trigger popup within a Triggers page that references crafted table names, (4) an invalid trigger-creation attempt for a crafted table name, (5) crafted data in a table, or (6) a crafted tooltip label name during GIS data visualization, a different issue than CVE-2012-4345.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.phpmyadmin.net/home_page/security/PMASA-2012-4.php" source="CONFIRM" patch="1" adv="1">http://www.phpmyadmin.net/home_page/security/PMASA-2012-4.php</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="phpmyadmin" name="phpmyadmin">
-        <vers num="3.5.0.0" />
-        <vers num="3.5.1.0" />
-        <vers num="3.5.2.0" />
-        <vers num="3.5.2.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4580" published="2012-08-22" name="CVE-2012-4580" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote attackers to inject arbitrary web script or HTML via vectors related to the McAfee Security Appliance Management Console/Dashboard.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10020" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10020</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="email_and_web_security">
-        <vers num="5.0" />
-        <vers num="5.5" />
-        <vers num="5.6" />
-      </prod>
-      <prod vendor="mcafee" name="email_gateway">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4581" published="2012-08-22" name="CVE-2012-4581" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not disable the server-side session token upon the closing of the Management Console/Dashboard, which makes it easier for remote attackers to hijack sessions by capturing a session cookie and then modifying the response to a login attempt, related to a "Logout Failure" issue.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10020" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10020</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="email_and_web_security">
-        <vers num="5.0" />
-        <vers num="5.5" />
-        <vers num="5.6" />
-      </prod>
-      <prod vendor="mcafee" name="email_gateway">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4582" published="2012-08-22" name="CVE-2012-4582" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:N)" CVSS_score="4.9" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="6.8" CVSS_base_score="4.9">
-    <desc>
-      <descript source="cve">McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to reset the passwords of arbitrary administrative accounts via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10020" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10020</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="email_and_web_security">
-        <vers num="5.0" />
-        <vers num="5.5" />
-        <vers num="5.6" />
-      </prod>
-      <prod vendor="mcafee" name="email_gateway">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4583" published="2012-08-22" name="CVE-2012-4583" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to obtain the session tokens of arbitrary users by navigating within the Dashboard.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10020" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10020</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="email_and_web_security">
-        <vers num="5.0" />
-        <vers num="5.5" />
-        <vers num="5.6" />
-      </prod>
-      <prod vendor="mcafee" name="email_gateway">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4584" published="2012-08-22" name="CVE-2012-4584" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:N/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not properly encrypt system-backup data, which makes it easier for remote authenticated users to obtain sensitive information by reading a backup file, as demonstrated by obtaining password hashes.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10020" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10020</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="email_and_web_security">
-        <vers num="5.0" />
-        <vers num="5.5" />
-        <vers num="5.6" />
-      </prod>
-      <prod vendor="mcafee" name="email_gateway">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4585" published="2012-08-22" name="CVE-2012-4585" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to read arbitrary files via a crafted URL.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10020" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10020</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="email_and_web_security">
-        <vers num="5.0" />
-        <vers num="5.5" />
-        <vers num="5.6" />
-      </prod>
-      <prod vendor="mcafee" name="email_gateway">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4586" published="2012-08-22" name="CVE-2012-4586" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:N/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, accesses files with the privileges of the root user, which allows remote authenticated users to bypass intended permission settings by requesting a file.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10020" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10020</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="email_and_web_security">
-        <vers num="5.0" />
-        <vers num="5.5" />
-        <vers num="5.6" />
-      </prod>
-      <prod vendor="mcafee" name="email_gateway">
-        <vers num="7.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4587" published="2012-08-22" name="CVE-2012-4587" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:N/A:N)" CVSS_score="3.5" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="6.8" CVSS_base_score="3.5">
-    <desc>
-      <descript source="cve">McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode is enabled, have an improper dependency on DNS SRV records, which makes it easier for remote attackers to discover user passwords by spoofing the EMM server, as demonstrated by a password entered on an iOS device.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10021" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10021</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="enterprise_mobility_manager">
-        <vers prev="1" num="4.7" />
-      </prod>
-      <prod vendor="mcafee" name="enterprise_mobility_manager_agent">
-        <vers prev="1" num="10.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4588" published="2012-08-22" name="CVE-2012-4588" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:N/A:P)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1 record all invalid usernames presented in failed login attempts, and place them on a list of accounts that an administrator may wish to unlock, which allows remote attackers to cause a denial of service (excessive list size in the EMM Database) via a long sequence of login attempts with different usernames.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10021" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10021</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="enterprise_mobility_manager">
-        <vers prev="1" num="4.7" />
-      </prod>
-      <prod vendor="mcafee" name="enterprise_mobility_manager_agent">
-        <vers prev="1" num="10.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4589" published="2012-08-22" name="CVE-2012-4589" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:L/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="2.1" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="3.9" CVSS_base_score="2.1">
-    <desc>
-      <descript source="cve">Login.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10022" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10022</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="enterprise_mobility_manager">
-        <vers num="4.7" />
-        <vers prev="1" num="9.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4590" published="2012-08-22" name="CVE-2012-4590" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 might allow remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Connection variable.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10022" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10022</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="enterprise_mobility_manager">
-        <vers num="4.7" />
-        <vers prev="1" num="9.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4591" published="2012-08-22" name="CVE-2012-4591" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10022" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10022</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="enterprise_mobility_manager">
-        <vers num="4.7" />
-        <vers prev="1" num="9.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4592" published="2012-08-22" name="CVE-2012-4592" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not set the secure flag for the ASP.NET session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10022" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10022</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="enterprise_mobility_manager">
-        <vers num="4.7" />
-        <vers prev="1" num="9.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4593" published="2012-08-22" name="CVE-2012-4593" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password requirement in certain situations involving attributes of the password file, which allows local users to bypass authentication by executing a command.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10023" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10023</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="application_control">
-        <vers num="5.1.0" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="6.0.0" />
-      </prod>
-      <prod vendor="mcafee" name="change_control">
-        <vers num="5.1.0" />
-        <vers num="5.1.1" />
-        <vers num="5.1.2" />
-        <vers num="6.0.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4594" published="2012-08-22" name="CVE-2012-4594" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:S/C:P/I:N/A:N)" CVSS_score="4.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.0" CVSS_base_score="4.0">
-    <desc>
-      <descript source="cve">McAfee ePolicy Orchestrator (ePO) 4.6.1 and earlier allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information from arbitrary reporting panels, via a modified ID value in a console URL.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10025" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10025</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="epolicy_orchestrator">
-        <vers num="2.0" />
-        <vers num="2.5" edition="sp1" />
-        <vers num="2.5.1" />
-        <vers num="3.0" edition="sp2a" />
-        <vers num="3.5.0" />
-        <vers num="3.6.0" />
-        <vers num="3.6.1" />
-        <vers num="4.0" />
-        <vers num="4.5.0" />
-        <vers num="4.6.0" />
-        <vers prev="1" num="4.6.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4595" published="2012-08-22" name="CVE-2012-4595" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to bypass authentication and obtain an admin session ID via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10026" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10026</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="email_and_web_security">
-        <vers num="5.5" />
-        <vers num="5.6" />
-      </prod>
-      <prod vendor="mcafee" name="email_gateway">
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4596" published="2012-08-22" name="CVE-2012-4596" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in McAfee Email Gateway (MEG) 7.0.0 and 7.0.1 allows remote authenticated users to bypass intended access restrictions and download arbitrary files via a crafted URL.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10026" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10026</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="email_gateway">
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4597" published="2012-08-22" name="CVE-2012-4597" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to the McAfee Security Appliance Management Console/Dashboard.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10026" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10026</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="email_and_web_security">
-        <vers num="5.5" />
-        <vers num="5.6" />
-      </prod>
-      <prod vendor="mcafee" name="email_gateway">
-        <vers num="7.0.0" />
-        <vers num="7.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4598" published="2012-08-22" name="CVE-2012-4598" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via a crafted web site.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10028" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10028</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="epo_mcafee_virtual_technician">
-        <vers num="1.0" />
-        <vers num="1.0.4.0" />
-        <vers prev="1" num="1.0.7" />
-      </prod>
-      <prod vendor="mcafee" name="mcafee_virtual_technician">
-        <vers prev="1" num="6.3.0.1911" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4599" published="2012-08-22" name="CVE-2012-4599" modified="2012-08-22" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">McAfee SmartFilter Administration, and SmartFilter Administration Bess Edition, before 4.2.1.01 does not require authentication for access to the JBOSS Remote Method Invocation (RMI) interface, which allows remote attackers to execute arbitrary code via a crafted .war file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10029" source="CONFIRM" adv="1">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10029</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mcafee" name="smartfilter_administration">
-        <vers prev="1" num="4.2.1" edition="" />
-        <vers prev="1" num="4.2.1" edition=":bess" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4600" published="2012-08-31" name="CVE-2012-4600" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x before 3.0.16, and 3.1.x before 3.1.10, when Firefox or Opera is used, allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with nested HTML tags.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/511404" source="CERT-VN">VU#511404</ref>
-      <ref url="http://znuny.com/en/#%21/advisory/ZSA-2012-02" source="MISC">http://znuny.com/en/#!/advisory/ZSA-2012-02</ref>
-      <ref url="http://www.otrs.com/de/open-source/community-news/security-advisories/security-advisory-2012-02/" source="CONFIRM" adv="1">http://www.otrs.com/de/open-source/community-news/security-advisories/security-advisory-2012-02/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="otrs" name="otrs">
-        <vers num="2.4.0" edition="beta1" />
-        <vers num="2.4.0" edition="beta2" />
-        <vers num="2.4.0" edition="beta3" />
-        <vers num="2.4.0" edition="beta4" />
-        <vers num="2.4.0" edition="beta5" />
-        <vers num="2.4.0" edition="beta6" />
-        <vers num="2.4.1" />
-        <vers num="2.4.10" />
-        <vers num="2.4.11" />
-        <vers num="2.4.12" />
-        <vers num="2.4.13" />
-        <vers num="2.4.2" />
-        <vers num="2.4.3" />
-        <vers num="2.4.4" />
-        <vers num="2.4.5" />
-        <vers num="2.4.6" />
-        <vers num="2.4.7" />
-        <vers num="2.4.8" />
-        <vers num="2.4.9" />
-        <vers num="3.0.0" edition="beta1" />
-        <vers num="3.0.0" edition="beta2" />
-        <vers num="3.0.0" edition="beta3" />
-        <vers num="3.0.0" edition="beta4" />
-        <vers num="3.0.0" edition="beta5" />
-        <vers num="3.0.0" edition="beta6" />
-        <vers num="3.0.0" edition="beta7" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.12" />
-        <vers num="3.0.13" />
-        <vers num="3.0.14" />
-        <vers num="3.0.15" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.1.5" />
-        <vers num="3.1.6" />
-        <vers num="3.1.7" />
-        <vers num="3.1.8" />
-        <vers num="3.1.9" />
-      </prod>
-      <prod vendor="otrs" name="otrs_itsm">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4604" published="2012-08-23" name="CVE-2012-4604" modified="2012-08-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">The TRITON management console in Websense Web Security before 7.6 Hotfix 24 allows remote attackers to bypass authentication and read arbitrary reports via a crafted uid field, in conjunction with a crafted userRoles field, in a cookie, as demonstrated by a request to explorer_wse/favorites.exe.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/archive/1/522530" source="BUGTRAQ">20120430 NGS00138 Technical Advisory: Websense Triton 7.6 - authentication bypass in report management UI</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="websense" name="websense_web_security">
-        <vers num="6.3.0" />
-        <vers num="6.3.1" />
-        <vers num="6.3.2" />
-        <vers num="6.3.3" />
-        <vers num="7.0" />
-        <vers num="7.1" />
-        <vers num="7.1.1" />
-        <vers num="7.5" />
-        <vers num="7.5.1" />
-        <vers prev="1" num="7.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4605" published="2012-08-23" name="CVE-2012-4605" modified="2012-08-23" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ciphers in the "SurfControl plc\SuperScout Email Filter\SMTP" registry key, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and then conducting a brute-force attack against encrypted session data.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.websense.com/support/article/kbarticle/SSL-TLS-weak-and-export-ciphers-detected-in-Websense-Email-Security-deployments" source="CONFIRM" adv="1">http://www.websense.com/support/article/kbarticle/SSL-TLS-weak-and-export-ciphers-detected-in-Websense-Email-Security-deployments</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="websense" name="websense_email_security">
-        <vers num="6.1" edition="sp1" />
-        <vers num="7.0" />
-        <vers num="7.1" />
-        <vers num="7.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4629" published="2012-09-12" name="CVE-2012-4629" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:C)" CVSS_score="7.8" CVSS_impact_subscore="6.9" CVSS_exploit_subscore="10.0" CVSS_base_score="7.8">
-    <desc>
-      <descript source="cve">The Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances (ASA) devices, and Prime Security Manager (aka PRSM) before 9.0.2-103, allows remote attackers to cause a denial of service (disk consumption and application hang) via unspecified IPv4 packets that trigger log entries, aka Bug ID CSCub70603.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-asacx" source="CONFIRM" adv="1">http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-asacx</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cisco" name="asa_cx_context-aware_security">
-        <vers prev="1" num="9.0" />
-      </prod>
-      <prod vendor="cisco" name="prime_security_manager">
-        <vers prev="1" num="9.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4667" published="2012-08-25" name="CVE-2012-4667" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in SquidClamav 5.x before 5.8 allow remote attackers to inject arbitrary web script or HTML via the (1) url, (2) virus, (3) source, or (4) user parameter to (a) clwarn.cgi, (b) clwarn.cgi.de_DE, (c) clwarn.cgi.en_EN, (d) clwarn.cgi.fr_FR, (e) clwarn.cgi.pt_BR, or (f) clwarn.cgi.ru_RU in cgi-bin/.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://freecode.com/projects/squidclamav/releases/346722" source="CONFIRM" patch="1">http://freecode.com/projects/squidclamav/releases/346722</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/16/4" source="MLIST">[oss-security] 20120816 Re: CVE Request: SquidClamav insufficient escaping flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/16/2" source="MLIST">[oss-security] 20120816 CVE Request: SquidClamav insufficient escaping flaws</ref>
-      <ref url="http://squidclamav.darold.net/news.html" source="CONFIRM">http://squidclamav.darold.net/news.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="darold" name="squidclamav">
-        <vers num="5.0" />
-        <vers num="5.1" />
-        <vers num="5.2" />
-        <vers num="5.3" />
-        <vers num="5.4" />
-        <vers num="5.5" />
-        <vers num="5.6" />
-        <vers num="5.7" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4668" published="2012-08-25" name="CVE-2012-4668" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://github.com/roundcube/roundcubemail/commit/c086978f6a91eacb339fd2976202fca9dad2ef32" source="CONFIRM" patch="1">https://github.com/roundcube/roundcubemail/commit/c086978f6a91eacb339fd2976202fca9dad2ef32</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/20/9" source="MLIST">[oss-security] 20120820 Re: CVE-request: Roundcube XSS issues</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/20/2" source="MLIST">[oss-security] 20120820 CVE-request: Roundcube XSS issues</ref>
-      <ref url="http://trac.roundcube.net/ticket/1488613" source="CONFIRM">http://trac.roundcube.net/ticket/1488613</ref>
-      <ref url="http://sourceforge.net/news/?group_id=139281&amp;id=309011" source="CONFIRM">http://sourceforge.net/news/?group_id=139281&amp;id=309011</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="roundcube" name="webmail">
-        <vers num="0.1" edition="alpha" />
-        <vers num="0.1" edition="beta" />
-        <vers num="0.1" edition="beta2" />
-        <vers num="0.1" edition="rc1" />
-        <vers num="0.1" edition="rc2" />
-        <vers num="0.1.1" />
-        <vers num="0.2" edition="alpha" />
-        <vers num="0.2" edition="beta" />
-        <vers num="0.2.1" />
-        <vers num="0.2.2" />
-        <vers num="0.3" edition="beta" />
-        <vers num="0.3" edition="rc1" />
-        <vers num="0.3.1" />
-        <vers num="0.4" edition="beta" />
-        <vers num="0.4.1" />
-        <vers num="0.4.2" />
-        <vers num="0.5" edition="beta" />
-        <vers num="0.5" edition="rc" />
-        <vers num="0.5.1" />
-        <vers num="0.5.2" />
-        <vers num="0.5.3" />
-        <vers num="0.5.4" />
-        <vers num="0.6" />
-        <vers num="0.7" />
-        <vers num="0.7.1" />
-        <vers num="0.7.2" />
-        <vers num="0.7.3" />
-        <vers num="0.8.0" />
-        <vers prev="1" num="0.8.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4669" published="2012-08-25" name="CVE-2012-4669" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xmpp.org/resources/security-notices/server-dialback/" source="MISC">http://xmpp.org/resources/security-notices/server-dialback/</ref>
-      <ref url="http://isode.com/company/wordpress/xmpp-server-dialback/" source="CONFIRM" adv="1">http://isode.com/company/wordpress/xmpp-server-dialback/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="isode" name="m-link">
-        <vers num="14.6" />
-        <vers num="15.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4670" published="2012-08-25" name="CVE-2012-4670" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://projects.tigase.org/projects/tigase-server/repository/revisions/2953/diff" source="CONFIRM">https://projects.tigase.org/projects/tigase-server/repository/revisions/2953/diff</ref>
-      <ref url="http://xmpp.org/resources/security-notices/server-dialback/" source="MISC" adv="1">http://xmpp.org/resources/security-notices/server-dialback/</ref>
-      <ref url="http://www.tigase.org/content/finally-version-510-final-available" source="CONFIRM">http://www.tigase.org/content/finally-version-510-final-available</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="tigase" name="tigase_xmpp_server">
-        <vers prev="1" num="5.1.0" edition="beta2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4671" published="2012-08-25" name="CVE-2012-4671" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xmpp.org/resources/security-notices/server-dialback/" source="MISC">http://xmpp.org/resources/security-notices/server-dialback/</ref>
-      <ref url="http://www.psyced.org/files/psyced-20120821.tar.bz2" source="CONFIRM">http://www.psyced.org/files/psyced-20120821.tar.bz2</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="psyced" name="psyced">
-        <vers num="20081120" />
-        <vers num="20090323" />
-        <vers num="20090617" />
-        <vers prev="1" num="20111122" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4672" published="2012-08-25" name="CVE-2012-4672" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="5.8" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="8.6" CVSS_base_score="5.8">
-    <desc>
-      <descript source="cve">Apple iChat Server does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xmpp.org/resources/security-notices/server-dialback/" source="MISC">http://xmpp.org/resources/security-notices/server-dialback/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="apple" name="ichat_server">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4673" published="2012-08-25" name="CVE-2012-4673" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in application/controllers/invoice.php in NeoInvoice might allow remote attackers to execute arbitrary SQL commands via vectors involving the sort_col variable in the list_items function, a different vulnerability than CVE-2012-3477.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/mweimerskirch/neoinvoice/commit/501a9d5d261c718913cfc13d212b09b56f3bf087" source="CONFIRM" patch="1">https://github.com/mweimerskirch/neoinvoice/commit/501a9d5d261c718913cfc13d212b09b56f3bf087</ref>
-      <ref url="https://github.com/tlhunter/neoinvoice/issues/2" source="CONFIRM">https://github.com/tlhunter/neoinvoice/issues/2</ref>
-      <ref url="http://adamcaudill.com/2012/08/12/neoinvoice-blind-sql-injection-cve-2012-3477/" source="MISC">http://adamcaudill.com/2012/08/12/neoinvoice-blind-sql-injection-cve-2012-3477/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="thomas_hunter" name="neoinvoice">
-        <vers num="-" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4674" published="2012-08-26" name="CVE-2012-4674" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.pluxml.org/article59/sortie-de-pluxml-5-1-6" source="CONFIRM">http://www.pluxml.org/article59/sortie-de-pluxml-5-1-6</ref>
-      <ref url="http://telechargements.pluxml.org/changelog" source="CONFIRM">http://telechargements.pluxml.org/changelog</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pluxml" name="pluxml">
-        <vers prev="1" num="5.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4675" published="2012-08-26" name="CVE-2012-4675" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to file update.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/75331" source="XF">pluxml-unspecified-xss(75331)</ref>
-      <ref url="http://www.securityfocus.com/bid/53367" source="BID">53367</ref>
-      <ref url="http://www.pluxml.org/article59/sortie-de-pluxml-5-1-6" source="CONFIRM">http://www.pluxml.org/article59/sortie-de-pluxml-5-1-6</ref>
-      <ref url="http://telechargements.pluxml.org/changelog" source="CONFIRM">http://telechargements.pluxml.org/changelog</ref>
-      <ref url="http://secunia.com/advisories/49026" source="SECUNIA" adv="1">49026</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="pluxml" name="pluxml">
-        <vers prev="1" num="5.1.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4676" published="2012-08-26" name="CVE-2012-4676" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:L/AC:H/Au:N/C:N/I:P/A:N)" CVSS_score="1.2" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="1.9" CVSS_base_score="1.2">
-    <desc>
-      <descript source="cve">The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a (1) symlink or (2) hard link, a different vulnerability than CVE-2012-3485.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/14/1" source="MLIST">[oss-security] 20120812 Re: Tunnel Blick: Multiple Vulnerabilities to Local Root and DoS (OS X)</ref>
-      <ref url="http://code.google.com/p/tunnelblick/issues/detail?id=212" source="CONFIRM">http://code.google.com/p/tunnelblick/issues/detail?id=212</ref>
-      <ref url="http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0122.html" source="FULLDISC">20120811 OS X Local Root: Silly SUID Helper in Tunnel Blick</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="tunnelblick">
-        <vers prev="1" num="3.3beta20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4677" published="2012-08-26" name="CVE-2012-4677" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="4.4" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="3.4" CVSS_base_score="4.4">
-    <desc>
-      <descript source="cve">Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://code.google.com/p/tunnelblick/issues/detail?id=212" source="MISC">http://code.google.com/p/tunnelblick/issues/detail?id=212</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="tunnelblick">
-        <vers prev="1" num="3.3beta20" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4678" published="2012-08-26" name="CVE-2012-4678" modified="2012-08-27" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers to cause a denial of service (disk consumption) via many requests to an image with unique parameters.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=812889" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=812889</ref>
-      <ref url="http://www.securityfocus.com/bid/53034" source="BID">53034</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/29/2" source="MLIST">[oss-security] 20120429 Re: Bug#668667: CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/27/7" source="MLIST">[oss-security] 20120427 Re: Bug#668667: CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/19/5" source="MLIST">[oss-security] 20120419 Re: [Packaging] Bug#668667: CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/19/4" source="MLIST">[oss-security] 20120418 Re: Bug#668667: CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/19/3" source="MLIST">[oss-security] 20120418 Re: CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/18/2" source="MLIST">[oss-security] 20120417 Re: CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/16/6" source="MLIST">[oss-security] 20120416 Re: CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/16/5" source="MLIST">[oss-security] 20120416 CVE Request (minor) -- Two Munin graphing framework flaws</ref>
-      <ref url="http://munin-monitoring.org/changeset/4825" source="CONFIRM">http://munin-monitoring.org/changeset/4825</ref>
-      <ref url="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668667" source="MISC">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668667</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="munin-monitoring" name="munin">
-        <vers num="2.0_rc4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4679" published="2012-08-27" name="CVE-2012-4679" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the f_user_name parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm" source="CONFIRM" patch="1" adv="1">http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm</ref>
-      <ref url="https://www.htbridge.com/advisory/HTB23084" source="MISC">https://www.htbridge.com/advisory/HTB23084</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74781" source="XF">newscoop-multiple-xss(74781)</ref>
-      <ref url="http://www.securityfocus.com/bid/52941" source="BID">52941</ref>
-      <ref url="http://secunia.com/advisories/48769" source="SECUNIA" adv="1">48769</ref>
-      <ref url="http://dev.sourcefabric.org/browse/CS-4184" source="CONFIRM">http://dev.sourcefabric.org/browse/CS-4184</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sourcefabric" name="newscoop">
-        <vers num="3.5.0" />
-        <vers num="3.5.1" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers prev="1" num="3.5.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4680" published="2012-08-27" name="CVE-2012-4680" modified="2012-08-28" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ (backslash) character, allows remote attackers to read arbitrary files or list arbitrary directories via a .. (dot dot) in a URI.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.foofus.net/?page_id=616" source="MISC">http://www.foofus.net/?page_id=616</ref>
-      <ref url="http://secunia.com/advisories/50297" source="SECUNIA" adv="1">50297</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ioserver" name="ioserver">
-        <vers num="1.0.18.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4681" published="2012-08-27" name="CVE-2012-4681" modified="2012-08-31" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.</descript>
-    </desc>
-    <impacts>
-      <impact source="nvd">Per: http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html
-
-'7 Update 6 and before'</impact>
-    </impacts>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the-week-with-a-new-java-0day" source="MISC">https://community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the-week-with-a-new-java-0day</ref>
-      <ref url="http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" source="CONFIRM">http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html</ref>
-      <ref url="http://www.deependresearch.org/2012/08/java-7-vulnerability-analysis.html" source="MISC">http://www.deependresearch.org/2012/08/java-7-vulnerability-analysis.html</ref>
-      <ref url="http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/" source="MISC">http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/</ref>
-      <ref url="http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.html" source="MISC">http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.html</ref>
-      <ref url="http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html" source="MISC">http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oracle" name="jdk">
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-        <vers prev="1" num="1.7.0" edition="update5" />
-        <vers prev="1" num="1.7.0" edition="update6" />
-      </prod>
-      <prod vendor="oracle" name="jre">
-        <vers prev="1" num="1.7.0" edition="update1" />
-        <vers prev="1" num="1.7.0" edition="update2" />
-        <vers prev="1" num="1.7.0" edition="update3" />
-        <vers prev="1" num="1.7.0" edition="update4" />
-        <vers prev="1" num="1.7.0" edition="update5" />
-        <vers prev="1" num="1.7.0" edition="update6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4682" published="2012-09-14" name="CVE-2012-4682" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in bitcoind and Bitcoin-Qt allows attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-4683.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://en.bitcoin.it/wiki/CVEs" source="CONFIRM" adv="1">https://en.bitcoin.it/wiki/CVEs</ref>
-      <ref url="http://www.osvdb.org/85353" source="OSVDB">85353</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bitcoin" name="bitcoin-qt">
-        <vers num="" />
-      </prod>
-      <prod vendor="bitcoin" name="bitcoind">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4683" published="2012-09-14" name="CVE-2012-4683" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in bitcoind and Bitcoin-Qt allows attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-4682.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://en.bitcoin.it/wiki/CVEs" source="CONFIRM" adv="1">https://en.bitcoin.it/wiki/CVEs</ref>
-      <ref url="http://www.osvdb.org/85354" source="OSVDB">85354</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="bitcoin" name="bitcoin-qt">
-        <vers num="" />
-      </prod>
-      <prod vendor="bitcoin" name="bitcoind">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4685" published="2012-08-28" name="CVE-2012-4685" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Arbor Networks Peakflow SP 5.1.1 before patch 6, 5.5 before patch 4, and 5.6.0 before patch 1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74648" source="XF">peakflowsp-login-xss(74648)</ref>
-      <ref url="http://www.securityfocus.com/bid/52881" source="BID">52881</ref>
-      <ref url="http://secunia.com/advisories/48728" source="SECUNIA" adv="1">48728</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0037.html" source="BUGTRAQ">20120404 Re: Arbor Networks Peakflow SP web interface XSS</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0036.html" source="BUGTRAQ">20120404 Re: Arbor Networks Peakflow SP web interface XSS</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0019.html" source="BUGTRAQ">20120403 Arbor Networks Peakflow SP web interface XSS</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="arbornetworks" name="peakflow_sp">
-        <vers num="5.1.1" />
-        <vers num="5.5" />
-        <vers num="5.6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4686" published="2012-08-28" name="CVE-2012-4686" modified="2012-08-29" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in announcement.php in vBulletin 4.1.10 allows remote attackers to execute arbitrary SQL commands via the announcementid parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52897" source="BID">52897</ref>
-      <ref url="http://osvdb.org/80962" source="OSVDB">80962</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0042.html" source="BUGTRAQ">20120404 vBulletin 4.1.10 Sql Injection Vulnerabilitiy</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vbulletin" name="vbulletin">
-        <vers num="4.1.10" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4736" published="2012-08-29" name="CVE-2012-4736" modified="2012-08-31" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:P/I:P/A:N)" CVSS_score="3.3" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="3.4" CVSS_base_score="3.3">
-    <desc>
-      <descript source="cve">The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is enabled in conjunction with a user-defined key, does not properly block use of exFAT USB flash drives, which makes it easier for local users to bypass intended access restrictions and copy sensitive information to a drive via multiple removal and reattach operations.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-    </range>
-    <refs>
-      <ref url="http://www.sophos.com/support/knowledgebase/1376/1380/114138.aspx" source="CONFIRM" adv="1">http://www.sophos.com/support/knowledgebase/1376/1380/114138.aspx</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sophos" name="safeguard_enterprise">
-        <vers num="6.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4737" published="2012-08-31" name="CVE-2012-4737" modified="2012-09-05" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:S/C:P/I:P/A:P)" CVSS_score="6.0" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="6.8" CVSS_base_score="6.0">
-    <desc>
-      <descript source="cve">channels/chan_iax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert7, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 does not enforce ACL rules during certain uses of peer credentials, which allows remote authenticated users to bypass intended outbound-call restrictions by leveraging the availability of these credentials.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://downloads.asterisk.org/pub/security/AST-2012-013.html" source="CONFIRM" adv="1">http://downloads.asterisk.org/pub/security/AST-2012-013.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="digium" name="asterisk">
-        <vers num="1.8.0" edition="beta1" />
-        <vers num="1.8.0" edition="beta2" />
-        <vers num="1.8.0" edition="beta3" />
-        <vers num="1.8.0" edition="beta4" />
-        <vers num="1.8.0" edition="beta5" />
-        <vers num="1.8.0" edition="rc2" />
-        <vers num="1.8.0" edition="rc3" />
-        <vers num="1.8.0" edition="rc4" />
-        <vers num="1.8.0" edition="rc5" />
-        <vers num="1.8.1" edition="rc1" />
-        <vers num="1.8.1.1" />
-        <vers num="1.8.1.2" />
-        <vers num="1.8.10.0" edition="rc1" />
-        <vers num="1.8.10.0" edition="rc2" />
-        <vers num="1.8.10.0" edition="rc3" />
-        <vers num="1.8.10.0" edition="rc4" />
-        <vers num="1.8.10.1" />
-        <vers num="1.8.11.0" edition="rc2" />
-        <vers num="1.8.11.0" edition="rc3" />
-        <vers num="1.8.11.1" />
-        <vers num="1.8.12" />
-        <vers num="1.8.12.0" edition="rc1" />
-        <vers num="1.8.12.0" edition="rc2" />
-        <vers num="1.8.12.0" edition="rc3" />
-        <vers num="1.8.13.0" edition="rc1" />
-        <vers num="1.8.13.0" edition="rc2" />
-        <vers num="1.8.13.1" />
-        <vers num="1.8.14.0" edition="rc1" />
-        <vers num="1.8.14.0" edition="rc2" />
-        <vers num="1.8.14.1" />
-        <vers num="1.8.15.0" edition="rc1" />
-        <vers num="1.8.2" />
-        <vers num="1.8.2.1" />
-        <vers num="1.8.2.2" />
-        <vers num="1.8.2.3" />
-        <vers num="1.8.2.4" />
-        <vers num="1.8.3" edition="rc1" />
-        <vers num="1.8.3" edition="rc2" />
-        <vers num="1.8.3" edition="rc3" />
-        <vers num="1.8.3.1" />
-        <vers num="1.8.3.2" />
-        <vers num="1.8.3.3" />
-        <vers num="1.8.4" edition="rc1" />
-        <vers num="1.8.4" edition="rc2" />
-        <vers num="1.8.4" edition="rc3" />
-        <vers num="1.8.4.1" />
-        <vers num="1.8.4.2" />
-        <vers num="1.8.4.3" />
-        <vers num="1.8.4.4" />
-        <vers num="1.8.5" edition="rc1" />
-        <vers num="1.8.5.0" />
-        <vers num="1.8.6.0" edition="rc1" />
-        <vers num="1.8.6.0" edition="rc2" />
-        <vers num="1.8.6.0" edition="rc3" />
-        <vers num="1.8.7.0" edition="rc1" />
-        <vers num="1.8.7.0" edition="rc2" />
-        <vers num="1.8.7.1" />
-        <vers num="1.8.8.0" edition="rc1" />
-        <vers num="1.8.8.0" edition="rc2" />
-        <vers num="1.8.8.0" edition="rc3" />
-        <vers num="1.8.8.0" edition="rc4" />
-        <vers num="1.8.8.0" edition="rc5" />
-        <vers num="1.8.8.1" />
-        <vers num="1.8.8.2" />
-        <vers num="1.8.9.0" edition="rc1" />
-        <vers num="1.8.9.0" edition="rc2" />
-        <vers num="1.8.9.0" edition="rc3" />
-        <vers num="1.8.9.1" />
-        <vers num="1.8.9.2" />
-        <vers num="1.8.9.3" />
-        <vers num="10.0.0" edition="beta1" />
-        <vers num="10.0.0" edition="beta2" />
-        <vers num="10.0.0" edition="rc1" />
-        <vers num="10.0.0" edition="rc2" />
-        <vers num="10.0.0" edition="rc3" />
-        <vers num="10.0.1" />
-        <vers num="10.1.0" edition="rc1" />
-        <vers num="10.1.0" edition="rc2" />
-        <vers num="10.1.1" />
-        <vers num="10.1.2" />
-        <vers num="10.1.3" />
-        <vers num="10.2.0" edition="rc1" />
-        <vers num="10.2.0" edition="rc2" />
-        <vers num="10.2.0" edition="rc3" />
-        <vers num="10.2.0" edition="rc4" />
-        <vers num="10.2.1" />
-        <vers num="10.3.0" edition="rc2" />
-        <vers num="10.3.0" edition="rc3" />
-        <vers num="10.3.1" />
-        <vers num="10.4.0" edition="rc1" />
-        <vers num="10.4.0" edition="rc2" />
-        <vers num="10.4.0" edition="rc3" />
-        <vers num="10.4.1" />
-        <vers num="10.4.2" />
-        <vers num="10.5.0" edition="rc1" />
-        <vers num="10.5.0" edition="rc2" />
-        <vers num="10.5.1" />
-        <vers num="10.5.2" edition="" />
-        <vers num="10.5.2" edition=":digiumphones" />
-        <vers num="10.6.0" edition="" />
-        <vers num="10.6.0" edition=":digiumphones" />
-        <vers num="10.6.0" edition="rc1" />
-        <vers num="10.6.0" edition="rc2" />
-        <vers num="10.6.1" edition="" />
-        <vers num="10.6.1" edition=":digiumphones" />
-        <vers num="10.7.0" edition="" />
-        <vers num="10.7.0" edition=":digiumphones" />
-        <vers num="10.7.0" edition="rc1" />
-        <vers num="c.3.0" edition="-" />
-        <vers num="c.3.0" edition="-:business" />
-        <vers num="c.3.1.0" edition="-" />
-        <vers num="c.3.1.0" edition="-:business" />
-        <vers num="c.3.1.1" edition="-" />
-        <vers num="c.3.1.1" edition="-:business" />
-        <vers num="c.3.2.2" edition="-" />
-        <vers num="c.3.2.2" edition="-:business" />
-        <vers num="c.3.2.3" edition="-" />
-        <vers num="c.3.2.3" edition="-:business" />
-        <vers num="c.3.3.2" edition="-" />
-        <vers num="c.3.3.2" edition="-:business" />
-        <vers num="c.3.6.2" edition="-" />
-        <vers num="c.3.6.2" edition="-:business" />
-        <vers num="c.3.6.3" edition="-" />
-        <vers num="c.3.6.3" edition="-:business" />
-        <vers num="c.3.6.4" edition="-" />
-        <vers num="c.3.6.4" edition="-:business" />
-        <vers num="c.3.7.5" edition="-" />
-        <vers num="c.3.7.5" edition="-:business" />
-      </prod>
-      <prod vendor="digium" name="certified_asterisk">
-        <vers num="1.8.11" edition="cert" />
-        <vers num="1.8.11" edition="cert1" />
-        <vers num="1.8.11" edition="cert2" />
-        <vers num="1.8.11" edition="cert3" />
-        <vers num="1.8.11" edition="cert4" />
-        <vers num="1.8.11" edition="cert5" />
-        <vers num="1.8.11" edition="cert6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4739" published="2012-08-31" name="CVE-2012-4739" modified="2012-09-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012-07-05) allow remote attackers to inject arbitrary web script or HTML via the (1) policyLaunching, (2) resourcePrefix, or (3) actionPath parameter in showUserResourceCategories.do; (4) list or (5) path parameter to fileSystem.do; or (6) return-To parameter to launchAgent.do.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://www.barracudanetworks.com/ns/support/tech_alert.php" source="CONFIRM" adv="1">https://www.barracudanetworks.com/ns/support/tech_alert.php</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/77365" source="XF">sslvpn680-multiple-xss(77365)</ref>
-      <ref url="http://www.securitytracker.com/id?1027279" source="SECTRACK">1027279</ref>
-      <ref url="http://www.securityfocus.com/bid/54761" source="BID">54761</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-08/0003.html" source="BUGTRAQ">20120731 Barracuda SSL VPN 680 - Cross Site Scripting Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="barracudanetworks" name="barracuda_ssl_vpn">
-        <vers num="1.2.6.004" />
-        <vers num="1.5.0.29" />
-        <vers prev="1" num="1.7.2.004" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4740" published="2012-08-31" name="CVE-2012-4740" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the captive portal in PacketFence before 3.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74887" source="XF">packetfence-unspecified-xss(74887)</ref>
-      <ref url="http://www.securityfocus.com/bid/53027" source="BID">53027</ref>
-      <ref url="http://sourceforge.net/mailarchive/message.php?msg_id=29126135" source="MLIST">[Packetfence-announce] 20120413 PacketFence 3.3.0 released!</ref>
-      <ref url="http://secunia.com/advisories/48833" source="SECUNIA" adv="1">48833</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="packetfence" name="packetfence">
-        <vers prev="1" num="3.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4741" published="2012-08-31" name="CVE-2012-4741" modified="2012-09-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The RADIUS extension in PacketFence before 3.3.0 uses a different user name than is used for authentication for users with custom VLAN assignment extensions, which allows remote attackers to spoof user identities via the User-Name RADIUS attribute.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.packetfence.org/bugs/view.php?id=1390" source="CONFIRM" adv="1">http://www.packetfence.org/bugs/view.php?id=1390</ref>
-      <ref url="http://sourceforge.net/mailarchive/message.php?msg_id=29126135" source="MLIST">[Packetfence-announce] 20120413 PacketFence 3.3.0 released!</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="packetfence" name="packetfence">
-        <vers prev="1" num="3.2.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4742" published="2012-08-31" name="CVE-2012-4742" modified="2012-09-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The web_node_register function in web.pm in PacketFence before 3.0.2 might allow remote attackers to execute arbitrary code via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.packetfence.org/bugs/view.php?id=763" source="CONFIRM" adv="1">http://www.packetfence.org/bugs/view.php?id=763</ref>
-      <ref url="http://www.packetfence.org/bugs/changelog_page.php" source="CONFIRM">http://www.packetfence.org/bugs/changelog_page.php</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="packetfence" name="packetfence">
-        <vers prev="1" num="3.0.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4743" published="2012-08-31" name="CVE-2012-4743" modified="2012-09-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to execute arbitrary SQL commands via the (1) ss, (2) sm, (3) align, or (4) category parameters.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74916" source="XF">sichesearch-ssearch-sql-injection(74916)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=504" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=504</ref>
-      <ref url="http://www.securityfocus.com/bid/53035" source="BID">53035</ref>
-      <ref url="http://osvdb.org/81178" source="OSVDB">81178</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0099.html" source="BUGTRAQ">20120414 Siche Search v.0.5 Zerboard - Multiple Web Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="eos.pe" name="siche_search_module">
-        <vers num="0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4744" published="2012-08-31" name="CVE-2012-4744" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attackers to inject arbitrary web script or HTML via the search parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74914" source="XF">sichesearch-ssearch-xss(74914)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=504" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=504</ref>
-      <ref url="http://www.securityfocus.com/bid/53035" source="BID">53035</ref>
-      <ref url="http://www.osvdb.org/81179" source="OSVDB">81179</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0099.html" source="BUGTRAQ">20120414 Siche Search v.0.5 Zerboard - Multiple Web Vulnerabilities</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="eos.pe" name="siche_search_module">
-        <vers num="0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4745" published="2012-08-31" name="CVE-2012-4745" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in admin/login.asp in Acuity CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://yehg.net/lab/pr0js/advisories/%5Bacuity_cms2.6.x_%28asp%29%5D_xss" source="MISC">http://yehg.net/lab/pr0js/advisories/%5Bacuity_cms2.6.x_(asp)%5D_xss</ref>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74919" source="XF">acuitycms-login-xss(74919)</ref>
-      <ref url="http://www.securityfocus.com/bid/53048" source="BID">53048</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-04/0125.html" source="BUGTRAQ">20120417 Acuity CMS 2.6.x &lt;= Cross Site Scripting</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="the_collective" name="acuity_cms">
-        <vers num="2.6.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4746" published="2012-08-31" name="CVE-2012-4746" modified="2012-09-03" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0a_Z29_OV allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/18722" source="EXPLOIT-DB">18722</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="zte" name="zxdsl">
-        <vers num="831iiv7.5.0a_z29_ov" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4747" published="2012-09-04" name="CVE-2012-4747" modified="2012-09-04" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Bugzilla 2.x and 3.x through 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3 stores potentially sensitive information under the web root with insufficient access control, which allows remote attackers to read (1) template (aka .tmpl) files, (2) other custom extension files under extensions/, or (3) custom documentation files under docs/ via a direct request.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=785522" source="CONFIRM" patch="1">https://bugzilla.mozilla.org/show_bug.cgi?id=785522</ref>
-      <ref url="https://bugzilla.mozilla.org/show_bug.cgi?id=785511" source="CONFIRM" patch="1">https://bugzilla.mozilla.org/show_bug.cgi?id=785511</ref>
-      <ref url="http://www.bugzilla.org/security/3.6.10/" source="CONFIRM" adv="1">http://www.bugzilla.org/security/3.6.10/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mozilla" name="bugzilla">
-        <vers num="2.0" />
-        <vers num="2.10" />
-        <vers num="2.12" />
-        <vers num="2.14" />
-        <vers num="2.14.1" />
-        <vers num="2.14.2" />
-        <vers num="2.14.3" />
-        <vers num="2.14.4" />
-        <vers num="2.14.5" />
-        <vers num="2.16" edition="rc1" />
-        <vers num="2.16" edition="rc2" />
-        <vers num="2.16.1" />
-        <vers num="2.16.10" />
-        <vers num="2.16.11" />
-        <vers num="2.16.2" />
-        <vers num="2.16.3" />
-        <vers num="2.16.4" />
-        <vers num="2.16.5" />
-        <vers num="2.16.6" />
-        <vers num="2.16.7" />
-        <vers num="2.16.8" />
-        <vers num="2.16.9" />
-        <vers num="2.17" />
-        <vers num="2.17.1" />
-        <vers num="2.17.2" />
-        <vers num="2.17.3" />
-        <vers num="2.17.4" />
-        <vers num="2.17.5" />
-        <vers num="2.17.6" />
-        <vers num="2.17.7" />
-        <vers num="2.18" edition="rc1" />
-        <vers num="2.18" edition="rc2" />
-        <vers num="2.18" edition="rc3" />
-        <vers num="2.18.1" />
-        <vers num="2.18.2" />
-        <vers num="2.18.3" />
-        <vers num="2.18.4" />
-        <vers num="2.18.5" />
-        <vers num="2.18.6" />
-        <vers num="2.18.6+" />
-        <vers num="2.18.7" />
-        <vers num="2.18.8" />
-        <vers num="2.18.9" />
-        <vers num="2.19" />
-        <vers num="2.19.1" />
-        <vers num="2.19.2" />
-        <vers num="2.19.3" />
-        <vers num="2.2" />
-        <vers num="2.20" edition="rc1" />
-        <vers num="2.20" edition="rc2" />
-        <vers num="2.20.1" />
-        <vers num="2.20.2" />
-        <vers num="2.20.3" />
-        <vers num="2.20.4" />
-        <vers num="2.20.5" />
-        <vers num="2.20.6" />
-        <vers num="2.20.7" />
-        <vers num="2.21" />
-        <vers num="2.21.1" />
-        <vers num="2.21.2" edition="rc1" />
-        <vers num="2.22" edition="rc1" />
-        <vers num="2.22.1" />
-        <vers num="2.22.2" />
-        <vers num="2.22.3" />
-        <vers num="2.22.4" />
-        <vers num="2.22.5" />
-        <vers num="2.22.6" />
-        <vers num="2.22.7" />
-        <vers num="2.23" />
-        <vers num="2.23.1" />
-        <vers num="2.23.2" />
-        <vers num="2.23.3" />
-        <vers num="2.23.4" />
-        <vers num="2.4" />
-        <vers num="2.6" />
-        <vers num="2.8" />
-        <vers num="2.9" />
-        <vers num="3.0" edition="rc1" />
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.10" />
-        <vers num="3.0.11" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="3.0.4" />
-        <vers num="3.0.5" />
-        <vers num="3.0.6" />
-        <vers num="3.0.7" />
-        <vers num="3.0.8" />
-        <vers num="3.0.9" />
-        <vers num="3.1.0" />
-        <vers num="3.1.1" />
-        <vers num="3.1.2" />
-        <vers num="3.1.3" />
-        <vers num="3.1.4" />
-        <vers num="3.2" edition="rc1" />
-        <vers num="3.2" edition="rc2" />
-        <vers num="3.2.1" />
-        <vers num="3.2.10" />
-        <vers num="3.2.2" />
-        <vers num="3.2.3" />
-        <vers num="3.2.4" />
-        <vers num="3.2.5" />
-        <vers num="3.2.6" />
-        <vers num="3.2.7" />
-        <vers num="3.2.8" />
-        <vers num="3.2.9" />
-        <vers num="3.3" />
-        <vers num="3.3.1" />
-        <vers num="3.3.2" />
-        <vers num="3.3.3" />
-        <vers num="3.3.4" />
-        <vers num="3.4" edition="rc1" />
-        <vers num="3.4.1" />
-        <vers num="3.4.10" />
-        <vers num="3.4.11" />
-        <vers num="3.4.12" />
-        <vers num="3.4.13" />
-        <vers num="3.4.2" />
-        <vers num="3.4.3" />
-        <vers num="3.4.4" />
-        <vers num="3.4.5" />
-        <vers num="3.4.6" />
-        <vers num="3.4.7" />
-        <vers num="3.4.8" />
-        <vers num="3.4.9" />
-        <vers num="3.5" />
-        <vers num="3.5.1" />
-        <vers num="3.5.2" />
-        <vers num="3.5.3" />
-        <vers num="3.6" edition="rc1" />
-        <vers num="3.6.0" />
-        <vers num="3.6.1" />
-        <vers num="3.6.10" />
-        <vers num="3.6.2" />
-        <vers num="3.6.3" />
-        <vers num="3.6.4" />
-        <vers num="3.6.5" />
-        <vers num="3.6.6" />
-        <vers num="3.6.7" />
-        <vers num="3.6.8" />
-        <vers num="3.6.9" />
-        <vers num="3.7" />
-        <vers num="3.7.1" />
-        <vers num="3.7.2" />
-        <vers num="3.7.3" />
-        <vers num="4.0" edition="rc1" />
-        <vers num="4.0" edition="rc2" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers num="4.0.5" />
-        <vers num="4.0.6" />
-        <vers num="4.0.7" />
-        <vers num="4.1" />
-        <vers num="4.1.1" />
-        <vers num="4.1.2" />
-        <vers num="4.1.3" />
-        <vers num="4.2" edition="rc1" />
-        <vers num="4.2" edition="rc2" />
-        <vers num="4.2.1" />
-        <vers num="4.2.2" />
-        <vers num="4.3" />
-        <vers num="4.3.1" />
-        <vers num="4.3.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4752" published="2012-09-05" name="CVE-2012-4752" modified="2012-09-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">appconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote authenticated users to edit app configurations via unspecified vectors.  NOTE: this can be leveraged by unauthenticated remote attackers using CVE-2012-4393.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://github.com/owncloud/core/commit/9605e1926c6081e88326bf78a02c1d1b83126c4f" source="CONFIRM">https://github.com/owncloud/core/commit/9605e1926c6081e88326bf78a02c1d1b83126c4f</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/09/02/2" source="MLIST">[oss-security] 20120901 Re: CVE - ownCloud</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/08/11/1" source="MLIST">[oss-security] 20120810 ownCloud - matching CVEs to fix information and vice versa</ref>
-      <ref url="http://owncloud.org/changelog/" source="CONFIRM">http://owncloud.org/changelog/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="owncloud" name="owncloud">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers num="4.0.4" />
-        <vers prev="1" num="4.0.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4753" published="2012-09-05" name="CVE-2012-4753" modified="2012-09-06" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.5 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://owncloud.org/changelog/" source="CONFIRM">http://owncloud.org/changelog/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="owncloud" name="owncloud">
-        <vers num="3.0.0" />
-        <vers num="3.0.1" />
-        <vers num="3.0.2" />
-        <vers num="3.0.3" />
-        <vers num="4.0.0" />
-        <vers num="4.0.1" />
-        <vers num="4.0.2" />
-        <vers num="4.0.3" />
-        <vers prev="1" num="4.0.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4754" published="2012-09-06" name="CVE-2012-4754" modified="2012-09-06" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:N)" CVSS_score="6.3" CVSS_impact_subscore="9.2" CVSS_exploit_subscore="3.4" CVSS_base_score="6.3">
-    <desc>
-      <descript source="cve">Multiple untrusted search path vulnerabilities in MindManager 2012 10.0.493 allow local users to gain privileges via a Trojan horse (1) ssgp.dll or (2) dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .mmap file.  NOTE: some of these details are obtained from third party information.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426 Untrusted Search Path'
-
-</descript>
-    </desc>
-    <loss_types>
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5068.php" source="MISC">http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5068.php</ref>
-      <ref url="http://secunia.com/advisories/47797" source="SECUNIA" adv="1">47797</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mindjet" name="mindmanager_2012">
-        <vers num="10.0.493" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4755" published="2012-09-06" name="CVE-2012-4755" modified="2012-09-06" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in SciTools Understand before 2.6 build 600 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .udb file.  NOTE: some of these details are obtained from third party information.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426 Untrusted Search Path'
-
-</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5071.php" source="MISC">http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5071.php</ref>
-      <ref url="http://www.scitools.com/support/buildLogs/understand26_build_log.html" source="CONFIRM" adv="1">http://www.scitools.com/support/buildLogs/understand26_build_log.html</ref>
-      <ref url="http://secunia.com/advisories/47921" source="SECUNIA" adv="1">47921</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="scitools" name="understand">
-        <vers num="2.6" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4756" published="2012-09-06" name="CVE-2012-4756" modified="2012-09-06" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Multiple untrusted search path vulnerabilities in CyberLink LabelPrint 2.5.3602 allow local users to gain privileges via a Trojan horse (1) mfc71loc.dll or (2) mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .lpp file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426 Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://secunia.com/advisories/49281" source="SECUNIA" adv="1">49281</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cyberlink" name="labelprint">
-        <vers num="2.5.3602" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4757" published="2012-09-06" name="CVE-2012-4757" modified="2012-09-06" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Multiple untrusted search path vulnerabilities in CyberLink StreamAuthor 4.0 build 3308 allow local users to gain privileges via a Trojan horse (1) mfc71loc.dll or (2) mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .sta or .stp file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426 Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://secunia.com/advisories/49290" source="SECUNIA" adv="1">49290</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cyberlink" name="streamauthor">
-        <vers num="4.0" edition="build3308" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4758" published="2012-09-06" name="CVE-2012-4758" modified="2012-09-06" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Multiple untrusted search path vulnerabilities in CyberLink PowerProducer 5.5.3.2325 allow local users to gain privileges via a Trojan horse (1) mfc71loc.dll or (2) mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .ppp or .rdf file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426 Untrusted Search Path'
-
-</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://secunia.com/advisories/49295" source="SECUNIA" adv="1">49295</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="cyberlink" name="powerproducer">
-        <vers num="5.5.3.2325" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4759" published="2012-09-06" name="CVE-2012-4759" modified="2012-09-06" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in facebook_plugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these details are obtained from third party information.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426 Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://secunia.com/advisories/50348" source="SECUNIA" adv="1">50348</ref>
-      <ref url="http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0293.html" source="FULLDISC">20120823 foxit reader 5.3.1(dwmapi.dll) DLL Hijacking Exploit</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="foxitsoftware" name="foxit_reader">
-        <vers num="5.3.1.0606" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4817" published="2012-09-14" name="CVE-2012-4817" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02, does not properly handle GID values, which allows remote attackers to cause a denial of service via unspecified vectors.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/78431" source="XF">aix-nfsv4-gid-dos(78431)</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV26436" source="AIXAPAR" adv="1">IV26436</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV17855" source="AIXAPAR" adv="1">IV17855</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV12169" source="AIXAPAR" adv="1">IV12169</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV11629" source="AIXAPAR" adv="1">IV11629</ref>
-      <ref url="http://www.ibm.com/support/docview.wss?uid=isg1IV10327" source="AIXAPAR" adv="1">IV10327</ref>
-      <ref url="http://aix.software.ibm.com/aix/efixes/security/nfsv4_advisory1.asc" source="CONFIRM" adv="1">http://aix.software.ibm.com/aix/efixes/security/nfsv4_advisory1.asc</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="ibm" name="aix">
-        <vers num="5.3" />
-        <vers num="6.1" />
-        <vers num="7.1" />
-      </prod>
-      <prod vendor="ibm" name="vios">
-        <vers num="1.4.1.2" />
-        <vers num="1.5.1.1" />
-        <vers num="1.5.2.1" />
-        <vers num="1.5.2.6" />
-        <vers num="2.1.0.0" />
-        <vers num="2.1.2.10" />
-        <vers num="2.1.2.12" />
-        <vers num="2.1.2.13" />
-        <vers num="2.1.3.10" />
-        <vers num="2.2.0.10" />
-        <vers num="2.2.0.11" />
-        <vers num="2.2.0.12" />
-        <vers num="2.2.0.13" />
-        <vers num="2.2.1.0" />
-        <vers num="2.2.1.1" />
-        <vers num="2.2.1.3" />
-        <vers num="2.2.1.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4864" published="2012-09-06" name="CVE-2012-4864" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Oreans WinLicense 2.1.8.0 allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via a crafted xml file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74170" source="XF">winlicense-xml-code-execution(74170)</ref>
-      <ref url="http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5080.php" source="MISC">http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5080.php</ref>
-      <ref url="http://www.securityfocus.com/bid/52650" source="BID">52650</ref>
-      <ref url="http://www.exploit-db.com/exploits/18637" source="EXPLOIT-DB">18637</ref>
-      <ref url="http://packetstormsecurity.org/files/111034" source="MISC">http://packetstormsecurity.org/files/111034</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oreans" name="winlicense">
-        <vers num="2.1.8.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4865" published="2012-09-06" name="CVE-2012-4865" modified="2012-09-13" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in Oreans Themida 2.1.8.0 allows remote attackers to execute arbitrary code via a crafted .TMD file.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5079.php" source="MISC">http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5079.php</ref>
-      <ref url="http://www.exploit-db.com/exploits/18636" source="EXPLOIT-DB">18636</ref>
-      <ref url="http://packetstormsecurity.org/files/111031" source="MISC">http://packetstormsecurity.org/files/111031</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oreans" name="themida">
-        <vers num="2.1.8.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4866" published="2012-09-06" name="CVE-2012-4866" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in Xtreme RAT 3.5 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as the current working directory.  NOTE: some of these details are obtained from third party information.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426 Untrusted Search Path' </descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74151" source="XF">xtreme-rat-dll-code-execution(74151)</ref>
-      <ref url="http://www.securityfocus.com/bid/52542" source="BID">52542</ref>
-      <ref url="http://packetstormsecurity.org/files/110949/Xtreme-RAT-DLL-Hijack.html" source="MISC">http://packetstormsecurity.org/files/110949/Xtreme-RAT-DLL-Hijack.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="xtremerat" name="xtremerat">
-        <vers num="3.5" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4867" published="2012-09-06" name="CVE-2012-4867" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Directory traversal vulnerability in modules/com_vtiger_workflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the module_name parameter.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/18635" source="EXPLOIT-DB">18635</ref>
-      <ref url="http://packetstormsecurity.org/files/111075/Vtiger-5.1.0-Local-File-Inclusion.html" source="MISC">http://packetstormsecurity.org/files/111075/Vtiger-5.1.0-Local-File-Inclusion.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="vtiger" name="vtiger_crm">
-        <vers num="5.1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4868" published="2012-09-06" name="CVE-2012-4868" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in news.php in the Kunena component 1.7.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52636" source="BID">52636</ref>
-      <ref url="http://exploitsdownload.com/exploit/na/kunena-20-sql-injection" source="MISC">http://exploitsdownload.com/exploit/na/kunena-20-sql-injection</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kunena" name="kunena">
-        <vers num="1.7.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4869" published="2012-09-06" name="CVE-2012-4869" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attackers to execute arbitrary commands via the callmenum parameter in a c action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74174" source="XF">freepbx-callmepage-command-exec(74174)</ref>
-      <ref url="http://www.securityfocus.com/bid/52630" source="BID">52630</ref>
-      <ref url="http://www.freepbx.org/trac/ticket/5711" source="CONFIRM" adv="1">http://www.freepbx.org/trac/ticket/5711</ref>
-      <ref url="http://www.exploit-db.com/exploits/18659" source="EXPLOIT-DB">18659</ref>
-      <ref url="http://www.exploit-db.com/exploits/18649" source="EXPLOIT-DB">18649</ref>
-      <ref url="http://secunia.com/advisories/48463" source="SECUNIA" adv="1">48463</ref>
-      <ref url="http://seclists.org/fulldisclosure/2012/Mar/234" source="FULLDISC">20120320 FreePBX remote command execution, xss</ref>
-      <ref url="http://packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.html" source="MISC">http://packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freepbx" name="freepbx">
-        <vers prev="1" num="2.10" />
-        <vers num="2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4870" published="2012-09-06" name="CVE-2012-4870" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) context parameter to panel/index_amp.php or (2) panel/dhtml/index.php; (3) clid or (4) clidname parameters to panel/flash/mypage.php; (5) PATH_INFO to admin/views/freepbx_reload.php; or (6) login parameter to recordings/index.php.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74173" source="XF">freepbx-multiple-xss(74173)</ref>
-      <ref url="http://www.securityfocus.com/bid/52630" source="BID">52630</ref>
-      <ref url="http://www.freepbx.org/trac/ticket/5711" source="CONFIRM">http://www.freepbx.org/trac/ticket/5711</ref>
-      <ref url="http://www.exploit-db.com/exploits/18649" source="EXPLOIT-DB">18649</ref>
-      <ref url="http://secunia.com/advisories/48475" source="SECUNIA" adv="1">48475</ref>
-      <ref url="http://secunia.com/advisories/48463" source="SECUNIA" adv="1">48463</ref>
-      <ref url="http://seclists.org/fulldisclosure/2012/Mar/234" source="FULLDISC">20120320 FreePBX remote command execution, xss</ref>
-      <ref url="http://packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.html" source="MISC">http://packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="freepbx" name="freepbx">
-        <vers prev="1" num="2.9" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4871" published="2012-09-06" name="CVE-2012-4871" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in service/graph_html.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the gtitle parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74144" source="XF">litespeed-graphhtml-xss(74144)</ref>
-      <ref url="http://secunia.com/advisories/48400" source="SECUNIA" adv="1">48400</ref>
-      <ref url="http://packetstormsecurity.org/files/110974/LiteSpeed-4.1.11-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/110974/LiteSpeed-4.1.11-Cross-Site-Scripting.html</ref>
-      <ref url="http://k1p0d.com/?p=25" source="MISC">http://k1p0d.com/?p=25</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="litespeedtech" name="litespeed_web_server">
-        <vers num="4.1.11" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4872" published="2012-09-06" name="CVE-2012-4872" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Tickets/Submit in Kayako Fusion before 4.40.985 allows remote attackers to inject arbitrary web script or HTML via certain vectors, possibly a crafted ticket description.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74143" source="XF">kayakofusion-submitticket-xss(74143)</ref>
-      <ref url="http://www.securityfocus.com/bid/52625" source="BID">52625</ref>
-      <ref url="http://wiki.kayako.com/display/DOCS/4.40.986" source="MISC">http://wiki.kayako.com/display/DOCS/4.40.986</ref>
-      <ref url="http://wiki.kayako.com/display/DOCS/4.40.985" source="MISC">http://wiki.kayako.com/display/DOCS/4.40.985</ref>
-      <ref url="http://st2tea.blogspot.com/2012/03/kayako-fusion-cross-site-scripting.html" source="MISC">http://st2tea.blogspot.com/2012/03/kayako-fusion-cross-site-scripting.html</ref>
-      <ref url="http://secunia.com/advisories/48462" source="SECUNIA" adv="1">48462</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="kayako" name="kayako_fusion">
-        <vers prev="1" num="4.40.959" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4873" published="2012-09-06" name="CVE-2012-4873" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in the file_download function in GNUBoard before 4.34.21 allows remote attackers to inject arbitrary web script or HTML via the filename parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52622" source="BID">52622</ref>
-      <ref url="http://www.exploit-db.com/exploits/18627" source="EXPLOIT-DB">18627</ref>
-      <ref url="http://sir.co.kr/bbs/board.php?bo_table=g4_pds&amp;wr_id=7156" source="CONFIRM">http://sir.co.kr/bbs/board.php?bo_table=g4_pds&amp;wr_id=7156</ref>
-      <ref url="http://secunia.com/advisories/48458" source="SECUNIA" adv="1">48458</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sir" name="gnuboard">
-        <vers prev="1" num="4.34" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4874" published="2012-09-06" name="CVE-2012-4874" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Unspecified vulnerability in the Another WordPress Classifieds Plugin before 2.0 for WordPress has unknown impact and attack vectors related to "image uploads."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52861" source="BID">52861</ref>
-      <ref url="http://wordpress.org/extend/plugins/another-wordpress-classifieds-plugin/changelog/" source="CONFIRM">http://wordpress.org/extend/plugins/another-wordpress-classifieds-plugin/changelog/</ref>
-      <ref url="http://secunia.com/advisories/47335" source="SECUNIA" adv="1">47335</ref>
-      <ref url="http://osvdb.org/80881" source="OSVDB">80881</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="awpcp" name="another_wordpress_classifieds_plugin">
-        <vers prev="1" num="1.8.9.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4875" published="2012-09-06" name="CVE-2012-4875" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">** DISPUTED **  Heap-based buffer overflow in gdevwpr2.c in Ghostscript 9.04, when processing the OutputFile device parameter, allows user-assisted remote attackers to execute arbitrary code via a long file name in a PostScript document.  NOTE: as of 20120314, the developer was not able to reproduce the issue and disputed it.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74554" source="XF">ghostscript-outputfile-bo(74554)</ref>
-      <ref url="http://www.securityfocus.com/bid/52864" source="BID">52864</ref>
-      <ref url="http://secunia.com/advisories/47855" source="SECUNIA" adv="1">47855</ref>
-      <ref url="http://bugs.ghostscript.com/show_bug.cgi?id=692856" source="MISC">http://bugs.ghostscript.com/show_bug.cgi?id=692856</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="artifex" name="gpl_ghostscript">
-        <vers num="9.04" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4876" published="2012-09-06" name="CVE-2012-4876" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a long string to the OpenFileDlg method.</descript>
-      <descript source="nvd">Per Secunia (http://secunia.com/advisories/48601)"The vulnerability is confirmed in version 1.1.52.18. Other versions may also be affected."</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.securityfocus.com/bid/52760" source="BID">52760</ref>
-      <ref url="http://www.exploit-db.com/exploits/18675" source="EXPLOIT-DB">18675</ref>
-      <ref url="http://secunia.com/advisories/48601" source="SECUNIA" adv="1">48601</ref>
-      <ref url="http://retrogod.altervista.org/9sg_trendnet_adv.htm" source="MISC">http://retrogod.altervista.org/9sg_trendnet_adv.htm</ref>
-      <ref url="http://osvdb.org/80661" source="OSVDB">80661</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-03/0152.html" source="BUGTRAQ">20120328 TRENDnet SecurView TV-IP121WN Wireless Internet Camera UltraMJCam ActiveX Control OpenFileDlg WideCharToMultiByte Remote Stack Buffer Overflow</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="trendnet" name="securview_wireless_internet_camera_activex_control">
-        <vers num="1.1.52.18" />
-      </prod>
-      <prod vendor="trendnet" name="securview_wireless_internet_camera">
-        <vers num="tv-ip121wn" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4877" published="2012-09-06" name="CVE-2012-4877" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74567" source="XF">flatnux-controlcenter-csrf(74567)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=487" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=487</ref>
-      <ref url="http://www.securityfocus.com/bid/52846" source="BID">52846</ref>
-      <ref url="http://secunia.com/advisories/48656" source="SECUNIA" adv="1">48656</ref>
-      <ref url="http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html" source="MISC">http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html</ref>
-      <ref url="http://osvdb.org/80878" source="OSVDB">80878</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="flatnux" name="flatnux">
-        <vers num="2008-12-11" />
-        <vers num="2009-01-27" />
-        <vers num="2009-02-04" />
-        <vers prev="1" num="2011-08-09-2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4878" published="2012-09-06" name="CVE-2012-4878" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files via a full pathname in the dir parameter in a contents/Files action.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74568" source="XF">flatnux-controlcenter-directory-traversal(74568)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=487" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=487</ref>
-      <ref url="http://www.securityfocus.com/bid/52846" source="BID">52846</ref>
-      <ref url="http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html" source="MISC">http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="flatnux" name="flatnux">
-        <vers num="2011-08-09-2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4879" published="2012-09-06" name="CVE-2012-4879" modified="2012-09-07" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:C/I:C/A:C)" CVSS_score="10.0" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="10.0" CVSS_base_score="10.0">
-    <desc>
-      <descript source="cve">The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices has a default password of wago for the (1) root and (2) admin accounts, (3) a default password of user for the user account, and (4) a default password of guest for the guest account, which makes it easier for remote attackers to obtain login access via a TELNET session, a different vulnerability than CVE-2012-3013.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdf" source="MISC">http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdf</ref>
-      <ref url="http://www.wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdf" source="CONFIRM" adv="1">http://www.wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdf</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="wago" name="wago_i/o_system_758_industrial_pc_device">
-        <vers num="758-870" />
-        <vers num="758-874" />
-        <vers num="758-875" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4880" published="2012-09-07" name="CVE-2012-4880" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Multiple untrusted search path vulnerabilities in DVD Architect Pro 5.2 Build 133 and DVD Architect Studio 5.0 Build 156 allow local users to gain privileges via a Trojan horse (1) enc_mp2v.200 or (2) CFHDDecoder.dll file in the current working directory, as demonstrated by a directory that contains a .dar file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426 Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://secunia.com/advisories/47282" source="SECUNIA" adv="1">47282</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sony" name="dvd_architect_pro">
-        <vers num="5.2" />
-      </prod>
-      <prod vendor="sony" name="dvd_architect_studio">
-        <vers num="5.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4881" published="2012-09-07" name="CVE-2012-4881" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Untrusted search path vulnerability in moviEZ HD 1.0 Build 2554-29894-A allows local users to gain privileges via a Trojan horse avrt.dll file in the current working directory, as demonstrated by a directory that contains a .mvz file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426 Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://secunia.com/advisories/47284" source="SECUNIA" adv="1">47284</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="sony" name="moviez_hd">
-        <vers num="1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4882" published="2012-09-07" name="CVE-2012-4882" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Multiple untrusted search path vulnerabilities in 3D XML Player 6.212.13.12076 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) JT0DevPhase.dll file in the current working directory, as demonstrated by a directory that contains a .3dx file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426: Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://secunia.com/advisories/48923" source="SECUNIA" adv="1">48923</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="3ds" name="3d_xml_player">
-        <vers num="6.212.13.12076" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4883" published="2012-09-07" name="CVE-2012-4883" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:L/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="6.9" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="3.4" CVSS_base_score="6.9">
-    <desc>
-      <descript source="cve">Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) ibfs32.dll file in the current working directory, as demonstrated by a directory that contains a .smg file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.</descript>
-      <descript source="nvd">Per: http://cwe.mitre.org/data/definitions/426.html
-
-'CWE-426 Untrusted Search Path'</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <local />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://secunia.com/advisories/48924" source="SECUNIA" adv="1">48924</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="3ds" name="3dvia_composer">
-        <vers num="6.8.1.1652" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4885" published="2012-09-09" name="CVE-2012-4885" modified="2012-09-10" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to cause a denial of service (infinite loop) via certain input, as demonstrated by the padleft function.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://bugzilla.wikimedia.org/show_bug.cgi?id=35315" source="CONFIRM">https://bugzilla.wikimedia.org/show_bug.cgi?id=35315</ref>
-      <ref url="https://bugzilla.wikimedia.org/show_bug.cgi?id=22555" source="CONFIRM" adv="1">https://bugzilla.wikimedia.org/show_bug.cgi?id=22555</ref>
-      <ref url="http://www.securityfocus.com/bid/52689" source="BID">52689</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/24/1" source="MLIST">[oss-security] 20120323 CVEs for MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/03/22/9" source="MLIST">[oss-security] 20120322 MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://secunia.com/advisories/48504" source="SECUNIA" adv="1">48504</ref>
-      <ref url="http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html" source="MLIST" adv="1">[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.18.2</ref>
-      <ref url="http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html" source="MLIST" adv="1">[MediaWiki-announce] 20120322 MediaWiki security and maintenance release 1.17.3</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="mediawiki" name="mediawiki">
-        <vers num="1.17" edition="beta_1" />
-        <vers num="1.17.0" edition="rc1" />
-        <vers num="1.17.1" />
-        <vers num="1.17.2" />
-        <vers num="1.18" edition="beta_1" />
-        <vers num="1.18.0" edition="rc1" />
-        <vers num="1.18.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4889" published="2012-09-10" name="CVE-2012-4889" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) subTab or (2) tab parameter to createAnomaly.do; (3) url, (4) subTab, or (5) tab parameter to mindex.do; (6) tab parameter to index2.do; or (7) port parameter to syslogViewer.do.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74538" source="XF">firewallanalyzer-multiple-xss(74538)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=437" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=437</ref>
-      <ref url="http://www.securityfocus.com/bid/52841" source="BID">52841</ref>
-      <ref url="http://secunia.com/advisories/48657" source="SECUNIA" adv="1">48657</ref>
-      <ref url="http://packetstormsecurity.org/files/111474/VL-437.txt" source="MISC">http://packetstormsecurity.org/files/111474/VL-437.txt</ref>
-      <ref url="http://osvdb.org/80875" source="OSVDB">80875</ref>
-      <ref url="http://osvdb.org/80874" source="OSVDB">80874</ref>
-      <ref url="http://osvdb.org/80873" source="OSVDB">80873</ref>
-      <ref url="http://osvdb.org/80872" source="OSVDB">80872</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="manageengine" name="firewall_analyzer">
-        <vers num="7.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4890" published="2012-09-10" name="CVE-2012-4890" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a (1) comment to the news, (2) title to the news, or (3) the folder names in a gallery.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74566" source="XF">flatnux-index-xss(74566)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=487" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=487</ref>
-      <ref url="http://www.securityfocus.com/bid/52846" source="BID">52846</ref>
-      <ref url="http://www.osvdb.org/80877" source="OSVDB">80877</ref>
-      <ref url="http://secunia.com/advisories/48676" source="SECUNIA" adv="1">48676</ref>
-      <ref url="http://secunia.com/advisories/48656" source="SECUNIA" adv="1">48656</ref>
-      <ref url="http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html" source="MISC">http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="flatnux" name="flatnux">
-        <vers num="2008-12-11" />
-        <vers num="2009-01-27" />
-        <vers num="2009-02-04" />
-        <vers prev="1" num="2011-08-09-2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4891" published="2012-09-10" name="CVE-2012-4891" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in fw/index2.do in ManageEngine Firewall Analyzer 7.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter, a different vector than CVE-2012-4889.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://secunia.com/advisories/48657" source="SECUNIA" adv="1">48657</ref>
-      <ref url="http://osvdb.org/80874" source="OSVDB">80874</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="manageengine" name="firewall_analyzer">
-        <vers num="7.2" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4892" published="2012-09-10" name="CVE-2012-4892" modified="2012-09-11" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2012-03.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title_en, (2) summary_en, or (3) body_en parameter in a submitnews action to the news module, a different vulnerability than CVE-2012-4890.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/74566" source="XF">flatnux-index-xss(74566)</ref>
-      <ref url="http://www.osvdb.org/80877" source="OSVDB">80877</ref>
-      <ref url="http://secunia.com/advisories/48656" source="SECUNIA" adv="1">48656</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="flatnux" name="flatnux">
-        <vers num="2008-12-11" />
-        <vers num="2009-01-27" />
-        <vers num="2009-02-04" />
-        <vers num="2011-08-09-2" />
-        <vers prev="1" num="2012-03.08" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4893" published="2012-09-11" name="CVE-2012-4893" modified="2012-09-12" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:P/A:P)" CVSS_score="6.8" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="8.6" CVSS_base_score="6.8">
-    <desc>
-      <descript source="cve">Multiple cross-site request forgery (CSRF) vulnerabilities in file/show.cgi in Webmin 1.590 and earlier allow remote attackers to hijack the authentication of privileged users for requests that (1) read files or execute (2) tar, (3) zip, or (4) gzip commands, a different issue than CVE-2012-2982.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://www.kb.cert.org/vuls/id/788478" source="CERT-VN">VU#788478</ref>
-      <ref url="http://www.americaninfosec.com/research/dossiers/AISG-12-001.pdf" source="MISC">http://www.americaninfosec.com/research/dossiers/AISG-12-001.pdf</ref>
-      <ref url="http://americaninfosec.com/research/index.html" source="MISC">http://americaninfosec.com/research/index.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="gentoo" name="webmin">
-        <vers num="1.140" />
-        <vers num="1.150" />
-        <vers num="1.160" />
-        <vers num="1.170" />
-        <vers num="1.180" />
-        <vers num="1.200" />
-        <vers num="1.210" />
-        <vers num="1.220" />
-        <vers num="1.230" />
-        <vers num="1.240" />
-        <vers num="1.260" />
-        <vers num="1.270" />
-        <vers num="1.280" />
-        <vers num="1.290" />
-        <vers num="1.300" />
-        <vers num="1.310" />
-        <vers num="1.320" />
-        <vers num="1.330" />
-        <vers num="1.340" />
-        <vers num="1.370" />
-        <vers num="1.380" />
-        <vers num="1.390" />
-        <vers num="1.400" />
-        <vers num="1.410" />
-        <vers num="1.420" />
-        <vers num="1.430" />
-        <vers num="1.440" />
-        <vers num="1.450" />
-        <vers num="1.470" />
-        <vers num="1.480" />
-        <vers num="1.500" />
-        <vers num="1.510" />
-        <vers num="1.520" />
-        <vers num="1.530" />
-        <vers num="1.550" />
-        <vers num="1.560" />
-        <vers num="1.570" />
-        <vers num="1.580" />
-        <vers prev="1" num="1.590" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4903" published="2012-09-13" name="CVE-2012-4903" modified="2012-09-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Google Chrome before 18.0.1025308 on Android does not properly restrict access to file: URLs, which allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by obtaining credential data, a different vulnerability than CVE-2012-4906.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://code.google.com/p/chromium/issues/detail?id=138210" source="CONFIRM">https://code.google.com/p/chromium/issues/detail?id=138210</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers prev="1" num="18.0.1025306" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4904" published="2012-09-13" name="CVE-2012-4904" modified="2012-09-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script via unspecified vectors, as demonstrated by "Universal XSS (UXSS)" attacks against the current tab.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://code.google.com/p/chromium/issues/detail?id=138035" source="CONFIRM">https://code.google.com/p/chromium/issues/detail?id=138035</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers prev="1" num="18.0.1025306" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4905" published="2012-09-13" name="CVE-2012-4905" modified="2012-09-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script or HTML via an extra in an Intent object, aka "Universal XSS (UXSS)."</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://code.google.com/p/chromium/issues/detail?id=144813" source="CONFIRM">https://code.google.com/p/chromium/issues/detail?id=144813</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers prev="1" num="18.0.1025306" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4906" published="2012-09-13" name="CVE-2012-4906" modified="2012-09-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:N/A:N)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">Google Chrome before 18.0.1025308 on Android does not properly restrict access to file: URLs, which allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by obtaining credential data, a different vulnerability than CVE-2012-4903.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://code.google.com/p/chromium/issues/detail?id=144820" source="CONFIRM">https://code.google.com/p/chromium/issues/detail?id=144820</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers prev="1" num="18.0.1025306" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4907" published="2012-09-13" name="CVE-2012-4907" modified="2012-09-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Google Chrome before 18.0.1025308 on Android does not properly restrict access from JavaScript code to Android APIs, which allows remote attackers to have an unspecified impact via a crafted web page.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://code.google.com/p/chromium/issues/detail?id=137532" source="CONFIRM">https://code.google.com/p/chromium/issues/detail?id=137532</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers prev="1" num="18.0.1025306" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4908" published="2012-09-13" name="CVE-2012-4908" modified="2012-09-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://code.google.com/p/chromium/issues/detail?id=144866" source="CONFIRM">https://code.google.com/p/chromium/issues/detail?id=144866</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers prev="1" num="18.0.1025306" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4909" published="2012-09-13" name="CVE-2012-4909" modified="2012-09-14" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:P/I:N/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Google Chrome before 18.0.1025308 on Android allows remote attackers to obtain cookie information via a crafted application.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://code.google.com/p/chromium/issues/detail?id=141889" source="CONFIRM">https://code.google.com/p/chromium/issues/detail?id=141889</ref>
-      <ref url="http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html" source="CONFIRM" adv="1">http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers prev="1" num="18.0.1025306" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4922" published="2012-09-14" name="CVE-2012-4922" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:N/A:P)" CVSS_score="5.0" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="10.0" CVSS_base_score="5.0">
-    <desc>
-      <descript source="cve">The tor_timegm function in common/util.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.22-rc, does not properly validate time values, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed directory object, a different vulnerability than CVE-2012-4419.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://trac.torproject.org/projects/tor/ticket/6811" source="CONFIRM">https://trac.torproject.org/projects/tor/ticket/6811</ref>
-      <ref url="https://lists.torproject.org/pipermail/tor-talk/2012-September/025501.html" source="MLIST">[tor-talk] 20120912 Tor 0.2.3.22-rc is out</ref>
-      <ref url="https://gitweb.torproject.org/tor.git/commit/973c18bf0e84d14d8006a9ae97fde7f7fb97e404" source="CONFIRM">https://gitweb.torproject.org/tor.git/commit/973c18bf0e84d14d8006a9ae97fde7f7fb97e404</ref>
-      <ref url="https://gitweb.torproject.org/tor.git/blob/release-0.2.2:/ReleaseNotes" source="CONFIRM">https://gitweb.torproject.org/tor.git/blob/release-0.2.2:/ReleaseNotes</ref>
-      <ref url="http://openwall.com/lists/oss-security/2012/09/12/5" source="MLIST">[oss-security] 20120912 CVE id request: tor</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="torproject" name="tor">
-        <vers num="0.0.2" edition="pre13" />
-        <vers num="0.0.2" edition="pre14" />
-        <vers num="0.0.2" edition="pre15" />
-        <vers num="0.0.2" edition="pre16" />
-        <vers num="0.0.2" edition="pre17" />
-        <vers num="0.0.2" edition="pre18" />
-        <vers num="0.0.2" edition="pre19" />
-        <vers num="0.0.2" edition="pre20" />
-        <vers num="0.0.2" edition="pre21" />
-        <vers num="0.0.2" edition="pre22" />
-        <vers num="0.0.2" edition="pre23" />
-        <vers num="0.0.2" edition="pre24" />
-        <vers num="0.0.2" edition="pre25" />
-        <vers num="0.0.2" edition="pre26" />
-        <vers num="0.0.2" edition="pre27" />
-        <vers num="0.0.3" />
-        <vers num="0.0.4" />
-        <vers num="0.0.5" />
-        <vers num="0.0.6" />
-        <vers num="0.0.6.1" />
-        <vers num="0.0.6.2" />
-        <vers num="0.0.7" />
-        <vers num="0.0.7.1" />
-        <vers num="0.0.7.2" />
-        <vers num="0.0.7.3" />
-        <vers num="0.0.8.1" />
-        <vers num="0.0.9.1" />
-        <vers num="0.0.9.10" />
-        <vers num="0.0.9.2" />
-        <vers num="0.0.9.3" />
-        <vers num="0.0.9.4" />
-        <vers num="0.0.9.5" />
-        <vers num="0.0.9.6" />
-        <vers num="0.0.9.7" />
-        <vers num="0.0.9.8" />
-        <vers num="0.0.9.9" />
-        <vers num="0.1.0.10" />
-        <vers num="0.1.0.11" />
-        <vers num="0.1.0.12" />
-        <vers num="0.1.0.13" />
-        <vers num="0.1.0.14" />
-        <vers num="0.1.0.15" />
-        <vers num="0.1.0.16" />
-        <vers num="0.1.0.17" />
-        <vers num="0.1.1.20" />
-        <vers num="0.1.1.21" />
-        <vers num="0.1.1.22" />
-        <vers num="0.1.1.23" />
-        <vers num="0.1.1.24" />
-        <vers num="0.1.1.25" />
-        <vers num="0.1.1.26" />
-        <vers num="0.1.2.13" />
-        <vers num="0.1.2.14" />
-        <vers num="0.1.2.15" />
-        <vers num="0.1.2.16" />
-        <vers num="0.1.2.17" />
-        <vers num="0.1.2.18" />
-        <vers num="0.1.2.19" />
-        <vers num="0.2.0.30" />
-        <vers num="0.2.0.31" />
-        <vers num="0.2.0.32" />
-        <vers num="0.2.0.33" />
-        <vers num="0.2.0.34" />
-        <vers num="0.2.0.35" />
-        <vers num="0.2.2.18" />
-        <vers num="0.2.2.19" />
-        <vers num="0.2.2.20" />
-        <vers num="0.2.2.21" />
-        <vers num="0.2.2.22" />
-        <vers num="0.2.2.23" />
-        <vers num="0.2.2.24" />
-        <vers num="0.2.2.25" />
-        <vers num="0.2.2.26" />
-        <vers num="0.2.2.27" />
-        <vers num="0.2.2.28" />
-        <vers num="0.2.2.29" />
-        <vers num="0.2.2.30" />
-        <vers num="0.2.2.31" />
-        <vers num="0.2.2.32" />
-        <vers num="0.2.2.33" />
-        <vers num="0.2.2.34" />
-        <vers num="0.2.2.35" />
-        <vers num="0.2.2.36" />
-        <vers num="0.2.2.37" />
-        <vers prev="1" num="0.2.2.38" />
-        <vers num="0.2.3" />
-        <vers num="0.2.3.13" edition="alpha" />
-        <vers num="0.2.3.14" edition="alpha" />
-        <vers num="0.2.3.15" edition="alpha" />
-        <vers num="0.2.3.16" edition="alpha" />
-        <vers num="0.2.3.17" edition="beta" />
-        <vers num="0.2.3.18" edition="rc" />
-        <vers num="0.2.3.19" edition="rc" />
-        <vers num="0.2.3.20" edition="rc" />
-        <vers num="0.2.3.21" edition="rc" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4923" published="2012-09-15" name="CVE-2012-4923" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) createrule parameter to dnat.cgi, (2) addrule parameter to dansguardian.cgi, or (3) PATH_INFO to openvpn_users.cgi.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73330" source="XF">endianfirewall-multiple-xss(73330)</ref>
-      <ref url="http://www.vulnerability-lab.com/get_content.php?id=436" source="MISC">http://www.vulnerability-lab.com/get_content.php?id=436</ref>
-      <ref url="http://www.securityfocus.com/bid/52076" source="BID">52076</ref>
-      <ref url="http://packetstormsecurity.org/files/109942/Endian-UTM-Firewall-2.4.x-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/109942/Endian-UTM-Firewall-2.4.x-Cross-Site-Scripting.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="endian" name="firewall">
-        <vers num="2.4" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4924" published="2012-09-15" name="CVE-2012-4924" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:C/I:C/A:C)" CVSS_score="9.3" CVSS_impact_subscore="10.0" CVSS_exploit_subscore="8.6" CVSS_base_score="9.3">
-    <desc>
-      <descript source="cve">Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73384" source="XF">net4switch-activex-bo(73384)</ref>
-      <ref url="http://www.securityfocus.com/bid/52110" source="BID">52110</ref>
-      <ref url="http://www.exploit-db.com/exploits/18538" source="EXPLOIT-DB">18538</ref>
-      <ref url="http://secunia.com/advisories/48125" source="SECUNIA" adv="1">48125</ref>
-      <ref url="http://osvdb.org/79438" source="OSVDB">79438</ref>
-      <ref url="http://dsecrg.com/pages/vul/show.php?id=417" source="MISC">http://dsecrg.com/pages/vul/show.php?id=417</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="asus" name="ipswcom_activex_component">
-        <vers num="1.0.0.1" />
-      </prod>
-      <prod vendor="asus" name="net4switch">
-        <vers num="1.0.0020" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4925" published="2012-09-15" name="CVE-2012-4925" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbitrary SQL commands via the u parameter in a (1) app0 or (2) app1 action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73526" source="XF">imgpalsphotohost-approve-sql-injection(73526)</ref>
-      <ref url="http://www.securityfocus.com/bid/52195" source="BID">52195</ref>
-      <ref url="http://www.osvdb.org/79670" source="OSVDB">79670</ref>
-      <ref url="http://www.exploit-db.com/exploits/18544" source="EXPLOIT-DB">18544</ref>
-      <ref url="http://secunia.com/advisories/48182" source="SECUNIA" adv="1">48182</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0180.html" source="BUGTRAQ">20120228 ImgPals Photo Host Version 1.0 Admin Account Disactivation</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="imgpals" name="img_pals_photo_host">
-        <vers num="1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4926" published="2012-09-15" name="CVE-2012-4926" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:N/I:P/A:P)" CVSS_score="6.4" CVSS_impact_subscore="4.9" CVSS_exploit_subscore="10.0" CVSS_base_score="6.4">
-    <desc>
-      <descript source="cve">approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an (1) app0 (disable) or (2) app1 (enable) action.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://www.exploit-db.com/exploits/18544" source="EXPLOIT-DB">18544</ref>
-      <ref url="http://archives.neohapsis.com/archives/bugtraq/2012-02/0180.html" source="BUGTRAQ">20120228 ImgPals Photo Host Version 1.0 Admin Account Disactivation</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="imgpals" name="img_pals_photo_host">
-        <vers num="1.0" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="High" seq="2012-4927" published="2012-09-15" name="CVE-2012-4927" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:L/Au:N/C:P/I:P/A:P)" CVSS_score="7.5" CVSS_impact_subscore="6.4" CVSS_exploit_subscore="10.0" CVSS_base_score="7.5">
-    <desc>
-      <descript source="cve">SQL injection vulnerability in Limesurvey (a.k.a PHPSurveyor) before 1.91+ Build 120224 and earlier allows remote attackers to execute arbitrary SQL commands via the fieldnames parameter to index.php.</descript>
-    </desc>
-    <loss_types>
-      <avail />
-      <conf />
-      <int />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73395" source="XF">phpsurveyor-index-sql-injection(73395)</ref>
-      <ref url="http://www.securityfocus.com/bid/52114" source="BID">52114</ref>
-      <ref url="http://www.limesurvey.org/en/stable-release" source="CONFIRM">http://www.limesurvey.org/en/stable-release</ref>
-      <ref url="http://www.exploit-db.com/exploits/18508" source="EXPLOIT-DB">18508</ref>
-      <ref url="http://secunia.com/advisories/48051" source="SECUNIA" adv="1">48051</ref>
-      <ref url="http://packetstormsecurity.org/files/110100/limesurvey-sql.txt" source="MISC">http://packetstormsecurity.org/files/110100/limesurvey-sql.txt</ref>
-      <ref url="http://osvdb.org/79459" source="OSVDB">79459</ref>
-      <ref url="http://freecode.com/projects/limesurvey/releases/342070" source="MISC">http://freecode.com/projects/limesurvey/releases/342070</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="limesurvey" name="limesurvey">
-        <vers num="1.49" edition="rc2" />
-        <vers num="1.49_rc2" />
-        <vers num="1.5.2" />
-        <vers num="1.52" />
-        <vers num="1.70" />
-        <vers num="1.80" edition="rc4" />
-        <vers num="1.80+" />
-        <vers num="1.81" />
-        <vers num="1.81+" />
-        <vers prev="1" num="1.90+" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Medium" seq="2012-4928" published="2012-09-15" name="CVE-2012-4928" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:M/Au:N/C:N/I:P/A:N)" CVSS_score="4.3" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="8.6" CVSS_base_score="4.3">
-    <desc>
-      <descript source="cve">Cross-site scripting (XSS) vulnerability in ow_updates/index.php in Oxwall 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the plugin parameter.</descript>
-    </desc>
-    <loss_types>
-      <int />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="http://xforce.iss.net/xforce/xfdb/73399" source="XF">oxwall-multiple-xss(73399)</ref>
-      <ref url="http://www.securityfocus.com/bid/52125" source="BID">52125</ref>
-      <ref url="http://packetstormsecurity.org/files/110046/Oxwall-1.1.1-Cross-Site-Scripting.html" source="MISC">http://packetstormsecurity.org/files/110046/Oxwall-1.1.1-Cross-Site-Scripting.html</ref>
-      <ref url="http://advisories.ariko-security.com/2012/audyt_bezpieczenstwa_2m2.html" source="MISC">http://advisories.ariko-security.com/2012/audyt_bezpieczenstwa_2m2.html</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="oxwall" name="oxwall">
-        <vers num="1.1.1" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4929" published="2012-09-15" name="CVE-2012-4929" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:N/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a "CRIME" attack.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-    </range>
-    <refs>
-      <ref url="https://threatpost.com/en_us/blogs/demo-crime-tls-attack-091212" source="MISC">https://threatpost.com/en_us/blogs/demo-crime-tls-attack-091212</ref>
-      <ref url="https://gist.github.com/3696912" source="MISC">https://gist.github.com/3696912</ref>
-      <ref url="https://community.qualys.com/blogs/securitylabs/2012/09/14/crime-information-leakage-attack-against-ssltls" source="MISC">https://community.qualys.com/blogs/securitylabs/2012/09/14/crime-information-leakage-attack-against-ssltls</ref>
-      <ref url="https://chromiumcodereview.appspot.com/10825183" source="CONFIRM">https://chromiumcodereview.appspot.com/10825183</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=857051" source="CONFIRM">https://bugzilla.redhat.com/show_bug.cgi?id=857051</ref>
-      <ref url="http://www.theregister.co.uk/2012/09/14/crime_tls_attack/" source="MISC">http://www.theregister.co.uk/2012/09/14/crime_tls_attack/</ref>
-      <ref url="http://www.iacr.org/cryptodb/data/paper.php?pubkey=3091" source="MISC">http://www.iacr.org/cryptodb/data/paper.php?pubkey=3091</ref>
-      <ref url="http://www.ekoparty.org/2012/thai-duong.php" source="MISC">http://www.ekoparty.org/2012/thai-duong.php</ref>
-      <ref url="http://threatpost.com/en_us/blogs/new-attack-uses-ssltls-information-leak-hijack-https-sessions-090512" source="MISC">http://threatpost.com/en_us/blogs/new-attack-uses-ssltls-information-leak-hijack-https-sessions-090512</ref>
-      <ref url="http://threatpost.com/en_us/blogs/crime-attack-uses-compression-ratio-tls-requests-side-channel-hijack-secure-sessions-091312" source="MISC">http://threatpost.com/en_us/blogs/crime-attack-uses-compression-ratio-tls-requests-side-channel-hijack-secure-sessions-091312</ref>
-      <ref url="http://security.stackexchange.com/questions/19911/crime-how-to-beat-the-beast-successor" source="MISC">http://security.stackexchange.com/questions/19911/crime-how-to-beat-the-beast-successor</ref>
-      <ref url="http://news.ycombinator.com/item?id=4510829" source="MISC">http://news.ycombinator.com/item?id=4510829</ref>
-      <ref url="http://isecpartners.com/blog/2012/9/14/details-on-the-crime-attack.html" source="MISC">http://isecpartners.com/blog/2012/9/14/details-on-the-crime-attack.html</ref>
-      <ref url="http://code.google.com/p/chromium/issues/detail?id=139744" source="CONFIRM">http://code.google.com/p/chromium/issues/detail?id=139744</ref>
-      <ref url="http://arstechnica.com/security/2012/09/crime-hijacks-https-sessions/" source="MISC">http://arstechnica.com/security/2012/09/crime-hijacks-https-sessions/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="" />
-      </prod>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" severity="Low" seq="2012-4930" published="2012-09-15" name="CVE-2012-4930" modified="2012-09-17" CVSS_version="2.0" CVSS_vector="(AV:N/AC:H/Au:N/C:P/I:N/A:N)" CVSS_score="2.6" CVSS_impact_subscore="2.9" CVSS_exploit_subscore="4.9" CVSS_base_score="2.6">
-    <desc>
-      <descript source="cve">The SPDY protocol 3 and earlier, as used in Mozilla Firefox, Google Chrome, and other products, can perform TLS encryption of compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a "CRIME" attack.</descript>
-    </desc>
-    <loss_types>
-      <conf />
-    </loss_types>
-    <range>
-      <network />
-      <user_init />
-    </range>
-    <refs>
-      <ref url="https://community.qualys.com/blogs/securitylabs/2012/09/14/crime-information-leakage-attack-against-ssltls" source="MISC">https://community.qualys.com/blogs/securitylabs/2012/09/14/crime-information-leakage-attack-against-ssltls</ref>
-      <ref url="https://bugzilla.redhat.com/show_bug.cgi?id=857737" source="MISC">https://bugzilla.redhat.com/show_bug.cgi?id=857737</ref>
-      <ref url="http://www.theregister.co.uk/2012/09/14/crime_tls_attack/" source="MISC">http://www.theregister.co.uk/2012/09/14/crime_tls_attack/</ref>
-      <ref url="http://www.iacr.org/cryptodb/data/paper.php?pubkey=3091" source="MISC">http://www.iacr.org/cryptodb/data/paper.php?pubkey=3091</ref>
-      <ref url="http://www.ekoparty.org/2012/thai-duong.php" source="MISC">http://www.ekoparty.org/2012/thai-duong.php</ref>
-      <ref url="http://threatpost.com/en_us/blogs/crime-attack-uses-compression-ratio-tls-requests-side-channel-hijack-secure-sessions-091312" source="MISC">http://threatpost.com/en_us/blogs/crime-attack-uses-compression-ratio-tls-requests-side-channel-hijack-secure-sessions-091312</ref>
-      <ref url="http://isecpartners.com/blog/2012/9/14/details-on-the-crime-attack.html" source="MISC">http://isecpartners.com/blog/2012/9/14/details-on-the-crime-attack.html</ref>
-      <ref url="http://arstechnica.com/security/2012/09/crime-hijacks-https-sessions/" source="MISC">http://arstechnica.com/security/2012/09/crime-hijacks-https-sessions/</ref>
-    </refs>
-    <vuln_soft>
-      <prod vendor="google" name="chrome">
-        <vers num="" />
-      </prod>
-      <prod vendor="mozilla" name="firefox">
-        <vers num="" />
-      </prod>
-    </vuln_soft>
-  </entry>
-  <entry type="CVE" seq="2012-4968" published="2012-09-17" name="CVE-2012-4968" modified="2012-09-17">
-    <desc>
-      <descript source="cve">Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted string to the AbsoluteLinks, (2) BigSummary, (3) ContextSummary, (4) EscapeXML, (5) FirstParagraph, (6) FirstSentence, (7) Initial, (8) LimitCharacters, (9) LimitSentences, (10) LimitWordCount, (11) LimitWordCountXML, (12) Lower, (13) LowerCase, (14) NoHTML, (15) Summary, (16) Upper, (17) UpperCase, or (18) URL method in a template, different vectors than CVE-2012-0976.</descript>
-    </desc>
-    <refs>
-      <ref url="https://github.com/silverstripe/sapphire/commit/0085876" source="CONFIRM">https://github.com/silverstripe/sapphire/commit/0085876</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/30/3" source="MLIST">[oss-security] 20120430 Re: CVE-request: SilverStripe before 2.4.4</ref>
-      <ref url="http://www.openwall.com/lists/oss-security/2012/04/30/1" source="MLIST">[oss-security] 20120430 CVE-request: SilverStripe before 2.4.4</ref>
-      <ref url="http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.7" source="CONFIRM">http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.7</ref>
-      <ref url="http://doc.silverstripe.org/framework/en/trunk/changelogs/2.3.13" source="CONFIRM">http://doc.silverstripe.org/framework/en/trunk/changelogs/2.3.13</ref>
-    </refs>
-  </entry>
-</nvd>
\ No newline at end of file
diff --git a/src/test/resources/nvdcve.xsd b/src/test/resources/nvdcve.xsd
deleted file mode 100644
index c6a695166..000000000
--- a/src/test/resources/nvdcve.xsd
+++ /dev/null
@@ -1,498 +0,0 @@
-<?xml version="1.0"?>
-<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
-	targetNamespace="http://nvd.nist.gov/feeds/cve/1.2"
-	xmlns:cve="http://nvd.nist.gov/feeds/cve/1.2"
-	elementFormDefault="qualified" attributeFormDefault="unqualified"
-	version="1.2">
-	<xs:annotation>
-		<xs:documentation>This schema defines the structure of the National
-			Vulnerability Database XML feed files version: 1.2. The elements and
-			attribute in this document are described by xs:annotation tags. This
-			file is kept at http://nvd.nist.gov/schema/nvdcve.xsd. The NVD XML
-			feeds are available at http://nvd.nist.gov/download.cfm.
-			
-			Release Notes:
-			
-			Version 1.2:
-			* CVSS version 2 scores and vectors have been added.  Please see
-			http://nvd.nist.gov/cvss.cfm?vectorinfo and
-			http://www.first.org/cvss/cvss-guide.html for more information on
-			how to interpret this data. </xs:documentation>
-	</xs:annotation>
-	<xs:element name="nvd">
-		<xs:annotation>
-			<xs:documentation>The root element of the NVD CVE feed. Multiple "entry" child elements describe specific NVD CVE entries.</xs:documentation>
-		</xs:annotation>
-		<xs:complexType>
-			<xs:sequence>
-				<xs:element ref="cve:entry" minOccurs="0" maxOccurs="unbounded"/>
-			</xs:sequence>
-			<xs:attribute name="nvd_xml_version" type="xs:NMTOKEN" use="required">
-				<xs:annotation>
-					<xs:documentation>The schema version number supported by the feed.</xs:documentation>
-				</xs:annotation>
-			</xs:attribute>
-			<xs:attribute name="pub_date" type="cve:dateType" use="required">
-				<xs:annotation>
-					<xs:documentation>The date the feed was generated.</xs:documentation>
-				</xs:annotation>
-			</xs:attribute>
-		</xs:complexType>
-	</xs:element>
-
-	<xs:element name="entry" type="cve:entryType">
-		<xs:annotation>
-			<xs:documentation>A CVE entry.</xs:documentation>
-		</xs:annotation>
-	</xs:element>
-	
-	<!-- ******************************************************************* -->
-	<!-- * Complex Types                                                   * -->
-	<!-- ******************************************************************* -->
-	<xs:complexType name="entryType">
-		<xs:annotation>
-			<xs:documentation> Documents one CVE entry. The child elements should always
-				appear in the sequence defined below. These elements are compatible with
-				entry elements from the CVE XML feeds.</xs:documentation>
-		</xs:annotation>
-		<xs:sequence>
-			<xs:element name="desc">
-				<xs:annotation>
-					<xs:documentation>Description wrapper tag, parent to any
-						documented descriptions of this CVE entry. While the "desc"
-						tag will always be present, there may be no "descript" child
-						tags. Only one "descript" tag will exist for each
-						description source (i.e. CVE, NVD, ...). </xs:documentation>
-				</xs:annotation>
-				<xs:complexType>
-					<xs:sequence>
-						<xs:element name="descript" type="cve:descriptType" minOccurs="0" maxOccurs="2">
-							<xs:annotation>
-								<xs:documentation>A description of a CVE entry
-									from the source indicated by the "source"
-									attribute.</xs:documentation>
-							</xs:annotation>
-						</xs:element>
-					</xs:sequence>
-				</xs:complexType>
-			</xs:element>
-			<xs:element name="impacts" minOccurs="0">
-				<xs:annotation>
-					<xs:documentation> Impact wrapper tag (may or may not be
-						present). Only one "impact" tag will exist for each impact
-						explanation source. </xs:documentation>
-				</xs:annotation>
-				<xs:complexType>
-					<xs:sequence>
-						<xs:element name="impact" type="cve:impactType">
-							<xs:annotation>
-								<xs:documentation> Contains a specific impact
-								explanation of this CVE entry from source
-								indicated by the "source" attribute.
-								</xs:documentation>
-							</xs:annotation>
-						</xs:element>
-					</xs:sequence>
-				</xs:complexType>
-			</xs:element>
-			<xs:element name="sols" type="cve:solsType" minOccurs="0">
-				<xs:annotation>
-					<xs:documentation> Solution wrapper tag (may or may not be
-						present). Only one "sol" tag will exist for each solution
-						explanation source. </xs:documentation>
-				</xs:annotation>
-			</xs:element>
-			<xs:element name="loss_types" type="cve:lossTypeType" minOccurs="0">
-				<xs:annotation>
-					<xs:documentation> Loss type tag (may or may not be present).
-						Contains one loss type child for each loss type of this CVE
-						entry. Potential loss types are: "avail" => availability
-						"conf" => confidentiality "int" => integrity "sec_prot" =>
-						security protection </xs:documentation>
-				</xs:annotation>
-			</xs:element>
-			<xs:element name="vuln_types" type="cve:vulnType" minOccurs="0">
-				<xs:annotation>
-					<xs:documentation> Vulnerability type tag (may or may not be
-						present). Contains one vulnerability type child for each
-						vulnerability type of this CVE entry. Potential
-						vulnerability types are: "access" => Access validation error
-						"input" => Input validation error "design" => Design error
-						"exception" => Exceptional condition error "env" =>
-						Environmental error "config" => Configuration error "race"
-						=> Race condition error "other" => other </xs:documentation>
-				</xs:annotation>
-			</xs:element>
-			<xs:element name="range" type="cve:rangeType" minOccurs="0">
-				<xs:annotation>
-					<xs:documentation> Vulnerability range tag (may or may not be
-						present). Contains one vulnerability range child for each
-						vulnerability range of this CVE entry. Potential
-						vulnerability ranges are: "local" => Locally exploitable
-						"local_network" => Local network exploitable "network" =>
-						Network exploitable "user_init" => User accesses attacker
-					</xs:documentation>
-				</xs:annotation>
-			</xs:element>
-			<xs:element name="refs">
-				<xs:annotation>
-					<xs:documentation> Reference wrapper tag (always present).
-						External references to this CVE entry are contained within
-						this tag. </xs:documentation>
-				</xs:annotation>
-				<xs:complexType>
-					<xs:sequence>
-						<xs:element name="ref" type="cve:refType" minOccurs="0" maxOccurs="unbounded">
-							<xs:annotation>
-								<xs:documentation> Individual reference to this CVE
-								entry. Text is the name of this vulnerability at
-								this particular reference. Attributes: "source"
-								(required) => Name of reference source "url"
-								(required) => hyperlink to reference "sig" =>
-								indicates this reference includes a tool
-								signature "adv" => indicates this reference is a
-								Security Advisory "patch" => indicates this
-								reference includes a patch for this
-								vulnerability </xs:documentation>
-							</xs:annotation>
-						</xs:element>
-					</xs:sequence>
-				</xs:complexType>
-			</xs:element>
-			<xs:element name="vuln_soft" type="cve:vulnSoftType" minOccurs="0">
-				<xs:annotation>
-					<xs:documentation> Vulnerable software wrapper tag (may or may
-						not be present). Software affected by this CVE entry are
-						listed within this tag. </xs:documentation>
-				</xs:annotation>
-			</xs:element>
-		</xs:sequence>
-		<xs:attribute name="type" use="required">
-			<xs:annotation>
-				<xs:documentation>CVE or CAN</xs:documentation>
-			</xs:annotation>
-			<xs:simpleType>
-				<xs:restriction base="xs:NMTOKEN">
-					<xs:enumeration value="CAN"/>
-					<xs:enumeration value="CVE"/>
-				</xs:restriction>
-			</xs:simpleType>
-		</xs:attribute>
-		<xs:attribute name="name" use="required">
-			<xs:annotation>
-				<xs:documentation>the full CVE name</xs:documentation>
-			</xs:annotation>
-			<xs:simpleType>
-				<xs:restriction base="xs:ID">
-					<xs:pattern value="(CAN|CVE)\-\d\d\d\d\-\d\d\d\d"/>
-				</xs:restriction>
-			</xs:simpleType>
-		</xs:attribute>
-		<xs:attribute name="seq" use="required">
-			<xs:annotation>
-				<xs:documentation>the sequence number from CVE name</xs:documentation>
-			</xs:annotation>
-			<xs:simpleType>
-				<xs:restriction base="xs:NMTOKEN">
-					<xs:pattern value="\d\d\d\d\-\d\d\d\d"/>
-				</xs:restriction>
-			</xs:simpleType>
-		</xs:attribute>
-		<xs:attribute name="nvd_name" type="xs:string">
-			<xs:annotation>
-				<xs:documentation>the NVD name (if it exists)</xs:documentation>
-			</xs:annotation>
-		</xs:attribute>
-		<xs:attribute name="discovered" type="cve:dateType">
-			<xs:annotation>
-				<xs:documentation>the date this entry was discovered</xs:documentation>
-			</xs:annotation>
-		</xs:attribute>
-		<xs:attribute name="published" type="cve:dateType" use="required">
-			<xs:annotation>
-				<xs:documentation>the date this entry was published</xs:documentation>
-			</xs:annotation>
-		</xs:attribute>
-		<xs:attribute name="modified" type="cve:dateType">
-			<xs:annotation>
-				<xs:documentation>the date this entry was last modified</xs:documentation>
-			</xs:annotation>
-		</xs:attribute>
-		<xs:attribute name="severity">
-			<xs:annotation>
-				<xs:documentation>the entry's severity as determined by the NVD analysts: High, Medium, or Low</xs:documentation>
-			</xs:annotation>
-			<xs:simpleType>
-				<xs:restriction base="xs:NMTOKEN">
-					<xs:enumeration value="High"/>
-					<xs:enumeration value="Medium"/>
-					<xs:enumeration value="Low"/>
-				</xs:restriction>
-			</xs:simpleType>
-		</xs:attribute>
-		<xs:attribute name="reject" type="cve:trueOnlyAttribute">
-			<xs:annotation>
-				<xs:documentation>indicates that this CVE entry has been rejected by CVE or NVD</xs:documentation>
-			</xs:annotation>
-		</xs:attribute>
-		<xs:attribute name="CVSS_version" type="xs:string">
-			<xs:annotation>
-				<xs:documentation>the CVSS Version Indicator</xs:documentation>
-			</xs:annotation>
-		</xs:attribute>
-		<xs:attribute name="CVSS_score" type="cve:zeroToTen">
-			<xs:annotation>
-				<xs:documentation>Same as the CVSS_base_score to provide backwards compatability with the previous CVE XML feed format. This field is deprecated an may be removed at a future date.</xs:documentation>
-			</xs:annotation>
-		</xs:attribute>
-		<xs:attribute name="CVSS_base_score" type="cve:zeroToTen">
-			<xs:annotation>
-				<xs:documentation>CVSS version 2 Base Score</xs:documentation>
-			</xs:annotation>
-		</xs:attribute>
-		<xs:attribute name="CVSS_impact_subscore" type="cve:zeroToTen">
-			<xs:annotation>
-				<xs:documentation>CVSS version 2 Impact Score</xs:documentation>
-			</xs:annotation>
-		</xs:attribute>
-		<xs:attribute name="CVSS_exploit_subscore" type="cve:zeroToTen">
-			<xs:annotation>
-				<xs:documentation>CVSS version 2 Exploit Score</xs:documentation>
-			</xs:annotation>
-		</xs:attribute>
-		<xs:attribute name="CVSS_vector" type="cve:CVSSVector">
-			<xs:annotation>
-				<xs:documentation>the CVSS version 2 Vector string</xs:documentation>
-			</xs:annotation>
-		</xs:attribute>
-	</xs:complexType>
-
-	<xs:complexType name="descriptType">
-		<xs:simpleContent>
-			<xs:extension base="xs:string">
-				<xs:attribute name="source" type="cve:descriptSourceType" use="required">
-					<xs:annotation>
-						<xs:documentation>The source of the CVE description.</xs:documentation>
-					</xs:annotation>
-				</xs:attribute>
-			</xs:extension>
-		</xs:simpleContent>
-	</xs:complexType>
-	
-	<xs:complexType name="impactType">
-		<xs:simpleContent>
-			<xs:extension base="xs:string">
-				<xs:attribute name="source" type="cve:impactSourceType" use="required">
-				</xs:attribute>
-			</xs:extension>
-		</xs:simpleContent>
-	</xs:complexType>
-
-	<xs:complexType name="vulnType">
-		<xs:sequence>
-			<xs:element name="access" minOccurs="0"/>
-			<xs:element name="input" minOccurs="0">
-				<xs:annotation>
-					<xs:documentation> Input validation error tag with
-						one attribute for each input validation error
-						type. Potential input validation error types
-						are: "bound" => Boundary condition error
-						"buffer" => Buffer overflow </xs:documentation>
-				</xs:annotation>
-				<xs:complexType>
-					<xs:attribute name="bound" type="cve:trueOnlyAttribute"/>
-					<xs:attribute name="buffer" type="cve:trueOnlyAttribute"
-					/>
-				</xs:complexType>
-			</xs:element>
-			<xs:element name="design" minOccurs="0"/>
-			<xs:element name="exception" minOccurs="0"/>
-			<xs:element name="env" minOccurs="0"/>
-			<xs:element name="config" minOccurs="0"/>
-			<xs:element name="race" minOccurs="0"/>
-			<xs:element name="other" minOccurs="0"/>
-		</xs:sequence>
-	</xs:complexType>
-
-	<xs:complexType name="solsType">
-		<xs:sequence>
-			<xs:element name="sol">
-				<xs:annotation>
-					<xs:documentation> Contains a specific solution
-						explanation of this CVE entry from source
-						indicated by the "source" attribute.
-					</xs:documentation>
-				</xs:annotation>
-				<xs:complexType mixed="true">
-					<xs:simpleContent>
-						<xs:extension base="xs:string">
-							<xs:attribute name="source" type="cve:solsSourceType" use="required">
-							</xs:attribute>
-						</xs:extension>
-					</xs:simpleContent>
-				</xs:complexType>
-			</xs:element>
-		</xs:sequence>
-	</xs:complexType>
-
-	<xs:complexType name="lossTypeType">
-		<xs:sequence>
-			<xs:element name="avail" minOccurs="0"/>
-			<xs:element name="conf" minOccurs="0"/>
-			<xs:element name="int" minOccurs="0"/>
-			<xs:element name="sec_prot" minOccurs="0">
-				<xs:annotation>
-					<xs:documentation> Security Protection tag with one
-						attribute for each security protection type.
-						Potential security protection types are: "admin"
-						=> gain administrative access "user" => gain
-						user access "other" => other </xs:documentation>
-				</xs:annotation>
-				<xs:complexType>
-					<xs:attribute name="admin" type="cve:trueOnlyAttribute"/>
-					<xs:attribute name="user" type="cve:trueOnlyAttribute"/>
-					<xs:attribute name="other" type="cve:trueOnlyAttribute"
-					/>
-				</xs:complexType>
-			</xs:element>
-		</xs:sequence>
-	</xs:complexType>
-
-	<xs:complexType name="rangeType">
-		<xs:sequence>
-			<xs:element name="local" minOccurs="0"/>
-			<xs:element name="local_network" minOccurs="0"/>
-			<xs:element name="network" minOccurs="0"/>
-			<xs:element name="user_init" minOccurs="0"/>
-		</xs:sequence>
-	</xs:complexType>
-
-	<xs:complexType name="refType">
-		<xs:simpleContent>
-			<xs:extension base="xs:string">
-				<xs:attribute name="source" type="xs:string" use="required"/>
-				<xs:attribute name="url" type="cve:urlType" use="required"/>
-				<xs:attribute name="sig" type="cve:trueOnlyAttribute"/>
-				<xs:attribute name="adv" type="cve:trueOnlyAttribute"/>
-				<xs:attribute name="patch" type="cve:trueOnlyAttribute"/>
-			</xs:extension>
-		</xs:simpleContent>
-	</xs:complexType>
-
-	<xs:complexType name="vulnSoftType">
-		<xs:sequence>
-			<xs:element name="prod" maxOccurs="unbounded">
-				<xs:annotation>
-					<xs:documentation> Product wrapper tag. Versions of
-						this product that are affected by this
-						vulnerability are listed within this tag.
-						Attributes: "name" => Product name "vendor" =>
-						Vendor of this product </xs:documentation>
-				</xs:annotation>
-				<xs:complexType>
-					<xs:sequence>
-						<xs:element name="vers" maxOccurs="unbounded">
-							<xs:annotation>
-								<xs:documentation> Represents a version
-									of this product that is affected by
-									this vulnerability. Attributes:
-									"num" => This version number "prev"
-									=> Indicates that versions previous
-									to this version number are also
-									affected by this vulnerability
-									"edition" => Indicates the edition
-									associated with the version number
-								</xs:documentation>
-							</xs:annotation>
-							<xs:complexType>
-								<xs:attribute name="num"
-									type="xs:string" use="required"/>
-								<xs:attribute name="prev"
-									type="cve:trueOnlyAttribute"/>
-								<xs:attribute name="edition"
-									type="xs:string"/>
-							</xs:complexType>
-						</xs:element>
-					</xs:sequence>
-					<xs:attribute name="name" type="xs:string"
-						use="required"/>
-					<xs:attribute name="vendor" type="xs:string"
-						use="required"/>
-				</xs:complexType>
-			</xs:element>
-		</xs:sequence>
-	</xs:complexType>
-
-	<!-- ******************************************************************* -->
-	<!-- * Simple Types                                                    * -->
-	<!-- ******************************************************************* -->
-	<xs:simpleType name="descriptSourceType">
-		<xs:restriction base="xs:NMTOKEN">
-			<xs:enumeration value="cve"/>
-			<xs:enumeration value="nvd"/>
-		</xs:restriction>
-	</xs:simpleType>
-
-	<xs:simpleType name="impactSourceType">
-		<xs:restriction base="xs:NMTOKEN">
-			<xs:enumeration value="nvd"/>
-		</xs:restriction>
-	</xs:simpleType>
-
-	<xs:simpleType name="solsSourceType">
-		<xs:restriction base="xs:NMTOKEN">
-			<xs:enumeration value="nvd"/>
-		</xs:restriction>
-	</xs:simpleType>
-
-	<xs:simpleType name="dateType">
-		<xs:annotation>
-			<xs:documentation> Defines date format for NVD. Dates follow the mask "yyyy-mm-dd"
-			</xs:documentation>
-		</xs:annotation>
-		<xs:restriction base="xs:string">
-			<xs:pattern
-				value="(19|20)\d\d-((01|03|05|07|08|10|12)-(0[1-9]|[1-2]\d|3[01])|(04|06|09|11)-(0[1-9]|[1-2]\d|30)|02-(0[1-9]|1\d|2\d))"
-			/>
-		</xs:restriction>
-	</xs:simpleType>
-	<xs:simpleType name="urlType">
-		<xs:annotation>
-			<xs:documentation> Restricts urls in NVD beyond the xs:anyURI restrictions.
-			</xs:documentation>
-		</xs:annotation>
-		<xs:restriction base="xs:anyURI">
-			<xs:whiteSpace value="collapse"/>
-			<xs:pattern value="(news|(ht|f)tp(s)?)://.+"/>
-		</xs:restriction>
-	</xs:simpleType>
-	<xs:simpleType name="trueOnlyAttribute">
-		<xs:annotation>
-			<xs:documentation> simpleType used for attributes that are only present when they are
-				true. Such attributes appear only in the form attribute_name="1".
-			</xs:documentation>
-		</xs:annotation>
-		<xs:restriction base="xs:NMTOKEN">
-			<xs:enumeration value="1"/>
-		</xs:restriction>
-	</xs:simpleType>
-	<xs:simpleType name="zeroToTen">
-		<xs:annotation>
-			<xs:documentation> simpleType used when scoring on a scale of 0-10, inclusive
-			</xs:documentation>
-		</xs:annotation>
-		<xs:restriction base="xs:decimal">
-			<xs:minInclusive value="0" fixed="true"/>
-			<xs:maxInclusive value="10" fixed="true"/>
-		</xs:restriction>
-	</xs:simpleType>
-	<xs:simpleType name="CVSSVector">
-		<xs:annotation>
-			<xs:documentation>simpleType to describe the CVSS Base Vector </xs:documentation>
-		</xs:annotation>
-		<xs:restriction base="xs:string">
- 			<xs:pattern
-				value="\(AV:[LAN]/AC:[HML]/Au:[NSM]/C:[NPC]/I:[NPC]/A:[NPC]\)"/>
-		</xs:restriction>
-	</xs:simpleType>
-</xs:schema>